bisecting cause commit starting from d2b6f8a179194de0ffc4886ffc2c4358d86047b8 building syzkaller on 09efdd63fa8ebdadeccc841b699026e73081f7e0 testing commit d2b6f8a179194de0ffc4886ffc2c4358d86047b8 with gcc (GCC) 10.2.1 20210217 kernel signature: 523d4a52ea04efead30aef648120a4fb24b157f7ae1c3543a937726d7770b3cc all runs: crashed: divide error in squashfs_readpage testing release v5.12 testing commit 9f4ad9e425a1d3b6a34617b8ea226d56a119a717 with gcc (GCC) 10.2.1 20210217 kernel signature: 730f820ef927730b5ef5036ebf8e045defb185547743f53f909f9d8782e2962b all runs: crashed: divide error in squashfs_readpage testing release v5.11 testing commit f40ddce88593482919761f74910f42f4b84c004b with gcc (GCC) 10.2.1 20210217 kernel signature: cd0624c313eee9dbe883c84613088a076004fb5606005959d8903d734f96eead all runs: crashed: divide error in squashfs_readpage testing release v5.10 testing commit 2c85ebc57b3e1817b6ce1a6b703928e113a90442 with gcc (GCC) 10.2.1 20210217 kernel signature: a767d1c0748b262bedcbdaea0dcd8525f36dfd860e55e3011071d79cdd546eb7 all runs: crashed: UBSAN: division-overflow in squashfs_readpage testing release v5.9 testing commit bbf5c979011a099af5dc76498918ed7df445635b with gcc (GCC) 10.2.1 20210217 kernel signature: c1eb7e909f8378967dad0ace2a253c918d67954b67bcd2832ebee20390200107 run #0: crashed: UBSAN: division-overflow in squashfs_readpage run #1: crashed: UBSAN: division-overflow in squashfs_readpage run #2: crashed: divide error in squashfs_readpage run #3: crashed: UBSAN: division-overflow in squashfs_readpage run #4: crashed: UBSAN: division-overflow in squashfs_readpage run #5: crashed: divide error in squashfs_readpage run #6: crashed: UBSAN: division-overflow in squashfs_readpage run #7: crashed: UBSAN: division-overflow in squashfs_readpage run #8: crashed: UBSAN: division-overflow in squashfs_readpage run #9: crashed: UBSAN: division-overflow in squashfs_readpage testing release v5.8 testing commit bcf876870b95592b52519ed4aafcf9d95999bc9c with gcc (GCC) 8.4.1 20210217 kernel signature: f6de4df5ed9c29ab5824ce65bcdf9e4dfb2852db8256f44937f4d63a0ff5d01e all runs: crashed: UBSAN: division-overflow in squashfs_readpage testing release v5.7 testing commit 3d77e6a8804abcc0504c904bd6e5cdf3a5cf8162 with gcc (GCC) 8.4.1 20210217 kernel signature: e57b6cda2ab3463bd1bc6893c930b2016d3677a82b7c1b51a1678f28d845d0e6 all runs: crashed: UBSAN: division-overflow in squashfs_readpage testing release v5.6 testing commit 7111951b8d4973bda27ff663f2cf18b663d15b48 with gcc (GCC) 8.4.1 20210217 kernel signature: 2a8dc9b89ed1165530526b9866ec6781a12cd38e63cf08517815f40ddc6ea31e run #0: crashed: UBSAN: undefined-behaviour in squashfs_readpage run #1: crashed: UBSAN: undefined-behaviour in squashfs_readpage run #2: crashed: UBSAN: undefined-behaviour in squashfs_readpage run #3: crashed: UBSAN: undefined-behaviour in squashfs_readpage run #4: crashed: UBSAN: undefined-behaviour in squashfs_readpage run #5: crashed: UBSAN: undefined-behaviour in squashfs_readpage run #6: crashed: UBSAN: undefined-behaviour in squashfs_readpage run #7: crashed: UBSAN: undefined-behaviour in squashfs_readpage run #8: crashed: divide error in squashfs_readpage run #9: crashed: UBSAN: undefined-behaviour in squashfs_readpage testing release v5.5 testing commit d5226fa6dbae0569ee43ecfc08bdcd6770fc4755 with gcc (GCC) 8.4.1 20210217 kernel signature: c93eb11450a27556203c128e7a856aa696f70391a251a2807fc35afe86a563da all runs: crashed: UBSAN: undefined-behaviour in squashfs_readpage testing release v5.4 testing commit 219d54332a09e8d8741c1e1982f5eae56099de85 with gcc (GCC) 8.4.1 20210217 kernel signature: 469179b32e586e76578b648289d6fac7d6a4c0a65d1c4471a232d98a24347ce9 all runs: crashed: UBSAN: undefined-behaviour in squashfs_readpage testing release v5.3 testing commit 4d856f72c10ecb060868ed10ff1b1453943fc6c8 with gcc (GCC) 8.4.1 20210217 kernel signature: 03e6ffe9e7e9fdbda3ea8249f0da9798bd3c31a5059d911464acb6f2e4620a5d all runs: crashed: UBSAN: undefined-behaviour in squashfs_readpage testing release v5.2 testing commit 0ecfebd2b52404ae0c54a878c872bb93363ada36 with gcc (GCC) 8.4.1 20210217 kernel signature: e22348010019d7cc0076a5c17d8724d5eeebf0c7ff2ee03d16924ce69179d134 all runs: crashed: divide error in squashfs_readpage testing release v5.1 testing commit e93c9c99a629c61837d5a7fc2120cd2b6c70dbdd with gcc (GCC) 8.4.1 20210217 kernel signature: e6b32bbb290f32df6a756b9854ad5641bc292659c53bf3dcb1481908451f23c7 all runs: crashed: divide error in squashfs_readpage testing release v5.0 testing commit 1c163f4c7b3f621efff9b28a47abb36f7378d783 with gcc (GCC) 8.4.1 20210217 kernel signature: e5f4ad6746a535d56c609dd24c9b9fd51d7bd8ce916d625c62f20b5a3a931cdd run #0: crashed: divide error in squashfs_readpage run #1: crashed: divide error in squashfs_readpage run #2: crashed: divide error in corrupted run #3: crashed: divide error in squashfs_readpage run #4: crashed: divide error in squashfs_readpage run #5: crashed: divide error in squashfs_readpage run #6: crashed: divide error in squashfs_readpage run #7: crashed: divide error in squashfs_readpage run #8: crashed: divide error in squashfs_readpage run #9: crashed: divide error in squashfs_readpage testing release v4.20 testing commit 8fe28cb58bcb235034b64cbbb7550a8a43fd88be with gcc (GCC) 8.4.1 20210217 kernel signature: 694b55002f6916e873f1df337ad0dd9573c0ad5daa4c1d818f73702eb180751b run #0: crashed: divide error in squashfs_readpage run #1: crashed: divide error in squashfs_readpage run #2: crashed: divide error in squashfs_readpage run #3: crashed: divide error in corrupted run #4: crashed: divide error in squashfs_readpage run #5: crashed: divide error in squashfs_readpage run #6: crashed: divide error in squashfs_readpage run #7: crashed: divide error in squashfs_readpage run #8: crashed: divide error in squashfs_readpage run #9: crashed: divide error in squashfs_readpage testing release v4.19 testing commit 84df9525b0c27f3ebc2ebb1864fa62a97fdedb7d with gcc (GCC) 8.4.1 20210217 kernel signature: 1de9aaec8f0be64de9c82bd43911dc616cfaa9443597bdbe5684af45bd8ab29f all runs: crashed: divide error in squashfs_readpage testing release v4.18 testing commit 94710cac0ef4ee177a63b5227664b38c95bbf703 with gcc (GCC) 8.4.1 20210217 kernel signature: 8d2f9d936f46ef6c5e2e51850960ad6424d056936233841e02b1bea0aad3ffb4 all runs: crashed: divide error in squashfs_readpage testing release v4.17 testing commit 29dcea88779c856c7dc92040a0c01233263101d4 with gcc (GCC) 8.4.1 20210217 failed to run ["make" "-j" "64" "ARCH=x86_64" "CC=/syzkaller/shared/bisect_bin/gcc-8.1.0/bin/gcc" "bzImage"]: exit status 2 testing release v4.16 testing commit 0adb32858b0bddf4ada5f364a84ed60b196dbcda with gcc (GCC) 8.4.1 20210217 orc_dump.c:106:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] orc_dump.c:111:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] elf.c:135:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] elf.c:140:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] testing release v4.15 testing commit d8a5b80568a9cb66810e75b182018e9edb68e8ff with gcc (GCC) 8.4.1 20210217 