program: r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r1, &(0x7f00000006c0)='fc', 0x2) read$char_usb(r1, &(0x7f0000000700)=""/20, 0x14) syz_mount_image$nilfs2(&(0x7f0000000740), &(0x7f0000000780)='./file2\x00', 0x0, &(0x7f00000007c0)=ANY=[], 0x1, 0xb04, &(0x7f0000000800)="$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") syz_mount_image$vfat(&(0x7f0000001340), &(0x7f0000001380)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000013c0)) rename(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)='./bus/file0\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r3}, [@snapshot={0x0, 0x400, 0x0, 0x80, 'snapshot-merge\x00', {@ram_num={'1:', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, 'P', 0x20, '0', ' 2 discard_zeroes_cow discard_passdown_origin'}}]}) [ 104.936704][ T5282] Bluetooth: hci0: command tx timeout [ 105.128703][ T5330] loop0: detected capacity change from 0 to 2048 [ 105.207963][ T5336] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.251789][ T5330] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '.' [ 105.253636][ T5330] Remounting filesystem read-only [ 105.297595][ T5330] Oops: divide error: 0000 [#1] SMP KASAN NOPTI [ 105.300492][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 105.304436][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.308724][ T5330] RIP: 0010:blk_stack_limits+0x1105/0x2d00 [ 105.311481][ T5330] Code: 68 48 4c 89 e8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 7c 18 00 00 45 8b 65 00 c7 44 24 10 00 00 00 00 eb 5f 48 8b 44 24 48 31 d2 <41> f7 f5 44 01 e9 29 d1 89 c8 31 d2 41 f7 f5 48 8b 44 24 08 4c 8d [ 105.320109][ T5330] RSP: 0018:ffffc9000f45f4f8 EFLAGS: 00010246 [ 105.322830][ T5330] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 105.326293][ T5330] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 105.329837][ T5330] RBP: ffffc9000f45f850 R08: ffffc9000f45f7e0 R09: 1ffffffff37b4bc0 [ 105.333539][ T5330] R10: dffffc0000000000 R11: ffffffff88a12350 R12: 00000000ffffffff [ 105.337139][ T5330] R13: 0000000000000000 R14: 1ffff92001e8bf0a R15: ffffc9000f45f854 [ 105.340620][ T5330] FS: 00007f1ce48636c0(0000) GS:ffff88808b0b1000(0000) knlGS:0000000000000000 [ 105.344563][ T5330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.347476][ T5330] CR2: 00007fff8c7bfe90 CR3: 0000000045c24000 CR4: 0000000000352ef0 [ 105.351191][ T5330] Call Trace: [ 105.352843][ T5330] [ 105.354280][ T5330] dm_calculate_queue_limits+0x70c/0x1510 [ 105.357137][ T5330] ? __pfx_dm_calculate_queue_limits+0x10/0x10 [ 105.359904][ T5330] ? kmem_cache_alloc_noprof+0x156/0x600 [ 105.362415][ T5330] ? kasan_save_free_info+0x40/0x50 [ 105.364877][ T5330] ? __kasan_mempool_poison_object+0x16e/0x1d0 [ 105.367517][ T5330] ? mempool_init_node+0x474/0x510 [ 105.369693][ T5330] ? __pfx_bioset_init+0x10/0x10 [ 105.371823][ T5330] dm_setup_md_queue+0x199/0x4f0 [ 105.373981][ T5330] ? dm_table_complete+0x1d84/0x22d0 [ 105.376181][ T5330] ? __pfx_dm_setup_md_queue+0x10/0x10 [ 105.378599][ T5330] ? __pfx_dm_table_complete+0x10/0x10 [ 105.381122][ T5330] table_load+0x4fd/0x8a0 [ 105.383053][ T5330] ? __pfx_table_load+0x10/0x10 [ 105.385141][ T5330] dm_ctl_ioctl+0x9ec/0xe10 [ 105.387163][ T5330] ? __pfx_table_load+0x10/0x10 [ 105.389349][ T5330] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 105.391704][ T5330] ? __fget_files+0x2a/0x420 [ 105.393745][ T5330] ? bpf_lsm_file_ioctl+0x9/0x20 [ 105.396001][ T5330] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 105.398194][ T5330] __se_sys_ioctl+0xfc/0x170 [ 105.400279][ T5330] do_syscall_64+0x166/0x520 [ 105.403877][ T5330] ? trace_irq_disable+0x3b/0x140 [ 105.406153][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.408894][ T5330] ? clear_bhb_loop+0x70/0xc0 [ 105.411039][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.413703][ T5330] RIP: 0033:0x7f1ce399f559 [ 105.415692][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.423832][ T5330] RSP: 002b:00007f1ce4862fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.427343][ T5330] RAX: ffffffffffffffda RBX: 00007f1ce3c25fa0 RCX: 00007f1ce399f559 [ 105.430767][ T5330] RDX: 0000200000000400 RSI: 00000000c138fd09 RDI: 0000000000000007 [ 105.434290][ T5330] RBP: 00007f1ce3a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 105.437741][ T5330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.441322][ T5330] R13: 00007f1ce3c26038 R14: 00007f1ce3c25fa0 R15: 00007fff8c7c0348 [ 105.444762][ T5330] [ 105.446215][ T5330] Modules linked in: [ 105.448533][ T5330] ---[ end trace 0000000000000000 ]--- [ 105.459075][ T5330] RIP: 0010:blk_stack_limits+0x1105/0x2d00 [ 105.459167][ T5330] Code: 68 48 4c 89 e8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 7c 18 00 00 45 8b 65 00 c7 44 24 10 00 00 00 00 eb 5f 48 8b 44 24 48 31 d2 <41> f7 f5 44 01 e9 29 d1 89 c8 31 d2 41 f7 f5 48 8b 44 24 08 4c 8d [ 105.459182][ T5330] RSP: 0018:ffffc9000f45f4f8 EFLAGS: 00010246 [ 105.459197][ T5330] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 105.459206][ T5330] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 105.459215][ T5330] RBP: ffffc9000f45f850 R08: ffffc9000f45f7e0 R09: 1ffffffff37b4bc0 [ 105.459224][ T5330] R10: dffffc0000000000 R11: ffffffff88a12350 R12: 00000000ffffffff [ 105.459234][ T5330] R13: 0000000000000000 R14: 1ffff92001e8bf0a R15: ffffc9000f45f854 [ 105.459243][ T5330] FS: 00007f1ce48636c0(0000) GS:ffff88808b0b1000(0000) knlGS:0000000000000000 [ 105.459254][ T5330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.459261][ T5330] CR2: 00007fff8c7bfe90 CR3: 0000000045c24000 CR4: 0000000000352ef0 [ 105.459299][ T5330] Kernel panic - not syncing: Fatal exception [ 105.502919][ T5330] Kernel Offset: disabled [ 105.504847][ T5330] Rebooting in 86400 seconds..