neighbour: ndisc_cache: neighbor table overflow! neighbour: ndisc_cache: neighbor table overflow! neighbour: ndisc_cache: neighbor table overflow! neighbour: ndisc_cache: neighbor table overflow! divide error: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.0.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: ipv6_addrconf addrconf_dad_work RIP: 0010:tabledist.part.4+0x10b/0x150 net/sched/sch_netem.c:337 Code: 3c 18 49 8d 80 ff 1f 00 00 49 0f 49 c0 48 83 c4 08 5b 48 c1 f8 0d 41 5c 48 01 f8 41 5d 5d c3 43 8d 4c 2d 00 31 d2 48 83 c4 08 f1 49 63 c5 48 29 c3 48 8d 04 1a 5b 41 5c 41 5d 5d c3 4c 89 e7 RSP: 0018:ffff8880aa297418 EFLAGS: 00010286 RAX: 0000000048b94ecf RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff87ab46a0 RDI: ffffffff8a5a2de0 RBP: ffff8880aa297430 R08: 0000000000000002 R09: ffffed1015452e79 R10: ffffed1015452e79 R11: 0000000000000003 R12: 0000000000000000 R13: 0000000080000000 R14: 0000000000000000 R15: ffff8880a864cd80 FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000118c000 CR3: 00000000a8acd000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: tabledist net/sched/sch_netem.c:540 [inline] netem_enqueue+0xd64/0x27d0 net/sched/sch_netem.c:540 __dev_xmit_skb net/core/dev.c:3516 [inline] __dev_queue_xmit+0x117d/0x28f0 net/core/dev.c:3832 dev_queue_xmit+0xb/0x10 net/core/dev.c:3897 neigh_resolve_output+0x479/0x7e0 net/core/neighbour.c:1476 neigh_output include/net/neighbour.h:508 [inline] ip6_finish_output2+0xced/0x2010 net/ipv6/ip6_output.c:120 ip6_finish_output+0x639/0xa40 net/ipv6/ip6_output.c:154 NF_HOOK_COND include/linux/netfilter.h:278 [inline] ip6_output+0x1bb/0x630 net/ipv6/ip6_output.c:171 dst_output include/net/dst.h:444 [inline] NF_HOOK include/linux/netfilter.h:289 [inline] ndisc_send_skb+0x921/0x1380 net/ipv6/ndisc.c:491 ndisc_send_ns+0x422/0x7c0 net/ipv6/ndisc.c:633 addrconf_dad_work+0x9df/0xf70 net/ipv6/addrconf.c:4082 process_one_work+0x7b9/0x15e0 kernel/workqueue.c:2173 worker_thread+0x85/0xb60 kernel/workqueue.c:2319 kthread+0x324/0x3e0 kernel/kthread.c:246 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:352 Modules linked in: ---[ end trace 87dbc64e412a69dc ]--- RIP: 0010:tabledist.part.4+0x10b/0x150 net/sched/sch_netem.c:337 Code: 3c 18 49 8d 80 ff 1f 00 00 49 0f 49 c0 48 83 c4 08 5b 48 c1 f8 0d 41 5c 48 01 f8 41 5d 5d c3 43 8d 4c 2d 00 31 d2 48 83 c4 08 f1 49 63 c5 48 29 c3 48 8d 04 1a 5b 41 5c 41 5d 5d c3 4c 89 e7 RSP: 0018:ffff8880aa297418 EFLAGS: 00010286 RAX: 0000000048b94ecf RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff87ab46a0 RDI: ffffffff8a5a2de0 RBP: ffff8880aa297430 R08: 0000000000000002 R09: ffffed1015452e79 Bluetooth: hci1: command 0x0419 tx timeout R10: ffffed1015452e79 R11: 0000000000000003 R12: 0000000000000000 Bluetooth: hci0: command 0x0419 tx timeout R13: 0000000080000000 R14: 0000000000000000 R15: ffff8880a864cd80 FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000118c000 CR3: 00000000a8acd000 CR4: 00000000001406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400