Stream: git-wasmtime

Topic: wasmtime / issue #4807 instantiate fuzzbug: Using a sunk ...


view this post on Zulip Wasmtime GitHub notifications bot (Aug 29 2022 at 23:16):

elliottt opened issue #4807:

https://oss-fuzz.com/testcase-detail/5155715978756096

<details>
<summary>Stack trace</summary>

ERROR: AddressSanitizer: ABRT on unknown address 0x053900001862 (pc 0x7fdfc8c5818b bp 0x7fdfc46c4f70 sp 0x7fdfc46c4ce0 T2)
--
  | SCARINESS: 10 (signal)
  | #0 0x7fdfc8c5818b in raise /build/glibc-eX1tMB/glibc-2.31/sysdeps/unix/sysv/linux/raise.c:51:1
  | #1 0x7fdfc8c37858 in abort /build/glibc-eX1tMB/glibc-2.31/stdlib/abort.c:79:7
  | #2 0x555929a04786 in std::sys::unix::abort_internal::h9da1027ff38fb88e /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/sys/unix/mod.rs:293:14
  | #3 0x55592620b7a6 in std::process::abort::h035a89b8d6e3a675 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/process.rs:2119:5
  | #4 0x555929985323 in libfuzzer_sys::initialize::_$u7b$u7b$closure$u7d$u7d$::h8b17fedced5cb592 /rust/registry/src/github.com-1ecc6299db9ec823/libfuzzer-sys-0.4.3/src/lib.rs:57:9
  | #5 0x555929a00a2c in std::panicking::rust_panic_with_hook::hfaad0ec4972467c1 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/panicking.rs:702:17
  | #6 0x555929a00840 in std::panicking::begin_panic_handler::_$u7b$u7b$closure$u7d$u7d$::h401c5684148433ac /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/panicking.rs:586:13
  | #7 0x5559299fed0b in std::sys_common::backtrace::__rust_end_short_backtrace::h356ecf2a7ec67271 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/sys_common/backtrace.rs:138:18
  | #8 0x555929a005a1 in rust_begin_unwind /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/panicking.rs:584:5
  | #9 0x55592620cbd2 in core::panicking::panic_fmt::h9555dfef52eae25e /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/panicking.rs:142:14
  | #10 0x55592620ca9c in core::panicking::panic::hbe0e36c7510ee8e3 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/panicking.rs:48:5
  | #11 0x55592807f561 in cranelift_codegen::machinst::lower::Lower$LT$I$GT$::put_value_in_regs::h6b3579e35e883d9c wasmtime/cranelift/codegen/src/machinst/lower.rs:1240:13
  | #12 0x5559283edd19 in cranelift_codegen::isa::x64::lower::isle::_$LT$impl$u20$cranelift_codegen..isa..x64..lower..isle..generated_code..Context$u20$for$u20$cranelift_codegen..machinst..isle..IsleContext$LT$cranelift_codegen..isa..x64..lower..isle..generated_code..MInst$C$cranelift_codegen..settings..Flags$C$cranelift_codegen..isa..x64..settings..Flags$C$6_usize$GT$GT$::put_in_reg::hd61ac63687583354 wasmtime/cranelift/codegen/src/machinst/isle.rs:159:13
  | #13 0x5559283edd19 in cranelift_codegen::isa::x64::lower::isle::generated_code::constructor_put_in_xmm::h6c4f4018b33e9652 wasmtime/target/x86_64-unknown-linux-gnu/release/build/cranelift-codegen-2a8c5675489ecc10/out/isle_x64.rs:1692:19
  | #14 0x55592845bcb3 in cranelift_codegen::isa::x64::lower::isle::generated_code::constructor_lower::ha986ad5563068bae wasmtime/target/x86_64-unknown-linux-gnu/release/build/cranelift-codegen-2a8c5675489ecc10/out/isle_x64.rs:12145:35
  | #15 0x5559282623f4 in cranelift_codegen::isa::x64::lower::isle::lower::_$u7b$u7b$closure$u7d$u7d$::h8afc68d76ea1a20f wasmtime/cranelift/codegen/src/isa/x64/lower/isle.rs:70:20
  | #16 0x5559282623f4 in cranelift_codegen::machinst::isle::lower_common::h165dc6c0a12ed7de wasmtime/cranelift/codegen/src/machinst/isle.rs:1182:21
  | #17 0x5559282623f4 in cranelift_codegen::isa::x64::lower::isle::lower::h9fff8cc9b5841a88 wasmtime/cranelift/codegen/src/isa/x64/lower/isle.rs:63:5
  | #18 0x5559282623f4 in cranelift_codegen::isa::x64::lower::lower_insn_to_regs::h9f1f8496d381da1d wasmtime/cranelift/codegen/src/isa/x64/lower.rs:311:21
  | #19 0x5559282623f4 in cranelift_codegen::isa::x64::lower::_$LT$impl$u20$cranelift_codegen..machinst..lower..LowerBackend$u20$for$u20$cranelift_codegen..isa..x64..X64Backend$GT$::lower::h3d309519bc912dc1 wasmtime/cranelift/codegen/src/isa/x64/lower.rs:591:9
  | #20 0x55592805f516 in cranelift_codegen::machinst::lower::Lower$LT$I$GT$::lower_clif_block::ha56e3685599e43bd wasmtime/cranelift/codegen/src/machinst/lower.rs:709:17
  | #21 0x55592805f516 in cranelift_codegen::machinst::lower::Lower$LT$I$GT$::lower::h7350ae86d0fd50e1 wasmtime/cranelift/codegen/src/machinst/lower.rs:980:17
  | #22 0x5559280c650e in cranelift_codegen::machinst::compile::compile::h57386f910d23b37f wasmtime/cranelift/codegen/src/machinst/compile.rs:28:9
  | #23 0x55592827941e in cranelift_codegen::isa::x64::X64Backend::compile_vcode::h2d852a1048691c8e wasmtime/cranelift/codegen/src/isa/x64/mod.rs:57:9
  | #24 0x55592827941e in _$LT$cranelift_codegen..isa..x64..X64Backend$u20$as$u20$cranelift_codegen..isa..TargetIsa$GT$::compile_function::hf10cfe06fd2b0ac8 wasmtime/cranelift/codegen/src/isa/x64/mod.rs:68:40
