syzbot


panic: runtime error: floating point error

Status: internal: reported on 2022/05/09 20:29
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: 59f5ede3bc0f x86/fpu: Prevent FPU state corruption
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-riscv64]
First crash: 50d, last: 50d

Sample crash report:
panic: runtime error: floating point error
[signal SIGFPE: floating-point exception code=0x80 addr=0x0 pc=0x50cce1]

goroutine 27 [running]:
github.com/google/syzkaller/prog.(*GroupArg).Size(0xc0099732a0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:234 +0x301
github.com/google/syzkaller/prog.(*GroupArg).Size(0xc009e5dea0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:246 +0x1ce
github.com/google/syzkaller/prog.(*GroupArg).Size(0xc009e5dec0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:231 +0x2aa
github.com/google/syzkaller/prog.(*UnionArg).Size(0xc009e5dee0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:280 +0x142
github.com/google/syzkaller/prog.(*GroupArg).Size(0xc009e5df00)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:246 +0x1ce
github.com/google/syzkaller/prog.foreachArgImpl({0x8ac618, 0xc009e5df00}, 0xc00add6b80, 0xc00e7fd868)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:153 +0x387
github.com/google/syzkaller/prog.foreachArgImpl({0x8ac618, 0xc009e5df20}, 0xc00add6b80, 0xc00e7fd868)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:146 +0x6ae
github.com/google/syzkaller/prog.foreachArgImpl({0x8ac658, 0xc0017bd500}, 0xc00add6b80, 0xc00e7fd868)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:163 +0x337
github.com/google/syzkaller/prog.foreachArgImpl({0x8ac618, 0xc009e5df40}, 0xc00add6b80, 0xc00e7fd868)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:146 +0x6ae
github.com/google/syzkaller/prog.foreachArgImpl({0x8ac658, 0xc0017bd530}, 0xc00add6b80, 0xc00e7fd868)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:163 +0x337
github.com/google/syzkaller/prog.foreachArgImpl({0x8ac618, 0xc009e5dfa0}, 0xc00add6b80, 0xc00e7fd868)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:146 +0x6ae
github.com/google/syzkaller/prog.foreachArgImpl({0x8ac658, 0xc0017bd560}, 0xc00add6b80, 0xc00e7fd868)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:163 +0x337
github.com/google/syzkaller/prog.ForeachArg(0xc0054ccaa0, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:122 +0x105
github.com/google/syzkaller/prog.(*execContext).writeCopyout(0xc00e7fd970, 0x8ac598)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/encodingexec.go:231 +0x38
github.com/google/syzkaller/prog.(*execContext).serializeCall(0xc00e7fd970, 0xc0054ccaa0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/encodingexec.go:114 +0x21b
github.com/google/syzkaller/prog.(*Prog).SerializeForExec(0xc00b8d1700, {0x7f37bc57b000, 0x400000, 0x400000})
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/encodingexec.go:76 +0x188
github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc00b944240, 0x40, 0xc00b8d1700)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:256 +0x57
main.(*Proc).executeRaw(0xc00a99e300, 0xc00b8d1700, 0xc00d09e080, 0x1)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:321 +0x1bc
main.(*Proc).execute(0xc00a99e300, 0xc00b8c4720, 0x0, 0xc00a99e180, 0xc008b40000)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:255 +0x49
main.(*Proc).executeAndCollide(0xc00a99e300, 0x6ceb99, 0xc, 0xc00e7fdf38, 0x1)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:284 +0x27
main.(*Proc).loop(0xc00a99e300)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:97 +0x3e5
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:300 +0x157d

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-net-kasan-gce 2022/05/09 20:28 net-next 6da3c47264b2 8b277b8e .config log report info panic: runtime error: floating point error