Stream: git-wasmtime

Topic: wasmtime / issue #11529 Runtime panic getting top type fo...

view this post on Zulip Wasmtime GitHub notifications bot (Aug 25 2025 at 14:43):

alexcrichton opened issue #11529:

clusterfuzz-testcase-minimized-misc-5465858848915456.txt

yields:

WARNING: Failed to find function "__sanitizer_acquire_crash_state".
WARNING: Failed to find function "__sanitizer_print_stack_trace".
WARNING: Failed to find function "__sanitizer_set_death_callback".
INFO: Running with entropic power schedule (0xFF, 100).
INFO: Seed: 1587332402
INFO: Loaded 1 modules   (1602067 inline 8-bit counters): 1602067 [0x614243d88170, 0x614243f0f383),
INFO: Loaded 1 PC tables (1602067 PCs): 1602067 [0x614243f0f388,0x6142457814b8),
target/x86_64-unknown-linux-gnu/debug/misc: Running 1 inputs 1 time(s) each.
Running: ./clusterfuzz-testcase-minimized-misc-5465858848915456
[2025-08-25T14:42:44Z DEBUG wasmtime_fuzzing::generators::module] writing `testcase0.dna` and `testcase0.json`
[2025-08-25T14:42:44Z TRACE wasmtime_fuzzing::oracles] creating store
[2025-08-25T14:42:44Z DEBUG wasmtime_fuzzing::generators::config] creating wasmtime config with CLI options:
    -Ccompiler=cranelift -Ccollector=drc -Ccranelift-debug-verifier=n -Cparallel-compilation=n -Cpcc=n -Cnative-unwind-info=n -Oopt-level=0 -Oregalloc-algorithm=backtracking -Oguard-before-linear-memory=n -Otable-lazy-init=n -Omemory-init-cow=n -Omemory-guaranteed-dense-image-size=16777216 -Osignals-based-traps=n -Wnan-canonicalization=y -Wepoch-interruption=n -Wasync-stack-zeroing=y -Wbulk-memory=y -Wmulti-memory=n -Wmulti-value=n -Wreference-types=y -Wsimd=y -Wtail-call=n -Wthreads=n -Wshared-everything-threads=n -Wmemory64=n -Wcomponent-model-async=n -Wcomponent-model-async-builtins=n -Wcomponent-model-async-stackful=n -Wcomponent-model-error-context=n -Wcomponent-model-gc=n -Wfunction-references=n -Wgc=n -Wcustom-page-sizes=n -Wwide-arithmetic=n -Wextended-const=n -Wexceptions=y -Daddress-map=n
[2025-08-25T14:42:44Z DEBUG wasmtime_fuzzing::oracles] creating module: 0
[2025-08-25T14:42:44Z DEBUG wasmtime_fuzzing::oracles] wrote wasm file to `testcase0.wasm`
[2025-08-25T14:42:44Z TRACE wasmtime_fuzzing::oracles] instantiating module 0 as 1

thread '<unnamed>' panicked at crates/wasmtime/src/runtime/values.rs:840:19:
internal error: entered unreachable code: not a heap type: Exn
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
==3025076== ERROR: libFuzzer: deadly signal
NOTE: libFuzzer has rudimentary signal handlers.
      Combine libFuzzer with AddressSanitizer or similar for better crash reports.
SUMMARY: libFuzzer: deadly signal
────────────────────────────────────────────────────────────────────────────────

Error: Fuzz target exited with exit status: 77

view this post on Zulip Wasmtime GitHub notifications bot (Aug 25 2025 at 14:43):

alexcrichton added the fuzz-bug label to Issue #11529.

view this post on Zulip Wasmtime GitHub notifications bot (Aug 25 2025 at 14:43):

alexcrichton added the wasm-proposal:exceptions label to Issue #11529.

view this post on Zulip Wasmtime GitHub notifications bot (Aug 25 2025 at 14:45):

alexcrichton commented on issue #11529:

clusterfuzz-testcase-minimized-differential-5854089130082304.txt

also yields:

