mohsen@ncsu:~$ whoami

* a3f9e21 (HEAD → main, origin/main)

Mohsen EsfandyariDoulabi

Ph.D. Student · NC State University

Author: Mohsen EsfandyariDoulabi <mesfand@ncsu.edu>

Date:   Ph.D. student, SWAT Lab · NC State University

mohsen@ncsu:~$ cat bio.txt

I’m a Ph.D. student in Computer Science at North Carolina State University, part of the Software Analysis and Testing (SWAT) Lab, advised by Prof. Marcelo d’Amorim.

I work on optimizing LLM agents, and build agentic, LLM-driven testing pipelines that generate test programs, triage crashes and minimize reproducers - applied to LLVM, GCC and WebAssembly runtimes, where they have surfaced 190+ bug reports across compilers, WebAssembly runtimes and deep learning libraries.

Before my Ph.D.: five years in industry — software engineering and systems programming, followed by security engineering.

192 bug reports across compilers, WebAssembly runtimes, and deep learning libraries

  • Clang / LLVM

    Clang front end, LLVM middle and back end

    75
    1. #173921 llvm-project clang trunk: unreachable "Unexpected placeholder builtin type!" in CodeGenTypes::ConvertType during codegen of GNU st…
    2. #173920 llvm-project clang trunk: unreachable "Type not integer, floating, or complex" in getAbsoluteValueKind during Sema check of labs()…
    3. #173919 llvm-project clang trunk: assertion in StringLiteral::getString() during constexpr eval of __builtin_nan (or similar) with wide st…
    4. #173918 llvm-project clang trunk: assertion "E->isPRValue() && E->getType()->isIntegralOrEnumerationType()" in EvaluateIntegerOrLValue dur…
    5. #173917 llvm-project clang trunk: assertion failed in cast during codegen of inline asm with x86 flag output constraints (=@c…
    6. #173916 llvm-project clang trunk: assertion "isPRValue() && isRealFloatingType()" in EvaluateFloat during constexpr eval of bitwise NOT on…
    7. #173915 llvm-project clang trunk: assertion "Cannot retrieve a NULL type pointer" in QualType::getNonReferenceType during constexpr eval o…
    8. #173914 llvm-project clang trunk: assertion "isPRValue()" in Expr::ClassifyImpl during Sema of malformed function parameter default argume…
    9. #173911 llvm-project clang trunk: assertion "Invalid scalar expression to emit" in EmitScalarExpr during codegen of __builtin_preserve_acc…
    10. #173910 llvm-project clang trunk: assertion "Initializer must be non-null" in InitializationSequence::InitializeFrom during Sema of global…
    11. #173909 llvm-project clang trunk: unreachable "Fell off the end of a string-switch" in getFMVPriority during Sema of target_clones with ma…
    12. #173907 llvm-project clang trunk (x86-64): assertion "bitwidth too small" in IntegerType::get during codegen of va_arg on struct with flex…
    13. #173906 llvm-project clang trunk: assertion "isPRValue()" in Expr::ClassifyImpl during Sema of __builtin_dump_struct on struct containing…
    14. #173904 llvm-project clang trunk: assertion "Can only have wide bit-fields in C++!" in ItaniumRecordLayoutBuilder when laying out bit-fiel…
    15. #173903 llvm-project clang trunk: assertion "Cannot get layout of forward declarations!" in getASTRecordLayout during Sema of register asm…
    16. #173901 llvm-project clang trunk: assertion "Cannot get layout of forward declarations!" in getASTRecordLayout during Sema of register asm…
    17. #173900 llvm-project clang trunk: unreachable in InlineAsm constructor during codegen of inline asm with embedded \0 in constraint string
    18. #173899 llvm-project clang trunk: assertion failed in cast during codegen of UINTR interrupt handler with malformed/duplicate…
    19. #173894 llvm-project clang trunk: assertion failed in cast during Sema processing of attribute((packed)) on incomplete struc…
    20. #173892 llvm-project clang trunk: unreachable in CodeGenTypes::ConvertType during codegen of GNU statement expression yielding void (via e…
