divide error: 0000 [#1] PREEMPT SMP KASAN NOPTI
CPU: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.8.0-rc3-syzkaller-00293-ga5b6244cf87c #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
Workqueue: mld mld_dad_work
RIP: 0010:ath9k_htc_choose_bslot drivers/net/wireless/ath/ath9k/htc_drv_beacon.c:277 [inline]
RIP: 0010:ath9k_htc_swba+0x18e/0xba0 drivers/net/wireless/ath/ath9k/htc_drv_beacon.c:310
Code: e8 03 42 0f b6 04 20 84 c0 0f 85 73 08 00 00 48 8b 45 00 48 0f c8 48 89 c1 48 c1 e9 0a 81 e1 00 00 c0 ff c1 e8 0a 09 c8 31 d2 <f7> f3 8d 04 12 31 d2 f7 f3 41 bf 01 00 00 00 41 29 c7 4d 8d b5 b0
RSP: 0018:ffffc90000007cc0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff88802390e40c R08: ffffffff869f915b R09: ffffffff869e31d2
R10: 0000000000000003 R11: ffff8880172b0000 R12: dffffc0000000000
R13: ffff8880778bb040 R14: ffff88802390e413 R15: ffff8880778bb468
FS:  0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020001038 CR3: 000000007b64e000 CR4: 0000000000350ef0
Call Trace:
 <IRQ>
 ath9k_wmi_event_tasklet+0x2ff/0x490 drivers/net/wireless/ath/ath9k/wmi.c:165
 tasklet_action_common+0x323/0x4d0 kernel/softirq.c:780
 __do_softirq+0x2bd/0x942 kernel/softirq.c:553
 do_softirq+0x11b/0x1e0 kernel/softirq.c:454
 </IRQ>
 <TASK>
 __local_bh_enable_ip+0x1bb/0x200 kernel/softirq.c:381
 ipv6_get_lladdr+0x295/0x3d0 net/ipv6/addrconf.c:1889
 mld_newpack+0x338/0xa90 net/ipv6/mcast.c:1754
 add_grhead net/ipv6/mcast.c:1849 [inline]
 add_grec+0x1492/0x19a0 net/ipv6/mcast.c:1987
 mld_send_initial_cr+0xed/0x240 net/ipv6/mcast.c:2233
 mld_dad_work+0x45/0x270 net/ipv6/mcast.c:2259
 process_one_work kernel/workqueue.c:2633 [inline]
 process_scheduled_works+0x915/0x1420 kernel/workqueue.c:2706
 worker_thread+0xa5f/0x1000 kernel/workqueue.c:2787
 kthread+0x2f1/0x390 kernel/kthread.c:388
 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:242
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:ath9k_htc_choose_bslot drivers/net/wireless/ath/ath9k/htc_drv_beacon.c:277 [inline]
RIP: 0010:ath9k_htc_swba+0x18e/0xba0 drivers/net/wireless/ath/ath9k/htc_drv_beacon.c:310
Code: e8 03 42 0f b6 04 20 84 c0 0f 85 73 08 00 00 48 8b 45 00 48 0f c8 48 89 c1 48 c1 e9 0a 81 e1 00 00 c0 ff c1 e8 0a 09 c8 31 d2 <f7> f3 8d 04 12 31 d2 f7 f3 41 bf 01 00 00 00 41 29 c7 4d 8d b5 b0
RSP: 0018:ffffc90000007cc0 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff88802390e40c R08: ffffffff869f915b R09: ffffffff869e31d2
R10: 0000000000000003 R11: ffff8880172b0000 R12: dffffc0000000000
R13: ffff8880778bb040 R14: ffff88802390e413 R15: ffff8880778bb468
FS:  0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020001038 CR3: 000000007b64e000 CR4: 0000000000350ef0
----------------
Code disassembly (best guess):
   0:	e8 03 42 0f b6       	call   0xb60f4208
   5:	04 20                	add    $0x20,%al
   7:	84 c0                	test   %al,%al
   9:	0f 85 73 08 00 00    	jne    0x882
   f:	48 8b 45 00          	mov    0x0(%rbp),%rax
  13:	48 0f c8             	bswap  %rax
  16:	48 89 c1             	mov    %rax,%rcx
  19:	48 c1 e9 0a          	shr    $0xa,%rcx
  1d:	81 e1 00 00 c0 ff    	and    $0xffc00000,%ecx
  23:	c1 e8 0a             	shr    $0xa,%eax
  26:	09 c8                	or     %ecx,%eax
  28:	31 d2                	xor    %edx,%edx
* 2a:	f7 f3                	div    %ebx <-- trapping instruction
  2c:	8d 04 12             	lea    (%rdx,%rdx,1),%eax
  2f:	31 d2                	xor    %edx,%edx
  31:	f7 f3                	div    %ebx
  33:	41 bf 01 00 00 00    	mov    $0x1,%r15d
  39:	41 29 c7             	sub    %eax,%r15d
  3c:	4d                   	rex.WRB
  3d:	8d                   	.byte 0x8d
  3e:	b5 b0                	mov    $0xb0,%ch