WARNING: Failed to find function "__sanitizer_acquire_crash_state".
WARNING: Failed to find function "__sanitizer_print_stack_trace".
WARNING: Failed to find function "__sanitizer_set_death_callback".
INFO: Running with entropic power schedule (0xFF, 100).
INFO: Seed: 2610882324
INFO: Loaded 1 modules   (1543348 inline 8-bit counters): 1543348 [0x56af61a31230, 0x56af61ba9ee4),
INFO: Loaded 1 PC tables (1543348 PCs): 1543348 [0x56af61ba9ee8,0x56af63336a28),
target/x86_64-unknown-linux-gnu/debug/differential: Running 1 inputs 1 time(s) each.
Running: ./clusterfuzz-testcase-minimized-differential-5854089130082304.txt
[2025-08-25T14:44:58Z DEBUG wasmtime_fuzzing::oracles::diff_wasmtime] Created new Wasmtime differential engine with config: Config { wasmtime: WasmtimeConfig { opt_level: None, regalloc_algorithm: Backtracking, debug_info: false, canonicalize_nans: false, interruptable: false, consume_fuel: false, epoch_interruption: false, memory_config: MemoryConfig { memory_reservation: None, memory_guard_size: None, memory_reservation_for_growth: None, guard_before_linear_memory: false, cranelift_enable_heap_access_spectre_mitigations: None, memory_init_cow: false }, force_jump_veneers: false, memory_init_cow: false, memory_guaranteed_dense_image_size: 2314885530818453536, inlining: Some(false), inlining_intra_module: Some(Yes), inlining_small_callee_size: None, inlining_sum_size_threshold: None, use_precompiled_cwasm: false, async_stack_zeroing: false, strategy: OnDemand, codegen: Native, padding_between_functions: None, generate_address_map: false, native_unwind_info: false, compiler_strategy: CraneliftNative, collector: DeferredReferenceCounting, table_lazy_init: false, pcc: false, async_config: Disabled, signals_based_traps: false }, module_config: ModuleConfig { config: Config { available_imports: None, exports: None, module_shape: None, allow_start_export: true, allowed_instructions: InstructionKinds(FlagSet(NumericInt | Reference | MemoryInt | Memory | Aggregate)), allow_floats: true, bulk_memory_enabled: true, canonicalize_nans: true, disallow_traps: true, exceptions_enabled: true, export_everything: true, gc_enabled: true, custom_page_sizes_enabled: true, generate_custom_sections: false, max_aliases: 216, max_components: 0, max_data_segments: 216, max_element_segments: 216, max_elements: 216, max_exports: 216, max_funcs: 216, max_globals: 216, max_imports: 0, max_instances: 0, max_instructions: 216, max_memories: 1, max_memory32_bytes: 655360, max_memory64_bytes: 655360, max_modules: 0, max_nesting_depth: 10, max_table_elements: 1000, max_tables: 32, max_tags: 216, max_type_size: 1000, max_types: 16, max_values: 0, memory64_enabled: false, memory_max_size_required: true, memory_offset_choices: MemoryOffsetChoices(90, 9, 1), min_data_segments: 0, min_element_segments: 0, min_elements: 0, min_exports: 0, min_funcs: 1, min_globals: 0, min_imports: 0, min_memories: 0, min_tables: 0, min_tags: 0, min_types: 1, min_uleb_size: 2, multi_value_enabled: false, reference_types_enabled: true, relaxed_simd_enabled: false, saturating_float_to_int_enabled: false, sign_extension_ops_enabled: false, shared_everything_threads_enabled: false, simd_enabled: false, tail_call_enabled: false, table_max_size_required: true, threads_enabled: false, allow_invalid_funcs: false, wide_arithmetic_enabled: false, extended_const_enabled: false }, function_references_enabled: true, component_model_async: false, component_model_async_builtins: false, component_model_async_stackful: false, component_model_error_context: false, component_model_gc: false, legacy_exceptions: false } }
