syzbot


divide error in do_journal_end

Status: upstream: reported C repro on 2023/07/08 18:42
Bug presence: origin:upstream
Labels: missing-backport
[Documentation on labels]
Reported-by: syzbot+8b4def6a27716cebedb3@syzkaller.appspotmail.com
First crash: 726d, last: 6d05h
Fix commit to backport (bisect log) :
tree: upstream
commit fb6f20ecb121cef4d7946f834a6ee867c4e21b4a
Author: Jan Kara <jack@suse.cz>
Date: Thu Oct 17 10:28:23 2024 +0000

  reiserfs: The last commit

  
Fix bisection: the issue occurs on the latest tested release (bisect log)
Crash: divide error in do_journal_end (log)
Repro: C syz .config
  
Bug presence (3)
Date Name Commit Repro Result
2024/12/04 linux-5.15.y (ToT) 0a51d2d4527b C [report] divide error in do_journal_end
2023/07/10 upstream (ToT) 06c2afb862f9 C [report] divide error in do_journal_end
2024/12/04 upstream (ToT) feffde684ac2 C Didn't crash
Similar bugs (9)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream divide error in do_journal_end reiserfs 2 1687d 1714d 0/29 auto-closed as invalid on 2021/03/19 22:00
linux-4.14 divide error in do_journal_end (2) C error 1 1039d 1527d 0/1 upstream: reported C repro on 2021/04/28 16:52
upstream divide error in do_journal_end (3) reiserfs C error done 83 543d 924d 0/29 auto-obsoleted due to no activity on 2024/04/14 06:39
upstream divide error in do_journal_end (2) reiserfs C inconclusive 2 1514d 1513d 20/29 fixed on 2021/11/10 00:50
linux-4.19 divide error in do_journal_end (3) reiserfs C error 1 889d 889d 0/1 upstream: reported C repro on 2023/01/27 02:59
linux-4.19 divide error in do_journal_end (2) C done 4 1453d 1564d 1/1 fixed on 2021/08/12 11:53
linux-6.1 divide error in do_journal_end origin:upstream missing-backport C done 120 17d 552d 0/3 upstream: reported C repro on 2023/12/30 01:46
linux-4.14 divide error in do_journal_end C done 1 1637d 1697d 1/1 fixed on 2021/02/21 17:18
linux-4.19 divide error in do_journal_end C done 2 1649d 1709d 1/1 fixed on 2021/01/27 05:38
Last patch testing requests (10)
Created Duration User Patch Repo Result
2025/06/27 21:14 1h46m retest repro linux-5.15.y report log
2025/06/27 21:14 1h41m retest repro linux-5.15.y report log
2025/06/27 21:14 18m retest repro linux-5.15.y report log
2025/06/27 21:14 13m retest repro linux-5.15.y report log
2025/05/27 13:29 10m retest repro linux-5.15.y report log
2025/05/27 13:29 15m retest repro linux-5.15.y report log
2025/05/27 13:29 9m retest repro linux-5.15.y report log
2025/03/31 15:38 9m retest repro linux-5.15.y report log
2025/03/31 15:38 11m retest repro linux-5.15.y report log
2025/03/31 15:38 12m retest repro linux-5.15.y report log
Fix bisection attempts (8)
Created Duration User Patch Repo Result
2025/04/01 03:07 8h16m fix candidate upstream OK (1) job log
2024/09/13 12:11 1h00m bisect fix linux-5.15.y OK (0) job log log
2024/03/12 04:15 50m bisect fix linux-5.15.y OK (0) job log log
2024/02/03 14:05 1h18m (2) bisect fix linux-5.15.y OK (0) job log log
2023/12/25 15:11 1h00m bisect fix linux-5.15.y OK (0) job log log
2023/11/24 23:23 56m bisect fix linux-5.15.y OK (0) job log log
2023/10/22 22:25 1h05m bisect fix linux-5.15.y OK (0) job log log
2023/09/21 16:44 56m bisect fix linux-5.15.y OK (0) job log log