orc_dump.c:106:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] orc_dump.c:111:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] pager.c:36:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict] elf.c:135:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] elf.c:140:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] testing release v4.14 testing commit bebc6082da0a9f5d47a1ea2edc099bf671058bd4 with gcc (GCC) 8.4.1 20210217 orc_dump.c:105:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] orc_dump.c:110:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] pager.c:36:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict] elf.c:134:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] elf.c:139:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] testing release v4.13 testing commit 569dbb88e80deb68974ef6fdd6a13edb9d686261 with gcc (GCC) 8.4.1 20210217 pager.c:35:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict] elf.c:144:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] elf.c:149:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] testing release v4.12 testing commit 6f7da290413ba713f0cdd9ff1a2a9bb129ef4f6c with gcc (GCC) 8.4.1 20210217 pager.c:35:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict] elf.c:141:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] elf.c:146:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] testing release v4.11 testing commit a351e9b9fc24e982ec2f0e76379a49826036da12 with gcc (GCC) 7.5.0 elf.c:141:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] elf.c:146:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] pager.c:35:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict] testing release v4.10 testing commit c470abd4fde40ea6a0846a2beab642a578c0b8cd with gcc (GCC) 5.5.0 tools/include/linux/log2.h:19:1: error: ignoring attribute 'noreturn' because it conflicts with attribute 'const' [-Werror=attributes] elf.c:129:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] elf.c:134:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] pager.c:35:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict] testing release v4.9 testing commit 69973b830859bc6529a7a0468ba0d80ee5117826 with gcc (GCC) 5.5.0 tools/include/linux/log2.h:19:1: error: ignoring attribute 'noreturn' because it conflicts with attribute 'const' [-Werror=attributes] elf.c:129:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] elf.c:134:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] pager.c:35:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict] testing release v4.8 testing commit c8d2bc9bc39ebea8437fd974fdbc21847bb897a3 with gcc (GCC) 5.5.0 tools/include/linux/log2.h:19:1: error: ignoring attribute 'noreturn' because it conflicts with attribute 'const' [-Werror=attributes] elf.c:129:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] elf.c:134:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] pager.c:33:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict] testing release v4.7 testing commit 523d939ef98fd712632d93a5a2b588e477a7565e with gcc (GCC) 5.5.0 tools/include/linux/log2.h:19:1: error: ignoring attribute 'noreturn' because it conflicts with attribute 'const' [-Werror=attributes] elf.c:122:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations] elf.c:127:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations] pager.c:33:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict] testing release v4.6 testing commit 2dcd0af568b0cf583645c8a317dd12e344b1c72a with gcc (GCC) 5.5.0 tools/include/linux/log2.h:19:1: error: ignoring attribute 'noreturn' because it conflicts with attribute 'const' [-Werror=attributes] pager.c:33:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict] revisions tested: 17, total time: 3h9m2.970294931s (build: 2h10m58.658094064s, test: 52m48.698061709s) the crash already happened on the oldest tested release commit msg: Linux 4.18 crash: divide error in squashfs_readpage wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready divide error: 0000 [#1] PREEMPT SMP KASAN IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready CPU: 0 PID: 10042 Comm: syz-executor.1 Not tainted 4.18.