program: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newnexthop={0x18, 0x68, 0x200, 0x70bd26, 0x25dfdbff, {0x2, 0x0, 0x3, 0x0, 0x12}}, 0x18}}, 0x0) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x88001, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r3}, [@snapshot={0x0, 0x1008, 0x0, 0x58, 'snapshot\x00', {@ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, 'P', 0x20, '0', ' 1 discard_zeroes_cow'}}]}) r4 = syz_open_dev$audion(&(0x7f0000000100), 0x5, 0x88200) ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f0000001980)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0xda01, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0x2890, 0x0, 0x30}]}) [ 90.195097][ T4662] Bluetooth: hci0: command tx timeout [ 90.351906][ T5345] Oops: divide error: 0000 [#1] SMP KASAN NOPTI [ 90.354659][ T5345] CPU: 0 UID: 0 PID: 5345 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 90.358484][ T5345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.362881][ T5345] RIP: 0010:blk_stack_limits+0x1105/0x2d00 [ 90.365724][ T5345] Code: 68 48 4c 89 e8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 7c 18 00 00 45 8b 65 00 c7 44 24 10 00 00 00 00 eb 5f 48 8b 44 24 48 31 d2 <41> f7 f5 44 01 e9 29 d1 89 c8 31 d2 41 f7 f5 48 8b 44 24 08 4c 8d [ 90.373281][ T5345] RSP: 0018:ffffc9000e4e74f8 EFLAGS: 00010246 [ 90.375886][ T5345] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 90.379243][ T5345] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 90.382297][ T5345] RBP: ffffc9000e4e7850 R08: ffffc9000e4e77e0 R09: 1ffffffff3807ab0 [ 90.385426][ T5345] R10: dffffc0000000000 R11: ffffffff88b0dcd0 R12: 00000000ffffffff [ 90.388695][ T5345] R13: 0000000000000000 R14: 1ffff92001c9cf0a R15: ffffc9000e4e7854 [ 90.392020][ T5345] FS: 00007f36a13cc6c0(0000) GS:ffff88808ac1d000(0000) knlGS:0000000000000000 [ 90.395718][ T5345] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.398268][ T5345] CR2: 0000200000000000 CR3: 00000000450b3000 CR4: 0000000000352ef0 [ 90.401590][ T5345] Call Trace: [ 90.403059][ T5345] [ 90.404304][ T5345] dm_calculate_queue_limits+0x70c/0x1510 [ 90.406789][ T5345] ? __pfx_dm_calculate_queue_limits+0x10/0x10 [ 90.409385][ T5345] ? kmem_cache_alloc_noprof+0x151/0x600 [ 90.411948][ T5345] ? kasan_save_free_info+0x40/0x50 [ 90.414115][ T5345] ? __kasan_mempool_poison_object+0x16e/0x1d0 [ 90.416711][ T5345] ? mempool_init_node+0x474/0x510 [ 90.421319][ T5345] ? __pfx_bioset_init+0x10/0x10 [ 90.423443][ T5345] dm_setup_md_queue+0x199/0x4f0 [ 90.425596][ T5345] ? dm_table_complete+0x1d84/0x22d0 [ 90.427820][ T5345] ? __pfx_dm_setup_md_queue+0x10/0x10 [ 90.430226][ T5345] ? __pfx_dm_table_complete+0x10/0x10 [ 90.432611][ T5345] table_load+0x4fd/0x8a0 [ 90.434502][ T5345] ? __pfx_table_load+0x10/0x10 [ 90.436560][ T5345] dm_ctl_ioctl+0x9ec/0xe10 [ 90.438510][ T5345] ? __pfx_table_load+0x10/0x10 [ 90.440599][ T5345] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 90.442759][ T5345] ? __fget_files+0x2a/0x420 [ 90.444768][ T5345] ? bpf_lsm_file_ioctl+0x9/0x20 [ 90.446931][ T5345] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 90.449006][ T5345] __se_sys_ioctl+0xfc/0x170 [ 90.451085][ T5345] do_syscall_64+0x166/0x520 [ 90.453227][ T5345] ? trace_irq_disable+0x3b/0x140 [ 90.455021][ T5345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.459783][ T5345] ? clear_bhb_loop+0x70/0xc0 [ 90.461758][ T5345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.464152][ T5345] RIP: 0033:0x7f36a059f559 [ 90.465984][ T5345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.473961][ T5345] RSP: 002b:00007f36a13cbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.477447][ T5345] RAX: ffffffffffffffda RBX: 00007f36a0825fa0 RCX: 00007f36a059f559 [ 90.480900][ T5345] RDX: 0000200000000180 RSI: 00000000c138fd09 RDI: 0000000000000005 [ 90.484296][ T5345] RBP: 00007f36a0636b20 R08: 0000000000000000 R09: 0000000000000000 [ 90.487621][ T5345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.491040][ T5345] R13: 00007f36a0826038 R14: 00007f36a0825fa0 R15: 00007ffe643d04b8 [ 90.494323][ T5345] [ 90.495639][ T5345] Modules linked in: [ 90.498642][ T5345] ---[ end trace 0000000000000000 ]--- [ 90.509901][ T5345] RIP: 0010:blk_stack_limits+0x1105/0x2d00 [ 90.509919][ T5345] Code: 68 48 4c 89 e8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 7c 18 00 00 45 8b 65 00 c7 44 24 10 00 00 00 00 eb 5f 48 8b 44 24 48 31 d2 <41> f7 f5 44 01 e9 29 d1 89 c8 31 d2 41 f7 f5 48 8b 44 24 08 4c 8d [ 90.509926][ T5345] RSP: 0018:ffffc9000e4e74f8 EFLAGS: 00010246 [ 90.509935][ T5345] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 90.509941][ T5345] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 90.509946][ T5345] RBP: ffffc9000e4e7850 R08: ffffc9000e4e77e0 R09: 1ffffffff3807ab0 [ 90.509952][ T5345] R10: dffffc0000000000 R11: ffffffff88b0dcd0 R12: 00000000ffffffff [ 90.509958][ T5345] R13: 0000000000000000 R14: 1ffff92001c9cf0a R15: ffffc9000e4e7854 [ 90.509963][ T5345] FS: 00007f36a13cc6c0(0000) GS:ffff88808ac1d000(0000) knlGS:0000000000000000 [ 90.509970][ T5345] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.509976][ T5345] CR2: 0000200000001980 CR3: 00000000450b3000 CR4: 0000000000352ef0 [ 90.510018][ T5345] Kernel panic - not syncing: Fatal exception [ 90.554655][ T5345] Kernel Offset: disabled [ 90.556612][ T5345] Rebooting in 86400 seconds..