divide error in do_journal_end

Status: upstream: reported C repro on 2023/07/08 18:42
Bug presence: origin:upstream
Labels: missing-backport
[Documentation on labels]
Reported-by: syzbot+8b4def6a27716cebedb3@syzkaller.appspotmail.com
First crash: 1168d, last: 2d00h
Fix commit to backport (bisect log) :
tree: upstream
commit fb6f20ecb121cef4d7946f834a6ee867c4e21b4a
Author: Jan Kara <jack@suse.cz>
Date: Thu Oct 17 10:28:23 2024 +0000

  reiserfs: The last commit

  
Fix bisection: the issue occurs on the latest tested release (bisect log)
Crash: divide error in do_journal_end (log)
Repro: C syz .config
  
▶ ▼ Bug presence (3)
Date Name Commit Repro Result
2024/12/04 linux-5.15.y (ToT) 0a51d2d4527b C [report] divide error in do_journal_end
2023/07/10 upstream (ToT) 06c2afb862f9 C [report] divide error in do_journal_end
2024/12/04 upstream (ToT) feffde684ac2 C Didn't crash
▶ ▼ Similar bugs (10)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream divide error in do_journal_end fs 2 2 2129d 2156d 0/29 auto-closed as invalid on 2021/03/19 22:00
linux-4.14 divide error in do_journal_end (2) 2 syz, C error 1 1481d 1969d 0/1 upstream: reported C repro on 2021/04/28 16:52
upstream divide error in do_journal_end (3) fs 2 syz, C error done 83 986d 1366d 0/29 auto-obsoleted due to no activity on 2024/04/14 06:39
upstream divide error in do_journal_end (2) erofs 2 syz, C inconclusive 2 1956d 1956d 20/29 fixed on 2021/11/10 00:50
linux-6.6 divide error in do_journal_end origin:lts-only 2 syz, C inconclusive 9 116d 366d 0/2 upstream: reported C repro on 2025/09/17 14:39
linux-4.19 divide error in do_journal_end (3) reiserfs 2 syz, C error 1 1331d 1331d 0/1 upstream: reported C repro on 2023/01/27 02:59
linux-4.19 divide error in do_journal_end (2) 2 syz, C done 4 1895d 2006d 1/1 fixed on 2021/08/12 11:53
linux-6.1 divide error in do_journal_end origin:upstream missing-backport 2 syz, C done 133 104d 994d 0/3 upstream: reported C repro on 2023/12/30 01:46
linux-4.14 divide error in do_journal_end 2 syz, C done 1 2079d 2139d 1/1 fixed on 2021/02/21 17:18
linux-4.19 divide error in do_journal_end 2 syz, C done 2 2091d 2151d 1/1 fixed on 2021/01/27 05:38
▶ ▼ Last patch testing requests (10)
Created Duration User Patch Repo Result
2026/09/17 09:24 48m retest repro linux-5.15.y report job log log
2026/09/17 09:24 19m retest repro linux-5.15.y report job log log
2026/09/17 09:24 20m retest repro linux-5.15.y report job log log
2026/09/17 09:24 12m retest repro linux-5.15.y report job log log
2026/09/17 09:24 14m retest repro linux-5.15.y report job log log
2026/08/11 00:34 0m retest repro linux-5.15.y error
2026/08/11 00:34 0m retest repro linux-5.15.y error
2026/08/11 00:34 0m retest repro linux-5.15.y error
2026/08/11 00:34 0m retest repro linux-5.15.y error
2026/08/11 00:34 0m retest repro linux-5.15.y error
▶ ▼ Fix bisection attempts (8)
Created Duration User Patch Repo Result
2025/04/01 03:07 8h16m fix candidate upstream OK (1) job log
2024/09/13 12:11 1h00m bisect fix linux-5.15.y OK (0) job log log
2024/03/12 04:15 50m bisect fix linux-5.15.y OK (0) job log log
2024/02/03 14:05 1h18m (2) bisect fix linux-5.15.y OK (0) job log log
2023/12/25 15:11 1h00m bisect fix linux-5.15.y OK (0) job log log
2023/11/24 23:23 56m bisect fix linux-5.15.y OK (0) job log log
2023/10/22 22:25 1h05m bisect fix linux-5.15.y OK (0) job log log
2023/09/21 16:44 56m bisect fix linux-5.15.y OK (0) job log log