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:fill_meta_index fs/squashfs/file.c:256 [inline] RIP: 0010:read_blocklist fs/squashfs/file.c:345 [inline] RIP: 0010:squashfs_readpage+0x81b/0x21d1 fs/squashfs/file.c:482 Code: ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' 8b 47 c8 31 d2 48 63 8d 24 fe ff ff 48 89 85 90 fe ff ff 48 63 85 78 fe ff ff 48 89 cb 48 c1 e1 0b c1 e3 0b 89 9d 60 fe ff ff <48> f7 f1 85 c0 48 89 85 68 fe ff ff 89 85 8c fe ff ff 0f 8e 93 10 ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' RSP: 0018:ffff8800975ef598 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 1ffff1001416729f RDI: ffff88008b630488 RBP: ffff8800975ef790 R08: ffffea00022ec820 R09: fffff9400045d906 R10: fffff9400045d906 R11: ffffea00022ec837 R12: ffff88008b630480 R13: 00000000000000de R14: 0000000000000099 R15: ffff88008b6304b8 FS: 00007f3f55940700(0000) GS:ffff8800ba600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f624ec43710 CR3: 00000000a0c62000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: read_pages+0x2b1/0x510 mm/readahead.c:131 __do_page_cache_readahead+0x353/0x580 mm/readahead.c:209 ra_submit mm/internal.h:66 [inline] ondemand_readahead+0x42a/0xb40 mm/readahead.c:483 page_cache_sync_readahead mm/readahead.c:515 [inline] page_cache_sync_readahead+0x85/0xf0 mm/readahead.c:500 generic_file_buffered_read mm/filemap.c:2092 [inline] generic_file_read_iter+0xbd7/0x2600 mm/filemap.c:2362 call_read_iter include/linux/fs.h:1787 [inline] new_sync_read fs/read_write.c:406 [inline] __vfs_read+0x443/0x870 fs/read_write.c:418 vfs_read+0xff/0x310 fs/read_write.c:452 kernel_read+0x90/0x130 fs/read_write.c:431 IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready prepare_binprm+0x5bd/0x810 fs/exec.c:1580 __do_execve_file.isra.13+0xe59/0x1dd0 fs/exec.c:1799 do_execveat_common fs/exec.c:1865 [inline] do_execveat+0x18/0x20 fs/exec.c:1893 __do_sys_execveat fs/exec.c:1974 [inline] __se_sys_execveat fs/exec.c:1966 [inline] __x64_sys_execveat+0xe2/0x120 fs/exec.c:1966 do_syscall_64+0xda/0x540 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665f9 Code: ff ff c3 66 2e 0f 1f 84 wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f3f55940188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 R13: 00007ffdf8fdefdf R14: 00007f3f55940300 R15: 0000000000022000 Modules linked in: wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 print_req_error: I/O error, dev loop0, sector 0 wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 ---[ end trace 60b4ead7ce1beefb ]--- divide error: 0000 [#2] PREEMPT SMP KASAN RIP: 0010:fill_meta_index fs/squashfs/file.c:256 [inline] RIP: 0010:read_blocklist fs/squashfs/file.c:345 [inline] RIP: 0010:squashfs_readpage+0x81b/0x21d1 fs/squashfs/file.c:482 CPU: 1 PID: 10072 Comm: syz-executor.0 Tainted: G D 4.18.