syzbot

 sign-in | mailing list | source | docs
🐞 Open [814]
🐞 Fixed [85]
🐞 Invalid [1133]
⬇ Missing Backports [132]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

divide error in do_journal_end

Status: upstream: reported C repro on 2023/07/08 18:42
Bug presence: origin:upstream
Labels: missing-backport
[Documentation on labels]
Reported-by: syzbot+8b4def6a27716cebedb3@syzkaller.appspotmail.com
First crash: 878d, last: 5d12h
Fix commit to backport (bisect log) :
tree: upstream
commit fb6f20ecb121cef4d7946f834a6ee867c4e21b4a
Author: Jan Kara <jack@suse.cz>
Date: Thu Oct 17 10:28:23 2024 +0000

  reiserfs: The last commit

  
Fix bisection: the issue occurs on the latest tested release (bisect log)
Crash: divide error in do_journal_end (log)
Repro: C syz .config
  
▶ ▼ Bug presence (3)
Date Name Commit Repro Result
2024/12/04 linux-5.15.y (ToT) 0a51d2d4527b C [report] divide error in do_journal_end
2023/07/10 upstream (ToT) 06c2afb862f9 C [report] divide error in do_journal_end
2024/12/04 upstream (ToT) feffde684ac2 C Didn't crash
▶ ▼ Similar bugs (10)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream divide error in do_journal_end fs 2 2 1839d 1866d 0/29 auto-closed as invalid on 2021/03/19 22:00
linux-4.14 divide error in do_journal_end (2) 2 C error 1 1190d 1679d 0/1 upstream: reported C repro on 2021/04/28 16:52
upstream divide error in do_journal_end (3) fs 2 C error done 83 695d 1075d 0/29 auto-obsoleted due to no activity on 2024/04/14 06:39
upstream divide error in do_journal_end (2) erofs 2 C inconclusive 2 1666d 1665d 20/29 fixed on 2021/11/10 00:50
linux-6.6 divide error in do_journal_end origin:lts-only 2 C inconclusive 4 32d 76d 0/2 upstream: reported C repro on 2025/09/17 14:39
linux-4.19 divide error in do_journal_end (3) reiserfs 2 C error 1 1040d 1040d 0/1 upstream: reported C repro on 2023/01/27 02:59
linux-4.19 divide error in do_journal_end (2) 2 C done 4 1605d 1716d 1/1 fixed on 2021/08/12 11:53
linux-6.1 divide error in do_journal_end origin:upstream missing-backport 2 C done 127 77d 703d 0/3 upstream: reported C repro on 2023/12/30 01:46
linux-4.14 divide error in do_journal_end 2 C done 1 1789d 1849d 1/1 fixed on 2021/02/21 17:18
linux-4.19 divide error in do_journal_end 2 C done 2 1801d 1861d 1/1 fixed on 2021/01/27 05:38
▶ ▼ Last patch testing requests (10)
Created Duration User Patch Repo Result
2025/10/30 07:31 9m retest repro linux-5.15.y report log
2025/10/30 07:31 14m retest repro linux-5.15.y report log
2025/10/30 07:31 10m retest repro linux-5.15.y report log
2025/10/30 07:31 12m retest repro linux-5.15.y report log
2025/10/13 02:43 10m retest repro linux-5.15.y report log
2025/10/13 02:43 9m retest repro linux-5.15.y report log
2025/10/13 02:43 10m retest repro linux-5.15.y report log
2025/10/13 02:43 9m retest repro linux-5.15.y report log
2025/10/13 02:43 9m retest repro linux-5.15.y report log
2025/08/15 23:12 10m retest repro linux-5.15.y report log
▶ ▼ Fix bisection attempts (8)
Created Duration User Patch Repo Result
2025/04/01 03:07 8h16m fix candidate upstream OK (1) job log
2024/09/13 12:11 1h00m bisect fix linux-5.15.y OK (0) job log log
2024/03/12 04:15 50m bisect fix linux-5.15.y OK (0) job log log
2024/02/03 14:05 1h18m (2) bisect fix linux-5.15.y OK (0) job log log
2023/12/25 15:11 1h00m bisect fix linux-5.15.y OK (0) job log log
2023/11/24 23:23 56m bisect fix linux-5.15.y OK (0) job log log
2023/10/22 22:25 1h05m bisect fix linux-5.15.y OK (0) job log log
2023/09/21 16:44 56m bisect fix linux-5.15.y OK (0) job log log