  | #25 0x55592831d8d9 in cranelift_codegen::context::Context::compile_stencil::he0326b1016760743 wasmtime/cranelift/codegen/src/context.rs:173:9
  | #26 0x55592831ed0e in cranelift_codegen::context::Context::compile::h25272eb21d18139b wasmtime/cranelift/codegen/src/context.rs:185:23
  | #27 0x55592831b3f0 in cranelift_codegen::context::Context::compile_and_emit::he8d34c68051dff05 wasmtime/cranelift/codegen/src/context.rs:121:29
  | #28 0x555927cdec2d in wasmtime_cranelift::compiler::compile_maybe_cached::h73d02fb71840f254 wasmtime/crates/cranelift/src/compiler.rs:528:25
  | #29 0x555927cc73e3 in _$LT$wasmtime_cranelift..compiler..Compiler$u20$as$u20$wasmtime_environ..compilation..Compiler$GT$::compile_function::h43763e9daedb34dc wasmtime/crates/cranelift/src/compiler.rs:274:29
  | #30 0x5559276287bc in wasmtime::module::Module::compile_functions::_$u7b$u7b$closure$u7d$u7d$::_$u7b$u7b$closure$u7d$u7d$::hf4d1e9c131af2168 wasmtime/crates/wasmtime/src/module.rs:384:25
  | #31 0x55592748b1a8 in wasmtime::engine::Engine::run_maybe_parallel::_$u7b$u7b$closure$u7d$u7d$::h3ff6117233b5b7a2 wasmtime/crates/wasmtime/src/engine.rs:238:26
  | #32 0x55592748b1a8 in core::ops::function::impls::_$LT$impl$u20$core..ops..function..FnMut$LT$A$GT$u20$for$u20$RF$F$GT$::call_mut::h234195383ee97834 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/ops/function.rs:268:13
  | #33 0x55592748b1a8 in core::ops::function::impls::_$LT$impl$u20$core..ops..function..FnOnce$LT$A$GT$u20$for$u20$RF$mut$u20$F$GT$::call_once::heb9f5fd12b280de7 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/ops/function.rs:301:13
  | #34 0x55592748b1a8 in core::option::Option$LT$T$GT$::map::h2132c640bcd50657 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/option.rs:929:29
  | #35 0x55592748b1a8 in _$LT$core..iter..adapters..map..Map$LT$I$C$F$GT$u20$as$u20$core..iter..traits..iterator..Iterator$GT$::next::hab1d047f2ab420c1 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/iter/adapters/map.rs:103:9
  | #36 0x55592748b1a8 in _$LT$core..iter..adapters..map..Map$LT$I$C$F$GT$u20$as$u20$core..iter..traits..iterator..Iterator$GT$::next::hebfe90fd2cd9bc40 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/iter/adapters/map.rs:103:9
  | #37 0x55592748b1a8 in _$LT$core..iter..adapters..take_while..TakeWhile$LT$I$C$P$GT$u20$as$u20$core..iter..traits..iterator..Iterator$GT$::next::hdb9cb7501cc2cb63 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/iter/adapters/take_while.rs:46:21
  | #38 0x55592748b1a8 in _$LT$core..iter..adapters..map..Map$LT$I$C$F$GT$u20$as$u20$core..iter..traits..iterator..Iterator$GT$::next::h281d9ce5d7cb49d0 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/iter/adapters/map.rs:103:9
  | #39 0x55592754d217 in alloc::vec::Vec$LT$T$C$A$GT$::extend_desugared::hedcec18f2e14ebf1 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/alloc/src/vec/mod.rs:2749:35
  | #40 0x55592754d217 in _$LT$alloc..vec..Vec$LT$T$C$A$GT$u20$as$u20$alloc..vec..spec_extend..SpecExtend$LT$T$C$I$GT$GT$::spec_extend::ha2d095c164b5df95 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/alloc/src/vec/spec_extend.rs:18:9
  | #41 0x55592754d217 in _$LT$alloc..vec..Vec$LT$T$C$A$GT$u20$as$u20$core..iter..traits..collect..Extend$LT$T$GT$GT$::extend::h36d1ff927652ddc7 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/extend.rs:73:9
  | #42 0x55592754d217 in _$LT$rayon..iter..extend..ListVecFolder$LT$T$GT$u20$as$u20$rayon..iter..plumbing..Folder$LT$T$GT$GT$::consume_iter::h6dbbe8db5e965319 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/extend.rs:73:9
  | #43 0x55592754d217 in _$LT$rayon..iter..while_some..WhileSomeFolder$LT$C$GT$u20$as$u20$rayon..iter..plumbing..Folder$LT$core..option..Option$LT$T$GT$GT$GT$::consume_iter::h2524fc59f03f77c9 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/while_some.rs:139:21
  | #44 0x55592754d217 in _$LT$rayon..iter..map..MapFolder$LT$C$C$F$GT$u20$as$u20$rayon..iter..plumbing..Folder$LT$T$GT$GT$::consume_iter::ha3793527b33bc07b /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/map.rs:248:21
  | #45 0x55592754d217 in _$LT$rayon..iter..map..MapFolder$LT$C$C$F$GT$u20$as$u20$rayon..iter..plumbing..Folder$LT$T$GT$GT$::consume_iter::h016118e608ba7a8e /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/map.rs:248:21
  | #46 0x55592754d217 in rayon::iter::plumbing::Producer::fold_with::h6cdacd88d3a16912 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/plumbing/mod.rs:110:9
  | #47 0x55592754d217 in rayon::iter::plumbing::bridge_producer_consumer::helper::h36bc427b579d07e8 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/plumbing/mod.rs:438:13
  | #48 0x5559274ab547 in rayon::iter::plumbing::bridge_producer_consumer::helper::_$u7b$u7b$closure$u7d$u7d$::h4124d4e52d7357d7 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/plumbing/mod.rs:418:21
  | #49 0x5559274ab547 in rayon_c
[message truncated]

