Oops: divide error: 0000 [#1] SMP KASAN PTI
CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full)
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker
RIP: 0010:comedi_inc_scan_progress+0x1a4/0x430 drivers/comedi/drivers.c:563
Code: b6 0c 19 84 c9 0f 85 bd 01 00 00 03 45 2c 4c 8d a5 80 00 00 00 4c 89 e1 48 c1 e9 03 0f b6 0c 19 84 c9 0f 85 cc 01 00 00 31 d2 <41> f7 34 24 41 89 17 45 89 ec eb 0f e8 2b f7 f4 f8 48 bb 00 00 00
RSP: 0018:ffffc900000068f8 EFLAGS: 00010046
RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff88807e531800 R08: 00000000000000ff R09: 00000000000000ff
R10: dffffc0000000000 R11: ffffed1004deee01 R12: ffff88807e531880
R13: 0000000000000002 R14: 0000000000000000 R15: ffff88807e53182c
FS: 0000000000000000(0000) GS:ffff888125a6e000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fde381750e0 CR3: 0000000024ada000 CR4: 00000000003526f0
Call Trace:
comedi_buf_write_samples+0x373/0x5a0 drivers/comedi/comedi_buf.c:603
das16m1_handler+0x213/0x4b0 drivers/comedi/drivers/das16m1.c:413
das16m1_interrupt+0xaf/0x180 drivers/comedi/drivers/das16m1.c:470
__handle_irq_event_percpu+0x285/0xae0 kernel/irq/handle.c:203
handle_irq_event_percpu kernel/irq/handle.c:240 [inline]
handle_irq_event+0x8b/0x1e0 kernel/irq/handle.c:257
handle_edge_irq+0x23b/0xa10 kernel/irq/chip.c:855
generic_handle_irq_desc include/linux/irqdesc.h:172 [inline]
handle_irq arch/x86/kernel/irq.c:255 [inline]
call_irq_handler arch/x86/kernel/irq.c:-1 [inline]
__common_interrupt+0x141/0x1f0 arch/x86/kernel/irq.c:326
common_interrupt+0x5e/0xe0 arch/x86/kernel/irq.c:319
asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:688
RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 kernel/kcov.c:210
Code: 89 fb e8 23 00 00 00 48 8b 3d c4 38 09 0c 48 89 de 5b e9 23 57 5b 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 20 bb 92 65 8b 15 c8 02
RSP: 0018:ffffc90000006d30 EFLAGS: 00000297
RAX: ffffffff893eace7 RBX: 0000000000000000 RCX: 0000000000000100
RDX: ffff88801d688000 RSI: 0000000000000000 RDI: 0000000000000007
RBP: 0000000000000002 R08: ffff88805e4bdae7 R09: 1ffff1100bc97b5c
R10: dffffc0000000000 R11: ffffed100bc97b5d R12: ffff88805e4bdae4
R13: ffff888027fa20a8 R14: ffffffff8a11f9be R15: ffff88805e4bda00
cpu_max_bits_warn include/linux/cpumask.h:136 [inline]
cpumask_check include/linux/cpumask.h:143 [inline]
cpumask_test_cpu include/linux/cpumask.h:647 [inline]
cpu_online include/linux/cpumask.h:1227 [inline]
trace_kfree_skb+0x41/0x200 include/trace/events/skb.h:24
__sk_skb_reason_drop net/core/skbuff.c:1216 [inline]
sk_skb_reason_drop+0xe1/0x170 net/core/skbuff.c:1233
kfree_skb_reason include/linux/skbuff.h:1322 [inline]
kfree_skb include/linux/skbuff.h:1331 [inline]
ip6_mc_input+0x8de/0xb70 net/ipv6/ip6_input.c:593
ip_sabotage_in+0x1e1/0x270 net/bridge/br_netfilter_hooks.c:990
nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
nf_hook_slow+0xc5/0x220 net/netfilter/core.c:623
nf_hook include/linux/netfilter.h:273 [inline]
NF_HOOK+0x206/0x3a0 include/linux/netfilter.h:316
__netif_receive_skb_one_core net/core/dev.c:6130 [inline]
__netif_receive_skb+0xd3/0x380 net/core/dev.c:6243
netif_receive_skb_internal net/core/dev.c:6329 [inline]
netif_receive_skb+0x1bb/0x790 net/core/dev.c:6388
NF_HOOK+0xa0/0x390 include/linux/netfilter.h:319
