divide error: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 14576 Comm: syz-executor.3 Not tainted 5.3.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:tcp_cong_avoid_ai net/ipv4/tcp_cong.c:418 [inline] RIP: 0010:tcp_reno_cong_avoid+0x20c/0x2b0 net/ipv4/tcp_cong.c:448 Code: 45 39 f5 45 0f 47 ee 85 d2 45 89 ec 44 89 ab c8 08 00 00 0f 85 fa fe ff ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 5d c3 89 d0 31 d2 <41> f7 f4 01 c1 89 93 cc 08 00 00 89 8b c8 08 00 00 e9 27 ff ff ff RSP: 0018:ffff8880a56374a0 EFLAGS: 00010246 RAX: 0000000000000011 RBX: ffff8880b00da1c0 RCX: 0000000000000001 RDX: 0000000000000000 RSI: 000000008942c3e5 RDI: ffff8880b00daa8c RBP: ffff8880a56374c8 R08: 000000000000000b R09: dffffc0000000000 R10: ffffffff88eca960 R11: 0000000000000005 R12: 0000000000000000 R13: 0000000000000000 R14: 00000000ffffffff R15: 0000000000000000 FS: 00007fc1dd82f700(0000) GS:ffff8880ba300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000004e4da0 CR3: 00000000a4810000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: tcp_cdg_cong_avoid+0x4c0/0x1820 net/ipv4/tcp_cdg.c:293 tcp_cong_avoid net/ipv4/tcp_input.c:2978 [inline] tcp_cong_control net/ipv4/tcp_input.c:3331 [inline] tcp_ack+0x33b5/0x57a0 net/ipv4/tcp_input.c:3716 tcp_rcv_established+0x57d/0x1f80 net/ipv4/tcp_input.c:5652 tcp_v4_do_rcv+0x520/0x780 net/ipv4/tcp_ipv4.c:1542 sk_backlog_rcv include/net/sock.h:945 [inline] __release_sock+0x10e/0x2e0 net/core/sock.c:2418 __sk_flush_backlog+0x21/0x30 net/core/sock.c:2438 sk_flush_backlog include/net/sock.h:1032 [inline] tcp_sendmsg_locked+0x243f/0x3cd0 net/ipv4/tcp.c:1257 tcp_sendmsg+0x27/0x40 net/ipv4/tcp.c:1420 inet_sendmsg+0x8f/0xb0 net/ipv4/af_inet.c:807 sock_sendmsg_nosec net/socket.c:637 [inline] sock_sendmsg+0xac/0xf0 net/socket.c:657 __sys_sendto+0x1f2/0x2e0 net/socket.c:1952 __do_sys_sendto net/socket.c:1964 [inline] __se_sys_sendto net/socket.c:1960 [inline] __x64_sys_sendto+0xdc/0x1a0 net/socket.c:1960 do_syscall_64+0xa3/0x4a0 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665d9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fc1dd82f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 RDX: 00000000fffffd46 RSI: 0000000020000240 RDI: 0000000000000004 RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 00000000000001f4 R10: 00000000000081f4 R11: 0000000000000246 R12: 000000000056bf80 R13: 00007fffec289a8f R14: 00007fc1dd82f300 R15: 0000000000022000 Modules linked in: ---[ end trace ff82ad29c0abb908 ]--- RIP: 0010:tcp_cong_avoid_ai net/ipv4/tcp_cong.c:418 [inline] RIP: 0010:tcp_reno_cong_avoid+0x20c/0x2b0 net/ipv4/tcp_cong.c:448 Code: 45 39 f5 45 0f 47 ee 85 d2 45 89 ec 44 89 ab c8 08 00 00 0f 85 fa fe ff ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 5d c3 89 d0 31 d2 <41> f7 f4 01 c1 89 93 cc 08 00 00 89 8b c8 08 00 00 e9 27 ff ff ff RSP: 0018:ffff8880a56374a0 EFLAGS: 00010246 RAX: 0000000000000011 RBX: ffff8880b00da1c0 RCX: 0000000000000001 RDX: 0000000000000000 RSI: 000000008942c3e5 RDI: ffff8880b00daa8c RBP: ffff8880a56374c8 R08: 000000000000000b R09: dffffc0000000000 R10: ffffffff88eca960 R11: 0000000000000005 R12: 0000000000000000 R13: 0000000000000000 R14: 00000000ffffffff R15: 0000000000000000 FS: 00007fc1dd82f700(0000) GS:ffff8880ba300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f6b4bdcf008 CR3: 00000000a4810000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400