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:fill_meta_index fs/squashfs/file.c:256 [inline] RIP: 0010:read_blocklist fs/squashfs/file.c:345 [inline] RIP: 0010:squashfs_readpage+0x81b/0x21d1 fs/squashfs/file.c:482 Code: 8b 47 c8 31 d2 48 63 8d 24 fe ff ff 48 89 85 90 fe ff ff 48 63 85 78 fe ff ff 48 89 cb 48 c1 e1 0b c1 e3 0b 89 9d 60 fe ff ff <48> f7 f1 85 c0 48 89 85 68 fe ff ff 89 85 8c fe ff ff 0f 8e 93 10 RSP: 0018:ffff88008a6f7598 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 1ffff10014bbfb8f RDI: ffff88008b630d88 RBP: ffff88008a6f7790 R08: ffffea00026228e0 R09: fffff940004c451e R10: fffff940004c451e R11: ffffea00026228f7 R12: ffff88008b630d80 R13: 00000000000000de R14: 0000000000000099 R15: ffff88008b630db8 FS: 00007f8ea2e86700(0000) GS:ffff8800ba700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000556be6aa8040 CR3: 00000000a098c000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: Code: 8b read_pages+0x2b1/0x510 mm/readahead.c:131 47 __do_page_cache_readahead+0x353/0x580 mm/readahead.c:209 c8 ra_submit mm/internal.h:66 [inline] ondemand_readahead+0x42a/0xb40 mm/readahead.c:483 page_cache_sync_readahead mm/readahead.c:515 [inline] page_cache_sync_readahead+0x85/0xf0 mm/readahead.c:500 generic_file_buffered_read mm/filemap.c:2092 [inline] generic_file_read_iter+0xbd7/0x2600 mm/filemap.c:2362 31 call_read_iter include/linux/fs.h:1787 [inline] new_sync_read fs/read_write.c:406 [inline] __vfs_read+0x443/0x870 fs/read_write.c:418 d2 vfs_read+0xff/0x310 fs/read_write.c:452 48 kernel_read+0x90/0x130 fs/read_write.c:431 prepare_binprm+0x5bd/0x810 fs/exec.c:1580 63 __do_execve_file.isra.13+0xe59/0x1dd0 fs/exec.c:1799 8d do_execveat_common fs/exec.c:1865 [inline] do_execveat+0x18/0x20 fs/exec.c:1893 __do_sys_execveat fs/exec.c:1974 [inline] __se_sys_execveat fs/exec.c:1966 [inline] __x64_sys_execveat+0xe2/0x120 fs/exec.c:1966 do_syscall_64+0xda/0x540 arch/x86/entry/common.c:290 24 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665f9 Code: ff ff c3 66 2e 0f 1f fe 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d ff 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 ff c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f8ea2e86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 R13: 00007ffc39fd2f9f R14: 00007f8ea2e86300 R15: 0000000000022000 Modules linked in: 48 Bluetooth: hci3: command 0x0419 tx timeout 89 ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 Bluetooth: hci2: command 0x0419 tx timeout 85 wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 90 Bluetooth: hci5: command 0x0419 tx timeout wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 Bluetooth: hci1: command 0x0419 tx timeout fe ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready ff Bluetooth: hci0: command 0x0419 tx timeout wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 Bluetooth: hci4: command 0x0419 tx timeout ff ---[ end trace 60b4ead7ce1beefc ]--- IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready RIP: 0010:fill_meta_index fs/squashfs/file.c:256 [inline] RIP: 0010:read_blocklist fs/squashfs/file.c:345 [inline] RIP: 0010:squashfs_readpage+0x81b/0x21d1 fs/squashfs/file.c:482 IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready Code: 48 8b IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 47 63 c8 IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 31 85 d2 78 wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 48 fe IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready divide error: 0000 [#3] PREEMPT SMP KASAN 63 CPU: 0 PID: 10098 Comm: syz-executor.4 Tainted: G D 4.18.