Sample crash report:
REISERFS warning: reiserfs-5090 is_tree_node: node level 0 does not match to the expected one -1
REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 0. Fsck?
REISERFS (device loop0): Remounting filesystem read-only
divide error: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 4305 Comm: syz-executor Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RIP: 0010:do_journal_end+0x11d9/0x4340 fs/reiserfs/journal.c:4091
Code: df 0f b6 04 28 84 c0 0f 85 a0 2c 00 00 49 8d 44 1d 01 4c 89 f1 48 c1 e9 03 0f b6 0c 29 84 c9 0f 85 a8 2c 00 00 41 8b 0f 31 d2 <48> f7 f1 49 89 d6 4d 01 e6 48 8b 44 24 70 80 3c 28 00 4c 8b 6c 24
RSP: 0018:ffffc90002fbf888 EFLAGS: 00010246
RAX: 0000000000000003 RBX: 0000000000000002 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807d1eb000
RBP: dffffc0000000000 R08: ffff88807d1eafff R09: ffff88807d1ea000
R10: dffffc0000000000 R11: ffffed100fa3d600 R12: 0000000000000000
R13: 0000000000000000 R14: ffff8880695ac017 R15: ffff8880695ac014
FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fff78cdccb0 CR3: 000000000c08e000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 do_journal_release+0x495/0x4f0 fs/reiserfs/journal.c:1937
 journal_release+0x1b/0x30 fs/reiserfs/journal.c:1968
 reiserfs_put_super+0x264/0x500 fs/reiserfs/super.c:616
 generic_shutdown_super+0x130/0x300 fs/super.c:475
 kill_block_super+0x7c/0xe0 fs/super.c:1427
 deactivate_locked_super+0x93/0xf0 fs/super.c:335
 cleanup_mnt+0x426/0x4d0 fs/namespace.c:1148
 task_work_run+0x125/0x1a0 kernel/task_work.c:188
 exit_task_work include/linux/task_work.h:33 [inline]
 do_exit+0x635/0x2110 kernel/exit.c:890
 do_group_exit+0x12c/0x2f0 kernel/exit.c:1004
 __do_sys_exit_group kernel/exit.c:1015 [inline]
 __se_sys_exit_group kernel/exit.c:1013 [inline]
 __x64_sys_exit_group+0x3b/0x40 kernel/exit.c:1013
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fe4acea00d9
Code: Unable to access opcode bytes at RIP 0x7fe4acea00af.
RSP: 002b:00007fff78cdd278 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007fe4acf364e6 RCX: 00007fe4acea00d9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
RBP: 0000000000000010 R08: 0000000000000000 R09: 00007fe4acf36474
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff78cde530
R13: 00007fe4acf36474 R14: 000055555d3804e8 R15: 00007fff78cdf600
 </TASK>
Modules linked in:
---[ end trace 68369262f8aac10e ]---
RIP: 0010:do_journal_end+0x11d9/0x4340 fs/reiserfs/journal.c:4091
Code: df 0f b6 04 28 84 c0 0f 85 a0 2c 00 00 49 8d 44 1d 01 4c 89 f1 48 c1 e9 03 0f b6 0c 29 84 c9 0f 85 a8 2c 00 00 41 8b 0f 31 d2 <48> f7 f1 49 89 d6 4d 01 e6 48 8b 44 24 70 80 3c 28 00 4c 8b 6c 24
RSP: 0018:ffffc90002fbf888 EFLAGS: 00010246
RAX: 0000000000000003 RBX: 0000000000000002 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807d1eb000
RBP: dffffc0000000000 R08: ffff88807d1eafff R09: ffff88807d1ea000
R10: dffffc0000000000 R11: ffffed100fa3d600 R12: 0000000000000000
R13: 0000000000000000 R14: ffff8880695ac017 R15: ffff8880695ac014
FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055555d3a3a78 CR3: 000000002b273000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	df 0f                	fisttps (%rdi)
   2:	b6 04                	mov    $0x4,%dh
   4:	28 84 c0 0f 85 a0 2c 	sub    %al,0x2ca0850f(%rax,%rax,8)
   b:	00 00                	add    %al,(%rax)
   d:	49 8d 44 1d 01       	lea    0x1(%r13,%rbx,1),%rax
  12:	4c 89 f1             	mov    %r14,%rcx
  15:	48 c1 e9 03          	shr    $0x3,%rcx
  19:	0f b6 0c 29          	movzbl (%rcx,%rbp,1),%ecx
  1d:	84 c9                	test   %cl,%cl
  1f:	0f 85 a8 2c 00 00    	jne    0x2ccd
  25:	41 8b 0f             	mov    (%r15),%ecx
  28:	31 d2                	xor    %edx,%edx
* 2a:	48 f7 f1             	div    %rcx <-- trapping instruction
  2d:	49 89 d6             	mov    %rdx,%r14
  30:	4d 01 e6             	add    %r12,%r14
  33:	48 8b 44 24 70       	mov    0x70(%rsp),%rax
  38:	80 3c 28 00          	cmpb   $0x0,(%rax,%rbp,1)
  3c:	4c                   	rex.WR
  3d:	8b                   	.byte 0x8b
  3e:	6c                   	insb   (%dx),%es:(%rdi)
  3f:	24                   	.byte 0x24