[2025-08-25T14:44:58Z DEBUG wasmtime_fuzzing::generators::module] writing `testcase0.dna` and `testcase0.json`
[2025-08-25T14:44:58Z DEBUG wasmtime_fuzzing::oracles] wrote wasm file to `testcase0.wasm`
[2025-08-25T14:44:58Z DEBUG wasmtime_fuzzing::generators::config] creating wasmtime config with CLI options:
    -Ccompiler=cranelift -Ccollector=drc -Ccranelift-debug-verifier=n -Cparallel-compilation=n -Cpcc=n -Cnative-unwind-info=n -Cinlining=n -Ccranelift-wasmtime_inlining_intra_module=yes -Oopt-level=0 -Oregalloc-algorithm=backtracking -Oguard-before-linear-memory=n -Otable-lazy-init=n -Omemory-init-cow=n -Omemory-guaranteed-dense-image-size=16777216 -Osignals-based-traps=n -Wnan-canonicalization=n -Wepoch-interruption=n -Wasync-stack-zeroing=n -Wbulk-memory=y -Wmulti-memory=n -Wmulti-value=n -Wreference-types=y -Wsimd=n -Wrelaxed-simd=n -Wtail-call=n -Wthreads=n -Wshared-everything-threads=n -Wmemory64=n -Wcomponent-model-async=n -Wcomponent-model-async-builtins=n -Wcomponent-model-async-stackful=n -Wcomponent-model-error-context=n -Wcomponent-model-gc=n -Wfunction-references=y -Wgc=y -Wcustom-page-sizes=y -Wwide-arithmetic=n -Wextended-const=n -Wexceptions=y -Daddress-map=n
[2025-08-25T14:44:58Z DEBUG wasmtime_fuzzing::oracles] wrote wasm file to `testcase1.wasm`
[2025-08-25T14:44:58Z TRACE wasmtime_fuzzing::oracles] alloc 0x0 bytes
[2025-08-25T14:44:58Z TRACE wasmtime_fuzzing::oracles] alloc 0x10000 bytes
[2025-08-25T14:44:58Z TRACE wasmtime_fuzzing::oracles] alloc 0x8 bytes
[2025-08-25T14:44:58Z TRACE wasmtime_fuzzing::oracles] alloc 0x8 bytes
[2025-08-25T14:44:58Z TRACE wasmtime_fuzzing::oracles] alloc 0x8 bytes
[2025-08-25T14:44:58Z DEBUG wasmtime_fuzzing::generators::config] creating wasmtime config with CLI options:
    -Ccompiler=cranelift -Ccollector=drc -Ccranelift-debug-verifier=n -Cparallel-compilation=n -Cpcc=n -Cnative-unwind-info=n -Ccranelift-wasmtime_inlining_small_callee_size=1000 -Ccranelift-wasmtime_inlining_sum_size_threshold=1000 -Oopt-level=0 -Oregalloc-algorithm=backtracking -Oguard-before-linear-memory=n -Otable-lazy-init=n -Omemory-init-cow=n -Omemory-guaranteed-dense-image-size=16777216 -Osignals-based-traps=n -Wnan-canonicalization=n -Wepoch-interruption=n -Wasync-stack-zeroing=y -Wbulk-memory=y -Wmulti-memory=n -Wmulti-value=n -Wreference-types=y -Wsimd=n -Wrelaxed-simd=n -Wtail-call=n -Wthreads=n -Wshared-everything-threads=n -Wmemory64=n -Wcomponent-model-async=n -Wcomponent-model-async-builtins=n -Wcomponent-model-async-stackful=n -Wcomponent-model-error-context=n -Wcomponent-model-gc=n -Wfunction-references=y -Wgc=y -Wcustom-page-sizes=y -Wwide-arithmetic=n -Wextended-const=n -Wexceptions=y -Daddress-map=n
[2025-08-25T14:44:58Z TRACE wasmtime_fuzzing::oracles] alloc 0x0 bytes
[2025-08-25T14:44:58Z TRACE wasmtime_fuzzing::oracles] alloc 0x10000 bytes
[2025-08-25T14:44:58Z TRACE wasmtime_fuzzing::oracles] alloc 0x8 bytes
[2025-08-25T14:44:58Z TRACE wasmtime_fuzzing::oracles] alloc 0x8 bytes
[2025-08-25T14:44:58Z TRACE wasmtime_fuzzing::oracles] alloc 0x8 bytes
[2025-08-25T14:44:58Z DEBUG wasmtime_fuzzing::oracles] Evaluating: ` ` with [F32(0)]
[2025-08-25T14:44:58Z TRACE wasmtime_fuzzing::oracles] alloc 0xff210000 bytes
[2025-08-25T14:44:58Z DEBUG wasmtime_fuzzing::oracles] -> OOM hit