br_handle_frame_finish+0x15c6/0x1c90 net/bridge/br_input.c:235
br_nf_hook_thresh+0x3c6/0x4a0 net/bridge/br_netfilter_hooks.c:-1
br_nf_pre_routing_finish_ipv6+0x999/0xd60 net/bridge/br_netfilter_ipv6.c:-1
NF_HOOK include/linux/netfilter.h:318 [inline]
br_nf_pre_routing_ipv6+0x37e/0x6b0 net/bridge/br_netfilter_ipv6.c:184
nf_hook_entry_hookfn include/linux/netfilter.h:158 [inline]
nf_hook_bridge_pre net/bridge/br_input.c:291 [inline]
br_handle_frame+0x96e/0x14f0 net/bridge/br_input.c:442
__netif_receive_skb_core+0x95f/0x3060 net/core/dev.c:6017
__netif_receive_skb_one_core net/core/dev.c:6128 [inline]
__netif_receive_skb+0x72/0x380 net/core/dev.c:6243
process_backlog+0x622/0x1530 net/core/dev.c:6595
__napi_poll+0xae/0x320 net/core/dev.c:7659
napi_poll net/core/dev.c:7722 [inline]
net_rx_action+0x672/0xe50 net/core/dev.c:7874
handle_softirqs+0x27d/0x880 kernel/softirq.c:626
do_softirq+0xec/0x180 kernel/softirq.c:523
__local_bh_enable_ip+0x17d/0x1c0 kernel/softirq.c:450
local_bh_enable include/linux/bottom_half.h:33 [inline]
fpregs_unlock arch/x86/include/asm/fpu/api.h:77 [inline]
kernel_fpu_end+0xd2/0x120 arch/x86/kernel/fpu/core.c:480
blake2s_compress+0xe9/0x1b80 lib/crypto/x86/blake2s.h:42
blake2s_final+0x116/0x270 lib/crypto/blake2s.c:148
hmac+0x1c6/0x330 drivers/net/wireguard/noise.c:325
kdf drivers/net/wireguard/noise.c:360 [inline]
message_ephemeral+0x1c0/0x280 drivers/net/wireguard/noise.c:493
wg_noise_handshake_consume_response+0x353/0xab0 drivers/net/wireguard/noise.c:767
wg_receive_handshake_packet drivers/net/wireguard/receive.c:166 [inline]
wg_packet_handshake_receive_worker+0x638/0xfd0 drivers/net/wireguard/receive.c:213
process_one_work+0x93a/0x15e0 kernel/workqueue.c:3261
process_scheduled_works kernel/workqueue.c:3344 [inline]
worker_thread+0x9b0/0xee0 kernel/workqueue.c:3425
kthread+0x711/0x8a0 kernel/kthread.c:463
ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:comedi_inc_scan_progress+0x1a4/0x430 drivers/comedi/drivers.c:563
Code: b6 0c 19 84 c9 0f 85 bd 01 00 00 03 45 2c 4c 8d a5 80 00 00 00 4c 89 e1 48 c1 e9 03 0f b6 0c 19 84 c9 0f 85 cc 01 00 00 31 d2 <41> f7 34 24 41 89 17 45 89 ec eb 0f e8 2b f7 f4 f8 48 bb 00 00 00
RSP: 0018:ffffc900000068f8 EFLAGS: 00010046
RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff88807e531800 R08: 00000000000000ff R09: 00000000000000ff
R10: dffffc0000000000 R11: ffffed1004deee01 R12: ffff88807e531880
R13: 0000000000000002 R14: 0000000000000000 R15: ffff88807e53182c
FS: 0000000000000000(0000) GS:ffff888125a6e000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fde381750e0 CR3: 0000000024ada000 CR4: 00000000003526f0
----------------
Code disassembly (best guess):
0: b6 0c mov $0xc,%dh
2: 19 84 c9 0f 85 bd 01 sbb %eax,0x1bd850f(%rcx,%rcx,8)
9: 00 00 add %al,(%rax)
b: 03 45 2c add 0x2c(%rbp),%eax
e: 4c 8d a5 80 00 00 00 lea 0x80(%rbp),%r12
15: 4c 89 e1 mov %r12,%rcx
18: 48 c1 e9 03 shr $0x3,%rcx
1c: 0f b6 0c 19 movzbl (%rcx,%rbx,1),%ecx
20: 84 c9 test %cl,%cl
22: 0f 85 cc 01 00 00 jne 0x1f4
28: 31 d2 xor %edx,%edx
* 2a: 41 f7 34 24 divl (%r12) <-- trapping instruction
2e: 41 89 17 mov %edx,(%r15)
31: 45 89 ec mov %r13d,%r12d
34: eb 0f jmp 0x45
36: e8 2b f7 f4 f8 call 0xf8f4f766
3b: 48 rex.W
3c: bb .byte 0xbb
3d: 00 00 add %al,(%rax)