syzbot


panic: runtime error: floating point error [recovered] (2)

Status: auto-obsoleted due to no activity on 2024/06/25 05:19
Reported-by: syzbot+808827ebab2c5b901d57@syzkaller.appspotmail.com
First crash: 109d, last: 109d
Similar bugs (4)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-5-10 panic: runtime error: floating point error [recovered] 1 90d 90d 0/2 auto-obsoleted due to no activity on 2024/07/13 09:12
android-6-1 panic: runtime error: floating point error [recovered] 3 104d 122d 0/2 auto-obsoleted due to no activity on 2024/06/29 09:32
upstream panic: runtime error: floating point error [recovered] 2 91d 107d 0/27 auto-obsoleted due to no activity on 2024/07/13 03:37
android-5-15 panic: runtime error: floating point error [recovered] 1 577d 577d 0/2 auto-obsoleted due to no activity on 2023/04/11 07:35

Sample crash report:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x20000393, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
panic: runtime error: floating point error [recovered]
	panic: runtime error: floating point error
target: linux/amd64, rev: 454571b6a16598f5a6e015b9fb1a04932bce7ab9, mode=1, prog:
"r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)\nbpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, \"\"/16, <r1=>0x0}}, 0x10)\nr2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x9, 0x1000, 0xfd, 0x151, r0, 0x2, '\\x00', r1, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x48)\nr3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB=\"1800000000000000000000000000000018110000\", @ANYRES32=r0, @ANYBLOB=\"00001e0000000000b7080000000000df7a8af8ff7d0b84074c63c0930000000007020000f8ffff0cb70300000800fcffb6040000000000008500000082000000950000000000000074db0a04e6881474b94243f93bef2d0a95e228864f725c80fe9e5b1df780d4da427c050bd9ca039e6531927479f0ade087f77d9bd2bc94352cbd4a4d12ced434aacee01817b031bf9823437ff8852c4188798c3573e7cfd39d0c64e9b81cf1d00e6a\"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)\nr4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)\nbpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='consume_skb\\x00', r4}, 0x10)\nr5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4)\nr6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)\nr7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\\x00', 0x26e1, 0x0)\nioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4004662b, 0x0)\nbpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], \"\"/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0xe9, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xab, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)\nr9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@int={0x4, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x0, 0x79, 0x2}, @const={0x2, 0x0, 0x0, 0xa, 0x1}, @union={0xe, 0x3, 0x0, 0x5, 0x1, 0x2, [{0x7, 0x1, 0x3}, {0xd, 0x3, 0x1}, {0x5, 0x2, 0x1000}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000780)=\"\"/142, 0x68, 0x8e, 0x1, 0x81}, 0x20)\nbpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0x342c, <r10=>0x0}, 0x8)\nr11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB=\"18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095\"], &(0x7f0000000040)='GPL\\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)\nbpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000004c0)='virtio_transport_recv_pkt\\x00', r11}, 0x10)\nr12 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x144000, 0x7fe2, 0x1}, 0x48)\nbpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r12, &(0x7f0000000180), 0x20000000}, 0x20)\nbpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r6, <r13=>0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%pS    \\x00'}, 0x20)\nr14 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48)\nbpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x9, &(0x7f0000000040)=@framed={{}, [@alu={0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r14}}], {0x95, 0x0, 0x0, 0x1a03d3}}, &(0x7f0000000100)='GPL\\x00', 0x3, 0xfa, &(0x7f0000000140)=\"\"/250}, 0x81)\nr15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001040)=@o_path={&(0x7f0000001000)='./file0\\x00', 0x0, 0x0, r11}, 0x18)\nbpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{0x1, <r16=>0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)=r3}, 0x20)\nbpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x12, 0x13, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5b9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0xb}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c40)='GPL\\x00', 0x20, 0x2f, &(0x7f0000000c80)=\"\"/47, 0x41000, 0x38, '\\x00', 0x0, 0x32, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000fc0)={0x0, 0xe, 0x66881399, 0x7}, 0x10, 0xffffffffffffffff, r4, 0x0, &(0x7f0000001140)=[r0, r7, r13, r9, r14, r15, r16, r0], 0x0, 0x10, 0x8}, 0x90)\nr17 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1, 0x16, 0x8, 0xd3d}, 0x48)\nbpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x2, 0x0, r17}], {0x95, 0x0, 0x0, 0x7100}}, &(0x7f0000000040)='syzkaller\\x00', 0x3, 0xee, &(0x7f0000000340)=\"\"/238}, 0x22)\nbpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x9, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x0, 0x1, 0x0, r7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\\x00', 0x7, 0x0, 0x0, 0x41100, 0x5c, '\\x00', r8, 0x21, r9, 0x8, &(0x7f0000000880)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0xd, 0x3, 0xffffff7f}, 0x10, r10, r11, 0x6, &(0x7f0000000a00)=[r6, r12, r6, r6, r13, r6, r6, r17], &(0x7f0000000a40)=[{0x3, 0x5, 0xd, 0x6}, {0x1, 0x1, 0x4, 0xc}, {0x2, 0x5, 0xd, 0x3}, {0x1, 0x3, 0x10, 0x5}, {0x5, 0x2, 0x10, 0x8}, {0x1, 0x2, 0x2}], 0x10, 0x9}, 0x90)\nbpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, <r18=>0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r3}, 0x20)\nr19 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0xede, 0x3b, 0x8, 0x30, 0xffffffffffffffff, 0xb761, '\\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x8}, 0x48)\nbpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB=\"180000000556000000000000090400009500000000000000\"], &(0x7f0000000400)='GPL\\x00', 0x21, 0xb9, &(0x7f0000000440)=\"\"/185, 0x41000, 0x4e, '\\x00', r1, 0x22, r5, 0x8, &(0x7f0000000540)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x10, 0x1, 0x400}, 0x10, r10, r3, 0x1, &(0x7f0000000700)=[r2, r18, r0, r2, r2, r0, r2, r2, r19, r2], &(0x7f0000000740)=[{0x5, 0x2, 0x1, 0xa}], 0x10, 0x3}, 0x90)\nsyz_clone(0x660694c0, 0x0, 0x0, 0x0, 0x0, 0x0)\n"
[signal SIGFPE: floating-point exception code=0x80 addr=0x0 pc=0x7903aa]