    21. #173891 llvm-project clang trunk: assertion "!isIncompleteType()" in Type::isConstantSizeType during codegen of static local with attribut…
    22. #173890 llvm-project clang trunk: unreachable in getAbsoluteValueKind during Sema check of labs() on __m64 MMX vector type
    23. #173889 llvm-project clang trunk: assertion in StringLiteral::getString() during constexpr eval of __builtin_nan with wide string literal…
    24. #173888 llvm-project clang trunk: assertion "E->isPRValue() && E->getType()->isIntegralOrEnumerationType()" in EvaluateIntegerOrLValue dur…
    25. #173886 llvm-project clang trunk: assertion "getType() == Other.getType()" in TypeLoc::initializeFullCopy during parsing of malformed nest…
    26. #173884 llvm-project clang trunk: assertion "getType() == Other.getType()" in TypeLoc::initializeFullCopy during Sema of vector compound l…
    27. #173877 llvm-project clang trunk: assertion "getType() == Other.getType()" in TypeLoc::initializeFullCopy during Sema of typedef with malf…
    28. #173875 llvm-project clang trunk: assertion in LValue::addUnsizedArray during constexpr eval of dereference on incomplete array with malfo…
    29. #173688 llvm-project Clang trunk asserts: Expr::EvaluateAsInt called on value-dependent expression during CodeGen constant folding
    30. #173686 llvm-project clang trunk: assertion "Too many bits for int64_t" in APSInt::getExtValue during constant eval of array subscript wit…
    31. #173685 llvm-project clang trunk: assertion "Invalid CPUStr passed to CpuIs" during multi-version resolver emission for target_clones with…
    32. #173684 llvm-project clang trunk: assertion "idx < size()" in SmallVector during Sema check of empty attribute((target_clones()))
    33. #173683 llvm-project clang trunk: assertion "Null bytes are not allowed in names" in Value::setNameImpl when GNU asm function label contai…
    34. #173682 llvm-project clang trunk: assertion "unsigned range includes negative?" in AnalyzeComparison during Sema of != with negation on un…
    35. #173681 llvm-project clang trunk (x86): assertion "Operands with constraint "f" cannot overlap with defs" in X86 FP Stackifier for inline…
    36. #173680 llvm-project clang trunk: assertion "No-op copy with multiple parts!" in getCopyToParts during DAG lowering of tied inline asm ope…
    37. #173679 llvm-project clang trunk: assertion "isSimple()" in LValue::getPointer during codegen of inline asm operand on bit-field member
    38. #173678 llvm-project Unreachable in ASTContext::mergeTypes during Sema of function redeclaration with VLA bounds dependent on nested struc…
    39. #173676 llvm-project clang trunk: fatal error "Broken module found" in Verifier due to oversized struct with huge flexible array member
    40. #173675 llvm-project clang trunk: assertion "Must have at least one constraint" in TargetLowering::ComputeConstraintToUse during backend D…
    41. #173674 llvm-project clang trunk: assertion failed in cast during Sema address-of overloaded candidate with #pragma wea…
    42. #173673 llvm-project clang trunk: assertion "Output operand lower bound is not zero" in EmitAsmStores during codegen of inline asm with mu…
    43. #173672 llvm-project clang trunk: unreachable "Unknown unary operator lvalue!" in EmitUnaryOpLValue during codegen of postfix decrement on…
    44. #173621 llvm-project Clang trunk: assertion "Offset >= Size" in CGRecordLowering::insertPadding during record layout for global struct wit…
    45. #173620 llvm-project Clang trunk: unreachable/crash in SelectionDAGBuilder::visitInlineAsm → visitCallBr during backend lowering of asm go…
    46. #173619 llvm-project Clang trunk: unreachable/crash in Sema::BuildBinOp during parsing of enum initializer with | and __builtin_goacc_parl…
    47. #173618 llvm-project Clang trunk: assertion "Failed to convert memory constraint code to constraint id" in SelectionDAGBuilder::visitInlin…
