program: r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x840) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x7f, 0x9, 0x6, 0xc, "4b78ee50e55b8e2b70724e6eb30cc3d4e107ade13286608cf23aadfd123efed733bb5ff03e9b4c864c22facc9c77663550d15c6c6964869f289f1c3f6f31a3a0", "120feae16eefc648b1bc2ac13e381dc3e2ba725f796cd086c079f58e080335c7", [0x5c2, 0xfff]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f0001006970763668656164657200000800020000000000070003002000000014000000110001"], 0xec}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60"], 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000f00)={0x4, 0x0, 0x0, 0x14e, 0x138, 0x0, 0x0, 0x30001, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r3}, [@snapshot={0x0, 0x1000, 0x0, 0x80, 'snapshot-merge\x00', {@ram={'/dev/ram', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, 'PO', 0x20, '256', ' 2 discard_zeroes_cow discard_passdown_origin'}}]}) [ 102.331823][ T5301] Bluetooth: hci0: command tx timeout [ 102.647821][ T5346] Oops: divide error: 0000 [#1] SMP KASAN NOPTI [ 102.652047][ T5346] CPU: 0 UID: 0 PID: 5346 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 102.656838][ T5346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.661397][ T5346] RIP: 0010:blk_stack_limits+0x1105/0x2d00 [ 102.664802][ T5346] Code: 68 48 4c 89 e8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 7c 18 00 00 45 8b 65 00 c7 44 24 10 00 00 00 00 eb 5f 48 8b 44 24 48 31 d2 <41> f7 f5 44 01 e9 29 d1 89 c8 31 d2 41 f7 f5 48 8b 44 24 08 4c 8d [ 102.672613][ T5346] RSP: 0018:ffffc9000f68f4f8 EFLAGS: 00010246 [ 102.675176][ T5346] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 102.678594][ T5346] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 102.681971][ T5346] RBP: ffffc9000f68f850 R08: ffffc9000f68f7e0 R09: 1ffffffff3804dfc [ 102.685476][ T5346] R10: dffffc0000000000 R11: ffffffff88adef30 R12: 00000000ffffffff [ 102.688978][ T5346] R13: 0000000000000000 R14: 1ffff92001ed1f0a R15: ffffc9000f68f854 [ 102.692353][ T5346] FS: 00007fe334e906c0(0000) GS:ffff88808ac32000(0000) knlGS:0000000000000000 [ 102.696294][ T5346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.699999][ T5346] CR2: 0000562fbf61f168 CR3: 000000001f958000 CR4: 0000000000352ef0 [ 102.703634][ T5346] Call Trace: [ 102.705112][ T5346] [ 102.706403][ T5346] dm_calculate_queue_limits+0x70c/0x1510 [ 102.708837][ T5346] ? __pfx_dm_calculate_queue_limits+0x10/0x10 [ 102.711552][ T5346] ? kmem_cache_alloc_noprof+0x151/0x600 [ 102.713965][ T5346] ? kasan_save_free_info+0x40/0x50 [ 102.716150][ T5346] ? __kasan_mempool_poison_object+0x16e/0x1d0 [ 102.718831][ T5346] ? mempool_init_node+0x474/0x510 [ 102.721100][ T5346] ? __pfx_bioset_init+0x10/0x10 [ 102.723152][ T5346] dm_setup_md_queue+0x199/0x4f0 [ 102.725197][ T5346] ? dm_table_complete+0x1d84/0x22d0 [ 102.727604][ T5346] ? __pfx_dm_setup_md_queue+0x10/0x10 [ 102.730203][ T5346] ? __pfx_dm_table_complete+0x10/0x10 [ 102.732846][ T5346] table_load+0x4fd/0x8a0 [ 102.734827][ T5346] ? __pfx_table_load+0x10/0x10 [ 102.736935][ T5346] dm_ctl_ioctl+0x9ec/0xe10 [ 102.738915][ T5346] ? __pfx_table_load+0x10/0x10 [ 102.741117][ T5346] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 102.743350][ T5346] ? __fget_files+0x2a/0x420 [ 102.745415][ T5346] ? bpf_lsm_file_ioctl+0x9/0x20 [ 102.747574][ T5346] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 102.749784][ T5346] __se_sys_ioctl+0xfc/0x170 [ 102.751847][ T5346] do_syscall_64+0x166/0x520 [ 102.753914][ T5346] ? trace_irq_disable+0x3b/0x140 [ 102.756056][ T5346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.758734][ T5346] ? clear_bhb_loop+0x70/0xc0 [ 102.760834][ T5346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.763365][ T5346] RIP: 0033:0x7fe333f9f559 [ 102.765375][ T5346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.774263][ T5346] RSP: 002b:00007fe334e8ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.777926][ T5346] RAX: ffffffffffffffda RBX: 00007fe334225fa0 RCX: 00007fe333f9f559 [ 102.781460][ T5346] RDX: 00002000000001c0 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 102.784828][ T5346] RBP: 00007fe334036b20 R08: 0000000000000000 R09: 0000000000000000 [ 102.788023][ T5346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.791430][ T5346] R13: 00007fe334226038 R14: 00007fe334225fa0 R15: 00007ffd07dc4798 [ 102.794754][ T5346] [ 102.796167][ T5346] Modules linked in: [ 102.798514][ T5346] ---[ end trace 0000000000000000 ]--- [ 102.820803][ T5346] RIP: 0010:blk_stack_limits+0x1105/0x2d00 [ 102.820896][ T5346] Code: 68 48 4c 89 e8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 7c 18 00 00 45 8b 65 00 c7 44 24 10 00 00 00 00 eb 5f 48 8b 44 24 48 31 d2 <41> f7 f5 44 01 e9 29 d1 89 c8 31 d2 41 f7 f5 48 8b 44 24 08 4c 8d [ 102.820908][ T5346] RSP: 0018:ffffc9000f68f4f8 EFLAGS: 00010246 [ 102.820921][ T5346] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 102.820929][ T5346] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 102.820937][ T5346] RBP: ffffc9000f68f850 R08: ffffc9000f68f7e0 R09: 1ffffffff3804dfc [ 102.820946][ T5346] R10: dffffc0000000000 R11: ffffffff88adef30 R12: 00000000ffffffff [ 102.820960][ T5346] R13: 0000000000000000 R14: 1ffff92001ed1f0a R15: ffffc9000f68f854 [ 102.820968][ T5346] FS: 00007fe334e906c0(0000) GS:ffff88808ac32000(0000) knlGS:0000000000000000 [ 102.820975][ T5346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.820980][ T5346] CR2: 00007ffd07dc4878 CR3: 000000001f958000 CR4: 0000000000352ef0 [ 102.821012][ T5346] Kernel panic - not syncing: Fatal exception [ 102.864809][ T5346] Kernel Offset: disabled [ 102.866729][ T5346] Rebooting in 86400 seconds..