IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
bridge0: port 2(bridge_slave_1) entered blocking state
bridge0: port 2(bridge_slave_1) entered forwarding state
IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
divide error: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 1 PID: 6560 Comm: syz-executor.4 Not tainted 4.14.0-rc8+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
task: ffff88011fb06380 task.stack: ffff88010f7d8000
RIP: 0010:tabledist net/sched/sch_netem.c:330 [inline]
RIP: 0010:netem_enqueue+0x1e30/0x2dd0 net/sched/sch_netem.c:523
RSP: 0018:ffff88012c105fe8 EFLAGS: 00010246
RAX: 0000000068a9e03f RBX: ffff88011d18e4a8 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffffff877c78a0 RDI: ffffffff89f89260
RBP: ffff88012c106160 R08: 0000000000000000 R09: 0000000000000000
R10: ffff88012c106568 R11: ffff88011fb06380 R12: 0000000000000000
R13: 0000000080000000 R14: ffff88011d18e480 R15: ffff88011cc4e040
FS:  0000000000000000(0000) GS:ffff88012c100000(0063) knlGS:0000000009fbc900
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 0000000000625208 CR3: 000000011d512000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 __dev_xmit_skb net/core/dev.c:3199 [inline]
 __dev_queue_xmit+0x1388/0x27a0 net/core/dev.c:3455
 dev_queue_xmit+0xb/0x10 net/core/dev.c:3520
 br_dev_queue_push_xmit+0x14b/0x570 net/bridge/br_forward.c:55
 NF_HOOK include/linux/netfilter.h:250 [inline]
 br_forward_finish+0xba/0x530 net/bridge/br_forward.c:67
 NF_HOOK include/linux/netfilter.h:250 [inline]
 __br_forward+0x6a8/0xc00 net/bridge/br_forward.c:112
 deliver_clone+0x54/0xa0 net/bridge/br_forward.c:128
 maybe_deliver net/bridge/br_forward.c:169 [inline]
 br_flood+0x582/0x7b0 net/bridge/br_forward.c:211
 br_dev_xmit+0xe48/0x1530 net/bridge/br_device.c:103
 __netdev_start_xmit include/linux/netdevice.h:4042 [inline]
 netdev_start_xmit include/linux/netdevice.h:4051 [inline]
 xmit_one net/core/dev.c:2990 [inline]
 dev_hard_start_xmit+0x229/0xa80 net/core/dev.c:3006
 __dev_queue_xmit+0x20a6/0x27a0 net/core/dev.c:3487
 dev_queue_xmit+0xb/0x10 net/core/dev.c:3520
 neigh_hh_output include/net/neighbour.h:472 [inline]
 neigh_output include/net/neighbour.h:480 [inline]
 ip6_finish_output2+0x1004/0x2570 net/ipv6/ip6_output.c:120
 ip6_finish_output+0x35b/0x8e0 net/ipv6/ip6_output.c:146
 NF_HOOK_COND include/linux/netfilter.h:239 [inline]
 ip6_output+0x1c6/0x910 net/ipv6/ip6_output.c:163
 dst_output include/net/dst.h:460 [inline]
 NF_HOOK include/linux/netfilter.h:250 [inline]
 mld_sendpack+0x8f8/0xda0 net/ipv6/mcast.c:1660
 mld_send_cr net/ipv6/mcast.c:1951 [inline]
 mld_ifc_timer_expire+0x354/0x6c0 net/ipv6/mcast.c:2448
 call_timer_fn+0x211/0x7a0 kernel/time/timer.c:1281
 expire_timers kernel/time/timer.c:1320 [inline]
 __run_timers+0x6df/0xb30 kernel/time/timer.c:1620
 run_timer_softirq+0x79/0x130 kernel/time/timer.c:1646
 __do_softirq+0x2e2/0xb17 kernel/softirq.c:284
 invoke_softirq kernel/softirq.c:364 [inline]
 irq_exit+0x18e/0x1e0 kernel/softirq.c:405
 exiting_irq arch/x86/include/asm/apic.h:638 [inline]
 smp_apic_timer_interrupt+0x1ae/0x7c0 arch/x86/kernel/apic/apic.c:1059
 apic_timer_interrupt+0x9d/0xb0 arch/x86/entry/entry_64.S:771
 </IRQ>
RIP: 0010:linkwatch_fire_event+0x1/0x360 net/core/link_watch.c:243
RSP: 0018:ffff88010f7de898 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff10
RAX: 0000000000000000 RBX: ffff88012409c380 RCX: 00000000fffff8f8
RDX: 1ffff1002481391d RSI: 000000000000000d RDI: ffff88012409c380
RBP: ffff88010f7de8b0 R08: 0000000000000000 R09: 0000000000000000
R10: ffff88010cc937c0 R11: ffff88011fb06380 R12: ffff88012409c380
R13: 0000000000000000 R14: ffffffff87a070c0 R15: ffff88010f7de950
 veth_open+0x98/0x100 drivers/net/veth.c:191
 __dev_open+0x1e5/0x320 net/core/dev.c:1380
 __dev_change_flags+0x594/0x7f0 net/core/dev.c:6816
 dev_change_flags+0x7b/0x150 net/core/dev.c:6885
 do_setlink+0xc89/0x3880 net/core/rtnetlink.c:2186
 rtnl_newlink+0x10a0/0x1a70 net/core/rtnetlink.c:2747
 rtnetlink_rcv_msg+0x50e/0xed0 net/core/rtnetlink.c:4411
 netlink_rcv_skb+0x211/0x490 net/netlink/af_netlink.c:2405
 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:4423
 netlink_unicast_kernel net/netlink/af_netlink.c:1272 [inline]
 netlink_unicast+0x426/0x630 net/netlink/af_netlink.c:1298
 netlink_sendmsg+0x8c3/0xe80 net/netlink/af_netlink.c:1861
 sock_sendmsg_nosec net/socket.c:633 [inline]
 sock_sendmsg+0xb5/0xf0 net/socket.c:643
 SYSC_sendto+0x345/0x6a0 net/socket.c:1750
 SyS_sendto+0x9/0x10 net/socket.c:1718
 C_SYSC_socketcall net/compat.c:840 [inline]
 compat_SyS_socketcall+0x837/0x1767 net/compat.c:788
 do_syscall_32_irqs_on arch/x86/entry/common.c:329 [inline]
 do_fast_syscall_32+0x3cb/0xef1 arch/x86/entry/common.c:391
 entry_SYSENTER_compat+0x51/0x60 arch/x86/entry/entry_64_compat.S:125
RIP: 0023:0xf7f6dca9
RSP: 002b:00000000ff8cd060 EFLAGS: 00000282 ORIG_RAX: 0000000000000066
RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000ff8cd078
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
RBP: 00000000ff8cd148 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Code: ff fb 00 00 31 c0 81 f9 fe ff 00 00 0f 97 c0 83 ca 03 01 c8 41 88 54 24 01 66 41 89 44 24 0a e9 60 fb ff ff 43 8d 4c 2d 00 31 d2 <f7> f1 89 d0 44 29 e8 49 01 c4 e9 d4 e6 ff ff 49 8d bf c0 02 00 
RIP: tabledist net/sched/sch_netem.c:330 [inline] RSP: ffff88012c105fe8
RIP: netem_enqueue+0x1e30/0x2dd0 net/sched/sch_netem.c:523 RSP: ffff88012c105fe8
---[ end trace 616f11351d338615 ]---