thread '<unnamed>' panicked at crates/wasmtime/src/runtime/types.rs:1407:19:
internal error: entered unreachable code: not a top type: Exn
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
==3025268== ERROR: libFuzzer: deadly signal
NOTE: libFuzzer has rudimentary signal handlers.
      Combine libFuzzer with AddressSanitizer or similar for better crash reports.
SUMMARY: libFuzzer: deadly signal
────────────────────────────────────────────────────────────────────────────────

Error: Fuzz target exited with exit status: 77

view this post on Zulip Wasmtime GitHub notifications bot (Aug 25 2025 at 19:10):

cfallin closed issue #11529:

clusterfuzz-testcase-minimized-misc-5465858848915456.txt

yields:

WARNING: Failed to find function "__sanitizer_acquire_crash_state".
WARNING: Failed to find function "__sanitizer_print_stack_trace".
WARNING: Failed to find function "__sanitizer_set_death_callback".
INFO: Running with entropic power schedule (0xFF, 100).
INFO: Seed: 1587332402
INFO: Loaded 1 modules   (1602067 inline 8-bit counters): 1602067 [0x614243d88170, 0x614243f0f383),
INFO: Loaded 1 PC tables (1602067 PCs): 1602067 [0x614243f0f388,0x6142457814b8),
target/x86_64-unknown-linux-gnu/debug/misc: Running 1 inputs 1 time(s) each.
Running: ./clusterfuzz-testcase-minimized-misc-5465858848915456
[2025-08-25T14:42:44Z DEBUG wasmtime_fuzzing::generators::module] writing `testcase0.dna` and `testcase0.json`
[2025-08-25T14:42:44Z TRACE wasmtime_fuzzing::oracles] creating store
[2025-08-25T14:42:44Z DEBUG wasmtime_fuzzing::generators::config] creating wasmtime config with CLI options:
    -Ccompiler=cranelift -Ccollector=drc -Ccranelift-debug-verifier=n -Cparallel-compilation=n -Cpcc=n -Cnative-unwind-info=n -Oopt-level=0 -Oregalloc-algorithm=backtracking -Oguard-before-linear-memory=n -Otable-lazy-init=n -Omemory-init-cow=n -Omemory-guaranteed-dense-image-size=16777216 -Osignals-based-traps=n -Wnan-canonicalization=y -Wepoch-interruption=n -Wasync-stack-zeroing=y -Wbulk-memory=y -Wmulti-memory=n -Wmulti-value=n -Wreference-types=y -Wsimd=y -Wtail-call=n -Wthreads=n -Wshared-everything-threads=n -Wmemory64=n -Wcomponent-model-async=n -Wcomponent-model-async-builtins=n -Wcomponent-model-async-stackful=n -Wcomponent-model-error-context=n -Wcomponent-model-gc=n -Wfunction-references=n -Wgc=n -Wcustom-page-sizes=n -Wwide-arithmetic=n -Wextended-const=n -Wexceptions=y -Daddress-map=n
[2025-08-25T14:42:44Z DEBUG wasmtime_fuzzing::oracles] creating module: 0
[2025-08-25T14:42:44Z DEBUG wasmtime_fuzzing::oracles] wrote wasm file to `testcase0.wasm`
[2025-08-25T14:42:44Z TRACE wasmtime_fuzzing::oracles] instantiating module 0 as 1

