Warning: Permanently added '10.128.0.204' (ECDSA) to the list of known hosts.
[ 71.099054][ T3253] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.105623][ T3253] ieee802154 phy1 wpan1: encryption failed: -22
[ 71.979710][ T8438] chnl_net:caif_netlink_parms(): no params data found
[ 72.030454][ T8438] bridge0: port 1(bridge_slave_0) entered blocking state
[ 72.038914][ T8438] bridge0: port 1(bridge_slave_0) entered disabled state
[ 72.048641][ T8438] device bridge_slave_0 entered promiscuous mode
[ 72.059637][ T8438] bridge0: port 2(bridge_slave_1) entered blocking state
[ 72.067426][ T8438] bridge0: port 2(bridge_slave_1) entered disabled state
[ 72.075459][ T8438] device bridge_slave_1 entered promiscuous mode
[ 72.097384][ T8438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 72.110237][ T8438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 72.132636][ T8438] team0: Port device team_slave_0 added
[ 72.139930][ T8438] team0: Port device team_slave_1 added
[ 72.158085][ T8438] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 72.165209][ T8438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 72.192873][ T8438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 72.206215][ T8438] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 72.213410][ T8438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 72.240211][ T8438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 72.266972][ T8438] device hsr_slave_0 entered promiscuous mode
[ 72.275004][ T8438] device hsr_slave_1 entered promiscuous mode
[ 72.379129][ T8438] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 72.397483][ T8438] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 72.406239][ T8438] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 72.419391][ T8438] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 72.445338][ T8438] bridge0: port 2(bridge_slave_1) entered blocking state
[ 72.452558][ T8438] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 72.460955][ T8438] bridge0: port 1(bridge_slave_0) entered blocking state
[ 72.468322][ T8438] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 72.513542][ T8438] 8021q: adding VLAN 0 to HW filter on device bond0
[ 72.526889][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 72.539722][ T5] bridge0: port 1(bridge_slave_0) entered disabled state
[ 72.549718][ T5] bridge0: port 2(bridge_slave_1) entered disabled state
[ 72.559737][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 72.574248][ T8438] 8021q: adding VLAN 0 to HW filter on device team0
[ 72.585904][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 72.595935][ T3364] bridge0: port 1(bridge_slave_0) entered blocking state
[ 72.603270][ T3364] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 72.619998][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 72.628943][ T3364] bridge0: port 2(bridge_slave_1) entered blocking state
[ 72.636271][ T3364] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 72.657079][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 72.666171][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 72.675001][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 72.690659][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 72.701598][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 72.713546][ T8438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 72.732602][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 72.740679][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 72.753377][ T8438] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 72.773454][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 72.794360][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 72.803188][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 72.812654][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 72.823344][ T8438] device veth0_vlan entered promiscuous mode
[ 72.836225][ T8438] device veth1_vlan entered promiscuous mode
[ 72.860482][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 72.869600][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 72.878343][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 72.890433][ T8438] device veth0_macvtap entered promiscuous mode
[ 72.901697][ T8438] device veth1_macvtap entered promiscuous mode
[ 72.921214][ T8438] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 72.929407][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 72.940048][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 72.951454][ T8438] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 72.961533][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 72.972694][ T8438] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.983233][ T8438] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.992662][ T8438] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 73.004927][ T8438] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 73.110808][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 73.135202][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
executing program
[ 73.163100][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 73.174465][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 73.184529][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 73.194506][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 73.476940][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 73.818220][ T8] Bluetooth: hci0: command 0x0409 tx timeout
[ 73.837044][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 73.848473][ T23] usb 1-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=44.11
[ 73.859378][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 73.872265][ T23] usb 1-1: config 0 descriptor??
[ 74.137015][ T23] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000
[ 74.144408][ T23] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12,
[ 74.161502][ T23] radio-si470x 1-1:0.0: but the device has firmware version 0.
[ 74.346886][ T23] radio-si470x 1-1:0.0: software version 0, hardware version 0
[ 74.354481][ T23] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1,
[ 74.368974][ T23] radio-si470x 1-1:0.0: but the device has hardware version 0.
