Oops: divide error: 0000 [#1] SMP KASAN PTI CPU: 0 UID: 0 PID: 6977 Comm: syz-executor Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 RIP: 0010:comedi_inc_scan_progress+0x1a4/0x430 drivers/comedi/drivers.c:556 Code: b6 0c 19 84 c9 0f 85 bd 01 00 00 03 45 2c 4c 8d a5 80 00 00 00 4c 89 e1 48 c1 e9 03 0f b6 0c 19 84 c9 0f 85 cc 01 00 00 31 d2 <41> f7 34 24 41 89 17 45 89 ec eb 0f e8 eb 91 d6 f8 48 bb 00 00 00 RSP: 0018:ffffc90000007c80 EFLAGS: 00010046 RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff88802903b000 R08: dffffc0000000000 R09: 0000000000000000 R10: dffffc0000000000 R11: ffffed100a1a6201 R12: ffff88802903b080 R13: 0000000000000002 R14: 0000000000000000 R15: ffff88802903b02c FS: 000055557e4aa500(0000) GS:ffff888125be3000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f81d84e56c0 CR3: 000000007d800000 CR4: 00000000003526f0 Call Trace: comedi_buf_write_samples+0x373/0x5a0 drivers/comedi/comedi_buf.c:603 parport_interrupt+0xf3/0x150 drivers/comedi/drivers/comedi_parport.c:218 __handle_irq_event_percpu+0x28c/0x980 kernel/irq/handle.c:158 handle_irq_event_percpu kernel/irq/handle.c:193 [inline] handle_irq_event+0x8b/0x1e0 kernel/irq/handle.c:210 handle_edge_irq+0x267/0x9e0 kernel/irq/chip.c:797 generic_handle_irq_desc include/linux/irqdesc.h:173 [inline] handle_irq arch/x86/kernel/irq.c:254 [inline] call_irq_handler arch/x86/kernel/irq.c:266 [inline] __common_interrupt+0x143/0x250 arch/x86/kernel/irq.c:292 common_interrupt+0xb6/0xe0 arch/x86/kernel/irq.c:285 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:693 RIP: 0010:lock_acquire+0x175/0x360 kernel/locking/lockdep.c:5875 Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 cb 6b 06 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e RSP: 0018:ffffc90003aa7270 EFLAGS: 00000206 RAX: 8ab9ba360129a300 RBX: 0000000000000000 RCX: 8ab9ba360129a300 RDX: 0000000000000000 RSI: ffffffff8db80ddc RDI: ffffffff8be34680 RBP: ffffffff822e57da R08: 0000000000000000 R09: ffffffff822e57da R10: dffffc0000000000 R11: fffff9400035dd91 R12: 0000000000000002 R13: ffffffff8e13d960 R14: 0000000000000000 R15: 0000000000000246 rcu_lock_acquire include/linux/rcupdate.h:331 [inline] rcu_read_lock_sched include/linux/rcupdate.h:932 [inline] pfn_valid+0xd6/0x490 include/linux/mmzone.h:2162 page_table_check_set+0x25/0x730 mm/page_table_check.c:105 page_table_check_ptes_set include/linux/page_table_check.h:76 [inline] set_ptes include/linux/pgtable.h:292 [inline] __copy_present_ptes mm/memory.c:978 [inline] copy_present_ptes mm/memory.c:1057 [inline] copy_pte_range mm/memory.c:1180 [inline] copy_pmd_range+0x4439/0x71d0 mm/memory.c:1267 copy_pud_range mm/memory.c:1304 [inline] copy_p4d_range mm/memory.c:1328 [inline] copy_page_range+0xc14/0x1270 mm/memory.c:1416 dup_mmap+0xf57/0x1ac0 mm/mmap.c:1834 dup_mm kernel/fork.c:1480 [inline] copy_mm+0x13c/0x4b0 kernel/fork.c:1532 copy_process+0x1706/0x3c00 kernel/fork.c:2168 kernel_clone+0x21e/0x840 kernel/fork.c:2598 __do_sys_clone kernel/fork.c:2741 [inline] __se_sys_clone kernel/fork.c:2725 [inline] __x64_sys_clone+0x18b/0x1e0 kernel/fork.c:2725 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f81d7785213 Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 RSP: 002b:00007ffef455f1d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f81d7785213 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 R10: 000055557e4aa7d0 R11: 0000000000000246 R12: 0000000000000000 R13: 000055557e4bd590 R14: 0000000000060591 R15: 00007ffef455f370 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:comedi_inc_scan_progress+0x1a4/0x430 drivers/comedi/drivers.c:556 Code: b6 0c 19 84 c9 0f 85 bd 01 00 00 03 45 2c 4c 8d a5 80 00 00 00 4c 89 e1 48 c1 e9 03 0f b6 0c 19 84 c9 0f 85 cc 01 00 00 31 d2 <41> f7 34 24 41 89 17 45 89 ec eb 0f e8 eb 91 d6 f8 48 bb 00 00 00 RSP: 0018:ffffc90000007c80 EFLAGS: 00010046 RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff88802903b000 R08: dffffc0000000000 R09: 0000000000000000 R10: dffffc0000000000 R11: ffffed100a1a6201 R12: ffff88802903b080 R13: 0000000000000002 R14: 0000000000000000 R15: ffff88802903b02c FS: 000055557e4aa500(0000) GS:ffff888125be3000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f81d84e56c0 CR3: 000000007d800000 CR4: 00000000003526f0 ---------------- Code disassembly (best guess): 0: b6 0c mov $0xc,%dh 2: 19 84 c9 0f 85 bd 01 sbb %eax,0x1bd850f(%rcx,%rcx,8) 9: 00 00 add %al,(%rax) b: 03 45 2c add 0x2c(%rbp),%eax e: 4c 8d a5 80 00 00 00 lea 0x80(%rbp),%r12 15: 4c 89 e1 mov %r12,%rcx 18: 48 c1 e9 03 shr $0x3,%rcx 1c: 0f b6 0c 19 movzbl (%rcx,%rbx,1),%ecx 20: 84 c9 test %cl,%cl 22: 0f 85 cc 01 00 00 jne 0x1f4 28: 31 d2 xor %edx,%edx * 2a: 41 f7 34 24 divl (%r12) <-- trapping instruction 2e: 41 89 17 mov %edx,(%r15) 31: 45 89 ec mov %r13d,%r12d 34: eb 0f jmp 0x45 36: e8 eb 91 d6 f8 call 0xf8d69226 3b: 48 rex.W 3c: bb .byte 0xbb 3d: 00 00 add %al,(%rax)