divide error: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 2657 Comm: dhcpcd-run-hook Not tainted 5.4.147-syzkaller-00015-g5b673be0c6b0 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:genelink_tx_fixup+0x435/0x5f0 drivers/net/usb/gl620a.c:172 Code: 03 42 8a 04 20 84 c0 0f 85 e9 00 00 00 8b 2b 49 83 ed 80 4c 89 e8 48 c1 e8 03 42 8a 04 20 84 c0 0f 85 ed 00 00 00 89 e8 31 d2 <41> f7 75 00 89 d3 31 ff 89 d6 e8 7c 82 b0 fe 85 db 74 07 e8 d3 7e RSP: 0000:ffff8881f6f09608 EFLAGS: 00010246 RAX: 0000000000000062 RBX: ffff8881e55b0570 RCX: ffff8881e651ee40 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881e55b0570 RBP: 0000000000000062 R08: ffffffff82b05027 R09: ffffed103ede12fc R10: ffffed103ede12fc R11: 0000000000000000 R12: dffffc0000000000 R13: ffff8881ca2f49c0 R14: 000000000000005a R15: ffff8881e55b0500 FS: 00007f39c0c6a800(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055aac715f4d8 CR3: 00000001e54ff000 CR4: 00000000003406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: usbnet_start_xmit+0x107/0x1a10 drivers/net/usb/usbnet.c:1363 __netdev_start_xmit include/linux/netdevice.h:4510 [inline] netdev_start_xmit include/linux/netdevice.h:4524 [inline] xmit_one+0xfa/0x470 net/core/dev.c:3203 dev_hard_start_xmit+0xac/0x1b0 net/core/dev.c:3219 sch_direct_xmit+0x212/0x8f0 net/sched/sch_generic.c:336 qdisc_restart net/sched/sch_generic.c:401 [inline] __qdisc_run+0x1ea/0x3a0 net/sched/sch_generic.c:409 qdisc_run include/net/pkt_sched.h:121 [inline] __dev_xmit_skb net/core/dev.c:3395 [inline] __dev_queue_xmit+0xc07/0x2c30 net/core/dev.c:3748 neigh_output include/net/neighbour.h:519 [inline] ip6_finish_output2+0xf45/0x1810 net/ipv6/ip6_output.c:144 NF_HOOK_COND include/linux/netfilter.h:297 [inline] ip6_output+0x158/0x380 net/ipv6/ip6_output.c:242 dst_output include/net/dst.h:444 [inline] NF_HOOK include/linux/netfilter.h:308 [inline] mld_sendpack+0x540/0xa20 net/ipv6/mcast.c:1679 mld_send_cr net/ipv6/mcast.c:1975 [inline] mld_ifc_timer_expire+0x804/0xb30 net/ipv6/mcast.c:2474 call_timer_fn+0x30/0x330 kernel/time/timer.c:1418 expire_timers+0x21e/0x3f0 kernel/time/timer.c:1463 __run_timers+0x573/0x670 kernel/time/timer.c:1787 run_timer_softirq+0x46/0x80 kernel/time/timer.c:1800 __do_softirq+0x23e/0x615 kernel/softirq.c:292 invoke_softirq kernel/softirq.c:373 [inline] irq_exit+0x195/0x1c0 kernel/softirq.c:413 exiting_irq arch/x86/include/asm/apic.h:538 [inline] smp_apic_timer_interrupt+0x113/0x420 arch/x86/kernel/apic/apic.c:1150 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:831 RIP: 0010:__kasan_check_write+0x6/0x10 mm/kasan/common.c:99 Code: 09 00 00 c3 65 48 8b 04 25 80 ed 01 00 ff 88 e0 09 00 00 c3 89 f6 48 8b 0c 24 31 d2 e9 d3 22 00 00 0f 1f 00 89 f6 48 8b 0c 24 01 00 00 00 e9 c0 22 00 00 55 41 56 53 48 89 d3 41 89 f6 48 89 RSP: 0000:ffff8881eaecfd20 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 RAX: 0000000000000000 