We can underflow tp->snd_wnd if the remote side ACKs more than tp->snd_wnd. That can happen when the remote side responds to a window probe by ACKing the one byte it contains.
Obtained from: Juniper Networks (earlier version)
Sponsored by: Juniper Networks
MFC after: 2 weeks