Unknown ioctl 21376
IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
divide error: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 7011 Comm: syz-fuzzer Not tainted 4.14.160-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff88808c80e3c0 task.stack: ffff888091c50000
RIP: 0010:packet_len_2_sched_time net/sched/sch_netem.c:352 [inline]
RIP: 0010:netem_enqueue+0x976/0x27b0 net/sched/sch_netem.c:561
RSP: 0000:ffff8880aec07210 EFLAGS: 00010246
RAX: 1aedcbe189692000 RBX: 0000000073a8a150 RCX: 000000000000001e
RDX: 0000000000000000 RSI: 000000000000206e RDI: ffff88808a591da8
RBP: ffff8880aec072a0 R08: 000000001cf06adb R09: ffff88821fff7008
R10: ffff88821fff7010 R11: 0000000000000001 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000073000000 R15: ffff88808a591b40
FS:  0000000001958550(0000) GS:ffff8880aec00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f23432f2314 CR3: 00000000896e9000 CR4: 00000000001426f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 __dev_xmit_skb net/core/dev.c:3229 [inline]
 __dev_queue_xmit+0x12da/0x25e0 net/core/dev.c:3493
 dev_queue_xmit+0x18/0x20 net/core/dev.c:3558
 br_dev_queue_push_xmit+0x367/0x530 net/bridge/br_forward.c:55
 NF_HOOK include/linux/netfilter.h:250 [inline]
 NF_HOOK include/linux/netfilter.h:244 [inline]
 br_forward_finish+0xbc/0x320 net/bridge/br_forward.c:67
 NF_HOOK include/linux/netfilter.h:250 [inline]
 NF_HOOK include/linux/netfilter.h:244 [inline]
 __br_forward+0x560/0x9c0 net/bridge/br_forward.c:111
 deliver_clone+0x61/0xc0 net/bridge/br_forward.c:127
 maybe_deliver net/bridge/br_forward.c:168 [inline]
 maybe_deliver net/bridge/br_forward.c:156 [inline]
 br_flood+0x3c8/0x530 net/bridge/br_forward.c:210
 br_dev_xmit+0x9a4/0xd40 net/bridge/br_device.c:83
 __netdev_start_xmit include/linux/netdevice.h:4038 [inline]
 netdev_start_xmit include/linux/netdevice.h:4047 [inline]
 xmit_one net/core/dev.c:3009 [inline]
 dev_hard_start_xmit+0x18c/0x8b0 net/core/dev.c:3025
 __dev_queue_xmit+0x1d95/0x25e0 net/core/dev.c:3525
 dev_queue_xmit+0x18/0x20 net/core/dev.c:3558
 neigh_hh_output include/net/neighbour.h:490 [inline]
 neigh_output include/net/neighbour.h:498 [inline]
 ip6_finish_output2+0x10bd/0x21b0 net/ipv6/ip6_output.c:120
 ip6_finish_output+0x4f4/0xb50 net/ipv6/ip6_output.c:154
 NF_HOOK_COND include/linux/netfilter.h:239 [inline]
 ip6_output+0x20f/0x6d0 net/ipv6/ip6_output.c:171
 dst_output include/net/dst.h:462 [inline]
 NF_HOOK include/linux/netfilter.h:250 [inline]
 NF_HOOK include/linux/netfilter.h:244 [inline]
 mld_sendpack+0x8d1/0xd60 net/ipv6/mcast.c:1660
 mld_send_cr net/ipv6/mcast.c:1956 [inline]
 mld_ifc_timer_expire+0x3b6/0x7b0 net/ipv6/mcast.c:2455
 call_timer_fn+0x161/0x670 kernel/time/timer.c:1279
 expire_timers kernel/time/timer.c:1318 [inline]
 __run_timers kernel/time/timer.c:1636 [inline]
 __run_timers kernel/time/timer.c:1604 [inline]
 run_timer_softirq+0x5b7/0x1520 kernel/time/timer.c:1649
 __do_softirq+0x244/0x9a0 kernel/softirq.c:288
 invoke_softirq kernel/softirq.c:368 [inline]
 irq_exit+0x160/0x1b0 kernel/softirq.c:409
 exiting_irq arch/x86/include/asm/apic.h:648 [inline]
 smp_apic_timer_interrupt+0x146/0x5e0 arch/x86/kernel/apic/apic.c:1102
 apic_timer_interrupt+0x96/0xa0 arch/x86/entry/entry_64.S:792
 </IRQ>
RIP: 0033:0x409e9e
RSP: 002b:000000c456cb5c88 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff10
RAX: 988e97f3ed44ebb9 RBX: 0000000000000012 RCX: 000000c4201d4ba0
RDX: 000000000098c0a8 RSI: 000000c4201d4ba0 RDI: 0000000000000038
RBP: 000000c456cb5ca0 R08: 0000000000000000 R09: 0000000000000000
R10: 00000000009bb552 R11: 0000000000000004 R12: 0000000000000000
R13: 0000000000000020 R14: 0000000000000013 R15: 0000000000000100
Code: 85 4d 1c 00 00 45 8b b7 5c 02 00 00 89 f3 89 75 c0 45 85 f6 0f 85 5f 0a 00 00 e8 b6 7d 29 fc 48 69 c3 00 ca 9a 3b 45 89 e4 31 d2 <49> f7 f4 48 c1 e8 06 48 01 45 b8 e8 9a 7d 29 fc 48 8b 45 d0 48 
RIP: packet_len_2_sched_time net/sched/sch_netem.c:352 [inline] RSP: ffff8880aec07210
RIP: netem_enqueue+0x976/0x27b0 net/sched/sch_netem.c:561 RSP: ffff8880aec07210
---[ end trace a06f2ebfddfc0352 ]---