    48. #173617 llvm-project Clang trunk: unreachable/crash in ASTContext::getCommonSugaredType during Sema of ternary with deref of const void an…
    49. #173616 llvm-project Clang trunk: assertion "No known constraint!" in AsmOperandInfo::isMatchingInputConstraint during backend DAG for opt…
    50. #173615 llvm-project Clang trunk (x86): assertion in TwoAddressInstructionImpl::processTiedPairs (duplicate tied reg) during backend lower…
    51. #173614 llvm-project Assertion "unsigned range includes negative?" in AnalyzeComparison during Sema of vector comparison with mismatched s…
    52. #173613 llvm-project Unreachable/crash in ComplexExprEvaluator::VisitCastExpr / VisitUnaryOperator during overflow check/eval of increment…
    53. #173611 llvm-project Clang failed to parse constraints in InlineAsm for invalid input constraint "#0" in asm stmt
    54. #173610 llvm-project Assertion "should not emit an unevaluated operand" in EmitDeclRefLValue for DeclRef in statement expr VLA inside sizeof
    55. #173609 llvm-project clang trunk (x86): assertion in FollowCopyChain ("start of copy chain MUST be COPY") during SelectionDAG for asm goto…
    56. #173608 llvm-project assertion "Function already has body?" in CodeGenFunction::StartFunction when emitting duplicate extern inline defini…
    57. #173607 llvm-project SIGSEGV (no assertion) during parsing of function prototype with excessively macro-expanded parameters
    58. #173604 llvm-project clang trunk (x86): assertion failed in cast when adding interrupt attributes to UINTR handler with array…
    59. #173603 llvm-project clang trunk (x86): assertion "Getting frame offset for a dead object?" in MachineFrameInfo::getObjectOffset during Pr…
    60. #173602 llvm-project Assertion !isStruct() in APValue::getStructField during eval of pre-increment on _Complex double struct member (varia…
    61. #173601 llvm-project Assertion in LValue::addUnsizedArray (!isPointerType && !isArrayType) during constexpr eval of dereference on redecla…
    62. #173599 llvm-project Assertion "Initializer access out of range!" in InitListExpr::getInit during Sema of scalar compound literal with nes…
    63. #173597 llvm-project Assertion "Invalid cast!" in CastInst::Create / ScalarExprEmitter::VisitCastExpr when codegen vectorized long double…
    64. #173595 llvm-project Assertion failure in IntegerType::get (bitwidth too large) during codegen of inline asm with large array operand and…
    65. #170073 llvm-project clang trunk: crash in IRBuilder::CreateCast / ScalarExprEmitter::VisitCastExpr for vector long double comparison return
    66. #170072 llvm-project clang trunk: crash in LValue::addUnsizedArray when returning from negative-sized array
    67. #170062 llvm-project clang trunk crash : X86FrameLowering::getFrameIndexReference crash during prologue/epilogue insertion for alloca(-1)
    68. #170060 llvm-project clang trunk: crash in checkAttributesAfterMerging with alias attribute and initializer
    69. #170059 llvm-project clang trunk: crash in ComplexExprEvaluator::VisitUnaryOperator during constant-expression overflow check
    70. #165465 llvm-project Clang Crash: Assertion !isNull() failed in QualType::getCommonPtr during constant expression evaluation
    71. #165463 llvm-project Clang Crash: Assertion Value > 0 failed in llvm::Align::Align due to negative vector_size attribute
    72. #165462 llvm-project Clang Crash (SIGSEGV) in CodeGen with __attribute__((preserve_access_index)) on structure access
    73. #165458 llvm-project Clang Crash: Assertion NumBits <= MAX_INT_BITS failed in IntegerType::get with large ext_vector_type
    74. #165452 llvm-project LLVM IR Gen: Assertion Align != 0u failure in llvm::alignTo during Record Layout
    75. #161710 llvm-project `Wasmer's` execution leads to `LLVM Crash`

