divide error: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 6383 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:tcp_reno_cong_avoid+0x289/0x560 net/ipv4/tcp_cong.c:450
Code: 89 1c 24 89 df 89 ee e8 c5 00 dd f8 39 eb 73 11 e8 1c ff dc f8 48 bd 00 00 00 00 00 fc ff df eb 3b e8 0b ff dc f8 89 d8 31 d2 <f7> f5 89 c6 89 d3 48 bd 00 00 00 00 00 fc ff df 41 8a 04 2f 84 c0
RSP: 0018:ffffc90000dff408 EFLAGS: 00010246
RAX: 0000000000000008 RBX: 0000000000000008 RCX: 0000000000040000
RDX: 0000000000000000 RSI: 0000000000003cf4 RDI: 0000000000003cf5
RBP: 0000000000000000 R08: ffffffff88a7554b R09: fffffbfff1bfcce6
R10: fffffbfff1bfcce6 R11: 0000000000000000 R12: ffff88803b2fd184
R13: ffff88803b2fc800 R14: 1ffff1100765fa30 R15: 1ffff1100765fa30
FS:  00007f2334784700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000006f018000 CR4: 00000000003506e0
Call Trace:
 <TASK>
 tcp_cdg_cong_avoid+0x8c3/0x17f0 net/ipv4/tcp_cdg.c:293
 tcp_cong_avoid net/ipv4/tcp_input.c:3131 [inline]
 tcp_cong_control net/ipv4/tcp_input.c:3488 [inline]
 tcp_ack+0x2478/0x42e0 net/ipv4/tcp_input.c:3889
 tcp_rcv_established+0x7d7/0x22b0 net/ipv4/tcp_input.c:5936
 tcp_v4_do_rcv+0x3eb/0x950 net/ipv4/tcp_ipv4.c:1716
 sk_backlog_rcv include/net/sock.h:1030 [inline]
 __release_sock+0x1d8/0x4c0 net/core/sock.c:2768
 __sk_flush_backlog+0x22/0x30 net/core/sock.c:2788
 sk_flush_backlog include/net/sock.h:1117 [inline]
 tcp_sendmsg_locked+0x33fa/0x48a0 net/ipv4/tcp.c:1277
 tcp_sendmsg+0x2c/0x40 net/ipv4/tcp.c:1440
 sock_sendmsg_nosec net/socket.c:704 [inline]
 sock_sendmsg net/socket.c:724 [inline]
 __sys_sendto+0x42e/0x5b0 net/socket.c:2036
 __do_sys_sendto net/socket.c:2048 [inline]
 __se_sys_sendto net/socket.c:2044 [inline]
 __x64_sys_sendto+0xda/0xf0 net/socket.c:2044
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f233720eae9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f2334784188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 00007f2337321f60 RCX: 00007f233720eae9
RDX: 00000000fffffd46 RSI: 0000000020000240 RDI: 0000000000000003
RBP: 00007f2337268f6d R08: 0000000000000000 R09: 00000000000001f4
R10: 00000000000081f4 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffee00899cf R14: 00007f2334784300 R15: 0000000000022000
 </TASK>
Modules linked in:
---[ end trace 283ace609e194e9a ]---
RIP: 0010:tcp_reno_cong_avoid+0x289/0x560 net/ipv4/tcp_cong.c:450
Code: 89 1c 24 89 df 89 ee e8 c5 00 dd f8 39 eb 73 11 e8 1c ff dc f8 48 bd 00 00 00 00 00 fc ff df eb 3b e8 0b ff dc f8 89 d8 31 d2 <f7> f5 89 c6 89 d3 48 bd 00 00 00 00 00 fc ff df 41 8a 04 2f 84 c0
RSP: 0018:ffffc90000dff408 EFLAGS: 00010246
RAX: 0000000000000008 RBX: 0000000000000008 RCX: 0000000000040000
RDX: 0000000000000000 RSI: 0000000000003cf4 RDI: 0000000000003cf5
RBP: 0000000000000000 R08: ffffffff88a7554b R09: fffffbfff1bfcce6
R10: fffffbfff1bfcce6 R11: 0000000000000000 R12: ffff88803b2fd184
R13: ffff88803b2fc800 R14: 1ffff1100765fa30 R15: 1ffff1100765fa30
FS:  00007f2334784700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000006f018000 CR4: 00000000003506e0
----------------
Code disassembly (best guess):
   0:	89 1c 24             	mov    %ebx,(%rsp)
   3:	89 df                	mov    %ebx,%edi
   5:	89 ee                	mov    %ebp,%esi
   7:	e8 c5 00 dd f8       	callq  0xf8dd00d1
   c:	39 eb                	cmp    %ebp,%ebx
   e:	73 11                	jae    0x21
  10:	e8 1c ff dc f8       	callq  0xf8dcff31
  15:	48 bd 00 00 00 00 00 	movabs $0xdffffc0000000000,%rbp
  1c:	fc ff df
  1f:	eb 3b                	jmp    0x5c
  21:	e8 0b ff dc f8       	callq  0xf8dcff31
  26:	89 d8                	mov    %ebx,%eax
  28:	31 d2                	xor    %edx,%edx
* 2a:	f7 f5                	div    %ebp <-- trapping instruction
  2c:	89 c6                	mov    %eax,%esi
  2e:	89 d3                	mov    %edx,%ebx
  30:	48 bd 00 00 00 00 00 	movabs $0xdffffc0000000000,%rbp
  37:	fc ff df
  3a:	41 8a 04 2f          	mov    (%r15,%rbp,1),%al
  3e:	84 c0                	test   %al,%al