Sample crash report:
REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
divide error: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 4167 Comm: syz-executor215 Not tainted 5.15.184-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:do_journal_end+0x11eb/0x42d0 fs/reiserfs/journal.c:4089
Code: df 0f b6 04 28 84 c0 0f 85 44 2c 00 00 49 8d 44 1d 01 4c 89 f1 48 c1 e9 03 0f b6 0c 29 84 c9 0f 85 4c 2c 00 00 41 8b 0f 31 d2 <48> f7 f1 49 89 d6 4d 01 e6 48 8b 84 24 b8 00 00 00 80 3c 28 00 4c
RSP: 0018:ffffc90002d1f990 EFLAGS: 00010246
RAX: 0000000000000003 RBX: 0000000000000002 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807e266000
RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffff88807e265000
R10: 0000000000000000 R11: 0000000000000200 R12: 0000000000000000
R13: 0000000000000000 R14: ffff88806f01c017 R15: ffff88806f01c014
FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f752293e1b8 CR3: 000000000be8e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 reiserfs_sync_fs+0xcc/0x150 fs/reiserfs/super.c:78
 sync_filesystem+0xe6/0x220 fs/sync.c:56
 generic_shutdown_super+0x6b/0x300 fs/super.c:448
 kill_block_super+0x7c/0xe0 fs/super.c:1427
 deactivate_locked_super+0x93/0xf0 fs/super.c:335
 cleanup_mnt+0x418/0x4d0 fs/namespace.c:1143
 task_work_run+0x125/0x1a0 kernel/task_work.c:188
 exit_task_work include/linux/task_work.h:33 [inline]
 do_exit+0x616/0x20a0 kernel/exit.c:874
 do_group_exit+0x12e/0x300 kernel/exit.c:996
 __do_sys_exit_group kernel/exit.c:1007 [inline]
 __se_sys_exit_group kernel/exit.c:1005 [inline]
 __x64_sys_exit_group+0x3b/0x40 kernel/exit.c:1005
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7f75228f3c09
Code: Unable to access opcode bytes at RIP 0x7f75228f3bdf.
RSP: 002b:00007ffc13ed0918 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f75228f3c09
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
RBP: 00007f75229712d0 R08: ffffffffffffffb8 R09: 0000000000000006
R10: 0000000000000006 R11: 0000000000000246 R12: 00007f75229712d0
R13: 0000000000000000 R14: 00007f7522972040 R15: 00007f75228c2150
 </TASK>
Modules linked in:
---[ end trace 3b14e6b8559f4f78 ]---
RIP: 0010:do_journal_end+0x11eb/0x42d0 fs/reiserfs/journal.c:4089
Code: df 0f b6 04 28 84 c0 0f 85 44 2c 00 00 49 8d 44 1d 01 4c 89 f1 48 c1 e9 03 0f b6 0c 29 84 c9 0f 85 4c 2c 00 00 41 8b 0f 31 d2 <48> f7 f1 49 89 d6 4d 01 e6 48 8b 84 24 b8 00 00 00 80 3c 28 00 4c
RSP: 0018:ffffc90002d1f990 EFLAGS: 00010246
RAX: 0000000000000003 RBX: 0000000000000002 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807e266000
RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffff88807e265000
R10: 0000000000000000 R11: 0000000000000200 R12: 0000000000000000
R13: 0000000000000000 R14: ffff88806f01c017 R15: ffff88806f01c014
FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f752293e1b8 CR3: 000000002a5c5000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	df 0f                	fisttps (%rdi)
   2:	b6 04                	mov    $0x4,%dh
   4:	28 84 c0 0f 85 44 2c 	sub    %al,0x2c44850f(%rax,%rax,8)
   b:	00 00                	add    %al,(%rax)
   d:	49 8d 44 1d 01       	lea    0x1(%r13,%rbx,1),%rax
  12:	4c 89 f1             	mov    %r14,%rcx
  15:	48 c1 e9 03          	shr    $0x3,%rcx
  19:	0f b6 0c 29          	movzbl (%rcx,%rbp,1),%ecx
  1d:	84 c9                	test   %cl,%cl
  1f:	0f 85 4c 2c 00 00    	jne    0x2c71
  25:	41 8b 0f             	mov    (%r15),%ecx
  28:	31 d2                	xor    %edx,%edx
* 2a:	48 f7 f1             	div    %rcx <-- trapping instruction
  2d:	49 89 d6             	mov    %rdx,%r14
  30:	4d 01 e6             	add    %r12,%r14
  33:	48 8b 84 24 b8 00 00 	mov    0xb8(%rsp),%rax
  3a:	00
  3b:	80 3c 28 00          	cmpb   $0x0,(%rax,%rbp,1)
  3f:	4c                   	rex.WR