  • GCC

    GNU Compiler Collection (Bugzilla)

    54
    1. PR122927 gcc [13/14/15/16 Regression] ICE in fold_offsetof for __real of complex field inside packed struct array
    2. PR122928 gcc GCC 16 trunk: ICE in c_type_tag when calling function with struct member va_list after duplicate va_arglist declaration
    3. PR122929 gcc ICE in expand_call when passing oversized struct argument on stack
    4. PR122930 gcc GCC 16 trunk: ICE in output_operand_lossage for static uintptr_t initialized from label address differences
    5. PR123424 gcc [15 regression] ICE in comptypes_verify when handling a locally defined struct with a VLA member initialized from a m…
    6. PR123425 gcc ICE in gimplification when calling a function cast from an invalid void[ ] parameter declaration, leading to an error…
    7. PR123426 gcc GCC trunk ICEs during final code generation when emitting static initializers involving arithmetic on label addresses…
    8. PR123427 gcc GCC trunk hits “assembler name hash list corrupted” and ICEs in symtab_node::verify when two globals are forced to th…
    9. PR123428 gcc GCC trunk ICEs in fold_offsetof when taking &__real / &__imag of a complex field inside a packed nested struct (p->b.…
    10. PR123429 gcc GCC trunk segfaults while parsing a file-scope __builtin_c23_va_start
    11. PR123430 gcc GCC trunk ICEs in operand_equal_p when folding a pointer difference expression formed by subtracting two foo().c arra…
    12. PR123431 gcc [13 Regression] ICE with __builtin_constant_p and __builtin_va_arg_pack usage in ranger
    13. PR123432 gcc GCC trunk ICEs in finish_struct when a struct declares a vector float type (via __vector_size__) as a bit-field (floa…
    14. PR123433 gcc GCC trunk ICEs during gimplification when processing varargs code involving non-constant-sized aggregate types.
    15. PR123434 gcc GCC trunk ICEs during RTL expansion when passing very large aggregate arguments by value, after reporting an unimplem…
    16. PR123435 gcc [15 regression] ICE extern enum with qualifiers and int on the same decl
    17. PR123436 gcc GCC trunk ICEs in the SIMD clone IPA pass when compiling a __attribute__((simd)) function with return type of typedef…
    18. PR123437 gcc [16 Regression] GCC trunk ICEs with divide on enum vector
    19. PR123438 gcc GCC trunk ICEs during RTL expansion when compiling inline assembly with malformed or invalid output constraints.
    20. PR123461 gcc [16 Regression] ICE in mark_decl_used with some unsized array types
    21. PR123462 gcc GCC trunk ICEs during RTL expansion when lowering inline assembly with invalid or malformed operand constraints.
    22. PR123463 gcc [15 Regression] ICE in comptypes with some GCC like code after errors
    23. PR123464 gcc GCC trunk ICEs during code generation when processing invalid or unsupported inline assembly patterns.
    24. PR123465 gcc [13/14/15/16/17 Regression] ICE in handle_access_attribute after redeclaration error
    25. PR123466 gcc [13/14/15/16/17 Regression] ICE in get_unwidened after redeclared error
    26. PR123467 gcc [16/17 Regression] ICE in force_constant_size with VLA initialized in function type definition
    27. PR123468 gcc ICE in c_type_tag
    28. PR123469 gcc ICE in round_up_loc
    29. PR123470 gcc [13/14/15/16 Regression] ICE in expand_stack_alignment with passing a 32byte aligned type to main
    30. PR123471 gcc ICE in mark_decl_used after errors
    31. PR123472 gcc ICE in tree_nonzero_bits after errors
    32. PR123473 gcc [16/17 Regression] ICE in expand_expr_real_1 with array in struct with bounds of `*`
    33. PR123474 gcc ICE in create_tmp_from_val after errors
    34. PR123703 gcc [13 Regression] ICE in fold_convert with a bad declaration of abs (return an union)
    35. PR123704 gcc ICE caused by invalid type comparison involving nested struct pointers during function verification.
    36. PR123705 gcc Crash in type-checking logic triggered by ifunc attributes combined with recursive pointer arguments.
    37. PR123706 gcc ICE with simd attribute and malloc attribute
    38. PR123707 gcc Internal compiler error during semantic analysis of functions operating on mutually recursive pointer types.
    39. PR123708 gcc ICE with register _Alignas function tokens
    40. PR123709 gcc ICE with inline-asm with out of range operands
    41. PR123710 gcc ICE (in default_conversion) with invalid argument to vector_size
    42. PR123711 gcc Internal compiler error during function type resolution involving deep pointer indirection on locally defined structs.
    43. PR123712 gcc ICE with ifunc attribute on definition and calling itself
    44. PR123713 gcc [16/17 Regression] ICE in composite_type_cond with ms_abi and old style function declaration
    45. PR123714 gcc Gimplifier crashes in categorize_ctor_elements_1 when a bad redeclaration leaves an error_mark in a constructor initi…
    46. PR123715 gcc ICE with target_clones and vector returns
    47. PR123716 gcc ICE in tree_nop_conversion_p triggered by a conflicting redeclaration that turns an identifier into an array type mid…
    48. PR123717 gcc invalid old style function declaration for nested function with VLA in struct as function argument in argument
    49. PR123718 gcc Compiler aborts with stack-smashing after invalid inline asm operand escapes (‘%’ operand number missing/out of range).
    50. PR123719 gcc ICE in count_type_elements after a cascade of invalid/incomplete struct declarations produces an error_mark type for…
    51. PR123720 gcc composite_type_cond ICE when resolving a symbol redefined with an incompatible struct type after an earlier scalar de…
    52. PR123721 gcc ICE in attr_access::from_mode_char when parsing an access attribute containing an invalid mode character.
    53. PR123722 gcc ICE in expand_call after “sorry, unimplemented: passing too large argument on stack” during call expansion.
    54. PR123723 gcc ICE in expand_asm_stmt (cfgexpand.cc) during RTL expand when inline asm contains an invalid constraint character / in…

