syzbot


divide error in genelink_tx_fixup

Status: upstream: reported C repro on 2021/10/17 23:27
Reported-by: syzbot+70a89270303b4f68b3d0@syzkaller.appspotmail.com
First crash: 414d, last: 331d
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
android-5-10 divide error in genelink_tx_fixup C error 8 402d 407d 1/2 fixed on 2021/11/10 00:32
upstream divide error in genelink_tx_fixup C 572 397d 413d 0/24 auto-obsoleted due to no activity on 2022/09/05 07:59

Sample crash report:
divide error: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.4.125-syzkaller-00028-g73e6d86c30ee #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:genelink_tx_fixup+0x435/0x5f0 drivers/net/usb/gl620a.c:172
Code: 03 42 8a 04 20 84 c0 0f 85 e9 00 00 00 8b 2b 49 83 ed 80 4c 89 e8 48 c1 e8 03 42 8a 04 20 84 c0 0f 85 ed 00 00 00 89 e8 31 d2 <41> f7 75 00 89 d3 31 ff 89 d6 e8 9c 20 a1 fe 85 db 74 07 e8 f3 1c
RSP: 0018:ffff8881f5dcefd0 EFLAGS: 00010246
RAX: 0000000000000062 RBX: ffff8881de33b430 RCX: ffff8881f5dc3f00
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881de33b430
RBP: 0000000000000062 R08: ffffffff82c43537 R09: 0000000000000003
R10: ffffed103ebb9e2d R11: 0000000000000004 R12: dffffc0000000000
R13: ffff8881de5dc9c0 R14: 000000000000005a R15: ffff8881de33b3c0
FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000563baef42368 CR3: 00000001e4a54000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 usbnet_start_xmit+0x107/0x1a10 drivers/net/usb/usbnet.c:1363
 __netdev_start_xmit include/linux/netdevice.h:4506 [inline]
 netdev_start_xmit include/linux/netdevice.h:4520 [inline]
 xmit_one+0xfa/0x470 net/core/dev.c:3203
 dev_hard_start_xmit+0xac/0x1b0 net/core/dev.c:3219
 sch_direct_xmit+0x28c/0x9e0 net/sched/sch_generic.c:336
 qdisc_restart net/sched/sch_generic.c:401 [inline]
 __qdisc_run+0x245/0x420 net/sched/sch_generic.c:409
 qdisc_run include/net/pkt_sched.h:121 [inline]
 __dev_xmit_skb net/core/dev.c:3395 [inline]
 __dev_queue_xmit+0xd2c/0x2e50 net/core/dev.c:3748
 neigh_output include/net/neighbour.h:519 [inline]
 ip6_finish_output2+0xed9/0x15c0 net/ipv6/ip6_output.c:116
 NF_HOOK_COND include/linux/netfilter.h:297 [inline]
 ip6_output+0x1c1/0x420 net/ipv6/ip6_output.c:214
 dst_output include/net/dst.h:444 [inline]
 NF_HOOK include/linux/netfilter.h:308 [inline]
 mld_sendpack+0x606/0xb30 net/ipv6/mcast.c:1679
 mld_send_cr net/ipv6/mcast.c:1975 [inline]
 mld_ifc_timer_expire+0x804/0xb30 net/ipv6/mcast.c:2474
 call_timer_fn+0x30/0x330 kernel/time/timer.c:1416
 expire_timers+0x214/0x410 kernel/time/timer.c:1461
 __run_timers+0x603/0x740 kernel/time/timer.c:1785
 run_timer_softirq+0x46/0x80 kernel/time/timer.c:1798
 __do_softirq+0x23e/0x615 kernel/softirq.c:292
 run_ksoftirqd+0x1f/0x30 kernel/softirq.c:603
 smpboot_thread_fn+0x551/0x930 kernel/smpboot.c:165
 kthread+0x30f/0x330 kernel/kthread.c:268
----------------
Code disassembly (best guess):
   0:	03 42 8a             	add    -0x76(%rdx),%eax
   3:	04 20                	add    $0x20,%al
   5:	84 c0                	test   %al,%al
   7:	0f 85 e9 00 00 00    	jne    0xf6
   d:	8b 2b                	mov    (%rbx),%ebp
   f:	49 83 ed 80          	sub    $0xffffffffffffff80,%r13
  13:	4c 89 e8             	mov    %r13,%rax
  16:	48 c1 e8 03          	shr    $0x3,%rax
  1a:	42 8a 04 20          	mov    (%rax,%r12,1),%al
  1e:	84 c0                	test   %al,%al
  20:	0f 85 ed 00 00 00    	jne    0x113
  26:	89 e8                	mov    %ebp,%eax
  28:	31 d2                	xor    %edx,%edx
* 2a:	41 f7 75 00          	divl   0x0(%r13) <-- trapping instruction
  2e:	89 d3                	mov    %edx,%ebx
  30:	31 ff                	xor    %edi,%edi
  32:	89 d6                	mov    %edx,%esi
  34:	e8 9c 20 a1 fe       	callq  0xfea120d5
  39:	85 db                	test   %ebx,%ebx
  3b:	74 07                	je     0x44
  3d:	e8                   	.byte 0xe8
  3e:	f3                   	repz
  3f:	1c                   	.byte 0x1c