view this post on Zulip Wasmtime GitHub notifications bot (Aug 29 2022 at 23:16):

elliottt labeled issue #4807:

https://oss-fuzz.com/testcase-detail/5155715978756096

<details>
<summary>Stack trace</summary>

ERROR: AddressSanitizer: ABRT on unknown address 0x053900001862 (pc 0x7fdfc8c5818b bp 0x7fdfc46c4f70 sp 0x7fdfc46c4ce0 T2)
--
  | SCARINESS: 10 (signal)
  | #0 0x7fdfc8c5818b in raise /build/glibc-eX1tMB/glibc-2.31/sysdeps/unix/sysv/linux/raise.c:51:1
  | #1 0x7fdfc8c37858 in abort /build/glibc-eX1tMB/glibc-2.31/stdlib/abort.c:79:7
  | #2 0x555929a04786 in std::sys::unix::abort_internal::h9da1027ff38fb88e /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/sys/unix/mod.rs:293:14
  | #3 0x55592620b7a6 in std::process::abort::h035a89b8d6e3a675 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/process.rs:2119:5
  | #4 0x555929985323 in libfuzzer_sys::initialize::_$u7b$u7b$closure$u7d$u7d$::h8b17fedced5cb592 /rust/registry/src/github.com-1ecc6299db9ec823/libfuzzer-sys-0.4.3/src/lib.rs:57:9
  | #5 0x555929a00a2c in std::panicking::rust_panic_with_hook::hfaad0ec4972467c1 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/panicking.rs:702:17
  | #6 0x555929a00840 in std::panicking::begin_panic_handler::_$u7b$u7b$closure$u7d$u7d$::h401c5684148433ac /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/panicking.rs:586:13
  | #7 0x5559299fed0b in std::sys_common::backtrace::__rust_end_short_backtrace::h356ecf2a7ec67271 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/sys_common/backtrace.rs:138:18
  | #8 0x555929a005a1 in rust_begin_unwind /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/panicking.rs:584:5
  | #9 0x55592620cbd2 in core::panicking::panic_fmt::h9555dfef52eae25e /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/panicking.rs:142:14
  | #10 0x55592620ca9c in core::panicking::panic::hbe0e36c7510ee8e3 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/panicking.rs:48:5
  | #11 0x55592807f561 in cranelift_codegen::machinst::lower::Lower$LT$I$GT$::put_value_in_regs::h6b3579e35e883d9c wasmtime/cranelift/codegen/src/machinst/lower.rs:1240:13
  | #12 0x5559283edd19 in cranelift_codegen::isa::x64::lower::isle::_$LT$impl$u20$cranelift_codegen..isa..x64..lower..isle..generated_code..Context$u20$for$u20$cranelift_codegen..machinst..isle..IsleContext$LT$cranelift_codegen..isa..x64..lower..isle..generated_code..MInst$C$cranelift_codegen..settings..Flags$C$cranelift_codegen..isa..x64..settings..Flags$C$6_usize$GT$GT$::put_in_reg::hd61ac63687583354 wasmtime/cranelift/codegen/src/machinst/isle.rs:159:13
  | #13 0x5559283edd19 in cranelift_codegen::isa::x64::lower::isle::generated_code::constructor_put_in_xmm::h6c4f4018b33e9652 wasmtime/target/x86_64-unknown-linux-gnu/release/build/cranelift-codegen-2a8c5675489ecc10/out/isle_x64.rs:1692:19
  | #14 0x55592845bcb3 in cranelift_codegen::isa::x64::lower::isle::generated_code::constructor_lower::ha986ad5563068bae wasmtime/target/x86_64-unknown-linux-gnu/release/build/cranelift-codegen-2a8c5675489ecc10/out/isle_x64.rs:12145:35
  | #15 0x5559282623f4 in cranelift_codegen::isa::x64::lower::isle::lower::_$u7b$u7b$closure$u7d$u7d$::h8afc68d76ea1a20f wasmtime/cranelift/codegen/src/isa/x64/lower/isle.rs:70:20
  | #16 0x5559282623f4 in cranelift_codegen::machinst::isle::lower_common::h165dc6c0a12ed7de wasmtime/cranelift/codegen/src/machinst/isle.rs:1182:21
  | #17 0x5559282623f4 in cranelift_codegen::isa::x64::lower::isle::lower::h9fff8cc9b5841a88 wasmtime/cranelift/codegen/src/isa/x64/lower/isle.rs:63:5
  | #18 0x5559282623f4 in cranelift_codegen::isa::x64::lower::lower_insn_to_regs::h9f1f8496d381da1d wasmtime/cranelift/codegen/src/isa/x64/lower.rs:311:21
  | #19 0x5559282623f4 in cranelift_codegen::isa::x64::lower::_$LT$impl$u20$cranelift_codegen..machinst..lower..LowerBackend$u20$for$u20$cranelift_codegen..isa..x64..X64Backend$GT$::lower::h3d309519bc912dc1 wasmtime/cranelift/codegen/src/isa/x64/lower.rs:591:9
  | #20 0x55592805f516 in cranelift_codegen::machinst::lower::Lower$LT$I$GT$::lower_clif_block::ha56e3685599e43bd wasmtime/cranelift/codegen/src/machinst/lower.rs:709:17
  | #21 0x55592805f516 in cranelift_codegen::machinst::lower::Lower$LT$I$GT$::lower::h7350ae86d0fd50e1 wasmtime/cranelift/codegen/src/machinst/lower.rs:980:17
  | #22 0x5559280c650e in cranelift_codegen::machinst::compile::compile::h57386f910d23b37f wasmtime/cranelift/codegen/src/machinst/compile.rs:28:9
  | #23 0x55592827941e in cranelift_codegen::isa::x64::X64Backend::compile_vcode::h2d852a1048691c8e wasmtime/cranelift/codegen/src/isa/x64/mod.rs:57:9
  | #24 0x55592827941e in _$LT$cranelift_codegen..isa..x64..X64Backend$u20$as$u20$cranelift_codegen..isa..TargetIsa$GT$::compile_function::hf10cfe06fd2b0ac8 wasmtime/cranelift/codegen/src/isa/x64/mod.rs:68:40
  | #25 0x55592831d8d9 in cranelift_codegen::context::Context::compile_stencil::he0326b1016760743 wasmtime/cranelift/codegen/src/context.rs:173:9
  | #26 0x55592831ed0e in cranelift_codegen::context::Context::compile::h25272eb21d18139b wasmtime/cranelift/codegen/src/context.rs:185:23
  | #27 0x55592831b3f0 in cranelift_codegen::context::Context::compile_and_emit::he8d34c68051dff05 wasmtime/cranelift/codegen/src/context.rs:121:29
  | #28 0x555927cdec2d in wasmtime_cranelift::compiler::compile_maybe_cached::h73d02fb71840f254 wasmtime/crates/cranelift/src/compiler.rs:528:25
  | #29 0x555927cc73e3 in _$LT$wasmtime_cranelift..compiler..Compiler$u20$as$u20$wasmtime_environ..compilation..Compiler$GT$::compile_function::h43763e9daedb34dc wasmtime/crates/cranelift/src/compiler.rs:274:29
  | #30 0x5559276287bc in wasmtime::module::Module::compile_functions::_$u7b$u7b$closure$u7d$u7d$::_$u7b$u7b$closure$u7d$u7d$::hf4d1e9c131af2168 wasmtime/crates/wasmtime/src/module.rs:384:25
  | #31 0x55592748b1a8 in wasmtime::engine::Engine::run_maybe_parallel::_$u7b$u7b$closure$u7d$u7d$::h3ff6117233b5b7a2 wasmtime/crates/wasmtime/src/engine.rs:238:26
  | #32 0x55592748b1a8 in core::ops::function::impls::_$LT$impl$u20$core..ops..function..FnMut$LT$A$GT$u20$for$u20$RF$F$GT$::call_mut::h234195383ee97834 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/ops/function.rs:268:13
  | #33 0x55592748b1a8 in core::ops::function::impls::_$LT$impl$u20$core..ops..function..FnOnce$LT$A$GT$u20$for$u20$RF$mut$u20$F$GT$::call_once::heb9f5fd12b280de7 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/ops/function.rs:301:13
  | #34 0x55592748b1a8 in core::option::Option$LT$T$GT$::map::h2132c640bcd50657 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/option.rs:929:29
  | #35 0x55592748b1a8 in _$LT$core..iter..adapters..map..Map$LT$I$C$F$GT$u20$as$u20$core..iter..traits..iterator..Iterator$GT$::next::hab1d047f2ab420c1 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/iter/adapters/map.rs:103:9
  | #36 0x55592748b1a8 in _$LT$core..iter..adapters..map..Map$LT$I$C$F$GT$u20$as$u20$core..iter..traits..iterator..Iterator$GT$::next::hebfe90fd2cd9bc40 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/iter/adapters/map.rs:103:9
  | #37 0x55592748b1a8 in _$LT$core..iter..adapters..take_while..TakeWhile$LT$I$C$P$GT$u20$as$u20$core..iter..traits..iterator..Iterator$GT$::next::hdb9cb7501cc2cb63 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/iter/adapters/take_while.rs:46:21
  | #38 0x55592748b1a8 in _$LT$core..iter..adapters..map..Map$LT$I$C$F$GT$u20$as$u20$core..iter..traits..iterator..Iterator$GT$::next::h281d9ce5d7cb49d0 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/iter/adapters/map.rs:103:9
  | #39 0x55592754d217 in alloc::vec::Vec$LT$T$C$A$GT$::extend_desugared::hedcec18f2e14ebf1 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/alloc/src/vec/mod.rs:2749:35
  | #40 0x55592754d217 in _$LT$alloc..vec..Vec$LT$T$C$A$GT$u20$as$u20$alloc..vec..spec_extend..SpecExtend$LT$T$C$I$GT$GT$::spec_extend::ha2d095c164b5df95 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/alloc/src/vec/spec_extend.rs:18:9
  | #41 0x55592754d217 in _$LT$alloc..vec..Vec$LT$T$C$A$GT$u20$as$u20$core..iter..traits..collect..Extend$LT$T$GT$GT$::extend::h36d1ff927652ddc7 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/extend.rs:73:9
  | #42 0x55592754d217 in _$LT$rayon..iter..extend..ListVecFolder$LT$T$GT$u20$as$u20$rayon..iter..plumbing..Folder$LT$T$GT$GT$::consume_iter::h6dbbe8db5e965319 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/extend.rs:73:9
  | #43 0x55592754d217 in _$LT$rayon..iter..while_some..WhileSomeFolder$LT$C$GT$u20$as$u20$rayon..iter..plumbing..Folder$LT$core..option..Option$LT$T$GT$GT$GT$::consume_iter::h2524fc59f03f77c9 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/while_some.rs:139:21
  | #44 0x55592754d217 in _$LT$rayon..iter..map..MapFolder$LT$C$C$F$GT$u20$as$u20$rayon..iter..plumbing..Folder$LT$T$GT$GT$::consume_iter::ha3793527b33bc07b /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/map.rs:248:21
  | #45 0x55592754d217 in _$LT$rayon..iter..map..MapFolder$LT$C$C$F$GT$u20$as$u20$rayon..iter..plumbing..Folder$LT$T$GT$GT$::consume_iter::h016118e608ba7a8e /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/map.rs:248:21
  | #46 0x55592754d217 in rayon::iter::plumbing::Producer::fold_with::h6cdacd88d3a16912 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/plumbing/mod.rs:110:9
  | #47 0x55592754d217 in rayon::iter::plumbing::bridge_producer_consumer::helper::h36bc427b579d07e8 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/plumbing/mod.rs:438:13
  | #48 0x5559274ab547 in rayon::iter::plumbing::bridge_producer_consumer::helper::_$u7b$u7b$closure$u7d$u7d$::h4124d4e52d7357d7 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/plumbing/mod.rs:418:21
  | #49 0x5559274ab547 in rayon_
[message truncated]