  • WebAssembly runtimes

    Wasmtime, WAMR, WasmEdge, Wasmer

    21
    1. #4390 WasmEdge `Segmentation Fault` while executing a testcase using `Wasmedge 0.15.0`
    2. #5734 wasmer Wasmer's llvm backend throws SegFault when executing a testcase
    3. #5733 wasmer Wamer `panics` during a testcase execution
    4. #4622 wasm-micro-runtime wamr (AOT mode) crashes and throws unhandled SIGSEGV, Aborted
    5. #4367 WasmEdge All different modes of `Wasmedge` throw `file descriptor` error
    6. #5732 wasmer `wamr (AOT mode)` crashes and throws `unhandled SIGSEGV, Aborted`
    7. #4601 wasm-micro-runtime WAMR JIT mode throws ```invalid_unexpected_end``` error
    8. #4600 wasm-micro-runtime WAMR AOT mode's output differs from the other runtimes
    9. #5687 wasmer Wasmer LLVM: wrong result of `i32x4.extmul_low_i16x8_u`
    10. #5686 wasmer Wasmer cranelift mode returns `out of bounds memory access`
    11. #11390 wasmtime Wasmtime throws `wasm trap: call stack exhausted` when processing a test case
    12. #4306 WasmEdge bug: Wasmedge's `JIT` and `Interpreter` mode `timeout` when executing a testcase
    13. #4305 WasmEdge bug: Wasmedge's output is `unexpected` and `differs from other runtimes`.
    14. #4304 WasmEdge bug: Wasmedge fails with to execute with `unreachable, Code: 0x40a`
    15. #4303 WasmEdge bug: Wasmedge exists with `instantiation failed: unknown import, Code: 0x302`
    16. #11385 wasmtime Wasmtime runtime returns invalid Clockid Enum error
    17. #5683 wasmer Wasmer runtime llvm backend mode doesn't report missing function
    18. #5682 wasmer Wasmer runtime returns `call stack exhausted` error
    19. #4299 WasmEdge bug: WasmEdge throws `error calling stack` instead of `Out of Bound`
    20. #5680 wasmer Wasmer runtime can't process a test case.
    21. #5678 wasmer Wasmer runtime doesn't report missing function

