An osu developer found that Windows 27881.1000's libc says that pow(-1, 2) = -1. Poking around in bindiff reveals they tried to add an optimization that skips the main approximation when the base or exponent is 1, but screwed up. Woops!
PP counter overflowing to NaNs during play · Issue #33948 · ppy/osu

Type Game behaviour Bug description Since a few days ago, PP counter in osu! lazer is almost guaranteed to overflow, out of nowhere. What makes this more weird is that I don't recall receiving any ...

GitHub