view this post on Zulip Wasmtime GitHub notifications bot (Aug 29 2022 at 23:16):

elliottt labeled issue #4807:

https://oss-fuzz.com/testcase-detail/5155715978756096

<details>
<summary>Stack trace</summary>

ERROR: AddressSanitizer: ABRT on unknown address 0x053900001862 (pc 0x7fdfc8c5818b bp 0x7fdfc46c4f70 sp 0x7fdfc46c4ce0 T2)
--
  | SCARINESS: 10 (signal)
  | #0 0x7fdfc8c5818b in raise /build/glibc-eX1tMB/glibc-2.31/sysdeps/unix/sysv/linux/raise.c:51:1
  | #1 0x7fdfc8c37858 in abort /build/glibc-eX1tMB/glibc-2.31/stdlib/abort.c:79:7
  | #2 0x555929a04786 in std::sys::unix::abort_internal::h9da1027ff38fb88e /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/sys/unix/mod.rs:293:14
  | #3 0x55592620b7a6 in std::process::abort::h035a89b8d6e3a675 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/process.rs:2119:5
  | #4 0x555929985323 in libfuzzer_sys::initialize::_$u7b$u7b$closure$u7d$u7d$::h8b17fedced5cb592 /rust/registry/src/github.com-1ecc6299db9ec823/libfuzzer-sys-0.4.3/src/lib.rs:57:9
  | #5 0x555929a00a2c in std::panicking::rust_panic_with_hook::hfaad0ec4972467c1 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/panicking.rs:702:17
  | #6 0x555929a00840 in std::panicking::begin_panic_handler::_$u7b$u7b$closure$u7d$u7d$::h401c5684148433ac /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/panicking.rs:586:13
  | #7 0x5559299fed0b in std::sys_common::backtrace::__rust_end_short_backtrace::h356ecf2a7ec67271 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/sys_common/backtrace.rs:138:18
  | #8 0x555929a005a1 in rust_begin_unwind /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/panicking.rs:584:5
  | #9 0x55592620cbd2 in core::panicking::panic_fmt::h9555dfef52eae25e /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/panicking.rs:142:14
  | #10 0x55592620ca9c in core::panicking::panic::hbe0e36c7510ee8e3 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/panicking.rs:48:5
  | #11 0x55592807f561 in cranelift_codegen::machinst::lower::Lower$LT$I$GT$::put_value_in_regs::h6b3579e35e883d9c wasmtime/cranelift/codegen/src/machinst/lower.rs:1240:13
  | #12 0x5559283edd19 in cranelift_codegen::isa::x64::lower::isle::_$LT$impl$u20$cranelift_codegen..isa..x64..lower..isle..generated_code..Context$u20$for$u20$cranelift_codegen..machinst..isle..IsleContext$LT$cranelift_codegen..isa..x64..lower..isle..generated_code..MInst$C$cranelift_codegen..settings..Flags$C$cranelift_codegen..isa..x64..settings..Flags$C$6_usize$GT$GT$::put_in_reg::hd61ac63687583354 wasmtime/cranelift/codegen/src/machinst/isle.rs:159:13
  | #13 0x5559283edd19 in cranelift_codegen::isa::x64::lower::isle::generated_code::constructor_put_in_xmm::h6c4f4018b33e9652 wasmtime/target/x86_64-unknown-linux-gnu/release/build/cranelift-codegen-2a8c5675489ecc10/out/isle_x64.rs:1692:19
  | #14 0x55592845bcb3 in cranelift_codegen::isa::x64::lower::isle::generated_code::constructor_lower::ha986ad5563068bae wasmtime/target/x86_64-unknown-linux-gnu/release/build/cranelift-codegen-2a8c5675489ecc10/out/isle_x64.rs:12145:35
  | #15 0x5559282623f4 in cranelift_codegen::isa::x64::lower::isle::lower::_$u7b$u7b$closure$u7d$u7d$::h8afc68d76ea1a20f wasmtime/cranelift/codegen/src/isa/x64/lower/isle.rs:70:20
  | #16 0x5559282623f4 in cranelift_codegen::machinst::isle::lower_common::h165dc6c0a12ed7de wasmtime/cranelift/codegen/src/machinst/isle.rs:1182:21
  | #17 0x5559282623f4 in cranelift_codegen::isa::x64::lower::isle::lower::h9fff8cc9b5841a88 wasmtime/cranelift/codegen/src/isa/x64/lower/isle.rs:63:5
  | #18 0x5559282623f4 in cranelift_codegen::isa::x64::lower::lower_insn_to_regs::h9f1f8496d381da1d wasmtime/cranelift/codegen/src/isa/x64/lower.rs:311:21
  | #19 0x5559282623f4 in cranelift_codegen::isa::x64::lower::_$LT$impl$u20$cranelift_codegen..machinst..lower..LowerBackend$u20$for$u20$cranelift_codegen..isa..x64..X64Backend$GT$::lower::h3d309519bc912dc1 wasmtime/cranelift/codegen/src/isa/x64/lower.rs:591:9
  | #20 0x55592805f516 in cranelift_codegen::machinst::lower::Lower$LT$I$GT$::lower_clif_block::ha56e3685599e43bd wasmtime/cranelift/codegen/src/machinst/lower.rs:709:17
  | #21 0x55592805f516 in cranelift_codegen::machinst::lower::Lower$LT$I$GT$::lower::h7350ae86d0fd50e1 wasmtime/cranelift/codegen/src/machinst/lower.rs:980:17
  | #22 0x5559280c650e in cranelift_codegen::machinst::compile::compile::h57386f910d23b37f wasmtime/cranelift/codegen/src/machinst/compile.rs:28:9
  | #23 0x55592827941e in cranelift_codegen::isa::x64::X64Backend::compile_vcode::h2d852a1048691c8e wasmtime/cranelift/codegen/src/isa/x64/mod.rs:57:9
  | #24 0x55592827941e in _$LT$cranelift_codegen..isa..x64..X64Backend$u20$as$u20$cranelift_codegen..isa..TargetIsa$GT$::compile_function::hf10cfe06fd2b0ac8 wasmtime/cranelift/codegen/src/isa/x64/mod.rs:68:40
  | #25 0x55592831d8d9 in cranelift_codegen::context::Context::compile_stencil::he0326b1016760743 wasmtime/cranelift/codegen/src/context.rs:173:9
  | #26 0x55592831ed0e in cranelift_codegen::context::Context::compile::h25272eb21d18139b wasmtime/cranelift/codegen/src/context.rs:185:23
  | #27 0x55592831b3f0 in cranelift_codegen::context::Context::compile_and_emit::he8d34c68051dff05 wasmtime/cranelift/codegen/src/context.rs:121:29
  | #28 0x555927cdec2d in wasmtime_cranelift::compiler::compile_maybe_cached::h73d02fb71840f254 wasmtime/crates/cranelift/src/compiler.rs:528:25
  | #29 0x555927cc73e3 in _$LT$wasmtime_cranelift..compiler..Compiler$u20$as$u20$wasmtime_environ..compilation..Compiler$GT$::compile_function::h43763e9daedb34dc wasmtime/crates/cranelift/src/compiler.rs:274:29
  | #30 0x5559276287bc in wasmtime::module::Module::compile_functions::_$u7b$u7b$closure$u7d$u7d$::_$u7b$u7b$closure$u7d$u7d$::hf4d1e9c131af2168 wasmtime/crates/wasmtime/src/module.rs:384:25
  | #31 0x55592748b1a8 in wasmtime::engine::Engine::run_maybe_parallel::_$u7b$u7b$closure$u7d$u7d$::h3ff6117233b5b7a2 wasmtime/crates/wasmtime/src/engine.rs:238:26
  | #32 0x55592748b1a8 in core::ops::function::impls::_$LT$impl$u20$core..ops..function..FnMut$LT$A$GT$u20$for$u20$RF$F$GT$::call_mut::h234195383ee97834 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/ops/function.rs:268:13
  | #33 0x55592748b1a8 in core::ops::function::impls::_$LT$impl$u20$core..ops..function..FnOnce$LT$A$GT$u20$for$u20$RF$mut$u20$F$GT$::call_once::heb9f5fd12b280de7 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/ops/function.rs:301:13
  | #34 0x55592748b1a8 in core::option::Option$LT$T$GT$::map::h2132c640bcd50657 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/option.rs:929:29
  | #35 0x55592748b1a8 in _$LT$core..iter..adapters..map..Map$LT$I$C$F$GT$u20$as$u20$core..iter..traits..iterator..Iterator$GT$::next::hab1d047f2ab420c1 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/iter/adapters/map.rs:103:9
  | #36 0x55592748b1a8 in _$LT$core..iter..adapters..map..Map$LT$I$C$F$GT$u20$as$u20$core..iter..traits..iterator..Iterator$GT$::next::hebfe90fd2cd9bc40 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/iter/adapters/map.rs:103:9
  | #37 0x55592748b1a8 in _$LT$core..iter..adapters..take_while..TakeWhile$LT$I$C$P$GT$u20$as$u20$core..iter..traits..iterator..Iterator$GT$::next::hdb9cb7501cc2cb63 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/iter/adapters/take_while.rs:46:21
  | #38 0x55592748b1a8 in _$LT$core..iter..adapters..map..Map$LT$I$C$F$GT$u20$as$u20$core..iter..traits..iterator..Iterator$GT$::next::h281d9ce5d7cb49d0 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/iter/adapters/map.rs:103:9
  | #39 0x55592754d217 in alloc::vec::Vec$LT$T$C$A$GT$::extend_desugared::hedcec18f2e14ebf1 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/alloc/src/vec/mod.rs:2749:35
  | #40 0x55592754d217 in _$LT$alloc..vec..Vec$LT$T$C$A$GT$u20$as$u20$alloc..vec..spec_extend..SpecExtend$LT$T$C$I$GT$GT$::spec_extend::ha2d095c164b5df95 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/alloc/src/vec/spec_extend.rs:18:9
  | #41 0x55592754d217 in _$LT$alloc..vec..Vec$LT$T$C$A$GT$u20$as$u20$core..iter..traits..collect..Extend$LT$T$GT$GT$::extend::h36d1ff927652ddc7 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/extend.rs:73:9
  | #42 0x55592754d217 in _$LT$rayon..iter..extend..ListVecFolder$LT$T$GT$u20$as$u20$rayon..iter..plumbing..Folder$LT$T$GT$GT$::consume_iter::h6dbbe8db5e965319 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/extend.rs:73:9
  | #43 0x55592754d217 in _$LT$rayon..iter..while_some..WhileSomeFolder$LT$C$GT$u20$as$u20$rayon..iter..plumbing..Folder$LT$core..option..Option$LT$T$GT$GT$GT$::consume_iter::h2524fc59f03f77c9 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/while_some.rs:139:21
  | #44 0x55592754d217 in _$LT$rayon..iter..map..MapFolder$LT$C$C$F$GT$u20$as$u20$rayon..iter..plumbing..Folder$LT$T$GT$GT$::consume_iter::ha3793527b33bc07b /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/map.rs:248:21
  | #45 0x55592754d217 in _$LT$rayon..iter..map..MapFolder$LT$C$C$F$GT$u20$as$u20$rayon..iter..plumbing..Folder$LT$T$GT$GT$::consume_iter::h016118e608ba7a8e /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/map.rs:248:21
  | #46 0x55592754d217 in rayon::iter::plumbing::Producer::fold_with::h6cdacd88d3a16912 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/plumbing/mod.rs:110:9
  | #47 0x55592754d217 in rayon::iter::plumbing::bridge_producer_consumer::helper::h36bc427b579d07e8 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/plumbing/mod.rs:438:13
  | #48 0x5559274ab547 in rayon::iter::plumbing::bridge_producer_consumer::helper::_$u7b$u7b$closure$u7d$u7d$::h4124d4e52d7357d7 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/plumbing/mod.rs:418:21
  | #49 0x5559274ab547 in rayon_
[message truncated]