  • Deep learning libraries

    JAX, PyTorch

    42
    1. #37752 jax `jnp.floor_divide(nonzero, 0.0)` returns `nan` instead of `±inf` (NumPy compatibility / IEEE 754 violation)
    2. #37751 jax `jax.scipy.special.xlogy` and `xlog1py` return `0.0` instead of `nan` when `x=0` and `y=nan`
    3. #183815 pytorch `F.conv2d` CPU performance regression (~4–16×) for bfloat16 inputs introduced in 2.13.0.
    4. #183812 pytorch `torch.scatter_reduce` CPU performance regression (~15–58×) introduced in 2.13.0.
    5. #37670 jax jnp.log/log2/log10 return -inf for subnormal float32 inputs (XLA DAZ flush)
    6. #38105 jax `jax.numpy.heaviside(x1, x2)` is supposed to compute the Heaviside step function, returning `0` when `x1 < 0`, `1` wh…
    7. #37993 jax `jnp.std` returns `inf` instead of `nan` for float32 arrays near overflow
    8. #37992 jax `jax.grad` of `jnp.ldexp(x, 1)` returns `1.0` instead of `2.0` at `x=0`
    9. #37991 jax `jnp.cumsum(x, dtype=bool)` produces wrong values for integer input
    10. #37990 jax `jnp.abs(complex(±inf, nan))` returns `nan` instead of `inf`
    11. #184847 pytorch `torch.trace` raises `NotImplementedError` for `float16` input on CPU — no kernel registered for `Half`, no documente…
    12. #184845 pytorch `torch.nn.functional.pad` raises `NotImplementedError` for valid `(ndim, pad_size)` combinations in non-constant mode…
    13. #184844 pytorch `torch.cumprod` / `torch.cumsum` / `torch.sort` kill the Python process with SIGABRT on MPS for tensors with `ndim >…
    14. #184842 pytorch `torch.autograd.functional.jacobian` raises `NotImplementedError` at execution time for `strategy='forward-mode'` wit…
    15. #184841 pytorch `torch.export.export` raises `RuntimeError: Unhandled FakeTensor Device Propagation` for CUDA/MPS example inputs inst…
    16. #37925 jax `jax.image.resize` fails with `JaxRuntimeError: INTERNAL` for lanczos3/lanczos5 on CUDA — XLA autotuner finds no vali…
    17. #37924 jax `jax.scipy.linalg.expm` crashes the Python process with SIGSEGV on CUDA — XLA autotuner dereferences a null pointer,…
    18. #37923 jax All JAX linalg GPU ops fail with `JaxRuntimeError: INTERNAL: gpusolverDnCreate failed` — cuSolver handle pool cannot…
    19. #37922 jax `jax.lax.conv_general_dilated` raises `JaxRuntimeError: INTERNAL` for bfloat16 on CUDA — XLA autotuner finds no valid…
    20. #37921 jax `jnp.searchsorted` returns `int32` instead of `int64` regardless of `jax_enable_x64`
    21. #37920 jax `jnp.cumsum` and `jnp.cumprod` return input dtype instead of `int64` when `jax_enable_x64=True`
    22. #37919 jax `jax.jit` XLA algebraic simplification of `sqrt(abs(square(x)))` changes result at float32 overflow boundary
    23. #38101 jax `jax.jit + jax.vmap composition`: jit(vmap(f))(x) != vmap(f)(x) for `relu → square → sqrt_abs` at float32.max
    24. #38100 jax `jax.jit + jnp.log2 + jnp.exp2`: jit(log2(exp2(x))) hides exp2 overflow — XLA rewrites log2(exp2(x)) to x
    25. #38099 jax `jax.jit + jnp.log + jnp.exp`: jit(log(exp(x))) hides exp overflow — XLA rewrites log(exp(x)) to x
    26. #38098 jax `jax.jit + jax.grad + jnp.log2 + jnp.exp2`: jit(grad(sum(log2(exp2(x))))) != eager grad — XLA identity rewrite change…
    27. #38097 jax `jax.jit + jax.grad + jnp.log + jnp.exp`: jit(grad(sum(log(exp(x))))) != eager grad — XLA identity rewrite hides exp…
    28. #38096 jax `jax.jit + jax.grad`: jit(grad(f))(x) != grad(f)(x) for `square → sqrt_abs` at smallest normal float32
    29. #184575 pytorch `F.normalize` returns ~1e12 gradient at zero-vector input instead of NaN, while the forward pass already returns NaN
    30. #184574 pytorch `torch.clamp` / `torch.clamp_min` / `torch.clamp_max` return gradient 1.0 at boundary points where `F.relu6` and `F.h…
    31. #184572 pytorch `torch.maximum` / `torch.clamp_min` gradients at tie point violate PyTorch's documented subgradient convention and ar…
    32. #37822 jax `jnp.searchsorted` returns wrong insertion indices when the sorted array contains `NaN`
    33. #37821 jax `jax.grad(lambda x: jnp.maximum(x, 0.0))(0.0)` returns `0.5` — deviates from standard ReLU gradient convention and fr…
    34. #37820 jax `jax.grad(jnp.abs)(0.0)` returns `1.0` — inconsistent with `jnp.sign(0.0) = 0.0`
    35. #37819 jax `jnp.floor_divide` returns hardware-garbage value for integer division by zero — should return 0 (matching NumPy)
    36. #37817 jax `jnp.abs(inf + nan*j)` returns `nan` — violates IEEE 754 / C99 "infinity dominates" rule for complex magnitude
    37. #37766 jax `jnp.linalg.svd`: subnormal singular values are returned as 0
    38. #37765 jax `jnp.linalg.eigvalsh` drops subnormal eigenvalues to zero; `jnp.linalg.det` returns 0 for matrices with subnormal det…
    39. #37764 jax `jax.scipy.special.i1e` and `jax.scipy.special.erfinv` return 0 for subnormal inputs
    40. #37763 jax `jax.scipy.special.digamma(0.0)` returns `nan` — should be `-inf`
    41. #37762 jax Subnormal float32/bfloat16 inputs silently produce wrong results in `log`, `sqrt`, `rsqrt`, `log1p`, `lgamma` due to…
    42. #37761 jax `jnp.cbrt` gives wrong (negative!) result for denormal float32 inputs — same garbage value regardless of input

mohsen@ncsu:~$ ls skills/

  • Python
  • C / C++
  • Go
  • LLVM
  • GCC
  • WebAssembly
  • Fuzzing
  • Differential Testing
  • Static & Dynamic Analysis
  • LLMs & Agentic AI
  • SWE-bench Verified
  • JAX / PyTorch
Mohsen EsfandyariDoulabi
Raleigh, NC

mohsen@ncsu:~$ cat research.md

* 7c14b8d

Research

--- a/research.md
+++ b/research.md

Predicting the Run, Not the Task: Failure Prediction for LLM Agents

Introduces a run-level failure-prediction framework for LLM agents, together with a budget-allocation policy that attains 3.1× the throughput of the prevailing approach. Prior evaluations rest on a metric dominated by between-task variation: it ranks tasks by relative difficulty rather than estimating whether a given run will fail, and its discriminative power degrades further as model capability increases.

