Oops: divide error: 0000 [#1] SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 11244 Comm: syz-executor Not tainted 6.16.0-syzkaller-02094-g86aa72182095 #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
RIP: 0010:comedi_inc_scan_progress+0x1a4/0x430 drivers/comedi/drivers.c:556
Code: b6 0c 19 84 c9 0f 85 bd 01 00 00 03 45 2c 4c 8d a5 80 00 00 00 4c 89 e1 48 c1 e9 03 0f b6 0c 19 84 c9 0f 85 cc 01 00 00 31 d2 <41> f7 34 24 41 89 17 45 89 ec eb 0f e8 3b 7b dd f8 48 bb 00 00 00
RSP: 0018:ffffc90000007c60 EFLAGS: 00010046
RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff888027df5e00 R08: dffffc0000000000 R09: 1ffff1100c150400
R10: dffffc0000000000 R11: ffffed100c150401 R12: ffff888027df5e80
R13: 0000000000000004 R14: 0000000000000000 R15: ffff888027df5e2c
FS: 0000555558a6f500(0000) GS:ffff888125c86000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc78d04bf98 CR3: 000000007f156000 CR4: 0000000000350ef0
Call Trace:
comedi_buf_write_samples+0x373/0x5a0 drivers/comedi/comedi_buf.c:603
aio_iiro_16_cos+0x163/0x1c0 drivers/comedi/drivers/aio_iiro_16.c:69
__handle_irq_event_percpu+0x28c/0x980 kernel/irq/handle.c:158
handle_irq_event_percpu kernel/irq/handle.c:193 [inline]
handle_irq_event+0x8b/0x1e0 kernel/irq/handle.c:210
handle_edge_irq+0x267/0x9c0 kernel/irq/chip.c:797
generic_handle_irq_desc include/linux/irqdesc.h:173 [inline]
handle_irq arch/x86/kernel/irq.c:254 [inline]
call_irq_handler arch/x86/kernel/irq.c:266 [inline]
__common_interrupt+0x143/0x250 arch/x86/kernel/irq.c:292
common_interrupt+0xb6/0xe0 arch/x86/kernel/irq.c:285
asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:693
RIP: 0010:csd_lock_wait kernel/smp.c:340 [inline]
RIP: 0010:smp_call_function_single+0x3b0/0x590 kernel/smp.c:679
Code: 31 ff e8 03 8a 0b 00 41 83 e6 01 75 11 e8 b8 85 0b 00 4d 89 fe eb 3f e8 ae 85 0b 00 eb 3c 4d 89 fe f3 90 43 0f b6 04 2c 84 c0 <75> 0f f7 03 01 00 00 00 74 1d e8 91 85 0b 00 eb e6 89 d9 80 e1 07
RSP: 0018:ffffc90002f77600 EFLAGS: 00000246
RAX: 0000000000000000 RBX: ffffc90002f77648 RCX: ffff888053428000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: ffffc90002f776f0 R08: ffffffff8fa05af7 R09: 1ffffffff1f40b5e
R10: dffffc0000000000 R11: ffffffff81705100 R12: 1ffff920005eeec9
R13: dffffc0000000000 R14: 1ffff920005eeec4 R15: 1ffff920005eeec4
rcu_barrier+0x360/0x570 kernel/rcu/tree.c:3838
netdev_run_todo+0x327/0xea0 net/core/dev.c:11376
nsim_destroy+0x40c/0x670 drivers/net/netdevsim/netdev.c:1076
__nsim_dev_port_del+0x14d/0x1b0 drivers/net/netdevsim/dev.c:1428
nsim_dev_port_del_all drivers/net/netdevsim/dev.c:1440 [inline]
nsim_dev_reload_destroy+0x288/0x490 drivers/net/netdevsim/dev.c:1661
nsim_drv_remove+0x58/0x160 drivers/net/netdevsim/dev.c:1676
device_remove drivers/base/dd.c:569 [inline]
__device_release_driver drivers/base/dd.c:1274 [inline]
device_release_driver_internal+0x46f/0x800 drivers/base/dd.c:1297
bus_remove_device+0x34d/0x410 drivers/base/bus.c:579
device_del+0x511/0x8e0 drivers/base/core.c:3881
device_unregister+0x20/0xc0 drivers/base/core.c:3922
nsim_bus_dev_del drivers/net/netdevsim/bus.c:462 [inline]
del_device_store+0x2aa/0x360 drivers/net/netdevsim/bus.c:226
kernfs_fop_write_iter+0x378/0x4f0 fs/kernfs/file.c:334
new_sync_write fs/read_write.c:593 [inline]
vfs_write+0x54b/0xa90 fs/read_write.c:686
ksys_write+0x145/0x250 fs/read_write.c:738
do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd44df8d45f
Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
RSP: 002b:00007ffdefc3e160 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fd44df8d45f
RDX: 0000000000000001 RSI: 00007ffdefc3e1b0 RDI: 0000000000000005
RBP: 00007fd44e011fbd R08: 0000000000000000 R09: 00007ffdefc3dfb7
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
R13: 00007ffdefc3e1b0 R14: 00007fd44ece4620 R15: 0000000000000003
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:comedi_inc_scan_progress+0x1a4/0x430 drivers/comedi/drivers.c:556
Code: b6 0c 19 84 c9 0f 85 bd 01 00 00 03 45 2c 4c 8d a5 80 00 00 00 4c 89 e1 48 c1 e9 03 0f b6 0c 19 84 c9 0f 85 cc 01 00 00 31 d2 <41> f7 34 24 41 89 17 45 89 ec eb 0f e8 3b 7b dd f8 48 bb 00 00 00
RSP: 0018:ffffc90000007c60 EFLAGS: 00010046
RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff888027df5e00 R08: dffffc0000000000 R09: 1ffff1100c150400
R10: dffffc0000000000 R11: ffffed100c150401 R12: ffff888027df5e80
R13: 0000000000000004 R14: 0000000000000000 R15: ffff888027df5e2c
FS: 0000555558a6f500(0000) GS:ffff888125c86000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc78d04bf98 CR3: 000000007f156000 CR4: 0000000000350ef0
----------------
Code disassembly (best guess):
0: b6 0c mov $0xc,%dh
2: 19 84 c9 0f 85 bd 01 sbb %eax,0x1bd850f(%rcx,%rcx,8)
9: 00 00 add %al,(%rax)
b: 03 45 2c add 0x2c(%rbp),%eax
e: 4c 8d a5 80 00 00 00 lea 0x80(%rbp),%r12
15: 4c 89 e1 mov %r12,%rcx
18: 48 c1 e9 03 shr $0x3,%rcx
1c: 0f b6 0c 19 movzbl (%rcx,%rbx,1),%ecx
20: 84 c9 test %cl,%cl
22: 0f 85 cc 01 00 00 jne 0x1f4
28: 31 d2 xor %edx,%edx
* 2a: 41 f7 34 24 divl (%r12) <-- trapping instruction
2e: 41 89 17 mov %edx,(%r15)
31: 45 89 ec mov %r13d,%r12d
34: eb 0f jmp 0x45
36: e8 3b 7b dd f8 call 0xf8dd7b76
3b: 48 rex.W
3c: bb .byte 0xbb
3d: 00 00 add %al,(%rax)