Crashes (65):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-android-5-4-kasan 2021/10/17 23:36 android12-5.4 73e6d86c30ee 0c5d9412 .config log report syz C divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/09 01:26 android12-5.4 5b673be0c6b0 2ca0d385 .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/07 17:01 android12-5.4 5b673be0c6b0 2ca0d385 .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/07 16:41 android12-5.4 5b673be0c6b0 2ca0d385 .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/07 15:40 android12-5.4 5b673be0c6b0 2ca0d385 .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/07 14:38 android12-5.4 5b673be0c6b0 2ca0d385 .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/07 12:00 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/07 10:47 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/07 09:43 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/07 08:17 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/07 06:44 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/07 04:25 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/07 03:34 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/07 01:57 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/07 01:53 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/07 01:40 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/07 01:35 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/07 01:15 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/07 00:23 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/06 21:45 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/06 21:25 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/06 20:17 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/06 20:16 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/06 19:34 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/06 18:24 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/06 16:55 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/06 16:20 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/06 14:35 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/06 13:15 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/06 13:08 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/06 12:20 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/06 11:54 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/06 10:58 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/06 05:49 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/06 04:31 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/06 04:24 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/06 04:13 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/06 04:11 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/06 04:08 android12-5.4 5b673be0c6b0 6acc789a .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/04 23:23 android12-5.4 5b673be0c6b0 0a2584dd .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2022/01/04 23:22 android12-5.4 5b673be0c6b0 0a2584dd .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2021/12/15 07:27 android12-5.4 c08b8832fb77 f752fb53 .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2021/12/13 18:23 android12-5.4 12a69ef55cdd 0304899b .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2021/12/13 11:23 android12-5.4 4fd09f7a7972 49ca1f59 .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2021/12/01 08:58 android12-5.4 0bbc71d87f4d 5fa3eacc .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2021/12/01 07:03 android12-5.4 0bbc71d87f4d 80270552 .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2021/12/01 02:20 android12-5.4 0bbc71d87f4d 80270552 .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2021/10/29 22:54 android12-5.4 2138e7367558 2353a3ec .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2021/10/25 01:04 android12-5.4 eb4a5a5dbd5b 4f0000ee .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2021/10/20 09:09 android12-5.4 5970ec26e0c8 466b7db1 .config log report info divide error in genelink_tx_fixup
ci2-android-5-4-kasan 2021/10/17 23:26 android12-5.4 73e6d86c30ee 0c5d9412 .config log report info divide error in genelink_tx_fixup
* Struck through repros no longer work on HEAD.