Do Community-Authored Agent Skills Improve Automated Program Repair?

Presents a controlled evaluation of whether community-authored agent skills improve an LLM coding agent’s ability to repair real defects. A containerized harness over SWE-bench Verified isolates skill exposure as the sole treatment, against a matched baseline and with per-run replication for variance estimation — converting a widely held assumption in the agent-tooling community into a measurable result.

◆

Agentic Program Analysis

Employs large language models as reasoning components within program-analysis pipelines: proposing candidate programs, triaging failures and reducing crashes to minimal reproducers. Implemented over agentic frameworks such as LangChain and applied to Clang/LLVM and GCC, substituting agent-driven synthesis for hand-written test cases.

◇

Compiler Fuzzing

Coverage-guided and differential testing that synthesizes adversarial programs to expose crashes and miscompilations in Clang/LLVM and GCC, including an examination of what coverage guidance actually contributes to a compiler fuzzer and where its standard assumptions fail.

▣

WebAssembly Runtimes

Large-scale differential testing across Wasmtime, WAMR, WasmEdge and Wasmer: crash discovery, seed categorization and cross-implementation comparison. Has produced 190+ bug reports across compilers, WebAssembly runtimes and deep learning libraries, with fixes contributed upstream, alongside work on reusing existing regression suites to reach code paths new tests do not.

◈

Automated Software Testing

Reproducible, measurable test-generation pipelines — the infrastructure that converts a one-off bug hunt into a standing experiment. Spans metamorphic testing for game physics and controlled evaluation of coding agents on SWE-bench Verified.

mohsen@ncsu:~$ cat news.md

* e02da55

News

--- a/news.md
+++ b/news.md

  • Left Behind, Not Forgotten: Reusing Regression Tests to Find Bugs in WebAssembly Runtimes was accepted with minor revision at IEEE TSE.

  • Three papers under review — two at ASE 2026 and one at IEEE TSE.

  • Adaptive Ensemble Learning for Software Defect Prediction appeared at ICCKE 2025.

  • Joined the SWAT Lab as a Research Assistant, working on compiler fuzzing and WebAssembly runtime analysis.

  • Started my Ph.D. in Computer Science at NC State University.

mohsen@ncsu:~$ cat publications.md

* 1f6c9b3

Publications

--- a/publications.md
+++ b/publications.md

  1. Left Behind, Not Forgotten: Reusing Regression Tests to Find Bugs in WebAssembly Runtimes

    I. Hayat, M. EsfandyariDoulabi, G. Merabishvili, M. d'Amorim

    IEEE Transactions on Software Engineering (TSE) · 2027

  2. Demystifying Coverage-Guided Compiler Fuzzing

    M. EsfandyariDoulabi, I. Hayat, L. Liu, M. d'Amorim

    IEEE/ACM International Conference on Software Engineering (ICSE) · 2027

    Under review

  3. MetaGlitch: Physics-Grounded Metamorphic Testing for Video Game Testing

    G. Merabishvili, M. EsfandyariDoulabi, M. d'Amorim

    IEEE/ACM International Conference on Software Engineering (ICSE) · 2027

    Under review

  4. Adaptive Ensemble Learning for Software Defect Prediction: A Dynamic Weighted Hybrid Model Using SVM, DT, and ANFIS-PSO

    M. EsfandyariDoulabi, A. EsfandyariDoulabi, J. Khaligh

    International Conference on Computer and Knowledge Engineering (ICCKE) · 2025

mohsen@ncsu:~$ cat experience.md

* b84e70a

Experience

--- a/experience.md
+++ b/experience.md

Feb 2024 – Jul 2024

System Developer

Behin Afzar · Tehran, Iran

Engineered a firewall in C for IPv4, TCP/UDP, DNS and HTTP traffic, with a domain/CIDR rule engine that compiles matches into iptables policies and emits structured audit trails for compliance review.

cnetworkingdnshttpfirewalliptables

Jun 2021 – Feb 2024

Security Engineer

ShahrDI · Tehran, Iran

Automated vulnerability management end to end in Python and Bash including CVE tracking and patch-compliance verification, with anomaly detection and audit-grade logging relied on in regulatory review; led production hardening and ran secure-coding training for development teams.