view this post on Zulip Wasmtime GitHub notifications bot (Aug 29 2022 at 23:29):

jameysharp labeled issue #4807:

https://oss-fuzz.com/testcase-detail/5155715978756096

<details>
<summary>Stack trace</summary>

ERROR: AddressSanitizer: ABRT on unknown address 0x053900001862 (pc 0x7fdfc8c5818b bp 0x7fdfc46c4f70 sp 0x7fdfc46c4ce0 T2)
--
  | SCARINESS: 10 (signal)
  | #0 0x7fdfc8c5818b in raise /build/glibc-eX1tMB/glibc-2.31/sysdeps/unix/sysv/linux/raise.c:51:1
  | #1 0x7fdfc8c37858 in abort /build/glibc-eX1tMB/glibc-2.31/stdlib/abort.c:79:7
  | #2 0x555929a04786 in std::sys::unix::abort_internal::h9da1027ff38fb88e /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/sys/unix/mod.rs:293:14
  | #3 0x55592620b7a6 in std::process::abort::h035a89b8d6e3a675 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/process.rs:2119:5
  | #4 0x555929985323 in libfuzzer_sys::initialize::_$u7b$u7b$closure$u7d$u7d$::h8b17fedced5cb592 /rust/registry/src/github.com-1ecc6299db9ec823/libfuzzer-sys-0.4.3/src/lib.rs:57:9
  | #5 0x555929a00a2c in std::panicking::rust_panic_with_hook::hfaad0ec4972467c1 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/panicking.rs:702:17
  | #6 0x555929a00840 in std::panicking::begin_panic_handler::_$u7b$u7b$closure$u7d$u7d$::h401c5684148433ac /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/panicking.rs:586:13
  | #7 0x5559299fed0b in std::sys_common::backtrace::__rust_end_short_backtrace::h356ecf2a7ec67271 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/sys_common/backtrace.rs:138:18
  | #8 0x555929a005a1 in rust_begin_unwind /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/panicking.rs:584:5
  | #9 0x55592620cbd2 in core::panicking::panic_fmt::h9555dfef52eae25e /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/panicking.rs:142:14
  | #10 0x55592620ca9c in core::panicking::panic::hbe0e36c7510ee8e3 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/panicking.rs:48:5
  | #11 0x55592807f561 in cranelift_codegen::machinst::lower::Lower$LT$I$GT$::put_value_in_regs::h6b3579e35e883d9c wasmtime/cranelift/codegen/src/machinst/lower.rs:1240:13
  | #12 0x5559283edd19 in cranelift_codegen::isa::x64::lower::isle::_$LT$impl$u20$cranelift_codegen..isa..x64..lower..isle..generated_code..Context$u20$for$u20$cranelift_codegen..machinst..isle..IsleContext$LT$cranelift_codegen..isa..x64..lower..isle..generated_code..MInst$C$cranelift_codegen..settings..Flags$C$cranelift_codegen..isa..x64..settings..Flags$C$6_usize$GT$GT$::put_in_reg::hd61ac63687583354 wasmtime/cranelift/codegen/src/machinst/isle.rs:159:13
  | #13 0x5559283edd19 in cranelift_codegen::isa::x64::lower::isle::generated_code::constructor_put_in_xmm::h6c4f4018b33e9652 wasmtime/target/x86_64-unknown-linux-gnu/release/build/cranelift-codegen-2a8c5675489ecc10/out/isle_x64.rs:1692:19
  | #14 0x55592845bcb3 in cranelift_codegen::isa::x64::lower::isle::generated_code::constructor_lower::ha986ad5563068bae wasmtime/target/x86_64-unknown-linux-gnu/release/build/cranelift-codegen-2a8c5675489ecc10/out/isle_x64.rs:12145:35
  | #15 0x5559282623f4 in cranelift_codegen::isa::x64::lower::isle::lower::_$u7b$u7b$closure$u7d$u7d$::h8afc68d76ea1a20f wasmtime/cranelift/codegen/src/isa/x64/lower/isle.rs:70:20
  | #16 0x5559282623f4 in cranelift_codegen::machinst::isle::lower_common::h165dc6c0a12ed7de wasmtime/cranelift/codegen/src/machinst/isle.rs:1182:21
  | #17 0x5559282623f4 in cranelift_codegen::isa::x64::lower::isle::lower::h9fff8cc9b5841a88 wasmtime/cranelift/codegen/src/isa/x64/lower/isle.rs:63:5
  | #18 0x5559282623f4 in cranelift_codegen::isa::x64::lower::lower_insn_to_regs::h9f1f8496d381da1d wasmtime/cranelift/codegen/src/isa/x64/lower.rs:311:21
  | #19 0x5559282623f4 in cranelift_codegen::isa::x64::lower::_$LT$impl$u20$cranelift_codegen..machinst..lower..LowerBackend$u20$for$u20$cranelift_codegen..isa..x64..X64Backend$GT$::lower::h3d309519bc912dc1 wasmtime/cranelift/codegen/src/isa/x64/lower.rs:591:9
  | #20 0x55592805f516 in cranelift_codegen::machinst::lower::Lower$LT$I$GT$::lower_clif_block::ha56e3685599e43bd wasmtime/cranelift/codegen/src/machinst/lower.rs:709:17
  | #21 0x55592805f516 in cranelift_codegen::machinst::lower::Lower$LT$I$GT$::lower::h7350ae86d0fd50e1 wasmtime/cranelift/codegen/src/machinst/lower.rs:980:17
  | #22 0x5559280c650e in cranelift_codegen::machinst::compile::compile::h57386f910d23b37f wasmtime/cranelift/codegen/src/machinst/compile.rs:28:9
  | #23 0x55592827941e in cranelift_codegen::isa::x64::X64Backend::compile_vcode::h2d852a1048691c8e wasmtime/cranelift/codegen/src/isa/x64/mod.rs:57:9
  | #24 0x55592827941e in _$LT$cranelift_codegen..isa..x64..X64Backend$u20$as$u20$cranelift_codegen..isa..TargetIsa$GT$::compile_function::hf10cfe06fd2b0ac8 wasmtime/cranelift/codegen/src/isa/x64/mod.rs:68:40
