divide error: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 24914 Comm: syz.6.6989 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:comedi_inc_scan_progress+0x1a2/0x430 drivers/comedi/drivers.c:562
Code: b6 0c 19 84 c9 0f 85 b8 01 00 00 03 45 34 4c 8d a5 88 00 00 00 4c 89 e1 48 c1 e9 03 0f b6 0c 19 84 c9 0f 85 c7 01 00 00 31 d2 <41> f7 34 24 41 89 17 45 89 ec eb 0f e8 ed 09 77 f9 48 bb 00 00 00
RSP: 0018:ffffc90000007c80 EFLAGS: 00010046
RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff88802fcc7600 R08: ffff88802fcc7600 R09: 00000000000000ff
R10: dffffc0000000000 R11: fffff520017cbc01 R12: ffff88802fcc7688
R13: 0000000000000002 R14: 0000000000000000 R15: ffff88802fcc7634
FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f5a6c12fb4c CR3: 00000000196e7000 CR4: 00000000003506f0
Call Trace:
 <IRQ>
 comedi_buf_write_samples+0x372/0x5d0 drivers/comedi/comedi_buf.c:646
 das16m1_handler+0x213/0x4b0 drivers/comedi/drivers/das16m1.c:413
 das16m1_interrupt+0xab/0x180 drivers/comedi/drivers/das16m1.c:470
 __handle_irq_event_percpu+0x271/0x940 kernel/irq/handle.c:158
 handle_irq_event_percpu kernel/irq/handle.c:193 [inline]
 handle_irq_event+0x8b/0x1e0 kernel/irq/handle.c:210
 handle_edge_irq+0x247/0xb30 kernel/irq/chip.c:831
 generic_handle_irq_desc include/linux/irqdesc.h:161 [inline]
 handle_irq arch/x86/kernel/irq.c:240 [inline]
 __common_interrupt+0x13b/0x230 arch/x86/kernel/irq.c:259
 common_interrupt+0xb4/0xd0 arch/x86/kernel/irq.c:249
 </IRQ>
 <TASK>
 asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:678
RIP: 0010:check_kcov_mode kernel/kcov.c:184 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x30/0x60 kernel/kcov.c:216
Code: 04 24 65 48 8b 0d a0 a0 7c 7e 65 8b 15 a1 a0 7c 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c <8b> 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48
RSP: 0018:ffffc9000bc5f638 EFLAGS: 00000246
RAX: ffffffff81d60c99 RBX: 1ffffd40001726f0 RCX: ffff88801ffa3c00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: dffffc0000000000 R08: ffffea0000b93787 R09: 1ffffd40001726f0
R10: dffffc0000000000 R11: fffff940001726f1 R12: ffffea0000b93780
R13: 1ffffd40001726f1 R14: ffffea0000b93788 R15: 0000000000000000
 folio_test_swapcache include/linux/page-flags.h:564 [inline]
 free_swap_cache+0xe9/0x750 mm/swap_state.c:288
 free_pages_and_swap_cache+0x64/0xa0 mm/swap_state.c:314
 tlb_batch_pages_flush mm/mmu_gather.c:99 [inline]
 tlb_flush_mmu_free mm/mmu_gather.c:294 [inline]
 tlb_flush_mmu+0x379/0x510 mm/mmu_gather.c:301
 zap_pte_range mm/memory.c:1532 [inline]
 zap_pmd_range mm/memory.c:1571 [inline]
 zap_pud_range mm/memory.c:1600 [inline]
 zap_p4d_range mm/memory.c:1621 [inline]
 unmap_page_range+0x2690/0x3000 mm/memory.c:1642
 unmap_vmas+0x286/0x3f0 mm/memory.c:1732
 exit_mmap+0x238/0xb90 mm/mmap.c:3302
 __mmput+0x118/0x3c0 kernel/fork.c:1355
 exit_mm+0x1f2/0x2c0 kernel/exit.c:569
 do_exit+0x8dd/0x2460 kernel/exit.c:870
 do_group_exit+0x21b/0x2d0 kernel/exit.c:1024
 __do_sys_exit_group kernel/exit.c:1035 [inline]
 __se_sys_exit_group kernel/exit.c:1033 [inline]
 __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1033
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x55/0xa0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7fa8a139c629
Code: Unable to access opcode bytes at 0x7fa8a139c5ff.
RSP: 002b:00007ffd884cad38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa8a139c629
RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 00007ffd884cad9c R08: 0000000000000000 R09: 00000000000927c0
R10: 00007fa8a1616038 R11: 0000000000000246 R12: 000000000000025f
R13: 00000000000927c0 R14: 00000000000e2b52 R15: 00007ffd884cadf0
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:comedi_inc_scan_progress+0x1a2/0x430 drivers/comedi/drivers.c:562
Code: b6 0c 19 84 c9 0f 85 b8 01 00 00 03 45 34 4c 8d a5 88 00 00 00 4c 89 e1 48 c1 e9 03 0f b6 0c 19 84 c9 0f 85 c7 01 00 00 31 d2 <41> f7 34 24 41 89 17 45 89 ec eb 0f e8 ed 09 77 f9 48 bb 00 00 00
RSP: 0018:ffffc90000007c80 EFLAGS: 00010046
RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff88802fcc7600 R08: ffff88802fcc7600 R09: 00000000000000ff
R10: dffffc0000000000 R11: fffff520017cbc01 R12: ffff88802fcc7688
R13: 0000000000000002 R14: 0000000000000000 R15: ffff88802fcc7634
FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f5a6c12fb4c CR3: 00000000196e7000 CR4: 00000000003506f0
----------------
Code disassembly (best guess):
   0:	b6 0c                	mov    $0xc,%dh
   2:	19 84 c9 0f 85 b8 01 	sbb    %eax,0x1b8850f(%rcx,%rcx,8)
   9:	00 00                	add    %al,(%rax)
   b:	03 45 34             	add    0x34(%rbp),%eax
   e:	4c 8d a5 88 00 00 00 	lea    0x88(%rbp),%r12
  15:	4c 89 e1             	mov    %r12,%rcx
  18:	48 c1 e9 03          	shr    $0x3,%rcx
  1c:	0f b6 0c 19          	movzbl (%rcx,%rbx,1),%ecx
  20:	84 c9                	test   %cl,%cl
  22:	0f 85 c7 01 00 00    	jne    0x1ef
  28:	31 d2                	xor    %edx,%edx
* 2a:	41 f7 34 24          	divl   (%r12) <-- trapping instruction
  2e:	41 89 17             	mov    %edx,(%r15)
  31:	45 89 ec             	mov    %r13d,%r12d
  34:	eb 0f                	jmp    0x45
  36:	e8 ed 09 77 f9       	call   0xf9770a28
  3b:	48                   	rex.W
  3c:	bb                   	.byte 0xbb
  3d:	00 00                	add    %al,(%rax)