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:fill_meta_index fs/squashfs/file.c:256 [inline] RIP: 0010:read_blocklist fs/squashfs/file.c:345 [inline] RIP: 0010:squashfs_readpage+0x81b/0x21d1 fs/squashfs/file.c:482 Code: 8b 47 c8 31 d2 48 63 8d 24 fe ff ff 48 89 85 90 fe ff ff 48 63 85 78 fe ff ff 48 89 cb 48 c1 e1 0b c1 e3 0b 89 9d 60 fe ff ff <48> f7 8d f1 85 c0 48 89 85 68 fe ff ff 89 85 8c fe ff ff 0f 8e 93 24 10 RSP: 0018:ffff880089d2f598 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 1ffff1001424dc1f RDI: ffff88008b631688 RBP: ffff880089d2f790 R08: ffffea00022ec720 R09: fffff9400045d8e6 R10: fffff9400045d8e6 R11: ffffea00022ec737 R12: ffff88008b631680 R13: 00000000000000de R14: 0000000000000099 R15: ffff88008b6316b8 FS: 00007f5147319700(0000) GS:ffff8800ba600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000005680c0 CR3: 000000009fe3d000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: read_pages+0x2b1/0x510 mm/readahead.c:131 __do_page_cache_readahead+0x353/0x580 mm/readahead.c:209 ra_submit mm/internal.h:66 [inline] ondemand_readahead+0x42a/0xb40 mm/readahead.c:483 page_cache_sync_readahead mm/readahead.c:515 [inline] page_cache_sync_readahead+0x85/0xf0 mm/readahead.c:500 generic_file_buffered_read mm/filemap.c:2092 [inline] generic_file_read_iter+0xbd7/0x2600 mm/filemap.c:2362 call_read_iter include/linux/fs.h:1787 [inline] new_sync_read fs/read_write.c:406 [inline] __vfs_read+0x443/0x870 fs/read_write.c:418 vfs_read+0xff/0x310 fs/read_write.c:452 kernel_read+0x90/0x130 fs/read_write.c:431 prepare_binprm+0x5bd/0x810 fs/exec.c:1580 __do_execve_file.isra.13+0xe59/0x1dd0 fs/exec.c:1799 do_execveat_common fs/exec.c:1865 [inline] do_execveat+0x18/0x20 fs/exec.c:1893 __do_sys_execveat fs/exec.c:1974 [inline] __se_sys_execveat fs/exec.c:1966 [inline] __x64_sys_execveat+0xe2/0x120 fs/exec.c:1966 do_syscall_64+0xda/0x540 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665f9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f5147319188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 R13: 00007ffd9245977f R14: 00007f5147319300 R15: 0000000000022000 Modules linked in: divide error: 0000 [#4] PREEMPT SMP KASAN ff CPU: 1 PID: 10108 Comm: syz-executor.3 Tainted: G D 4.18.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:fill_meta_index fs/squashfs/file.c:256 [inline] RIP: 0010:read_blocklist fs/squashfs/file.c:345 [inline] RIP: 0010:squashfs_readpage+0x81b/0x21d1 fs/squashfs/file.c:482 Code: ff 8b 47 c8 31 d2 48 63 8d 24 fe ff ff 48 89 85 90 fe ff ff 48 63 85 78 fe ff ff 48 89 cb 48 c1 e1 0b c1 e3 0b 89 9d 60 fe ff ff <48> f7 f1 85 c0 48 89 85 68 fe ff ff 89 85 8c fe ff ff 0f 8e 93 10 wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 RSP: 0018:ffff88009f4f7598 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 1ffff10015a5381f RDI: ffff88008b6e8488 RBP: ffff88009f4f7790 R08: ffffea00022eeae0 R09: fffff9400045dd5e R10: fffff9400045dd5e R11: ffffea00022eeaf7 R12: ffff88008b6e8480 R13: 00000000000000de R14: 0000000000000099 R15: ffff88008b6e84b8 FS: 00007fa257e05700(0000) GS:ffff8800ba700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000005680c0 CR3: 00000000a3388000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: 48 read_pages+0x2b1/0x510 mm/readahead.c:131 IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready __do_page_cache_readahead+0x353/0x580 mm/readahead.c:209 ra_submit mm/internal.h:66 [inline] ondemand_readahead+0x42a/0xb40 mm/readahead.c:483 page_cache_sync_readahead mm/readahead.c:515 [inline] page_cache_sync_readahead+0x85/0xf0 mm/readahead.c:500 generic_file_buffered_read mm/filemap.c:2092 [inline] generic_file_read_iter+0xbd7/0x2600 mm/filemap.c:2362 89 call_read_iter include/linux/fs.h:1787 [inline] new_sync_read fs/read_write.c:406 [inline] __vfs_read+0x443/0x870 fs/read_write.c:418 cb vfs_read+0xff/0x310 