fuzz: txgraph: Assertion `cmp == 0’ failed #33097

1. 
   dergoegge commented at 8:17 am on July 30, 2025: member

    0$ echo "oK+goKCgArv/GMG0oAkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOTkAr6AAAgIC/wICAgICAgICCAAAAAAAAAAAAAgAAP8A/wACAAAAAAAAAAAAAAAAAAAAAAAAAAAAABACAgICf/8AoKAAAAAAAAAAAAgAAP8AAgAAAAAAABACAgICf/8AAAAAIAAAAAAAAAAAAAAACAAA/wACgIAAAAAAgIAAAAAAAAAAAAAACAAA/wACAAAAAAAAAAAAAAAAAAAAAAAAAAAAABACAgICf/8AoF4AFgAAAAAAAAAIAAD/AAIAAICAAAA=" | base64 --decode > txgraph.crash
    1$ FUZZ=txgraph ./fuzz txgraph.crash 
    2fuzz: test/fuzz/txgraph.cpp:1057: void txgraph_fuzz_target(FuzzBufferType): Assertion `cmp == 0' failed.
    3==6038== ERROR: libFuzzer: deadly signal
    4/usr/bin/llvm-symbolizer: error: 'linux-vdso.so.1': No such file or directory
    5   [#0](/bitcoin-bitcoin/0/) 0xaaaae4109fc4 in __sanitizer_print_stack_trace /llvm-project/compiler-rt/lib/asan/asan_stack.cpp:87:3
    6   [#1](/bitcoin-bitcoin/1/) 0xaaaae4005890 in fuzzer::PrintStackTrace() /llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5
    7   [#2](/bitcoin-bitcoin/2/) 0xaaaae3feae50 in fuzzer::Fuzzer::CrashCallback() /llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:231:3
    8   [#3](/bitcoin-bitcoin/3/) 0xffff856b57b8  (linux-vdso.so.1+0x7b8) (BuildId: d721ef96679f76202b9d0a21a3db1069daa73c69)
    9   [#4](/bitcoin-bitcoin/4/) 0xffff851b7dbc  (/lib/aarch64-linux-gnu/libc.so.6+0x87dbc) (BuildId: 817c172ae01de5c5673c0e5a5d33e8fa0d4c6bd5)
   10   [#5](/bitcoin-bitcoin/5/) 0xffff8516697c in raise (/lib/aarch64-linux-gnu/libc.so.6+0x3697c) (BuildId: 817c172ae01de5c5673c0e5a5d33e8fa0d4c6bd5)
   11   [#6](/bitcoin-bitcoin/6/) 0xffff85151ac0 in abort (/lib/aarch64-linux-gnu/libc.so.6+0x21ac0) (BuildId: 817c172ae01de5c5673c0e5a5d33e8fa0d4c6bd5)
   12   [#7](/bitcoin-bitcoin/7/) 0xffff8515f9b8  (/lib/aarch64-linux-gnu/libc.so.6+0x2f9b8) (BuildId: 817c172ae01de5c5673c0e5a5d33e8fa0d4c6bd5)
   13   [#8](/bitcoin-bitcoin/8/) 0xaaaae461b4b0 in txgraph_fuzz_target(std::span<unsigned char const, 18446744073709551615ul>) txgraph.cpp
   14   [#9](/bitcoin-bitcoin/9/) 0xaaaae4791604 in LLVMFuzzerTestOneInput fuzz.cpp
   15   [#10](/bitcoin-bitcoin/10/) 0xaaaae3fec344 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13
   16   [#11](/bitcoin-bitcoin/11/) 0xaaaae3fd7ff8 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) /llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:328:6
   17   [#12](/bitcoin-bitcoin/12/) 0xaaaae3fdd4ac in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:863:9
   18   [#13](/bitcoin-bitcoin/13/) 0xaaaae4006070 in main /llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10
   19   [#14](/bitcoin-bitcoin/14/) 0xffff85152298  (/lib/aarch64-linux-gnu/libc.so.6+0x22298) (BuildId: 817c172ae01de5c5673c0e5a5d33e8fa0d4c6bd5)
   20   [#15](/bitcoin-bitcoin/15/) 0xffff85152378 in __libc_start_main (/lib/aarch64-linux-gnu/libc.so.6+0x22378) (BuildId: 817c172ae01de5c5673c0e5a5d33e8fa0d4c6bd5)
   21   [#16](/bitcoin-bitcoin/16/) 0xaaaae3fd19ac in _start (/workdir/out/libfuzzer_asan/fuzz+0x14819ac)
   

2. 
   dergoegge commented at 8:20 am on July 30, 2025: member

   I’m guessing this is new after #32263 was merged yesterday. cc @sipa @glozow
3. theStack referenced this in commit 0aedf09ccc on Aug 3, 2025
4. theStack referenced this in commit 444dcb2f99 on Aug 4, 2025
5. glozow closed this on Aug 4, 2025

   ---

6. fanquake referenced this in commit 0cb1ed2b7c on Aug 4, 2025

Contributors
dergoegge