syzbot

 sign-in | mailing list | source | docs
🐞 Open [816]
🐞 Fixed [75]
🐞 Invalid [975]
⬇ Missing Backports [122]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

divide error in do_journal_end

Status: upstream: reported C repro on 2023/07/08 18:42
Bug presence: origin:upstream
Labels: missing-backport
[Documentation on labels]
Reported-by: syzbot+8b4def6a27716cebedb3@syzkaller.appspotmail.com
First crash: 782d, last: 6d11h
Fix commit to backport (bisect log) :
tree: upstream
commit fb6f20ecb121cef4d7946f834a6ee867c4e21b4a
Author: Jan Kara <jack@suse.cz>
Date: Thu Oct 17 10:28:23 2024 +0000

  reiserfs: The last commit

  
Fix bisection: the issue occurs on the latest tested release (bisect log)
Crash: divide error in do_journal_end (log)
Repro: C syz .config
  
▶ ▼ Bug presence (3)
Date Name Commit Repro Result
2024/12/04 linux-5.15.y (ToT) 0a51d2d4527b C [report] divide error in do_journal_end
2023/07/10 upstream (ToT) 06c2afb862f9 C [report] divide error in do_journal_end
2024/12/04 upstream (ToT) feffde684ac2 C Didn't crash
▶ ▼ Similar bugs (9)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream divide error in do_journal_end fs 2 2 1742d 1770d 0/29 auto-closed as invalid on 2021/03/19 22:00
linux-4.14 divide error in do_journal_end (2) 2 C error 1 1094d 1583d 0/1 upstream: reported C repro on 2021/04/28 16:52
upstream divide error in do_journal_end (3) fs 2 C error done 83 599d 979d 0/29 auto-obsoleted due to no activity on 2024/04/14 06:39
upstream divide error in do_journal_end (2) erofs 2 C inconclusive 2 1569d 1569d 20/29 fixed on 2021/11/10 00:50
linux-4.19 divide error in do_journal_end (3) reiserfs 2 C error 1 944d 944d 0/1 upstream: reported C repro on 2023/01/27 02:59
linux-4.19 divide error in do_journal_end (2) 2 C done 4 1509d 1620d 1/1 fixed on 2021/08/12 11:53
linux-6.1 divide error in do_journal_end origin:upstream missing-backport 2 C done 120 73d 607d 0/3 upstream: reported C repro on 2023/12/30 01:46
linux-4.14 divide error in do_journal_end 2 C done 1 1693d 1753d 1/1 fixed on 2021/02/21 17:18
linux-4.19 divide error in do_journal_end 2 C done 2 1705d 1765d 1/1 fixed on 2021/01/27 05:38
▶ ▼ Last patch testing requests (10)
Created Duration User Patch Repo Result
2025/08/15 23:12 10m retest repro linux-5.15.y report log
2025/08/15 23:12 20m retest repro linux-5.15.y report log
2025/08/15 23:12 12m retest repro linux-5.15.y report log
2025/07/31 17:35 15m retest repro linux-5.15.y report log
2025/07/31 17:35 14m retest repro linux-5.15.y report log
2025/06/27 21:14 1h46m retest repro linux-5.15.y report log
2025/06/27 21:14 1h41m retest repro linux-5.15.y report log
2025/06/27 21:14 18m retest repro linux-5.15.y report log
2025/06/27 21:14 13m retest repro linux-5.15.y report log
2025/05/27 13:29 10m retest repro linux-5.15.y report log
▶ ▼ Fix bisection attempts (8)
Created Duration User Patch Repo Result
2025/04/01 03:07 8h16m fix candidate upstream OK (1) job log
2024/09/13 12:11 1h00m bisect fix linux-5.15.y OK (0) job log log
2024/03/12 04:15 50m bisect fix linux-5.15.y OK (0) job log log
2024/02/03 14:05 1h18m (2) bisect fix linux-5.15.y OK (0) job log log
2023/12/25 15:11 1h00m bisect fix linux-5.15.y OK (0) job log log
2023/11/24 23:23 56m bisect fix linux-5.15.y OK (0) job log log
2023/10/22 22:25 1h05m bisect fix linux-5.15.y OK (0) job log log
2023/09/21 16:44 56m bisect fix linux-5.15.y OK (0) job log log