Sample crash report:
divide error: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 4346 Comm: syz-executor Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
RIP: 0010:do_journal_end+0x11eb/0x42d0 fs/reiserfs/journal.c:4089
Code: df 0f b6 04 28 84 c0 0f 85 44 2c 00 00 49 8d 44 1d 01 4c 89 f1 48 c1 e9 03 0f b6 0c 29 84 c9 0f 85 4c 2c 00 00 41 8b 0f 31 d2 <48> f7 f1 49 89 d6 4d 01 e6 48 8b 84 24 b8 00 00 00 80 3c 28 00 4c
RSP: 0018:ffffc9000303f650 EFLAGS: 00010246
RAX: 0000000000000003 RBX: 0000000000000002 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880253eb000
RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffff8880253ea000
R10: 0000000000000000 R11: 0000000000000200 R12: 0000000000000000
R13: 0000000000000000 R14: ffff88806acb8017 R15: ffff88806acb8014
FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa0725bf000 CR3: 0000000023207000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 reiserfs_sync_fs+0xcc/0x150 fs/reiserfs/super.c:78
 sync_filesystem+0xe6/0x220 fs/sync.c:56
 generic_shutdown_super+0x6b/0x300 fs/super.c:448
 kill_block_super+0x7c/0xe0 fs/super.c:1427
 deactivate_locked_super+0x93/0xf0 fs/super.c:335
 cleanup_mnt+0x418/0x4d0 fs/namespace.c:1148
 task_work_run+0x125/0x1a0 kernel/task_work.c:188
 exit_task_work include/linux/task_work.h:33 [inline]
 do_exit+0x61e/0x20a0 kernel/exit.c:883
 do_group_exit+0x12e/0x300 kernel/exit.c:997
 get_signal+0x6ca/0x12c0 kernel/signal.c:2900
 arch_do_signal_or_restart+0xc1/0x1300 arch/x86/kernel/signal.c:867
 handle_signal_work kernel/entry/common.c:154 [inline]
 exit_to_user_mode_loop+0x9e/0x130 kernel/entry/common.c:178
 exit_to_user_mode_prepare+0xee/0x180 kernel/entry/common.c:214
 __syscall_exit_to_user_mode_work kernel/entry/common.c:296 [inline]
 syscall_exit_to_user_mode+0x16/0x40 kernel/entry/common.c:307
 do_syscall_64+0x58/0xa0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f9ee10191ff
Code: Unable to access opcode bytes at RIP 0x7f9ee10191d5.
RSP: 002b:00007ffd9a8b7130 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
RAX: 0000000000000004 RBX: 0000000000000003 RCX: 00007f9ee10191ff
RDX: 0000000000000004 RSI: 00007ffd9a8b71f0 RDI: 00000000000000f8
RBP: 00007ffd9a8b719c R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
R13: 00000000000927c0 R14: 0000000000012f7f R15: 00007ffd9a8b71f0
 </TASK>
Modules linked in:
---[ end trace 6cc290555bc129e3 ]---
RIP: 0010:do_journal_end+0x11eb/0x42d0 fs/reiserfs/journal.c:4089
Code: df 0f b6 04 28 84 c0 0f 85 44 2c 00 00 49 8d 44 1d 01 4c 89 f1 48 c1 e9 03 0f b6 0c 29 84 c9 0f 85 4c 2c 00 00 41 8b 0f 31 d2 <48> f7 f1 49 89 d6 4d 01 e6 48 8b 84 24 b8 00 00 00 80 3c 28 00 4c
RSP: 0018:ffffc9000303f650 EFLAGS: 00010246
RAX: 0000000000000003 RBX: 0000000000000002 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880253eb000
RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffff8880253ea000
R10: 0000000000000000 R11: 0000000000000200 R12: 0000000000000000
R13: 0000000000000000 R14: ffff88806acb8017 R15: ffff88806acb8014
FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f714b51fa10 CR3: 000000007994a000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	df 0f                	fisttps (%rdi)
   2:	b6 04                	mov    $0x4,%dh
   4:	28 84 c0 0f 85 44 2c 	sub    %al,0x2c44850f(%rax,%rax,8)
   b:	00 00                	add    %al,(%rax)
   d:	49 8d 44 1d 01       	lea    0x1(%r13,%rbx,1),%rax
  12:	4c 89 f1             	mov    %r14,%rcx
  15:	48 c1 e9 03          	shr    $0x3,%rcx
  19:	0f b6 0c 29          	movzbl (%rcx,%rbp,1),%ecx
  1d:	84 c9                	test   %cl,%cl
  1f:	0f 85 4c 2c 00 00    	jne    0x2c71
  25:	41 8b 0f             	mov    (%r15),%ecx
  28:	31 d2                	xor    %edx,%edx
* 2a:	48 f7 f1             	div    %rcx <-- trapping instruction
  2d:	49 89 d6             	mov    %rdx,%r14
  30:	4d 01 e6             	add    %r12,%r14
  33:	48 8b 84 24 b8 00 00 	mov    0xb8(%rsp),%rax
  3a:	00
  3b:	80 3c 28 00          	cmpb   $0x0,(%rax,%rbp,1)
  3f:	4c                   	rex.WR

