syzbot

Oops: divide error: 0000 [#1] SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 29498 Comm: fido_id Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
RIP: 0010:comedi_inc_scan_progress+0x1cc/0x340 drivers/comedi/drivers.c:563
Code: 00 00 00 03 43 2c 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 14 11 84 d2 74 09 80 fa 03 0f 8e 53 01 00 00 31 d2 <f7> b3 80 00 00 00 89 53 2c e8 86 72 fa f8 48 8d 7b 34 48 b8 00 00
RSP: 0018:ffffc90000007d90 EFLAGS: 00010046
RAX: 0000000000000001 RBX: ffff8880578afc00 RCX: 1ffff1100af15f90
RDX: 0000000000000000 RSI: ffffffff88c29aa8 RDI: ffff8880578afc80
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000002
R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
FS:  00007f0475412880(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffddf37bd44 CR3: 0000000050ec1000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 comedi_buf_write_samples+0x406/0x640 drivers/comedi/comedi_buf.c:603
 parport_interrupt+0xec/0x150 drivers/comedi/drivers/comedi_parport.c:218
 __handle_irq_event_percpu+0x236/0x920 kernel/irq/handle.c:203
 handle_irq_event_percpu kernel/irq/handle.c:240 [inline]
 handle_irq_event+0xab/0x1e0 kernel/irq/handle.c:257
 handle_edge_irq+0x3ca/0x9e0 kernel/irq/chip.c:855
 generic_handle_irq_desc include/linux/irqdesc.h:173 [inline]
 handle_irq arch/x86/kernel/irq.c:254 [inline]
 call_irq_handler arch/x86/kernel/irq.c:310 [inline]
 __common_interrupt+0xd0/0x2f0 arch/x86/kernel/irq.c:325
 common_interrupt+0xba/0xe0 arch/x86/kernel/irq.c:318
 </IRQ>
 <TASK>
 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:688
RIP: 0010:check_kcov_mode kernel/kcov.c:183 [inline]
RIP: 0010:write_comp_data+0x18/0x90 kernel/kcov.c:246
Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 e7 78 e4 11 65 8b 05 f8 78 e4 11 <a9> 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00
RSP: 0018:ffffc9000ceb76f0 EFLAGS: 00000246
RAX: 0000000080000000 RBX: ffff8880797f7141 RCX: ffffffff8463104a
RDX: ffff8880507e8000 RSI: 000000000000005c RDI: 0000000000000001
RBP: 000000000000002e R08: 0000000000000001 R09: 000000000000005c
R10: 000000000000002e R11: 0000000000000001 R12: 0000000000000058
R13: ffff88802ce74fe6 R14: 0000000000000041 R15: dffffc0000000000
 tomoyo_encode2+0x1da/0x3e0 security/tomoyo/realpath.c:53
 tomoyo_encode+0x29/0x50 security/tomoyo/realpath.c:80
 tomoyo_realpath_from_path+0x18f/0x6e0 security/tomoyo/realpath.c:283
 tomoyo_get_realpath security/tomoyo/file.c:151 [inline]
 tomoyo_check_open_permission+0x2ab/0x3c0 security/tomoyo/file.c:771
 tomoyo_file_open+0x6b/0x90 security/tomoyo/tomoyo.c:334
 security_file_open+0x84/0x1e0 security/security.c:3183
 do_dentry_open+0x596/0x1530 fs/open.c:942
 vfs_open+0x82/0x3f0 fs/open.c:1097
 do_open fs/namei.c:3975 [inline]
 path_openat+0x1de4/0x2cb0 fs/namei.c:4134
 do_filp_open+0x20b/0x470 fs/namei.c:4161
 do_sys_openat2+0x11b/0x1d0 fs/open.c:1437
 do_sys_open fs/open.c:1452 [inline]
 __do_sys_openat fs/open.c:1468 [inline]
 __se_sys_openat fs/open.c:1463 [inline]
 __x64_sys_openat+0x174/0x210 fs/open.c:1463
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f0474ca7407
Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
RSP: 002b:00007ffddf37c760 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007f0475412880 RCX: 00007f0474ca7407
RDX: 00000000000a0000 RSI: 000055b453bdc2c0 RDI: ffffffffffffff9c
RBP: 000055b453bdc2c0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000202 R12: 000055b453bdb4c0
R13: 00007ffddf37d968 R14: 00007f0475579000 R15: 000055b420ece4d8
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:comedi_inc_scan_progress+0x1cc/0x340 drivers/comedi/drivers.c:563
Code: 00 00 00 03 43 2c 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 14 11 84 d2 74 09 80 fa 03 0f 8e 53 01 00 00 31 d2 <f7> b3 80 00 00 00 89 53 2c e8 86 72 fa f8 48 8d 7b 34 48 b8 00 00
RSP: 0018:ffffc90000007d90 EFLAGS: 00010046
RAX: 0000000000000001 RBX: ffff8880578afc00 RCX: 1ffff1100af15f90
RDX: 0000000000000000 RSI: ffffffff88c29aa8 RDI: ffff8880578afc80
RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000002
R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
FS:  00007f0475412880(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffddf37bd44 CR3: 0000000050ec1000 CR4: 00000000003526f0
----------------
Code disassembly (best guess), 1 bytes skipped:
   0:	00 00                	add    %al,(%rax)
   2:	03 43 2c             	add    0x2c(%rbx),%eax
   5:	48 ba 00 00 00 00 00 	movabs $0xdffffc0000000000,%rdx
   c:	fc ff df
   f:	48 89 f9             	mov    %rdi,%rcx
  12:	48 c1 e9 03          	shr    $0x3,%rcx
  16:	0f b6 14 11          	movzbl (%rcx,%rdx,1),%edx
  1a:	84 d2                	test   %dl,%dl
  1c:	74 09                	je     0x27
  1e:	80 fa 03             	cmp    $0x3,%dl
  21:	0f 8e 53 01 00 00    	jle    0x17a
  27:	31 d2                	xor    %edx,%edx
* 29:	f7 b3 80 00 00 00    	divl   0x80(%rbx) <-- trapping instruction
  2f:	89 53 2c             	mov    %edx,0x2c(%rbx)
  32:	e8 86 72 fa f8       	call   0xf8fa72bd
  37:	48 8d 7b 34          	lea    0x34(%rbx),%rdi
  3b:	48                   	rex.W
  3c:	b8                   	.byte 0xb8