Sample crash report:
REISERFS warning: reiserfs-5090 is_tree_node: node level 8483 does not match to the expected one -1
REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 0. Fsck?
REISERFS (device loop0): Remounting filesystem read-only
divide error: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 4283 Comm: syz-executor Not tainted 5.15.186-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:do_journal_end+0x11eb/0x42d0 fs/reiserfs/journal.c:4089
Code: df 0f b6 04 28 84 c0 0f 85 44 2c 00 00 49 8d 44 1d 01 4c 89 f1 48 c1 e9 03 0f b6 0c 29 84 c9 0f 85 4c 2c 00 00 41 8b 0f 31 d2 <48> f7 f1 49 89 d6 4d 01 e6 48 8b 84 24 b8 00 00 00 80 3c 28 00 4c
RSP: 0018:ffffc9000306f870 EFLAGS: 00010246
RAX: 0000000000000003 RBX: 0000000000000002 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888029d2c000
RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffff888029d2b000
R10: 0000000000000000 R11: 0000000000000200 R12: 0000000000000000
R13: 0000000000000000 R14: ffff88805c35c017 R15: ffff88805c35c014
FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffcb7166a90 CR3: 000000002b6d1000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 do_journal_release+0x4eb/0x540 fs/reiserfs/journal.c:1937
 journal_release+0x1b/0x30 fs/reiserfs/journal.c:1968
 reiserfs_put_super+0x21e/0x480 fs/reiserfs/super.c:616
 generic_shutdown_super+0x130/0x300 fs/super.c:475
 kill_block_super+0x7c/0xe0 fs/super.c:1427
 deactivate_locked_super+0x93/0xf0 fs/super.c:335
 cleanup_mnt+0x418/0x4d0 fs/namespace.c:1139
 task_work_run+0x125/0x1a0 kernel/task_work.c:188
 exit_task_work include/linux/task_work.h:33 [inline]
 do_exit+0x61e/0x20a0 kernel/exit.c:883
 do_group_exit+0x12e/0x300 kernel/exit.c:997
 __do_sys_exit_group kernel/exit.c:1008 [inline]
 __se_sys_exit_group kernel/exit.c:1006 [inline]
 __x64_sys_exit_group+0x3b/0x40 kernel/exit.c:1006
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f49bb620929
Code: Unable to access opcode bytes at RIP 0x7f49bb6208ff.
RSP: 002b:00007ffcb7168b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f49bb6a2997 RCX: 00007f49bb620929
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
RBP: 0000000000000010 R08: 00007ffcb7166926 R09: 00007ffcb7169e40
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcb7169e40
R13: 00007f49bb6a2925 R14: 0000555590c1c4a8 R15: 00007ffcb716af10
 </TASK>
Modules linked in:
---[ end trace 1c211453e2fc07e6 ]---
RIP: 0010:do_journal_end+0x11eb/0x42d0 fs/reiserfs/journal.c:4089
Code: df 0f b6 04 28 84 c0 0f 85 44 2c 00 00 49 8d 44 1d 01 4c 89 f1 48 c1 e9 03 0f b6 0c 29 84 c9 0f 85 4c 2c 00 00 41 8b 0f 31 d2 <48> f7 f1 49 89 d6 4d 01 e6 48 8b 84 24 b8 00 00 00 80 3c 28 00 4c
RSP: 0018:ffffc9000306f870 EFLAGS: 00010246
RAX: 0000000000000003 RBX: 0000000000000002 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888029d2c000
RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffff888029d2b000
R10: 0000000000000000 R11: 0000000000000200 R12: 0000000000000000
R13: 0000000000000000 R14: ffff88805c35c017 R15: ffff88805c35c014
FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffcb7166a90 CR3: 000000002a5ff000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	df 0f                	fisttps (%rdi)
   2:	b6 04                	mov    $0x4,%dh
   4:	28 84 c0 0f 85 44 2c 	sub    %al,0x2c44850f(%rax,%rax,8)
   b:	00 00                	add    %al,(%rax)
   d:	49 8d 44 1d 01       	lea    0x1(%r13,%rbx,1),%rax
  12:	4c 89 f1             	mov    %r14,%rcx
  15:	48 c1 e9 03          	shr    $0x3,%rcx
  19:	0f b6 0c 29          	movzbl (%rcx,%rbp,1),%ecx
  1d:	84 c9                	test   %cl,%cl
  1f:	0f 85 4c 2c 00 00    	jne    0x2c71
  25:	41 8b 0f             	mov    (%r15),%ecx
  28:	31 d2                	xor    %edx,%edx
* 2a:	48 f7 f1             	div    %rcx <-- trapping instruction
  2d:	49 89 d6             	mov    %rdx,%r14
  30:	4d 01 e6             	add    %r12,%r14
  33:	48 8b 84 24 b8 00 00 	mov    0xb8(%rsp),%rax
  3a:	00
  3b:	80 3c 28 00          	cmpb   $0x0,(%rax,%rbp,1)
  3f:	4c                   	rex.WR