thread '<unnamed>' panicked at crates/wasmtime/src/runtime/values.rs:840:19:
internal error: entered unreachable code: not a heap type: Exn
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
==3025076== ERROR: libFuzzer: deadly signal
NOTE: libFuzzer has rudimentary signal handlers.
      Combine libFuzzer with AddressSanitizer or similar for better crash reports.
SUMMARY: libFuzzer: deadly signal
────────────────────────────────────────────────────────────────────────────────

Error: Fuzz target exited with exit status: 77

view this post on Zulip Wasmtime GitHub notifications bot (Aug 25 2025 at 19:12):

alexcrichton reopened issue #11529:

clusterfuzz-testcase-minimized-misc-5465858848915456.txt

yields:

WARNING: Failed to find function "__sanitizer_acquire_crash_state".
WARNING: Failed to find function "__sanitizer_print_stack_trace".
WARNING: Failed to find function "__sanitizer_set_death_callback".
INFO: Running with entropic power schedule (0xFF, 100).
INFO: Seed: 1587332402
INFO: Loaded 1 modules   (1602067 inline 8-bit counters): 1602067 [0x614243d88170, 0x614243f0f383),
INFO: Loaded 1 PC tables (1602067 PCs): 1602067 [0x614243f0f388,0x6142457814b8),
target/x86_64-unknown-linux-gnu/debug/misc: Running 1 inputs 1 time(s) each.
Running: ./clusterfuzz-testcase-minimized-misc-5465858848915456
[2025-08-25T14:42:44Z DEBUG wasmtime_fuzzing::generators::module] writing `testcase0.dna` and `testcase0.json`
[2025-08-25T14:42:44Z TRACE wasmtime_fuzzing::oracles] creating store
[2025-08-25T14:42:44Z DEBUG wasmtime_fuzzing::generators::config] creating wasmtime config with CLI options:
    -Ccompiler=cranelift -Ccollector=drc -Ccranelift-debug-verifier=n -Cparallel-compilation=n -Cpcc=n -Cnative-unwind-info=n -Oopt-level=0 -Oregalloc-algorithm=backtracking -Oguard-before-linear-memory=n -Otable-lazy-init=n -Omemory-init-cow=n -Omemory-guaranteed-dense-image-size=16777216 -Osignals-based-traps=n -Wnan-canonicalization=y -Wepoch-interruption=n -Wasync-stack-zeroing=y -Wbulk-memory=y -Wmulti-memory=n -Wmulti-value=n -Wreference-types=y -Wsimd=y -Wtail-call=n -Wthreads=n -Wshared-everything-threads=n -Wmemory64=n -Wcomponent-model-async=n -Wcomponent-model-async-builtins=n -Wcomponent-model-async-stackful=n -Wcomponent-model-error-context=n -Wcomponent-model-gc=n -Wfunction-references=n -Wgc=n -Wcustom-page-sizes=n -Wwide-arithmetic=n -Wextended-const=n -Wexceptions=y -Daddress-map=n
[2025-08-25T14:42:44Z DEBUG wasmtime_fuzzing::oracles] creating module: 0
[2025-08-25T14:42:44Z DEBUG wasmtime_fuzzing::oracles] wrote wasm file to `testcase0.wasm`
[2025-08-25T14:42:44Z TRACE wasmtime_fuzzing::oracles] instantiating module 0 as 1

thread '<unnamed>' panicked at crates/wasmtime/src/runtime/values.rs:840:19:
internal error: entered unreachable code: not a heap type: Exn
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
==3025076== ERROR: libFuzzer: deadly signal
NOTE: libFuzzer has rudimentary signal handlers.
      Combine libFuzzer with AddressSanitizer or similar for better crash reports.
SUMMARY: libFuzzer: deadly signal
────────────────────────────────────────────────────────────────────────────────