Crashes (486):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/19 13:57 linux-5.15.y aabd761612db 1e72964b .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-5-15-kasan divide error in do_journal_end
2026/08/19 11:45 linux-5.15.y aabd761612db 1e72964b .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-5-15-kasan divide error in do_journal_end
2026/08/19 09:29 linux-5.15.y aabd761612db 1e72964b .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-5-15-kasan divide error in do_journal_end
2026/03/06 10:32 linux-5.15.y 91d48252ad4b 31e9c887 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-5-15-kasan divide error in do_journal_end
2025/12/22 11:24 linux-5.15.y 68efe5a6c16a d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-5-15-kasan divide error in do_journal_end
2025/11/27 11:36 linux-5.15.y cc5ec8769306 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/09 23:51 linux-5.15.y 3dea0e7f549e f4e5e155 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/07 15:24 linux-5.15.y 3dea0e7f549e 4f67c4ae .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-5-15-kasan divide error in do_journal_end
2025/05/28 11:23 linux-5.15.y 98f47d0e9b8c 874a1386 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-5-15-kasan divide error in do_journal_end
2024/12/08 17:58 linux-5.15.y 0a51d2d4527b 9ac0fdc6 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/21 20:20 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2024/04/25 10:06 linux-5.15.y c52b9710c83d 8bdc0f22 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2024/04/19 17:40 linux-5.15.y c52b9710c83d af24b050 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2023/12/31 01:49 linux-5.15.y d93fa2c78854 fb427a07 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2023/07/08 18:42 linux-5.15.y d54cfc420586 668cb1fa .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro #1] [mounted in repro #2] ci2-linux-5-15-kasan divide error in do_journal_end
2026/08/31 22:35 linux-5.15.y 28c35638ec51 316d9396 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2026/08/19 06:59 linux-5.15.y aabd761612db 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2026/08/19 06:59 linux-5.15.y aabd761612db 1e72964b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2026/06/04 22:45 linux-5.15.y dc027a595035 197909be .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2026/05/26 13:00 linux-5.15.y 241d66fa280c a3e47276 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2026/05/26 04:41 linux-5.15.y 241d66fa280c c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2026/05/26 04:15 linux-5.15.y 241d66fa280c c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2026/05/26 04:06 linux-5.15.y 241d66fa280c c69befb3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2026/05/21 01:26 linux-5.15.y 93741761e5e3 41b8c833 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/12/31 15:32 linux-5.15.y 68efe5a6c16a d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/11/05 15:11 linux-5.15.y cc5ec8769306 a6c9c731 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/11/02 07:10 linux-5.15.y cc5ec8769306 2c50b6a9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/09/28 19:18 linux-5.15.y 43bb85222e53 001c9061 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/09/22 04:30 linux-5.15.y 43bb85222e53 67c37560 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/09/18 12:09 linux-5.15.y 43bb85222e53 e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/09/18 09:29 linux-5.15.y 43bb85222e53 e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/09/15 21:25 linux-5.15.y 43bb85222e53 e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/09/02 07:19 linux-5.15.y 01879f56bdde 807a3b61 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/08/28 23:26 linux-5.15.y 01879f56bdde d401b9d7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/08/22 10:26 linux-5.15.y c79648372d02 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/08/17 18:04 linux-5.15.y c79648372d02 1804e95e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/17 02:18 linux-5.15.y 89950c454265 44f8051e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/16 11:58 linux-5.15.y 89950c454265 124ec9cc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/15 08:26 linux-5.15.y 89950c454265 03fcfc4b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/14 21:37 linux-5.15.y 89950c454265 d8fc7335 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/14 05:42 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/14 00:23 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/13 15:50 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/13 06:20 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/12 12:53 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/12 05:02 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/12 05:01 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/10 22:12 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/10 06:58 linux-5.15.y 3dea0e7f549e 956bd956 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/09 20:03 linux-5.15.y 3dea0e7f549e f4e5e155 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/09 19:51 linux-5.15.y 3dea0e7f549e f4e5e155 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/09 19:42 linux-5.15.y 3dea0e7f549e f4e5e155 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/09 14:38 linux-5.15.y 3dea0e7f549e f4e5e155 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/09 14:33 linux-5.15.y 3dea0e7f549e f4e5e155 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/06/11 13:20 linux-5.15.y 1c700860e8bc 5d7e17ca .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/06/10 09:54 linux-5.15.y 1c700860e8bc 4826c28e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/06/01 14:58 linux-5.15.y 98f47d0e9b8c 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/05/12 08:02 linux-5.15.y 3b8db0e4f263 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
* Struck through repros no longer work on HEAD.