divide error: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 13 Comm: ksoftirqd/0 Not tainted 5.17.0-rc5-syzkaller-00041-g73878e5eb1bd #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:ath9k_htc_choose_bslot drivers/net/wireless/ath/ath9k/htc_drv_beacon.c:277 [inline] RIP: 0010:ath9k_htc_swba+0x1f7/0xd00 drivers/net/wireless/ath/ath9k/htc_drv_beacon.c:310 Code: 48 c1 e8 03 42 8a 04 20 84 c0 0f 85 44 09 00 00 49 8b 06 48 0f c8 48 89 c1 48 c1 e9 0a 81 e1 00 00 c0 ff c1 e8 0a 09 c8 31 d2 f3 8d 04 12 31 d2 f7 f3 41 bd 01 00 00 00 41 29 c5 4c 8b 74 24 RSP: 0018:ffffc90000d27a20 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc90000d27b28 R08: ffffffff859694e3 R09: ffffffff8595300a R10: 0000000000000003 R11: ffff888012020000 R12: dffffc0000000000 R13: ffff88814b08e100 R14: ffff88801de6b40c R15: ffff88801de6b413 FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020001038 CR3: 000000000c88e000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ath9k_wmi_event_tasklet+0x2f2/0x490 drivers/net/wireless/ath/ath9k/wmi.c:165 tasklet_action_common+0x3c2/0x560 kernel/softirq.c:784 __do_softirq+0x392/0x7a3 kernel/softirq.c:558 run_ksoftirqd+0xc1/0x120 kernel/softirq.c:921 smpboot_thread_fn+0x533/0x9d0 kernel/smpboot.c:164 kthread+0x2a3/0x2d0 kernel/kthread.c:377 ret_from_fork+0x1f/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:ath9k_htc_choose_bslot drivers/net/wireless/ath/ath9k/htc_drv_beacon.c:277 [inline] RIP: 0010:ath9k_htc_swba+0x1f7/0xd00 drivers/net/wireless/ath/ath9k/htc_drv_beacon.c:310 Code: 48 c1 e8 03 42 8a 04 20 84 c0 0f 85 44 09 00 00 49 8b 06 48 0f c8 48 89 c1 48 c1 e9 0a 81 e1 00 00 c0 ff c1 e8 0a 09 c8 31 d2 f3 8d 04 12 31 d2 f7 f3 41 bd 01 00 00 00 41 29 c5 4c 8b 74 24 RSP: 0018:ffffc90000d27a20 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc90000d27b28 R08: ffffffff859694e3 R09: ffffffff8595300a R10: 0000000000000003 R11: ffff888012020000 R12: dffffc0000000000 R13: ffff88814b08e100 R14: ffff88801de6b40c R15: ffff88801de6b413 FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020001038 CR3: 000000000c88e000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 48 c1 e8 03 shr $0x3,%rax 4: 42 8a 04 20 mov (%rax,%r12,1),%al 8: 84 c0 test %al,%al a: 0f 85 44 09 00 00 jne 0x954 10: 49 8b 06 mov (%r14),%rax 13: 48 0f c8 bswap %rax 16: 48 89 c1 mov %rax,%rcx 19: 48 c1 e9 0a shr $0xa,%rcx 1d: 81 e1 00 00 c0 ff and $0xffc00000,%ecx 23: c1 e8 0a shr $0xa,%eax 26: 09 c8 or %ecx,%eax 28: 31 d2 xor %edx,%edx * 2a: f7 f3 div %ebx <-- trapping instruction 2c: 8d 04 12 lea (%rdx,%rdx,1),%eax 2f: 31 d2 xor %edx,%edx 31: f7 f3 div %ebx 33: 41 bd 01 00 00 00 mov $0x1,%r13d 39: 41 29 c5 sub %eax,%r13d 3c: 4c rex.WR 3d: 8b .byte 0x8b 3e: 74 24 je 0x64