program: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x8) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000680), 0x8600, 0x0) read$nci(r3, &(0x7f00000006c0)=""/175, 0xaf) read$nci(r3, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x2000004) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="00214717a70700000000430600000000000000000000721d5874f72c000000eace3b040feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x3e42, 0x407ff) r4 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x4000) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) write(r5, &(0x7f0000000580)='3', 0x1) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000600)={0x380000, 0x9, 0x10, r5, 0x0, &(0x7f0000000640)={0x9909dd, 0x2, '\x00', @ptr=0xb}}) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000880)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0xc201, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@snapshot={0x0, 0x40, 0x0, 0x78, 'snapshot-merge\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, 'PO', 0x20, '32', ' 1 discard_zeroes_cow'}}]}) [ 119.471542][ T4659] Bluetooth: hci0: command tx timeout [ 119.704938][ T5345] Oops: divide error: 0000 [#1] SMP KASAN NOPTI [ 119.708003][ T5345] CPU: 0 UID: 0 PID: 5345 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 119.711986][ T5345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.716269][ T5345] RIP: 0010:blk_stack_limits+0x1105/0x2d00 [ 119.718929][ T5345] Code: 68 48 4c 89 e8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 7c 18 00 00 45 8b 65 00 c7 44 24 10 00 00 00 00 eb 5f 48 8b 44 24 48 31 d2 <41> f7 f5 44 01 e9 29 d1 89 c8 31 d2 41 f7 f5 48 8b 44 24 08 4c 8d [ 119.728422][ T5345] RSP: 0018:ffffc9000db1f4f8 EFLAGS: 00010246 [ 119.732509][ T5345] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 119.735817][ T5345] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 119.739101][ T5345] RBP: ffffc9000db1f850 R08: ffffc9000db1f7e0 R09: 1ffffffff37bf188 [ 119.742510][ T5345] R10: dffffc0000000000 R11: ffffffff88a5b4c0 R12: 00000000ffffffff [ 119.745770][ T5345] R13: 0000000000000000 R14: 1ffff92001b63f0a R15: ffffc9000db1f854 [ 119.749027][ T5345] FS: 00007f97860726c0(0000) GS:ffff88808ae60000(0000) knlGS:0000000000000000 [ 119.752725][ T5345] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.755330][ T5345] CR2: 00005591f7315840 CR3: 0000000045c9b000 CR4: 0000000000352ef0 [ 119.758693][ T5345] Call Trace: [ 119.760220][ T5345] [ 119.761566][ T5345] dm_calculate_queue_limits+0x70c/0x1510 [ 119.764226][ T5345] ? __pfx_dm_calculate_queue_limits+0x10/0x10 [ 119.766900][ T5345] ? kmem_cache_alloc_noprof+0x151/0x600 [ 119.769327][ T5345] ? kasan_save_free_info+0x40/0x50 [ 119.771612][ T5345] ? __kasan_mempool_poison_object+0x16e/0x1d0 [ 119.774490][ T5345] ? mempool_init_node+0x474/0x510 [ 119.776780][ T5345] ? __pfx_bioset_init+0x10/0x10 [ 119.778965][ T5345] dm_setup_md_queue+0x199/0x4f0 [ 119.781188][ T5345] ? dm_table_complete+0x1d84/0x22d0 [ 119.783570][ T5345] ? __pfx_dm_setup_md_queue+0x10/0x10 [ 119.785968][ T5345] ? __pfx_dm_table_complete+0x10/0x10 [ 119.788366][ T5345] table_load+0x4fd/0x8a0 [ 119.790266][ T5345] ? __pfx_table_load+0x10/0x10 [ 119.792450][ T5345] ? __might_fault+0xaf/0x130 [ 119.794457][ T5345] dm_ctl_ioctl+0x9ec/0xe10 [ 119.796358][ T5345] ? __pfx_table_load+0x10/0x10 [ 119.798609][ T5345] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 119.800870][ T5345] ? __fget_files+0x2a/0x420 [ 119.802891][ T5345] ? bpf_lsm_file_ioctl+0x9/0x20 [ 119.805059][ T5345] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 119.807299][ T5345] __se_sys_ioctl+0xfc/0x170 [ 119.809318][ T5345] do_syscall_64+0x166/0x520 [ 119.811305][ T5345] ? trace_irq_disable+0x3b/0x140 [ 119.813413][ T5345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.816117][ T5345] ? clear_bhb_loop+0x70/0xc0 [ 119.818150][ T5345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.820787][ T5345] RIP: 0033:0x7f978519f559 [ 119.822809][ T5345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.830889][ T5345] RSP: 002b:00007f9786071fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.834429][ T5345] RAX: ffffffffffffffda RBX: 00007f9785425fa0 RCX: 00007f978519f559 [ 119.837907][ T5345] RDX: 0000200000000880 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 119.841042][ T5345] RBP: 00007f9785236b20 R08: 0000000000000000 R09: 0000000000000000 [ 119.844389][ T5345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.847864][ T5345] R13: 00007f9785426038 R14: 00007f9785425fa0 R15: 00007fff4c76eec8 [ 119.851194][ T5345] [ 119.852577][ T5345] Modules linked in: [ 119.854801][ T5345] ---[ end trace 0000000000000000 ]--- [ 119.863950][ T5345] RIP: 0010:blk_stack_limits+0x1105/0x2d00 [ 119.863976][ T5345] Code: 68 48 4c 89 e8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 7c 18 00 00 45 8b 65 00 c7 44 24 10 00 00 00 00 eb 5f 48 8b 44 24 48 31 d2 <41> f7 f5 44 01 e9 29 d1 89 c8 31 d2 41 f7 f5 48 8b 44 24 08 4c 8d [ 119.863987][ T5345] RSP: 0018:ffffc9000db1f4f8 EFLAGS: 00010246 [ 119.863999][ T5345] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 119.864008][ T5345] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 119.864015][ T5345] RBP: ffffc9000db1f850 R08: ffffc9000db1f7e0 R09: 1ffffffff37bf188 [ 119.864024][ T5345] R10: dffffc0000000000 R11: ffffffff88a5b4c0 R12: 00000000ffffffff [ 119.864032][ T5345] R13: 0000000000000000 R14: 1ffff92001b63f0a R15: ffffc9000db1f854 [ 119.864040][ T5345] FS: 00007f97860726c0(0000) GS:ffff88808ae60000(0000) knlGS:0000000000000000 [ 119.864050][ T5345] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.864058][ T5345] CR2: 00005591f7315840 CR3: 0000000045c9b000 CR4: 0000000000352ef0 [ 119.864098][ T5345] Kernel panic - not syncing: Fatal exception [ 119.906842][ T5345] Kernel Offset: disabled [ 119.908745][ T5345] Rebooting in 86400 seconds..