securityautomationpythonhardeningcve

May 2020 – Jun 2021

SIEM Engineer

APK Group · Tehran, Iran

Detection engineering for a security operations center: authored SIEM use cases, IOC extraction parsers and analyst dashboards in Python, plus correlation logic across heterogeneous log sources that suppressed false positives and reconstructed complete attack chains.

siemdetectioniocmalwarepython

Apr 2019 – May 2020

Network Engineer

Shatel · Tehran, Iran

Managed Linux and Windows server estates and core network services (DNS, DHCP, VPN) for ISP subscribers, with scripted diagnostics and repeatable incident playbooks that cut escalation volume.

networkinglinuxdnsdhcpvpn

mohsen@ncsu:~$ cat academic.md

* 5d3af19

Academic

--- a/academic.md
+++ b/academic.md

2025–present

Research Assistant — SWAT Lab

North Carolina State University · Prof. Marcelo d'Amorim

Works on the reliability and efficiency of LLM agents and the systems they run on. Designs evaluation frameworks and benchmarking infrastructure that predict when agent runs fail and allocate compute accordingly, with controlled experiments over SWE-bench Verified in containerized harnesses. Builds automated testing pipelines — coverage-guided fuzzing, differential testing, and agentic, LLM-driven test generation — across compilers (Clang/LLVM, GCC), WebAssembly runtimes, and deep learning libraries, producing 190+ bug reports with fixes contributed upstream. Works in Python, C/C++, and Docker across large open-source codebases.

Fall 2026

CSC 474 — Network Security

North Carolina State University

Held office hours and graded assignments and projects covering network attacks, defences and applied cryptography.

Spring 2026

CSC 326 — Software Engineering

North Carolina State University

Supported team software-engineering projects: ran office hours, reviewed designs and graded iterative deliverables.

Spring 2025

CSC 574 — Computer & Network Security

North Carolina State University

Held office hours, graded assignments and projects, helped students debug their code, and clarified rubric expectations.

Fall 2024

CSC 216 — Software Development Fundamentals

North Carolina State University

Ran labs and office hours, graded programming assignments, and supported students with object-oriented design, unit testing, Git workflows, and debugging.

2019–2022

Operating Systems · Artificial Intelligence · Internet Engineering

Azad University

Taught and supported three undergraduate courses over three years, running sessions and grading for Operating Systems, Artificial Intelligence, and Internet Engineering. Voted best teaching assistant by students in 2022.

mohsen@ncsu:~$ cat skills.md

* c917e4b

Skills

--- a/skills.md
+++ b/skills.md

Languages

CC++PythonGoAssemblyBash

Testing & Analysis

FuzzingDifferential TestingStatic & Dynamic AnalysisWebAssembly Runtime AnalysisSWE-bench Verified

AI & Agents

LangChainHugging FaceAgentic FrameworksLLM-powered Test GenerationJAXPyTorch

Systems, Cloud & Web

Linux (RHEL/Debian)Windows ServerDockerAWSVMwareQEMUGitJavaScriptPHPRESTGraphQL

mohsen@ncsu:~$ cat education.md

* 2ab6f08

Education

--- a/education.md
+++ b/education.md

Aug 2024 – present

Ph.D. in Computer Science

North Carolina State University · Raleigh, NC

Software Analysis and Testing (SWAT) Lab

Advisor: Prof. Marcelo d'Amorim

GPA 3.7/4.0

Aug 2024 – Sep 2026

M.S. in Computer Science (en route)

North Carolina State University · Raleigh, NC

GPA 3.7/4.0

Nov 2017 – Apr 2022

B.Sc. in Computer Engineering

Azad University · Tehran, Iran

GPA 3.7/4.0

mohsen@ncsu:~$ cat awards.md

* 9e5c31d

Awards

--- a/awards.md
+++ b/awards.md

  • 2022

    Best Teaching Assistant

    Awarded by student vote.

    Azad University

  • 2022

    Outstanding Computer Engineering Student

    Top student across the final two semesters by semester GPA.

    Azad University

  • 2021

    Top 25 Computer Engineering Students

    Ranked on academic work and overall GPA.

    Azad University

  • 2017

    Top 7% Nationwide

    University entrance exam, Mathematics and Physics track.

    Iran National University Entrance Exam

  • 2016

    3rd Place — Tehran Province

    High school volleyball league.

    Tehran Province

  • 2013

    1st Place — Tehran Province

    U16 professional soccer league.

    Tehran Province