syzbot


divide error in do_journal_end

Status: upstream: reported C repro on 2023/07/08 18:42
Bug presence: origin:upstream
Labels: missing-backport
[Documentation on labels]
Reported-by: syzbot+8b4def6a27716cebedb3@syzkaller.appspotmail.com
First crash: 520d, last: 1d14h
Bug presence (3)
Date Name Commit Repro Result
2024/12/04 linux-5.15.y (ToT) 0a51d2d4527b C [report] divide error in do_journal_end
2023/07/10 upstream (ToT) 06c2afb862f9 C [report] divide error in do_journal_end
2024/12/04 upstream (ToT) feffde684ac2 C Didn't crash
Similar bugs (9)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream divide error in do_journal_end reiserfs 2 1481d 1508d 0/28 auto-closed as invalid on 2021/03/19 22:00
linux-4.14 divide error in do_journal_end (2) C error 1 833d 1321d 0/1 upstream: reported C repro on 2021/04/28 16:52
upstream divide error in do_journal_end (3) reiserfs C error done 83 337d 718d 0/28 auto-obsoleted due to no activity on 2024/04/14 06:39
upstream divide error in do_journal_end (2) reiserfs C inconclusive 2 1308d 1307d 20/28 fixed on 2021/11/10 00:50
linux-4.19 divide error in do_journal_end (3) reiserfs C error 1 683d 683d 0/1 upstream: reported C repro on 2023/01/27 02:59
linux-4.19 divide error in do_journal_end (2) C done 4 1247d 1358d 1/1 fixed on 2021/08/12 11:53
linux-6.1 divide error in do_journal_end origin:upstream C error 37 47d 346d 0/3 upstream: reported C repro on 2023/12/30 01:46
linux-4.14 divide error in do_journal_end C done 1 1431d 1491d 1/1 fixed on 2021/02/21 17:18
linux-4.19 divide error in do_journal_end C done 2 1443d 1503d 1/1 fixed on 2021/01/27 05:38
Last patch testing requests (5)
Created Duration User Patch Repo Result
2024/11/23 06:43 9m retest repro linux-5.15.y report log
2024/11/05 12:32 55m retest repro linux-5.15.y report log
2024/11/05 12:32 55m retest repro linux-5.15.y report log
2024/11/05 12:32 11m retest repro linux-5.15.y report log
2024/11/05 12:32 10m retest repro linux-5.15.y report log
Fix bisection attempts (7)
Created Duration User Patch Repo Result
2024/09/13 12:11 1h00m bisect fix linux-5.15.y OK (0) job log log
2024/03/12 04:15 50m bisect fix linux-5.15.y OK (0) job log log
2024/02/03 14:05 1h18m (2) bisect fix linux-5.15.y OK (0) job log log
2023/12/25 15:11 1h00m bisect fix linux-5.15.y OK (0) job log log
2023/11/24 23:23 56m bisect fix linux-5.15.y OK (0) job log log
2023/10/22 22:25 1h05m bisect fix linux-5.15.y OK (0) job log log
2023/09/21 16:44 56m bisect fix linux-5.15.y OK (0) job log log

Sample crash report:
divide error: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 23 Comm: kworker/1:1 Not tainted 5.15.173-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: events_long flush_old_commits
RIP: 0010:do_journal_end+0x12f1/0x4650 fs/reiserfs/journal.c:4089
Code: 04 30 84 c0 0f 85 74 2d 00 00 4f 8d 7c 2f 01 48 89 e8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 7a 2d 00 00 8b 0b 4c 89 f8 31 d2 <48> f7 f1 48 89 d3 4c 01 e3 48 8b 84 24 c8 00 00 00 42 80 3c 30 00
RSP: 0018:ffffc90000ddf9b0 EFLAGS: 00010246
RAX: 0000000000000003 RBX: ffff88804f80a014 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880702e3000
RBP: ffff88804f80a017 R08: dffffc0000000000 R09: ffff8880702e3000
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
R13: 0000000000000002 R14: dffffc0000000000 R15: 0000000000000003
FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f026dc32000 CR3: 000000001f2f2000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 reiserfs_sync_fs fs/reiserfs/super.c:78 [inline]
 flush_old_commits+0x20d/0x2e0 fs/reiserfs/super.c:111
 process_one_work+0x8a1/0x10c0 kernel/workqueue.c:2310
 worker_thread+0xaca/0x1280 kernel/workqueue.c:2457
 kthread+0x3f6/0x4f0 kernel/kthread.c:334
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
 </TASK>
Modules linked in:
---[ end trace 9c5228cb1898bc03 ]---
RIP: 0010:do_journal_end+0x12f1/0x4650 fs/reiserfs/journal.c:4089
Code: 04 30 84 c0 0f 85 74 2d 00 00 4f 8d 7c 2f 01 48 89 e8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 7a 2d 00 00 8b 0b 4c 89 f8 31 d2 <48> f7 f1 48 89 d3 4c 01 e3 48 8b 84 24 c8 00 00 00 42 80 3c 30 00
RSP: 0018:ffffc90000ddf9b0 EFLAGS: 00010246
RAX: 0000000000000003 RBX: ffff88804f80a014 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880702e3000
RBP: ffff88804f80a017 R08: dffffc0000000000 R09: ffff8880702e3000
R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
R13: 0000000000000002 R14: dffffc0000000000 R15: 0000000000000003
FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f026dc32000 CR3: 000000001fac4000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	04 30                	add    $0x30,%al
   2:	84 c0                	test   %al,%al
   4:	0f 85 74 2d 00 00    	jne    0x2d7e
   a:	4f 8d 7c 2f 01       	lea    0x1(%r15,%r13,1),%r15
   f:	48 89 e8             	mov    %rbp,%rax
  12:	48 c1 e8 03          	shr    $0x3,%rax
  16:	42 0f b6 04 30       	movzbl (%rax,%r14,1),%eax
  1b:	84 c0                	test   %al,%al
  1d:	0f 85 7a 2d 00 00    	jne    0x2d9d
  23:	8b 0b                	mov    (%rbx),%ecx
  25:	4c 89 f8             	mov    %r15,%rax
  28:	31 d2                	xor    %edx,%edx
* 2a:	48 f7 f1             	div    %rcx <-- trapping instruction
  2d:	48 89 d3             	mov    %rdx,%rbx
  30:	4c 01 e3             	add    %r12,%rbx
  33:	48 8b 84 24 c8 00 00 	mov    0xc8(%rsp),%rax
  3a:	00
  3b:	42 80 3c 30 00       	cmpb   $0x0,(%rax,%r14,1)