Crashes (329):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/05/28 11:23 linux-5.15.y 98f47d0e9b8c 874a1386 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci2-linux-5-15-kasan divide error in do_journal_end
2024/12/08 17:58 linux-5.15.y 0a51d2d4527b 9ac0fdc6 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/21 20:20 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2024/04/25 10:06 linux-5.15.y c52b9710c83d 8bdc0f22 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2024/04/19 17:40 linux-5.15.y c52b9710c83d af24b050 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2023/12/31 01:49 linux-5.15.y d93fa2c78854 fb427a07 .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-5-15-kasan divide error in do_journal_end
2023/07/08 18:42 linux-5.15.y d54cfc420586 668cb1fa .config console log report syz C [disk image] [vmlinux] [kernel image] [mounted in repro #1] [mounted in repro #2] ci2-linux-5-15-kasan divide error in do_journal_end
2025/06/11 13:20 linux-5.15.y 1c700860e8bc 5d7e17ca .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/06/10 09:54 linux-5.15.y 1c700860e8bc 4826c28e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/06/01 14:58 linux-5.15.y 98f47d0e9b8c 3d2f584d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/05/12 08:02 linux-5.15.y 3b8db0e4f263 77908e5f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/04/27 19:37 linux-5.15.y f7347f400572 c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/04/26 22:19 linux-5.15.y f7347f400572 c6b4fb39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/02/11 11:08 linux-5.15.y c16c81c81336 43f51a00 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/02/11 11:06 linux-5.15.y c16c81c81336 43f51a00 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/02/10 00:10 linux-5.15.y c16c81c81336 ef44b750 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/02/01 14:22 linux-5.15.y 003148680b79 aa47157c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/01/19 17:18 linux-5.15.y 4735586da88e f2cb035c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2025/01/05 09:48 linux-5.15.y 91786f140358 f3558dbf .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/12/29 13:16 linux-5.15.y 91786f140358 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/12/28 19:23 linux-5.15.y 91786f140358 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/12/28 19:09 linux-5.15.y 91786f140358 d3ccff63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/12/08 14:55 linux-5.15.y 0a51d2d4527b 9ac0fdc6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/10/21 06:41 linux-5.15.y 584a40a22cb9 cd6fc0a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/10/08 03:11 linux-5.15.y 3a5928702e71 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/10/07 20:01 linux-5.15.y 3a5928702e71 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/10/06 14:43 linux-5.15.y 3a5928702e71 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/10/06 13:36 linux-5.15.y 3a5928702e71 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/10/06 01:59 linux-5.15.y 3a5928702e71 d7906eff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/09/23 07:29 linux-5.15.y 3a5928702e71 6f888b75 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/09/19 04:41 linux-5.15.y 3a5928702e71 c673ca06 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/08/12 02:40 linux-5.15.y 7e89efd3ae1c 6f4edef4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/08/05 03:25 linux-5.15.y 7e89efd3ae1c 1786a2a8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/30 17:29 linux-5.15.y 7e89efd3ae1c 6fde257d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/29 14:53 linux-5.15.y 7e89efd3ae1c 5187fc86 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/28 20:34 linux-5.15.y 7e89efd3ae1c 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/27 13:46 linux-5.15.y 7e89efd3ae1c 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/26 21:09 linux-5.15.y 7c6d66f0266f 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/26 21:08 linux-5.15.y 7c6d66f0266f 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/26 20:06 linux-5.15.y 7c6d66f0266f 46eb10b7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/26 02:18 linux-5.15.y 7c6d66f0266f 3f86dfed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/25 14:43 linux-5.15.y 7c6d66f0266f 466a14e5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/24 18:48 linux-5.15.y 7c6d66f0266f d1a1b0ca .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/24 18:48 linux-5.15.y 7c6d66f0266f d1a1b0ca .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/24 07:50 linux-5.15.y 7c6d66f0266f 57b2edb1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/23 14:09 linux-5.15.y 7c6d66f0266f e50e8da5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/23 00:34 linux-5.15.y 7c6d66f0266f 708c10c4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/22 10:02 linux-5.15.y 7c6d66f0266f df655b64 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/22 10:02 linux-5.15.y 7c6d66f0266f df655b64 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/21 23:48 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/21 17:37 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/21 16:15 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/21 14:26 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/21 13:46 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
2024/07/21 13:31 linux-5.15.y 7c6d66f0266f b88348e9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan divide error in do_journal_end
* Struck through repros no longer work on HEAD.