  | #25 0x55592831d8d9 in cranelift_codegen::context::Context::compile_stencil::he0326b1016760743 wasmtime/cranelift/codegen/src/context.rs:173:9
  | #26 0x55592831ed0e in cranelift_codegen::context::Context::compile::h25272eb21d18139b wasmtime/cranelift/codegen/src/context.rs:185:23
  | #27 0x55592831b3f0 in cranelift_codegen::context::Context::compile_and_emit::he8d34c68051dff05 wasmtime/cranelift/codegen/src/context.rs:121:29
  | #28 0x555927cdec2d in wasmtime_cranelift::compiler::compile_maybe_cached::h73d02fb71840f254 wasmtime/crates/cranelift/src/compiler.rs:528:25
  | #29 0x555927cc73e3 in _$LT$wasmtime_cranelift..compiler..Compiler$u20$as$u20$wasmtime_environ..compilation..Compiler$GT$::compile_function::h43763e9daedb34dc wasmtime/crates/cranelift/src/compiler.rs:274:29
  | #30 0x5559276287bc in wasmtime::module::Module::compile_functions::_$u7b$u7b$closure$u7d$u7d$::_$u7b$u7b$closure$u7d$u7d$::hf4d1e9c131af2168 wasmtime/crates/wasmtime/src/module.rs:384:25
  | #31 0x55592748b1a8 in wasmtime::engine::Engine::run_maybe_parallel::_$u7b$u7b$closure$u7d$u7d$::h3ff6117233b5b7a2 wasmtime/crates/wasmtime/src/engine.rs:238:26
  | #32 0x55592748b1a8 in core::ops::function::impls::_$LT$impl$u20$core..ops..function..FnMut$LT$A$GT$u20$for$u20$RF$F$GT$::call_mut::h234195383ee97834 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/ops/function.rs:268:13
  | #33 0x55592748b1a8 in core::ops::function::impls::_$LT$impl$u20$core..ops..function..FnOnce$LT$A$GT$u20$for$u20$RF$mut$u20$F$GT$::call_once::heb9f5fd12b280de7 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/ops/function.rs:301:13
  | #34 0x55592748b1a8 in core::option::Option$LT$T$GT$::map::h2132c640bcd50657 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/option.rs:929:29
  | #35 0x55592748b1a8 in _$LT$core..iter..adapters..map..Map$LT$I$C$F$GT$u20$as$u20$core..iter..traits..iterator..Iterator$GT$::next::hab1d047f2ab420c1 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/iter/adapters/map.rs:103:9
  | #36 0x55592748b1a8 in _$LT$core..iter..adapters..map..Map$LT$I$C$F$GT$u20$as$u20$core..iter..traits..iterator..Iterator$GT$::next::hebfe90fd2cd9bc40 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/iter/adapters/map.rs:103:9
  | #37 0x55592748b1a8 in _$LT$core..iter..adapters..take_while..TakeWhile$LT$I$C$P$GT$u20$as$u20$core..iter..traits..iterator..Iterator$GT$::next::hdb9cb7501cc2cb63 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/iter/adapters/take_while.rs:46:21
  | #38 0x55592748b1a8 in _$LT$core..iter..adapters..map..Map$LT$I$C$F$GT$u20$as$u20$core..iter..traits..iterator..Iterator$GT$::next::h281d9ce5d7cb49d0 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/iter/adapters/map.rs:103:9
  | #39 0x55592754d217 in alloc::vec::Vec$LT$T$C$A$GT$::extend_desugared::hedcec18f2e14ebf1 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/alloc/src/vec/mod.rs:2749:35
  | #40 0x55592754d217 in _$LT$alloc..vec..Vec$LT$T$C$A$GT$u20$as$u20$alloc..vec..spec_extend..SpecExtend$LT$T$C$I$GT$GT$::spec_extend::ha2d095c164b5df95 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/alloc/src/vec/spec_extend.rs:18:9
  | #41 0x55592754d217 in _$LT$alloc..vec..Vec$LT$T$C$A$GT$u20$as$u20$core..iter..traits..collect..Extend$LT$T$GT$GT$::extend::h36d1ff927652ddc7 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/extend.rs:73:9
  | #42 0x55592754d217 in _$LT$rayon..iter..extend..ListVecFolder$LT$T$GT$u20$as$u20$rayon..iter..plumbing..Folder$LT$T$GT$GT$::consume_iter::h6dbbe8db5e965319 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/extend.rs:73:9
  | #43 0x55592754d217 in _$LT$rayon..iter..while_some..WhileSomeFolder$LT$C$GT$u20$as$u20$rayon..iter..plumbing..Folder$LT$core..option..Option$LT$T$GT$GT$GT$::consume_iter::h2524fc59f03f77c9 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/while_some.rs:139:21
  | #44 0x55592754d217 in _$LT$rayon..iter..map..MapFolder$LT$C$C$F$GT$u20$as$u20$rayon..iter..plumbing..Folder$LT$T$GT$GT$::consume_iter::ha3793527b33bc07b /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/map.rs:248:21
  | #45 0x55592754d217 in _$LT$rayon..iter..map..MapFolder$LT$C$C$F$GT$u20$as$u20$rayon..iter..plumbing..Folder$LT$T$GT$GT$::consume_iter::h016118e608ba7a8e /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/map.rs:248:21
  | #46 0x55592754d217 in rayon::iter::plumbing::Producer::fold_with::h6cdacd88d3a16912 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/plumbing/mod.rs:110:9
  | #47 0x55592754d217 in rayon::iter::plumbing::bridge_producer_consumer::helper::h36bc427b579d07e8 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/plumbing/mod.rs:438:13
  | #48 0x5559274ab547 in rayon::iter::plumbing::bridge_producer_consumer::helper::_$u7b$u7b$closure$u7d$u7d$::h4124d4e52d7357d7 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/plumbing/mod.rs:418:21
  | #49 0x5559274ab547 in rayo
[message truncated]