goroutine 14 [running]:
github.com/google/syzkaller/prog.(*Target).Deserialize.func1()
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/encoding.go:245 +0x174
panic({0xaae480?, 0x13d2e80?})
	/usr/local/go/src/runtime/panic.go:914 +0x21f
github.com/google/syzkaller/prog.ArgCommon.Type(...)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:61
github.com/google/syzkaller/prog.foreachArgImpl({0xe509a0?, 0xc000f7dd40?}, 0xc000fbe910, 0xc000d0f780)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:159 +0x102
github.com/google/syzkaller/prog.foreachArgImpl({0xe50ae0?, 0xc0004f3820?}, 0xc000fbe910, 0xc000d0f780)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:181 +0x4ce
github.com/google/syzkaller/prog.foreachArgImpl({0xe50a20?, 0xc000f9e030?}, 0xc000fbe910, 0xc000d0f780)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:200 +0x3d8
github.com/google/syzkaller/prog.foreachSubArgWithStack(...)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:139
github.com/google/syzkaller/prog.forEachStaleUnion(0xc00042e780, 0xc000f753b0, 0xc000d0f7e8)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/expr.go:105 +0x56
github.com/google/syzkaller/prog.(*Call).setDefaultConditions(Connection to 10.128.0.104 closed by remote host.

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/03/27 05:11 android13-5.15-lts 993bed180178 454571b6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-android-5-15-perf panic: runtime error: floating point error [recovered]
* Struck through repros no longer work on HEAD.