Crashes (418):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/07/09 23:51 linux-5.15.y 3dea0e7f549e f4e5e155 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/07 15:24 linux-5.15.y 3dea0e7f549e 4f67c4ae .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-5-15-kasan divide error in do_journal_end
2025/05/28 11:23 linux-5.15.y 98f47d0e9b8c 874a1386 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-5-15-kasan divide error in do_journal_end
2024/12/08 17:58 linux-5.15.y 0a51d2d4527b 9ac0fdc6 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/21 20:20 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2024/04/25 10:06 linux-5.15.y c52b9710c83d 8bdc0f22 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2024/04/19 17:40 linux-5.15.y c52b9710c83d af24b050 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2023/12/31 01:49 linux-5.15.y d93fa2c78854 fb427a07 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2023/07/08 18:42 linux-5.15.y d54cfc420586 668cb1fa .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro #1] [mounted in repro #2] ci2-linux-5-15-kasan divide error in do_journal_end
2025/08/22 10:26 linux-5.15.y c79648372d02 bf27483f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/08/17 18:04 linux-5.15.y c79648372d02 1804e95e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/17 02:18 linux-5.15.y 89950c454265 44f8051e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/16 11:58 linux-5.15.y 89950c454265 124ec9cc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/15 08:26 linux-5.15.y 89950c454265 03fcfc4b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/14 21:37 linux-5.15.y 89950c454265 d8fc7335 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/14 05:42 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/14 00:23 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/13 15:50 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/13 06:20 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/12 12:53 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/12 05:02 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/12 05:01 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/10 22:12 linux-5.15.y 2f693b607545 3cda49cf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/10 06:58 linux-5.15.y 3dea0e7f549e 956bd956 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/09 20:03 linux-5.15.y 3dea0e7f549e f4e5e155 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/09 19:51 linux-5.15.y 3dea0e7f549e f4e5e155 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/09 19:42 linux-5.15.y 3dea0e7f549e f4e5e155 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/09 14:38 linux-5.15.y 3dea0e7f549e f4e5e155 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/07/09 14:33 linux-5.15.y 3dea0e7f549e f4e5e155 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/06/11 13:20 linux-5.15.y 1c700860e8bc 5d7e17ca .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/06/10 09:54 linux-5.15.y 1c700860e8bc 4826c28e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/06/01 14:58 linux-5.15.y 98f47d0e9b8c 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/05/12 08:02 linux-5.15.y 3b8db0e4f263 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/04/27 19:37 linux-5.15.y f7347f400572 c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/04/26 22:19 linux-5.15.y f7347f400572 c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/02/11 11:08 linux-5.15.y c16c81c81336 43f51a00 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/02/11 11:06 linux-5.15.y c16c81c81336 43f51a00 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/02/10 00:10 linux-5.15.y c16c81c81336 ef44b750 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/02/01 14:22 linux-5.15.y 003148680b79 aa47157c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/01/19 17:18 linux-5.15.y 4735586da88e f2cb035c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/01/05 09:48 linux-5.15.y 91786f140358 f3558dbf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/12/29 13:16 linux-5.15.y 91786f140358 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/12/28 19:23 linux-5.15.y 91786f140358 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/12/28 19:09 linux-5.15.y 91786f140358 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/12/08 14:55 linux-5.15.y 0a51d2d4527b 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/10/21 06:41 linux-5.15.y 584a40a22cb9 cd6fc0a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/10/08 03:11 linux-5.15.y 3a5928702e71 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/10/07 20:01 linux-5.15.y 3a5928702e71 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/10/06 14:43 linux-5.15.y 3a5928702e71 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/10/06 13:36 linux-5.15.y 3a5928702e71 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/10/06 01:59 linux-5.15.y 3a5928702e71 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/09/23 07:29 linux-5.15.y 3a5928702e71 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/09/19 04:41 linux-5.15.y 3a5928702e71 c673ca06 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/08/12 02:40 linux-5.15.y 7e89efd3ae1c 6f4edef4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/08/05 03:25 linux-5.15.y 7e89efd3ae1c 1786a2a8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/30 17:29 linux-5.15.y 7e89efd3ae1c 6fde257d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/29 14:53 linux-5.15.y 7e89efd3ae1c 5187fc86 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/28 20:34 linux-5.15.y 7e89efd3ae1c 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/27 13:46 linux-5.15.y 7e89efd3ae1c 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/26 21:09 linux-5.15.y 7c6d66f0266f 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/26 21:08 linux-5.15.y 7c6d66f0266f 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/26 20:06 linux-5.15.y 7c6d66f0266f 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
* Struck through repros no longer work on HEAD.