bisecting fixing commit since e8b767f5e04097aaedcd6e06e2270f9fe5282696 building syzkaller on 20955a246688253cfb50ff7ed8bd1fc9cf699c1d testing commit e8b767f5e04097aaedcd6e06e2270f9fe5282696 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 045c5fbc0b85df38d95eafc3ade3af22c850d242cbb744be4bb2feaf3f6fec59 run #0: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM run #1: basic kernel testing failed: BUG: program execution failed: executor NUM: exit status NUM run #2: crashed: divide error in ath9k_htc_swba run #3: crashed: divide error in ath9k_htc_swba run #4: crashed: divide error in ath9k_htc_swba run #5: crashed: divide error in ath9k_htc_swba run #6: crashed: divide error in ath9k_htc_swba run #7: crashed: divide error in ath9k_htc_swba run #8: crashed: divide error in ath9k_htc_swba run #9: crashed: divide error in ath9k_htc_swba run #10: crashed: divide error in ath9k_htc_swba run #11: crashed: SYZFAIL: wrong response packet run #12: crashed: divide error in ath9k_htc_swba run #13: crashed: SYZFAIL: wrong response packet run #14: crashed: SYZFAIL: wrong response packet run #15: crashed: divide error in ath9k_htc_swba run #16: crashed: SYZFAIL: wrong response packet run #17: crashed: SYZFAIL: wrong response packet run #18: crashed: SYZFAIL: wrong response packet run #19: crashed: divide error in ath9k_htc_swba testing current HEAD 9886142c7a2226439c1e3f7d9b69f9c7094c3ef6 testing commit 9886142c7a2226439c1e3f7d9b69f9c7094c3ef6 compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2 kernel signature: 14fc8d53435f23ff82c827661a08a1d47edd786e3ff61470886393638a5b6c6a run #0: crashed: divide error in ath9k_htc_swba run #1: crashed: divide error in ath9k_htc_swba run #2: crashed: divide error in ath9k_htc_swba run #3: boot failed: INFO: task hung in add_early_randomness run #4: boot failed: INFO: task hung in add_early_randomness run #5: boot failed: INFO: task hung in add_early_randomness run #6: boot failed: INFO: task hung in add_early_randomness run #7: boot failed: INFO: task hung in add_early_randomness run #8: boot failed: INFO: task hung in add_early_randomness run #9: boot failed: INFO: task hung in add_early_randomness revisions tested: 2, total time: 27m14.219646495s (build: 12m33.052500126s, test: 13m54.151645274s) the crash still happens on HEAD commit msg: Merge tag 'input-for-v5.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input crash: divide error in ath9k_htc_swba divide error: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 22 Comm: ksoftirqd/1 Not tainted 5.19.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:ath9k_htc_choose_bslot drivers/net/wireless/ath/ath9k/htc_drv_beacon.c:277 [inline] RIP: 0010:ath9k_htc_swba+0x18b/0xb10 drivers/net/wireless/ath/ath9k/htc_drv_beacon.c:310 Code: c0 40 84 c6 0f 85 b1 08 00 00 48 8b 55 00 0f b7 c9 bd 01 00 00 00 48 0f ca 48 89 d0 c1 ea 0a 48 c1 e8 20 c1 e0 16 09 d0 31 d2 f1 8d 04 12 31 d2 f7 f1 29 c5 48 8d 83 b0 03 00 00 48 89 c7 48 RSP: 0018:ffffc900003dfcb0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff888070023340 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 R10: ffffed1003c2b83e R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000001002 R14: ffff888070023340 R15: ffff888078778d00 FS: 0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055a5e1da27e8 CR3: 000000007f3b6000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ath9k_wmi_event_tasklet+0x2c2/0x430 drivers/net/wireless/ath/ath9k/wmi.c:165 tasklet_action_common.constprop.0+0x201/0x2e0 kernel/softirq.c:797 __do_softirq+0x29b/0x9c2 kernel/softirq.c:571 run_ksoftirqd kernel/softirq.c:934 [inline] run_ksoftirqd+0x2d/0x60 kernel/softirq.c:926 smpboot_thread_fn+0x548/0x8c0 kernel/smpboot.c:164 kthread+0x299/0x340 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:302 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:ath9k_htc_choose_bslot drivers/net/wireless/ath/ath9k/htc_drv_beacon.c:277 [inline] RIP: 0010:ath9k_htc_swba+0x18b/0xb10 drivers/net/wireless/ath/ath9k/htc_drv_beacon.c:310 Code: c0 40 84 c6 0f 85 b1 08 00 00 48 8b 55 00 0f b7 c9 bd 01 00 00 00 48 0f ca 48 89 d0 c1 ea 0a 48 c1 e8 20 c1 e0 16 09 d0 31 d2 f1 8d 04 12 31 d2 f7 f1 29 c5 48 8d 83 b0 03 00 00 48 89 c7 48 RSP: 0018:ffffc900003dfcb0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff888070023340 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 R10: ffffed1003c2b83e R11: 0000000000000001 R12: 0000000000000000 R13: 0000000000001002 R14: ffff888070023340 R15: ffff888078778d00 FS: 0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055a5e1da27e8 CR3: 000000007f3b6000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: c0 40 84 c6 rolb $0xc6,-0x7c(%rax) 4: 0f 85 b1 08 00 00 jne 0x8bb a: 48 8b 55 00 mov 0x0(%rbp),%rdx e: 0f b7 c9 movzwl %cx,%ecx 11: bd 01 00 00 00 mov $0x1,%ebp 16: 48 0f ca bswap %rdx 19: 48 89 d0 mov %rdx,%rax 1c: c1 ea 0a shr $0xa,%edx 1f: 48 c1 e8 20 shr $0x20,%rax 23: c1 e0 16 shl $0x16,%eax 26: 09 d0 or %edx,%eax 28: 31 d2 xor %edx,%edx * 2a: f7 f1 div %ecx <-- trapping instruction 2c: 8d 04 12 lea (%rdx,%rdx,1),%eax 2f: 31 d2 xor %edx,%edx 31: f7 f1 div %ecx 33: 29 c5 sub %eax,%ebp 35: 48 8d 83 b0 03 00 00 lea 0x3b0(%rbx),%rax 3c: 48 89 c7 mov %rax,%rdi 3f: 48 rex.W