fs/read_write.c:452 kernel_read+0x90/0x130 fs/read_write.c:431 prepare_binprm+0x5bd/0x810 fs/exec.c:1580 48 __do_execve_file.isra.13+0xe59/0x1dd0 fs/exec.c:1799 do_execveat_common fs/exec.c:1865 [inline] do_execveat+0x18/0x20 fs/exec.c:1893 __do_sys_execveat fs/exec.c:1974 [inline] __se_sys_execveat fs/exec.c:1966 [inline] __x64_sys_execveat+0xe2/0x120 fs/exec.c:1966 do_syscall_64+0xda/0x540 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665f9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fa257e05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 R13: 00007fffd3432b3f R14: 00007fa257e05300 R15: 0000000000022000 Modules linked in: ---[ end trace 60b4ead7ce1beefd ]--- divide error: 0000 [#5] PREEMPT SMP KASAN RIP: 0010:fill_meta_index fs/squashfs/file.c:256 [inline] RIP: 0010:read_blocklist fs/squashfs/file.c:345 [inline] RIP: 0010:squashfs_readpage+0x81b/0x21d1 fs/squashfs/file.c:482 CPU: 0 PID: 10120 Comm: syz-executor.5 Tainted: G D 4.18.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:fill_meta_index fs/squashfs/file.c:256 [inline] RIP: 0010:read_blocklist fs/squashfs/file.c:345 [inline] RIP: 0010:squashfs_readpage+0x81b/0x21d1 fs/squashfs/file.c:482 Code: 8b 47 c8 31 d2 48 63 8d 24 fe ff ff 48 89 85 90 fe ff ff 48 63 85 78 fe ff ff 48 89 cb 48 c1 e1 0b c1 e3 0b 89 9d 60 fe ff ff <48> f7 f1 85 c0 48 89 85 68 fe ff ff 89 85 8c fe ff ff 0f 8e 93 10 Code: RSP: 0018:ffff8800b53c7598 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 1ffff100157ec55f RDI: ffff88008b6e9208 RBP: ffff8800b53c7790 R08: ffffea00022ecce0 R09: fffff9400045d99e R10: fffff9400045d99e R11: ffffea00022eccf7 R12: ffff88008b6e9200 R13: 00000000000000de R14: 0000000000000099 R15: ffff88008b6e9238 FS: 00007fb1328d8700(0000) GS:ffff8800ba600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000568000 CR3: 00000000acbf2000 CR4: 00000000001406f0 8b DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: 47 read_pages+0x2b1/0x510 mm/readahead.c:131 __do_page_cache_readahead+0x353/0x580 mm/readahead.c:209 ra_submit mm/internal.h:66 [inline] ondemand_readahead+0x42a/0xb40 mm/readahead.c:483 c8 page_cache_sync_readahead mm/readahead.c:515 [inline] page_cache_sync_readahead+0x85/0xf0 mm/readahead.c:500 generic_file_buffered_read mm/filemap.c:2092 [inline] generic_file_read_iter+0xbd7/0x2600 mm/filemap.c:2362 call_read_iter include/linux/fs.h:1787 [inline] new_sync_read fs/read_write.c:406 [inline] __vfs_read+0x443/0x870 fs/read_write.c:418 31 vfs_read+0xff/0x310 fs/read_write.c:452 d2 kernel_read+0x90/0x130 fs/read_write.c:431 prepare_binprm+0x5bd/0x810 fs/exec.c:1580 __do_execve_file.isra.13+0xe59/0x1dd0 fs/exec.c:1799 do_execveat_common fs/exec.c:1865 [inline] do_execveat+0x18/0x20 fs/exec.c:1893 __do_sys_execveat fs/exec.c:1974 [inline] __se_sys_execveat fs/exec.c:1966 [inline] __x64_sys_execveat+0xe2/0x120 fs/exec.c:1966 do_syscall_64+0xda/0x540 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665f9 Code: 48 ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc 63 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb1328d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 R13: 00007ffdb081d09f R14: 00007fb1328d8300 R15: 0000000000022000 Modules linked in: fe 8d ff 24 ff fe 48 ff c1 ff 89 divide error: 0000 [#6] PREEMPT SMP KASAN 85 CPU: 1 PID: 10130 Comm: syz-executor.2 Tainted: G D 4.18.