Crashes (428):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/11/27 11:36 linux-5.15.y cc5ec8769306 d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/09 23:51 linux-5.15.y 3dea0e7f549e f4e5e155 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/07 15:24 linux-5.15.y 3dea0e7f549e 4f67c4ae .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-5-15-kasan divide error in do_journal_end
2025/05/28 11:23 linux-5.15.y 98f47d0e9b8c 874a1386 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-5-15-kasan divide error in do_journal_end
2024/12/08 17:58 linux-5.15.y 0a51d2d4527b 9ac0fdc6 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/21 20:20 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2024/04/25 10:06 linux-5.15.y c52b9710c83d 8bdc0f22 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2024/04/19 17:40 linux-5.15.y c52b9710c83d af24b050 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2023/12/31 01:49 linux-5.15.y d93fa2c78854 fb427a07 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2023/07/08 18:42 linux-5.15.y d54cfc420586 668cb1fa .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro #1] [mounted in repro #2] ci2-linux-5-15-kasan divide error in do_journal_end
2025/11/05 15:11 linux-5.15.y cc5ec8769306 a6c9c731 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/11/02 07:10 linux-5.15.y cc5ec8769306 2c50b6a9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/09/28 19:18 linux-5.15.y 43bb85222e53 001c9061 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/09/22 04:30 linux-5.15.y 43bb85222e53 67c37560 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/09/18 12:09 linux-5.15.y 43bb85222e53 e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/09/18 09:29 linux-5.15.y 43bb85222e53 e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/09/15 21:25 linux-5.15.y 43bb85222e53 e2beed91 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/09/02 07:19 linux-5.15.y 01879f56bdde 807a3b61 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/08/28 23:26 linux-5.15.y 01879f56bdde d401b9d7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/08/22 10:26 linux-5.15.y c79648372d02 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/08/17 18:04 linux-5.15.y c79648372d02 1804e95e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/17 02:18 linux-5.15.y 89950c454265 44f8051e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/16 11:58 linux-5.15.y 89950c454265 124ec9cc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/15 08:26 linux-5.15.y 89950c454265 03fcfc4b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/14 21:37 linux-5.15.y 89950c454265 d8fc7335 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/14 05:42 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/14 00:23 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/13 15:50 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/13 06:20 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/12 12:53 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/12 05:02 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/12 05:01 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/10 22:12 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/10 06:58 linux-5.15.y 3dea0e7f549e 956bd956 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/09 20:03 linux-5.15.y 3dea0e7f549e f4e5e155 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/09 19:51 linux-5.15.y 3dea0e7f549e f4e5e155 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/09 19:42 linux-5.15.y 3dea0e7f549e f4e5e155 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/09 14:38 linux-5.15.y 3dea0e7f549e f4e5e155 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/09 14:33 linux-5.15.y 3dea0e7f549e f4e5e155 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/06/11 13:20 linux-5.15.y 1c700860e8bc 5d7e17ca .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/06/10 09:54 linux-5.15.y 1c700860e8bc 4826c28e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/06/01 14:58 linux-5.15.y 98f47d0e9b8c 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/05/12 08:02 linux-5.15.y 3b8db0e4f263 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/04/27 19:37 linux-5.15.y f7347f400572 c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/04/26 22:19 linux-5.15.y f7347f400572 c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/02/11 11:08 linux-5.15.y c16c81c81336 43f51a00 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/02/11 11:06 linux-5.15.y c16c81c81336 43f51a00 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/02/10 00:10 linux-5.15.y c16c81c81336 ef44b750 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/02/01 14:22 linux-5.15.y 003148680b79 aa47157c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/01/19 17:18 linux-5.15.y 4735586da88e f2cb035c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/01/05 09:48 linux-5.15.y 91786f140358 f3558dbf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/12/29 13:16 linux-5.15.y 91786f140358 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/12/28 19:23 linux-5.15.y 91786f140358 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/12/28 19:09 linux-5.15.y 91786f140358 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/12/08 14:55 linux-5.15.y 0a51d2d4527b 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/10/21 06:41 linux-5.15.y 584a40a22cb9 cd6fc0a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/10/08 03:11 linux-5.15.y 3a5928702e71 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/10/07 20:01 linux-5.15.y 3a5928702e71 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
* Struck through repros no longer work on HEAD.