RBX: ffffea0006720b40 RCX: ffffffff8188b36a RDX: ffff8881e651ee40 RSI: 0000000000000008 RDI: ffffea0006720b40 RBP: ffffea0006720b48 R08: ffffffff8188b351 R09: ffffed103ba94401 R10: ffffed103ba94401 R11: 0000000000000000 R12: 1ffffd4000ce4169 R13: ffffea0006720b40 R14: 0000000000000000 R15: dead000000000100 __set_bit include/asm-generic/bitops-instrumented.h:43 [inline] __SetPageSwapBacked include/linux/page-flags.h:342 [inline] page_add_new_anon_rmap+0x7a/0x2c0 mm/rmap.c:1154 do_anonymous_page mm/memory.c:3184 [inline] handle_pte_fault mm/memory.c:3995 [inline] __handle_mm_fault mm/memory.c:4121 [inline] handle_mm_fault+0x2c3d/0x3f30 mm/memory.c:4158 do_user_addr_fault+0x4a0/0xb40 arch/x86/mm/fault.c:1469 page_fault+0x2f/0x40 arch/x86/entry/entry_64.S:1203 RIP: 0033:0x7f39c0d93f1f Code: 49 8d 0c 2f 48 8b 5c 24 28 49 39 d4 49 89 4c 24 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 48 09 ea 48 83 ca 01 49 89 57 08 <48> 89 41 08 49 83 c7 10 48 89 de 4c 89 ff e8 9e c9 ff ff e9 bb f3 RSP: 002b:00007fff28edb390 EFLAGS: 00010202 RAX: 000000000001cb31 RBX: 0000000000000850 RCX: 000055aac715f4d0 RDX: 0000000000000861 RSI: 0000000000000000 RDI: 0000000000000004 RBP: 0000000000000860 R08: 0000000000000003 R09: 00007f39c0ec6a60 R10: 000000000000005f R11: 0000000000000000 R12: 00007f39c0ec6a00 R13: 0000000000000086 R14: ffffffffffffffb8 R15: 000055aac715ec70 Modules linked in: ---[ end trace cf67aecc9dfc1546 ]--- RIP: 0010:genelink_tx_fixup+0x435/0x5f0 drivers/net/usb/gl620a.c:172 Code: 03 42 8a 04 20 84 c0 0f 85 e9 00 00 00 8b 2b 49 83 ed 80 4c 89 e8 48 c1 e8 03 42 8a 04 20 84 c0 0f 85 ed 00 00 00 89 e8 31 d2 <41> f7 75 00 89 d3 31 ff 89 d6 e8 7c 82 b0 fe 85 db 74 07 e8 d3 7e RSP: 0000:ffff8881f6f09608 EFLAGS: 00010246 RAX: 0000000000000062 RBX: ffff8881e55b0570 RCX: ffff8881e651ee40 RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8881e55b0570 RBP: 0000000000000062 R08: ffffffff82b05027 R09: ffffed103ede12fc R10: ffffed103ede12fc R11: 0000000000000000 R12: dffffc0000000000 R13: ffff8881ca2f49c0 R14: 000000000000005a R15: ffff8881e55b0500 FS: 00007f39c0c6a800(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055aac715f4d8 CR3: 00000001e54ff000 CR4: 00000000003406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 03 42 8a add -0x76(%rdx),%eax 3: 04 20 add $0x20,%al 5: 84 c0 test %al,%al 7: 0f 85 e9 00 00 00 jne 0xf6 d: 8b 2b mov (%rbx),%ebp f: 49 83 ed 80 sub $0xffffffffffffff80,%r13 13: 4c 89 e8 mov %r13,%rax 16: 48 c1 e8 03 shr $0x3,%rax 1a: 42 8a 04 20 mov (%rax,%r12,1),%al 1e: 84 c0 test %al,%al 20: 0f 85 ed 00 00 00 jne 0x113 26: 89 e8 mov %ebp,%eax 28: 31 d2 xor %edx,%edx * 2a: 41 f7 75 00 divl 0x0(%r13) <-- trapping instruction 2e: 89 d3 mov %edx,%ebx 30: 31 ff xor %edi,%edi 32: 89 d6 mov %edx,%esi 34: e8 7c 82 b0 fe callq 0xfeb082b5 39: 85 db test %ebx,%ebx 3b: 74 07 je 0x44 3d: e8 .byte 0xe8 3e: d3 .byte 0xd3 3f: 7e .byte 0x7e