divide error: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 7 Comm: kworker/u4:0 Not tainted 5.4.147-syzkaller-00015-g5b673be0c6b0 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: netns cleanup_net RIP: 0010:genelink_tx_fixup+0x435/0x5f0 drivers/net/usb/gl620a.c:172 Code: 03 42 8a 04 20 84 c0 0f 85 e9 00 00 00 8b 2b 49 83 ed 80 4c 89 e8 48 c1 e8 03 42 8a 04 20 84 c0 0f 85 ed 00 00 00 89 e8 31 d2 <41> f7 75 00 89 d3 31 ff 89 d6 e8 7c 82 b0 fe 85 db 74 07 e8 d3 7e RSP: 0018:ffff8881f6e09608 EFLAGS: 00010246 RAX: 0000000000000062 RBX: ffff8881eb038930 RCX: ffff8881f5d5cec0 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881eb038930 RBP: 0000000000000062 R08: ffffffff82b05027 R09: ffffed103edc12fc R10: ffffed103edc12fc R11: 0000000000000000 R12: dffffc0000000000 R13: ffff8881eb8c69c0 R14: 000000000000005a R15: ffff8881eb0388c0 FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb152bc4ff8 CR3: 00000001e409e000 CR4: 00000000003406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: usbnet_start_xmit+0x107/0x1a10 drivers/net/usb/usbnet.c:1363 __netdev_start_xmit include/linux/netdevice.h:4510 [inline] netdev_start_xmit include/linux/netdevice.h:4524 [inline] xmit_one+0xfa/0x470 net/core/dev.c:3203 dev_hard_start_xmit+0xac/0x1b0 net/core/dev.c:3219 sch_direct_xmit+0x212/0x8f0 net/sched/sch_generic.c:336 qdisc_restart net/sched/sch_generic.c:401 [inline] __qdisc_run+0x1ea/0x3a0 net/sched/sch_generic.c:409 qdisc_run include/net/pkt_sched.h:121 [inline] __dev_xmit_skb net/core/dev.c:3395 [inline] __dev_queue_xmit+0xc07/0x2c30 net/core/dev.c:3748 neigh_output include/net/neighbour.h:519 [inline] ip6_finish_output2+0xf45/0x1810 net/ipv6/ip6_output.c:144 NF_HOOK_COND include/linux/netfilter.h:297 [inline] ip6_output+0x158/0x380 net/ipv6/ip6_output.c:242 dst_output include/net/dst.h:444 [inline] NF_HOOK include/linux/netfilter.h:308 [inline] mld_sendpack+0x540/0xa20 net/ipv6/mcast.c:1679 mld_send_cr net/ipv6/mcast.c:1975 [inline] mld_ifc_timer_expire+0x804/0xb30 net/ipv6/mcast.c:2474 call_timer_fn+0x30/0x330 kernel/time/timer.c:1418 expire_timers+0x21e/0x3f0 kernel/time/timer.c:1463 __run_timers+0x573/0x670 kernel/time/timer.c:1787 run_timer_softirq+0x46/0x80 kernel/time/timer.c:1800 __do_softirq+0x23e/0x615 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:373 [inline] irq_exit+0x195/0x1c0 kernel/softirq.c:413 exiting_irq arch/x86/include/asm/apic.h:538 [inline] smp_apic_timer_interrupt+0x113/0x420 arch/x86/kernel/apic/apic.c:1150 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:831 RIP: 0010:csd_lock_wait kernel/smp.c:109 [inline] RIP: 0010:smp_call_function_single+0x203/0x410 kernel/smp.c:311 Code: f8 09 00 41 83 e5 01 75 0e e8 a9 f4 09 00 e9 b6 00 00 00 0f 1f 40 00 f3 90 42 0f b6 04 23 84 c0 75 15 f7 44 24 38 01 00 00 00 <0f> 84 94 00 00 00 e8 82 f4 09 00 eb e0 44 89 f1 80 e1 07 80 c1 03 RSP: 0018:ffff8881f5db7aa0 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000000 RBX: 1ffff1103ebb6f5b RCX: ffff8881f5d5cec0 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffff8881f5db7b48 R08: ffffffff8156dc0c R09: ffffed103ede9da1 R10: ffffed103ede9da1 R11: 0000000000000000 R12: dffffc0000000000 R13: 0000000000000001 R14: ffff8881f5db7ad8 R15: 0000000000000000 rcu_barrier+0x21d/0x340 kernel/rcu/tree.c:2940 netdev_run_todo+0xec/0xc80 net/core/dev.c:9407 ip_tunnel_delete_nets+0x31d/0x350 net/ipv4/ip_tunnel.c:1116 ops_exit_list net/core/net_namespace.c:175 [inline] cleanup_net+0x6de/0xc90 net/core/net_namespace.c:598 process_one_work+0x679/0x1030 kernel/workqueue.c:2278 worker_thread+0xa6f/0x1400 kernel/workqueue.c:2424 kthread+0x30f/0x330 kernel/kthread.c:288 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:352 Modules linked in: ---[ end trace f8d6f2ef09bab3c8 ]--- RIP: 0010:genelink_tx_fixup+0x435/0x5f0 drivers/net/usb/gl620a.c:172 Code: 03 42 8a 04 20 84 c0 0f 85 e9 00 00 00 8b 2b 49 83 ed 80 4c 89 e8 48 c1 e8 03 42 8a 04 20 84 c0 0f 85 ed 00 00 00 89 e8 31 d2 <41> f7 75 00 89 d3 31 ff 89 d6 e8 7c 82 b0 fe 85 db 74 07 e8 d3 7e RSP: 0018:ffff8881f6e09608 EFLAGS: 00010246 RAX: 0000000000000062 RBX: ffff8881eb038930 RCX: ffff8881f5d5cec0 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881eb038930 RBP: 0000000000000062 R08: ffffffff82b05027 R09: ffffed103edc12fc R10: ffffed103edc12fc R11: 0000000000000000 R12: dffffc0000000000 R13: ffff8881eb8c69c0 R14: 000000000000005a R15: ffff8881eb0388c0 FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fb152bc4ff8 CR3: 00000001e409e000 CR4: 00000000003406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 03 42 8a add -0x76(%rdx),%eax 3: 04 20 add $0x20,%al 5: 84 c0 test %al,%al 7: 0f 85 e9 00 00 00 jne 0xf6 d: 8b 2b mov (%rbx),%ebp f: 49 83 ed 80 sub $0xffffffffffffff80,%r13 13: 4c 89 e8 mov %r13,%rax 16: 48 c1 e8 03 shr $0x3,%rax 1a: 42 8a 04 20 mov (%rax,%r12,1),%al 1e: 84 c0 test %al,%al 20: 0f 85 ed 00 00 00 jne 0x113 26: 89 e8 mov %ebp,%eax 28: 31 d2 xor %edx,%edx * 2a: 41 f7 75 00 divl 0x0(%r13) <-- trapping instruction 2e: 89 d3 mov %edx,%ebx 30: 31 ff xor %edi,%edi 32: 89 d6 mov %edx,%esi 34: e8 7c 82 b0 fe callq 0xfeb082b5 39: 85 db test %ebx,%ebx 3b: 74 07 je 0x44 3d: e8 .byte 0xe8 3e: d3 .byte 0xd3 3f: 7e .byte 0x7e