view this post on Zulip Wasmtime GitHub notifications bot (Aug 30 2022 at 03:19):

alexcrichton commented on issue #4807:

Local bisection and wasm-tools shrink-ing points to #4787 with this input:

 (module
  (func (result i32)
    global.get 0
    v128.any_true
  )
  (global (;0;) (mut v128) v128.const i64x2 0 0)
)

reproduced as:

$ cargo run -q --features all-arch compile --target x86_64 ./foo.wat
thread '<unnamed>' panicked at 'assertion failed: !self.inst_sunk.contains(&inst)', cranelift/codegen/src/machinst/lower.rs:1240:13
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

view this post on Zulip Wasmtime GitHub notifications bot (Aug 30 2022 at 05:22):

cfallin closed issue #4807:

https://oss-fuzz.com/testcase-detail/5155715978756096

<details>
<summary>Stack trace</summary>

ERROR: AddressSanitizer: ABRT on unknown address 0x053900001862 (pc 0x7fdfc8c5818b bp 0x7fdfc46c4f70 sp 0x7fdfc46c4ce0 T2)
--
  | SCARINESS: 10 (signal)
  | #0 0x7fdfc8c5818b in raise /build/glibc-eX1tMB/glibc-2.31/sysdeps/unix/sysv/linux/raise.c:51:1
  | #1 0x7fdfc8c37858 in abort /build/glibc-eX1tMB/glibc-2.31/stdlib/abort.c:79:7
  | #2 0x555929a04786 in std::sys::unix::abort_internal::h9da1027ff38fb88e /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/sys/unix/mod.rs:293:14
  | #3 0x55592620b7a6 in std::process::abort::h035a89b8d6e3a675 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/process.rs:2119:5
  | #4 0x555929985323 in libfuzzer_sys::initialize::_$u7b$u7b$closure$u7d$u7d$::h8b17fedced5cb592 /rust/registry/src/github.com-1ecc6299db9ec823/libfuzzer-sys-0.4.3/src/lib.rs:57:9
  | #5 0x555929a00a2c in std::panicking::rust_panic_with_hook::hfaad0ec4972467c1 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/panicking.rs:702:17
  | #6 0x555929a00840 in std::panicking::begin_panic_handler::_$u7b$u7b$closure$u7d$u7d$::h401c5684148433ac /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/panicking.rs:586:13
  | #7 0x5559299fed0b in std::sys_common::backtrace::__rust_end_short_backtrace::h356ecf2a7ec67271 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/sys_common/backtrace.rs:138:18
  | #8 0x555929a005a1 in rust_begin_unwind /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/std/src/panicking.rs:584:5
  | #9 0x55592620cbd2 in core::panicking::panic_fmt::h9555dfef52eae25e /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/panicking.rs:142:14
  | #10 0x55592620ca9c in core::panicking::panic::hbe0e36c7510ee8e3 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/panicking.rs:48:5
  | #11 0x55592807f561 in cranelift_codegen::machinst::lower::Lower$LT$I$GT$::put_value_in_regs::h6b3579e35e883d9c wasmtime/cranelift/codegen/src/machinst/lower.rs:1240:13
  | #12 0x5559283edd19 in cranelift_codegen::isa::x64::lower::isle::_$LT$impl$u20$cranelift_codegen..isa..x64..lower..isle..generated_code..Context$u20$for$u20$cranelift_codegen..machinst..isle..IsleContext$LT$cranelift_codegen..isa..x64..lower..isle..generated_code..MInst$C$cranelift_codegen..settings..Flags$C$cranelift_codegen..isa..x64..settings..Flags$C$6_usize$GT$GT$::put_in_reg::hd61ac63687583354 wasmtime/cranelift/codegen/src/machinst/isle.rs:159:13
  | #13 0x5559283edd19 in cranelift_codegen::isa::x64::lower::isle::generated_code::constructor_put_in_xmm::h6c4f4018b33e9652 wasmtime/target/x86_64-unknown-linux-gnu/release/build/cranelift-codegen-2a8c5675489ecc10/out/isle_x64.rs:1692:19
  | #14 0x55592845bcb3 in cranelift_codegen::isa::x64::lower::isle::generated_code::constructor_lower::ha986ad5563068bae wasmtime/target/x86_64-unknown-linux-gnu/release/build/cranelift-codegen-2a8c5675489ecc10/out/isle_x64.rs:12145:35
  | #15 0x5559282623f4 in cranelift_codegen::isa::x64::lower::isle::lower::_$u7b$u7b$closure$u7d$u7d$::h8afc68d76ea1a20f wasmtime/cranelift/codegen/src/isa/x64/lower/isle.rs:70:20
  | #16 0x5559282623f4 in cranelift_codegen::machinst::isle::lower_common::h165dc6c0a12ed7de wasmtime/cranelift/codegen/src/machinst/isle.rs:1182:21
  | #17 0x5559282623f4 in cranelift_codegen::isa::x64::lower::isle::lower::h9fff8cc9b5841a88 wasmtime/cranelift/codegen/src/isa/x64/lower/isle.rs:63:5
  | #18 0x5559282623f4 in cranelift_codegen::isa::x64::lower::lower_insn_to_regs::h9f1f8496d381da1d wasmtime/cranelift/codegen/src/isa/x64/lower.rs:311:21
  | #19 0x5559282623f4 in cranelift_codegen::isa::x64::lower::_$LT$impl$u20$cranelift_codegen..machinst..lower..LowerBackend$u20$for$u20$cranelift_codegen..isa..x64..X64Backend$GT$::lower::h3d309519bc912dc1 wasmtime/cranelift/codegen/src/isa/x64/lower.rs:591:9
  | #20 0x55592805f516 in cranelift_codegen::machinst::lower::Lower$LT$I$GT$::lower_clif_block::ha56e3685599e43bd wasmtime/cranelift/codegen/src/machinst/lower.rs:709:17
  | #21 0x55592805f516 in cranelift_codegen::machinst::lower::Lower$LT$I$GT$::lower::h7350ae86d0fd50e1 wasmtime/cranelift/codegen/src/machinst/lower.rs:980:17
  | #22 0x5559280c650e in cranelift_codegen::machinst::compile::compile::h57386f910d23b37f wasmtime/cranelift/codegen/src/machinst/compile.rs:28:9
  | #23 0x55592827941e in cranelift_codegen::isa::x64::X64Backend::compile_vcode::h2d852a1048691c8e wasmtime/cranelift/codegen/src/isa/x64/mod.rs:57:9
