divide error: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 24970 Comm: syz-executor.0 Not tainted 5.16.0-rc1-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:netem_enqueue+0x1474/0x3550 net/sched/sch_netem.c:516
Code: 74 1f 4c 89 44 24 20 89 4c 24 18 89 44 24 10 e8 b2 f5 58 fa 4c 8b 44 24 20 8b 4c 24 18 8b 44 24 10 48 8b 34 24 31 d2 2b 4e 74 <f7> f1 48 b8 00 00 00 00 00 fc ff df 48 01 d3 48 89 d9 48 c1 e9 03
RSP: 0018:ffffc9000375f4d0 EFLAGS: 00010246
RAX: 00000000b04763fd RBX: ffff88809dc47000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff88803b4bb780 RDI: ffff88803b4bb7f4
RBP: ffff88809a74a330 R08: ffff88803b4bb850 R09: 0000000000000000
R10: ffffffff83d80c1d R11: 0000000000000000 R12: 0000000000000001
R13: 0000000000000020 R14: ffff88809a74a000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880b9c00000(0063) knlGS:00000000f44ccb40
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 0000000020006ffc CR3: 000000008259e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 netem_enqueue+0x2048/0x3550 net/sched/sch_netem.c:483
 dev_qdisc_enqueue+0x40/0x300 net/core/dev.c:3785
 __dev_xmit_skb net/core/dev.c:3869 [inline]
 __dev_queue_xmit+0x1f6e/0x3630 net/core/dev.c:4194
 __netlink_deliver_tap_skb net/netlink/af_netlink.c:303 [inline]
 __netlink_deliver_tap net/netlink/af_netlink.c:321 [inline]
 netlink_deliver_tap+0x9cb/0xc30 net/netlink/af_netlink.c:334
 netlink_deliver_tap_kernel net/netlink/af_netlink.c:343 [inline]
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x5e5/0x7d0 net/netlink/af_netlink.c:1345
 netlink_sendmsg+0x86d/0xda0 net/netlink/af_netlink.c:1916
 sock_sendmsg_nosec net/socket.c:704 [inline]
 sock_sendmsg+0xcf/0x120 net/socket.c:724
 ____sys_sendmsg+0x6e8/0x810 net/socket.c:2409
 ___sys_sendmsg+0xf3/0x170 net/socket.c:2463
 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2492
 do_syscall_32_irqs_on arch/x86/entry/common.c:112 [inline]
 __do_fast_syscall_32+0x65/0xf0 arch/x86/entry/common.c:178
 do_fast_syscall_32+0x2f/0x70 arch/x86/entry/common.c:203
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf6ed2549
Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
RSP: 002b:00000000f44cc5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172
RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000200000c0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>
Modules linked in:
---[ end trace 252c49e05a3321d7 ]---
RIP: 0010:netem_enqueue+0x1474/0x3550 net/sched/sch_netem.c:516
Code: 74 1f 4c 89 44 24 20 89 4c 24 18 89 44 24 10 e8 b2 f5 58 fa 4c 8b 44 24 20 8b 4c 24 18 8b 44 24 10 48 8b 34 24 31 d2 2b 4e 74 <f7> f1 48 b8 00 00 00 00 00 fc ff df 48 01 d3 48 89 d9 48 c1 e9 03
RSP: 0018:ffffc9000375f4d0 EFLAGS: 00010246
RAX: 00000000b04763fd RBX: ffff88809dc47000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff88803b4bb780 RDI: ffff88803b4bb7f4
RBP: ffff88809a74a330 R08: ffff88803b4bb850 R09: 0000000000000000
R10: ffffffff83d80c1d R11: 0000000000000000 R12: 0000000000000001
R13: 0000000000000020 R14: ffff88809a74a000 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff8880b9c00000(0063) knlGS:00000000f44ccb40
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 0000000020006ffc CR3: 000000008259e000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
   0:	74 1f                	je     0x21
   2:	4c 89 44 24 20       	mov    %r8,0x20(%rsp)
   7:	89 4c 24 18          	mov    %ecx,0x18(%rsp)
   b:	89 44 24 10          	mov    %eax,0x10(%rsp)
   f:	e8 b2 f5 58 fa       	callq  0xfa58f5c6
  14:	4c 8b 44 24 20       	mov    0x20(%rsp),%r8
  19:	8b 4c 24 18          	mov    0x18(%rsp),%ecx
  1d:	8b 44 24 10          	mov    0x10(%rsp),%eax
  21:	48 8b 34 24          	mov    (%rsp),%rsi
  25:	31 d2                	xor    %edx,%edx
  27:	2b 4e 74             	sub    0x74(%rsi),%ecx
* 2a:	f7 f1                	div    %ecx <-- trapping instruction
  2c:	48 b8 00 00 00 00 00 	movabs $0xdffffc0000000000,%rax
  33:	fc ff df
  36:	48 01 d3             	add    %rdx,%rbx
  39:	48 89 d9             	mov    %rbx,%rcx
  3c:	48 c1 e9 03          	shr    $0x3,%rcx