Crashes (280):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/12/08 17:58 linux-5.15.y 0a51d2d4527b 9ac0fdc6 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/21 20:20 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2024/04/25 10:06 linux-5.15.y c52b9710c83d 8bdc0f22 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2024/04/19 17:40 linux-5.15.y c52b9710c83d af24b050 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2023/12/31 01:49 linux-5.15.y d93fa2c78854 fb427a07 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2023/07/08 18:42 linux-5.15.y d54cfc420586 668cb1fa .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro #1] [mounted in repro #2] ci2-linux-5-15-kasan divide error in do_journal_end
2024/12/08 14:55 linux-5.15.y 0a51d2d4527b 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/10/21 06:41 linux-5.15.y 584a40a22cb9 cd6fc0a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/10/08 03:11 linux-5.15.y 3a5928702e71 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/10/07 20:01 linux-5.15.y 3a5928702e71 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/10/06 14:43 linux-5.15.y 3a5928702e71 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/10/06 13:36 linux-5.15.y 3a5928702e71 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/10/06 01:59 linux-5.15.y 3a5928702e71 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/09/23 07:29 linux-5.15.y 3a5928702e71 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/09/19 04:41 linux-5.15.y 3a5928702e71 c673ca06 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/08/12 02:40 linux-5.15.y 7e89efd3ae1c 6f4edef4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/08/05 03:25 linux-5.15.y 7e89efd3ae1c 1786a2a8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/30 17:29 linux-5.15.y 7e89efd3ae1c 6fde257d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/29 14:53 linux-5.15.y 7e89efd3ae1c 5187fc86 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/28 20:34 linux-5.15.y 7e89efd3ae1c 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/27 13:46 linux-5.15.y 7e89efd3ae1c 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/26 21:09 linux-5.15.y 7c6d66f0266f 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/26 21:08 linux-5.15.y 7c6d66f0266f 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/26 20:06 linux-5.15.y 7c6d66f0266f 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/26 02:18 linux-5.15.y 7c6d66f0266f 3f86dfed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/25 14:43 linux-5.15.y 7c6d66f0266f 466a14e5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/24 18:48 linux-5.15.y 7c6d66f0266f d1a1b0ca .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/24 18:48 linux-5.15.y 7c6d66f0266f d1a1b0ca .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/24 07:50 linux-5.15.y 7c6d66f0266f 57b2edb1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/23 14:09 linux-5.15.y 7c6d66f0266f e50e8da5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/23 00:34 linux-5.15.y 7c6d66f0266f 708c10c4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/22 10:02 linux-5.15.y 7c6d66f0266f df655b64 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/22 10:02 linux-5.15.y 7c6d66f0266f df655b64 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/21 23:48 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/21 17:37 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/21 16:15 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/21 14:26 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/21 13:46 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/21 13:31 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/14 16:04 linux-5.15.y f45bea23c39c eaeb5c15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/08 01:59 linux-5.15.y f45bea23c39c 2a40360c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/06/30 12:07 linux-5.15.y 4878aadf2d15 757f06b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/06/30 11:35 linux-5.15.y 4878aadf2d15 757f06b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/06/30 11:17 linux-5.15.y 4878aadf2d15 757f06b1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/06/24 08:33 linux-5.15.y 4878aadf2d15 edc5149a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/06/24 07:55 linux-5.15.y 4878aadf2d15 edc5149a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/06/24 06:53 linux-5.15.y 4878aadf2d15 edc5149a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/05/20 19:34 linux-5.15.y 83655231580b c0f1611a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/05/16 03:58 linux-5.15.y 284087d4f7d5 ef5d53ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
* Struck through repros no longer work on HEAD.