  | #24 0x55592827941e in _$LT$cranelift_codegen..isa..x64..X64Backend$u20$as$u20$cranelift_codegen..isa..TargetIsa$GT$::compile_function::hf10cfe06fd2b0ac8 wasmtime/cranelift/codegen/src/isa/x64/mod.rs:68:40
  | #25 0x55592831d8d9 in cranelift_codegen::context::Context::compile_stencil::he0326b1016760743 wasmtime/cranelift/codegen/src/context.rs:173:9
  | #26 0x55592831ed0e in cranelift_codegen::context::Context::compile::h25272eb21d18139b wasmtime/cranelift/codegen/src/context.rs:185:23
  | #27 0x55592831b3f0 in cranelift_codegen::context::Context::compile_and_emit::he8d34c68051dff05 wasmtime/cranelift/codegen/src/context.rs:121:29
  | #28 0x555927cdec2d in wasmtime_cranelift::compiler::compile_maybe_cached::h73d02fb71840f254 wasmtime/crates/cranelift/src/compiler.rs:528:25
  | #29 0x555927cc73e3 in _$LT$wasmtime_cranelift..compiler..Compiler$u20$as$u20$wasmtime_environ..compilation..Compiler$GT$::compile_function::h43763e9daedb34dc wasmtime/crates/cranelift/src/compiler.rs:274:29
  | #30 0x5559276287bc in wasmtime::module::Module::compile_functions::_$u7b$u7b$closure$u7d$u7d$::_$u7b$u7b$closure$u7d$u7d$::hf4d1e9c131af2168 wasmtime/crates/wasmtime/src/module.rs:384:25
  | #31 0x55592748b1a8 in wasmtime::engine::Engine::run_maybe_parallel::_$u7b$u7b$closure$u7d$u7d$::h3ff6117233b5b7a2 wasmtime/crates/wasmtime/src/engine.rs:238:26
  | #32 0x55592748b1a8 in core::ops::function::impls::_$LT$impl$u20$core..ops..function..FnMut$LT$A$GT$u20$for$u20$RF$F$GT$::call_mut::h234195383ee97834 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/ops/function.rs:268:13
  | #33 0x55592748b1a8 in core::ops::function::impls::_$LT$impl$u20$core..ops..function..FnOnce$LT$A$GT$u20$for$u20$RF$mut$u20$F$GT$::call_once::heb9f5fd12b280de7 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/ops/function.rs:301:13
  | #34 0x55592748b1a8 in core::option::Option$LT$T$GT$::map::h2132c640bcd50657 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/option.rs:929:29
  | #35 0x55592748b1a8 in _$LT$core..iter..adapters..map..Map$LT$I$C$F$GT$u20$as$u20$core..iter..traits..iterator..Iterator$GT$::next::hab1d047f2ab420c1 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/iter/adapters/map.rs:103:9
  | #36 0x55592748b1a8 in _$LT$core..iter..adapters..map..Map$LT$I$C$F$GT$u20$as$u20$core..iter..traits..iterator..Iterator$GT$::next::hebfe90fd2cd9bc40 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/iter/adapters/map.rs:103:9
  | #37 0x55592748b1a8 in _$LT$core..iter..adapters..take_while..TakeWhile$LT$I$C$P$GT$u20$as$u20$core..iter..traits..iterator..Iterator$GT$::next::hdb9cb7501cc2cb63 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/iter/adapters/take_while.rs:46:21
  | #38 0x55592748b1a8 in _$LT$core..iter..adapters..map..Map$LT$I$C$F$GT$u20$as$u20$core..iter..traits..iterator..Iterator$GT$::next::h281d9ce5d7cb49d0 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/core/src/iter/adapters/map.rs:103:9
  | #39 0x55592754d217 in alloc::vec::Vec$LT$T$C$A$GT$::extend_desugared::hedcec18f2e14ebf1 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/alloc/src/vec/mod.rs:2749:35
  | #40 0x55592754d217 in _$LT$alloc..vec..Vec$LT$T$C$A$GT$u20$as$u20$alloc..vec..spec_extend..SpecExtend$LT$T$C$I$GT$GT$::spec_extend::ha2d095c164b5df95 /rustc/060e47f74a91b28c3db28d80a6a9d6841ca51026/library/alloc/src/vec/spec_extend.rs:18:9
  | #41 0x55592754d217 in _$LT$alloc..vec..Vec$LT$T$C$A$GT$u20$as$u20$core..iter..traits..collect..Extend$LT$T$GT$GT$::extend::h36d1ff927652ddc7 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/extend.rs:73:9
  | #42 0x55592754d217 in _$LT$rayon..iter..extend..ListVecFolder$LT$T$GT$u20$as$u20$rayon..iter..plumbing..Folder$LT$T$GT$GT$::consume_iter::h6dbbe8db5e965319 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/extend.rs:73:9
  | #43 0x55592754d217 in _$LT$rayon..iter..while_some..WhileSomeFolder$LT$C$GT$u20$as$u20$rayon..iter..plumbing..Folder$LT$core..option..Option$LT$T$GT$GT$GT$::consume_iter::h2524fc59f03f77c9 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/while_some.rs:139:21
  | #44 0x55592754d217 in _$LT$rayon..iter..map..MapFolder$LT$C$C$F$GT$u20$as$u20$rayon..iter..plumbing..Folder$LT$T$GT$GT$::consume_iter::ha3793527b33bc07b /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/map.rs:248:21
  | #45 0x55592754d217 in _$LT$rayon..iter..map..MapFolder$LT$C$C$F$GT$u20$as$u20$rayon..iter..plumbing..Folder$LT$T$GT$GT$::consume_iter::h016118e608ba7a8e /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/map.rs:248:21
  | #46 0x55592754d217 in rayon::iter::plumbing::Producer::fold_with::h6cdacd88d3a16912 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/plumbing/mod.rs:110:9
  | #47 0x55592754d217 in rayon::iter::plumbing::bridge_producer_consumer::helper::h36bc427b579d07e8 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/plumbing/mod.rs:438:13
  | #48 0x5559274ab547 in rayon::iter::plumbing::bridge_producer_consumer::helper::_$u7b$u7b$closure$u7d$u7d$::h4124d4e52d7357d7 /rust/registry/src/github.com-1ecc6299db9ec823/rayon-1.5.2/src/iter/plumbing/mod.rs:418:21
  | #49 0x5559274ab547 in rayon_co
[message truncated]


Last updated: Dec 23 2024 at 12:05 UTC