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:fill_meta_index fs/squashfs/file.c:256 [inline] RIP: 0010:read_blocklist fs/squashfs/file.c:345 [inline] RIP: 0010:squashfs_readpage+0x81b/0x21d1 fs/squashfs/file.c:482 Code: 8b 47 c8 31 d2 48 63 8d 24 fe ff ff 48 89 85 90 fe ff ff 48 63 85 78 fe ff ff 48 89 cb 48 c1 e1 0b c1 e3 0b 89 9d 60 fe ff ff <48> f7 f1 85 c0 48 89 85 68 fe ff ff 89 85 8c fe ff ff 0f 8e 93 10 RSP: 0018:ffff88009fc7f598 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 1ffff100168f5aef RDI: ffff88008b6e9b08 RBP: ffff88009fc7f790 R08: ffffea00022ef720 R09: fffff9400045dee6 R10: fffff9400045dee6 R11: ffffea00022ef737 R12: ffff88008b6e9b00 R13: 00000000000000de R14: 0000000000000099 R15: ffff88008b6e9b38 FS: 00007f9aa754d700(0000) GS:ffff8800ba700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fbbe4f61000 CR3: 00000000b57a6000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: e1 read_pages+0x2b1/0x510 mm/readahead.c:131 __do_page_cache_readahead+0x353/0x580 mm/readahead.c:209 90 ra_submit mm/internal.h:66 [inline] ondemand_readahead+0x42a/0xb40 mm/readahead.c:483 page_cache_sync_readahead mm/readahead.c:515 [inline] page_cache_sync_readahead+0x85/0xf0 mm/readahead.c:500 generic_file_buffered_read mm/filemap.c:2092 [inline] generic_file_read_iter+0xbd7/0x2600 mm/filemap.c:2362 fe call_read_iter include/linux/fs.h:1787 [inline] new_sync_read fs/read_write.c:406 [inline] __vfs_read+0x443/0x870 fs/read_write.c:418 0b vfs_read+0xff/0x310 fs/read_write.c:452 kernel_read+0x90/0x130 fs/read_write.c:431 prepare_binprm+0x5bd/0x810 fs/exec.c:1580 __do_execve_file.isra.13+0xe59/0x1dd0 fs/exec.c:1799 ff do_execveat_common fs/exec.c:1865 [inline] do_execveat+0x18/0x20 fs/exec.c:1893 __do_sys_execveat fs/exec.c:1974 [inline] __se_sys_execveat fs/exec.c:1966 [inline] __x64_sys_execveat+0xe2/0x120 fs/exec.c:1966 do_syscall_64+0xda/0x540 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665f9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f9aa754d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 R13: 00007ffd40a1d2bf R14: 00007f9aa754d300 R15: 0000000000022000 Modules linked in: 48 c1 89 ---[ end trace 60b4ead7ce1beefe ]--- 85 e3 90 RIP: 0010:fill_meta_index fs/squashfs/file.c:256 [inline] RIP: 0010:read_blocklist fs/squashfs/file.c:345 [inline] RIP: 0010:squashfs_readpage+0x81b/0x21d1 fs/squashfs/file.c:482 fe ff ff 0b ff Code: 48 48 63 63 85 89 78 8b fe 9d ff 85 ---[ end trace 60b4ead7ce1beeff ]--- 47 ff c8 48 60 89 78 RIP: 0010:fill_meta_index fs/squashfs/file.c:256 [inline] RIP: 0010:read_blocklist fs/squashfs/file.c:345 [inline] RIP: 0010:squashfs_readpage+0x81b/0x21d1 fs/squashfs/file.c:482 fe cb 31 Code: fe 48 ff 8b ff c1 d2 47 ff e1 ff c8 48 0b 48 c1 63 31 89 d2 8d e3 <48> 0b 24 89 f7 48 f1 63 fe 9d 85 8d cb 60 ff fe c0 24 48 fe 48 ff c1 ff 89 ff e1 ff 0b ff 85 48 c1 <48> 68 f7 fe 89 e3 48 ff 89 0b f1 89 85 ff 85 9d 85 89 90 85 90 8c c0 fe fe ff fe 60 ff fe 48 ff ff ff ff ff ff <48> 48 f7 63 f1 85 0f 89 85 48 8e 78 c0 85 48 fe 93 63 89 68 85 85 10 ff fe 68 78 fe ff ff ff RSP: 0018:ffff8800975ef598 EFLAGS: 00010246 48 ff ff 89 89 fe RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 89 85 cb 8c ff RDX: 0000000000000000 RSI: 1ffff1001416729f RDI: ffff88008b630488 48 RBP: ffff8800975ef790 R08: ffffea00022ec820 R09: fffff9400045d906 85 fe c1 R10: fffff9400045d906 R11: ffffea00022ec837 R12: ffff88008b630480 ff R13: 00000000000000de R14: 0000000000000099 R15: ffff88008b6304b8 e1 ff 0b ff 8c FS: 00007f3f55940700(0000) GS:ffff8800ba600000(0000) knlGS:0000000000000000 48 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 c1 0f fe 8e e3 CR2: 00007fbbe4fa6000 CR3: 00000000a0c62000 CR4: 00000000001406f0 ff 93 89 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 ff DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 0f 10 cb