Error: Fuzz target exited with exit status: 77

view this post on Zulip Wasmtime GitHub notifications bot (Aug 25 2025 at 19:13):

alexcrichton commented on issue #11529:

@cfallin oh looks like the second panic here is a separate failure as the OP here passes on main but that comment doesn't

view this post on Zulip Wasmtime GitHub notifications bot (Aug 25 2025 at 19:35):

cfallin commented on issue #11529:

Ah, thanks! Fixed in separate PR.

view this post on Zulip Wasmtime GitHub notifications bot (Aug 25 2025 at 21:02):

alexcrichton closed issue #11529:

clusterfuzz-testcase-minimized-misc-5465858848915456.txt

yields:

WARNING: Failed to find function "__sanitizer_acquire_crash_state".
WARNING: Failed to find function "__sanitizer_print_stack_trace".
WARNING: Failed to find function "__sanitizer_set_death_callback".
INFO: Running with entropic power schedule (0xFF, 100).
INFO: Seed: 1587332402
INFO: Loaded 1 modules   (1602067 inline 8-bit counters): 1602067 [0x614243d88170, 0x614243f0f383),
INFO: Loaded 1 PC tables (1602067 PCs): 1602067 [0x614243f0f388,0x6142457814b8),
target/x86_64-unknown-linux-gnu/debug/misc: Running 1 inputs 1 time(s) each.
Running: ./clusterfuzz-testcase-minimized-misc-5465858848915456
[2025-08-25T14:42:44Z DEBUG wasmtime_fuzzing::generators::module] writing `testcase0.dna` and `testcase0.json`
[2025-08-25T14:42:44Z TRACE wasmtime_fuzzing::oracles] creating store
[2025-08-25T14:42:44Z DEBUG wasmtime_fuzzing::generators::config] creating wasmtime config with CLI options:
    -Ccompiler=cranelift -Ccollector=drc -Ccranelift-debug-verifier=n -Cparallel-compilation=n -Cpcc=n -Cnative-unwind-info=n -Oopt-level=0 -Oregalloc-algorithm=backtracking -Oguard-before-linear-memory=n -Otable-lazy-init=n -Omemory-init-cow=n -Omemory-guaranteed-dense-image-size=16777216 -Osignals-based-traps=n -Wnan-canonicalization=y -Wepoch-interruption=n -Wasync-stack-zeroing=y -Wbulk-memory=y -Wmulti-memory=n -Wmulti-value=n -Wreference-types=y -Wsimd=y -Wtail-call=n -Wthreads=n -Wshared-everything-threads=n -Wmemory64=n -Wcomponent-model-async=n -Wcomponent-model-async-builtins=n -Wcomponent-model-async-stackful=n -Wcomponent-model-error-context=n -Wcomponent-model-gc=n -Wfunction-references=n -Wgc=n -Wcustom-page-sizes=n -Wwide-arithmetic=n -Wextended-const=n -Wexceptions=y -Daddress-map=n
[2025-08-25T14:42:44Z DEBUG wasmtime_fuzzing::oracles] creating module: 0
[2025-08-25T14:42:44Z DEBUG wasmtime_fuzzing::oracles] wrote wasm file to `testcase0.wasm`
[2025-08-25T14:42:44Z TRACE wasmtime_fuzzing::oracles] instantiating module 0 as 1

thread '<unnamed>' panicked at crates/wasmtime/src/runtime/values.rs:840:19:
internal error: entered unreachable code: not a heap type: Exn
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
==3025076== ERROR: libFuzzer: deadly signal
NOTE: libFuzzer has rudimentary signal handlers.
      Combine libFuzzer with AddressSanitizer or similar for better crash reports.
SUMMARY: libFuzzer: deadly signal
────────────────────────────────────────────────────────────────────────────────

Error: Fuzz target exited with exit status: 77

Last updated: Dec 06 2025 at 06:05 UTC