Oops: divide error: 0000 [#1] SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 26876 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
RIP: 0010:comedi_inc_scan_progress+0x1a4/0x430 drivers/comedi/drivers.c:563
Code: b6 0c 19 84 c9 0f 85 bd 01 00 00 03 45 2c 4c 8d a5 80 00 00 00 4c 89 e1 48 c1 e9 03 0f b6 0c 19 84 c9 0f 85 cc 01 00 00 31 d2 <41> f7 34 24 41 89 17 45 89 ec eb 0f e8 fb c3 0d f9 48 bb 00 00 00
RSP: 0018:ffffc90000007c78 EFLAGS: 00010046
RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff888032e3e800 R08: ffff8880412d9001 R09: 1ffff1100825b200
R10: dffffc0000000000 R11: ffffed100825b201 R12: ffff888032e3e880
R13: 0000000000000002 R14: 0000000000000000 R15: ffff888032e3e82c
FS: 0000555588cab500(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000165030 CR3: 000000005f340000 CR4: 0000000000350ef0
Call Trace:
comedi_buf_write_samples+0x373/0x5a0 drivers/comedi/comedi_buf.c:603
das16m1_handler+0x213/0x4b0 drivers/comedi/drivers/das16m1.c:413
das16m1_interrupt+0xaf/0x180 drivers/comedi/drivers/das16m1.c:470
__handle_irq_event_percpu+0x295/0xab0 kernel/irq/handle.c:203
handle_irq_event_percpu kernel/irq/handle.c:240 [inline]
handle_irq_event+0x8b/0x1e0 kernel/irq/handle.c:257
handle_edge_irq+0x23b/0xa10 kernel/irq/chip.c:855
generic_handle_irq_desc include/linux/irqdesc.h:173 [inline]
handle_irq arch/x86/kernel/irq.c:254 [inline]
call_irq_handler arch/x86/kernel/irq.c:-1 [inline]
__common_interrupt+0x141/0x1f0 arch/x86/kernel/irq.c:325
common_interrupt+0xb6/0xe0 arch/x86/kernel/irq.c:318
asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:688
RIP: 0010:rcu_is_watching_curr_cpu include/linux/context_tracking.h:128 [inline]
RIP: 0010:rcu_is_watching+0x17/0xb0 kernel/rcu/tree.c:751
Code: 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 80 f0 c7 10 e8 4b 1b a0 09 89 c3 <83> f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 dd 92
RSP: 0018:ffffc90005077138 EFLAGS: 00000282
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 43f7fa64c2cbb100
RDX: ffffc90005077201 RSI: ffffffff8bbf0740 RDI: ffffffff8bbf0700
RBP: dffffc0000000000 R08: ffffc90005077bb0 R09: ffffc90005077278
R10: dffffc0000000000 R11: fffff52000a0ee51 R12: ffffc90005077bc0
R13: ffffc90005070000 R14: ffffc90005077228 R15: ffffffff81739c45
rcu_read_unlock include/linux/rcupdate.h:895 [inline]
class_rcu_destructor include/linux/rcupdate.h:1195 [inline]
unwind_next_frame+0x1965/0x2390 arch/x86/kernel/unwind_orc.c:680
arch_stack_walk+0x11c/0x150 arch/x86/kernel/stacktrace.c:25
stack_trace_save+0x9c/0xe0 kernel/stacktrace.c:122
save_stack+0xf5/0x1f0 mm/page_owner.c:156
__reset_page_owner+0x71/0x1f0 mm/page_owner.c:311
reset_page_owner include/linux/page_owner.h:25 [inline]
free_pages_prepare mm/page_alloc.c:1394 [inline]
free_unref_folios+0xdb3/0x14f0 mm/page_alloc.c:2963
folios_put_refs+0x584/0x670 mm/swap.c:1002
folio_batch_release include/linux/pagevec.h:101 [inline]
shmem_undo_range+0x49e/0x14b0 mm/shmem.c:1120
shmem_truncate_range mm/shmem.c:1232 [inline]
shmem_evict_inode+0x272/0xa70 mm/shmem.c:1360
evict+0x504/0x9c0 fs/inode.c:810
__dentry_kill+0x209/0x660 fs/dcache.c:669
dput+0x19f/0x2b0 fs/dcache.c:911
__fput+0x68e/0xa70 fs/file_table.c:476
task_work_run+0x1d4/0x260 kernel/task_work.c:227
resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
exit_to_user_mode_loop+0xe9/0x130 kernel/entry/common.c:43
exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline]
syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline]
syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline]
do_syscall_64+0x2bd/0xfa0 arch/x86/entry/syscall_64.c:100
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f35d718e32a
Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 43 91 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 a3 91 02 00 8b 44 24
RSP: 002b:00007ffe44d17f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f35d718e32a
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00007ffe44d17f6c R08: 0000000000000000 R09: 00007ffe44d17c77
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000034
R13: 00000000000927c0 R14: 000000000026520e R15: 00007ffe44d17fc0
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:comedi_inc_scan_progress+0x1a4/0x430 drivers/comedi/drivers.c:563
Code: b6 0c 19 84 c9 0f 85 bd 01 00 00 03 45 2c 4c 8d a5 80 00 00 00 4c 89 e1 48 c1 e9 03 0f b6 0c 19 84 c9 0f 85 cc 01 00 00 31 d2 <41> f7 34 24 41 89 17 45 89 ec eb 0f e8 fb c3 0d f9 48 bb 00 00 00
RSP: 0018:ffffc90000007c78 EFLAGS: 00010046
RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff888032e3e800 R08: ffff8880412d9001 R09: 1ffff1100825b200
R10: dffffc0000000000 R11: ffffed100825b201 R12: ffff888032e3e880
R13: 0000000000000002 R14: 0000000000000000 R15: ffff888032e3e82c
FS: 0000555588cab500(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000165030 CR3: 000000005f340000 CR4: 0000000000350ef0
----------------
Code disassembly (best guess):
0: b6 0c mov $0xc,%dh
2: 19 84 c9 0f 85 bd 01 sbb %eax,0x1bd850f(%rcx,%rcx,8)
9: 00 00 add %al,(%rax)
b: 03 45 2c add 0x2c(%rbp),%eax
e: 4c 8d a5 80 00 00 00 lea 0x80(%rbp),%r12
15: 4c 89 e1 mov %r12,%rcx
18: 48 c1 e9 03 shr $0x3,%rcx
1c: 0f b6 0c 19 movzbl (%rcx,%rbx,1),%ecx
20: 84 c9 test %cl,%cl
22: 0f 85 cc 01 00 00 jne 0x1f4
28: 31 d2 xor %edx,%edx
* 2a: 41 f7 34 24 divl (%r12) <-- trapping instruction
2e: 41 89 17 mov %edx,(%r15)
31: 45 89 ec mov %r13d,%r12d
34: eb 0f jmp 0x45
36: e8 fb c3 0d f9 call 0xf90dc436
3b: 48 rex.W
3c: bb .byte 0xbb
3d: 00 00 add %al,(%rax)