[ 74.380227][ T23] radio-si470x 1-1:0.0: If you have some trouble using this driver,
[ 74.390972][ T23] radio-si470x 1-1:0.0: please report to V4L ML at linux-media@vger.kernel.org
[ 74.557040][ T23] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71
[ 74.586644][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 74.594979][ T23] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71
[ 74.606668][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71)
[ 74.626880][ C1] ==================================================================
[ 74.635291][ C1] BUG: KASAN: use-after-free in si470x_int_in_callback.cold+0x96/0xbf
[ 74.643502][ C1] Read of size 8 at addr ffff888018e48b40 by task kworker/1:0/20
[ 74.651233][ C1]
[ 74.653561][ C1] CPU: 1 PID: 20 Comm: kworker/1:0 Not tainted 5.13.0-rc2-next-20210518-syzkaller #0
[ 74.663122][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 74.673279][ C1] Workqueue: ipv6_addrconf addrconf_dad_work
[ 74.679306][ C1] Call Trace:
[ 74.682597][ C1]
[ 74.685447][ C1] dump_stack_lvl+0x13e/0x1d6
[ 74.690154][ C1] ? si470x_int_in_callback.cold+0x96/0xbf
[ 74.696069][ C1] print_address_description.constprop.0.cold+0x6c/0x309
[ 74.703122][ C1] ? si470x_int_in_callback.cold+0x96/0xbf
[ 74.708953][ C1] ? si470x_int_in_callback.cold+0x96/0xbf
[ 74.714793][ C1] kasan_report.cold+0x83/0xdf
[ 74.719607][ C1] ? si470x_int_in_callback.cold+0x96/0xbf
[ 74.725547][ C1] si470x_int_in_callback.cold+0x96/0xbf
[ 74.731404][ C1] ? __usb_hcd_giveback_urb+0x413/0x5c0
[ 74.737277][ C1] ? lock_downgrade+0x6e0/0x6e0
[ 74.742296][ C1] ? si470x_fops_read+0x790/0x790
[ 74.747561][ C1] __usb_hcd_giveback_urb+0x2b0/0x5c0
[ 74.753059][ C1] usb_hcd_giveback_urb+0x367/0x410
[ 74.758435][ C1] dummy_timer+0x11f9/0x32b0
[ 74.763207][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 74.769364][ C1] ? lock_chain_count+0x20/0x20
[ 74.774260][ C1] ? dummy_dequeue+0x500/0x500
[ 74.779330][ C1] ? dummy_dequeue+0x500/0x500
[ 74.784300][ C1] call_timer_fn+0x1a5/0x6b0
[ 74.789056][ C1] ? add_timer_on+0x4a0/0x4a0
[ 74.793775][ C1] ? _raw_spin_unlock_irq+0x1f/0x40
[ 74.799070][ C1] ? dummy_dequeue+0x500/0x500
[ 74.803855][ C1] __run_timers.part.0+0x67c/0xa50
[ 74.808981][ C1] ? call_timer_fn+0x6b0/0x6b0
[ 74.813755][ C1] ? lapic_next_event+0x4d/0x80
[ 74.818620][ C1] run_timer_softirq+0xb3/0x1d0
[ 74.823490][ C1] __do_softirq+0x29b/0x9fb
[ 74.828006][ C1] __irq_exit_rcu+0x136/0x200
[ 74.832862][ C1] irq_exit_rcu+0x5/0x20
[ 74.837096][ C1] sysvec_apic_timer_interrupt+0x93/0xc0
[ 74.842721][ C1]
[ 74.845640][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 74.851613][ C1] RIP: 0010:mutex_spin_on_owner+0x1fc/0x330
[ 74.857500][ C1] Code: 24 00 0f 84 9d 00 00 00 48 8d 7d 50 48 89 f8 48 c1 e8 03 42 80 3c 38 00 0f 85 13 01 00 00 48 8b 04 24 48 3b 45 50 75 9f f3 90 6a fe ff ff e8 ba 6f c3 07 85 c0 74 9b 80 3d cf 48 7b 0c 00 75
[ 74.877210][ C1] RSP: 0018:ffffc90000da7aa0 EFLAGS: 00000246
[ 74.883363][ C1] RAX: ffff8880b9c00000 RBX: ffff888015de8000 RCX: 1ffffffff17fe03f
[ 74.891872][ C1] RDX: ffffed100248b001 RSI: 0000000000000008 RDI: 0000000000000000
[ 74.900017][ C1] RBP: ffffffff8d8aab80 R08: 0000000000000000 R09: ffff888012458007
[ 74.908351][ C1] R10: ffffed100248b000 R11: 0000000000000000 R12: ffff888012458000
[ 74.916348][ C1] R13: 0000000000000000 R14: ffffed100248b000 R15: dffffc0000000000
[ 74.924330][ C1] __mutex_lock+0x733/0x1120
[ 74.928928][ C1] ? addrconf_dad_work+0xa3/0x1340
[ 74.934125][ C1] ? mutex_lock_io_nested+0xf70/0xf70
[ 74.939585][ C1] ? debug_object_deactivate+0x264/0x300
[ 74.945252][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 74.951364][ C1] ? finish_task_switch.isra.0+0x30f/0xb80
[ 74.957175][ C1] addrconf_dad_work+0xa3/0x1340
[ 74.962163][ C1] ? addrconf_dad_completed+0xd60/0xd60
[ 74.967903][ C1] process_one_work+0x98d/0x1600
[ 74.972929][ C1] ? pwq_dec_nr_in_flight+0x320/0x320
[ 74.978387][ C1] ? rwlock_bug.part.0+0x90/0x90
[ 74.983593][ C1] ? _raw_spin_lock_irq+0x41/0x50
[ 74.988621][ C1] worker_thread+0x64c/0x1120
[ 74.993319][ C1] ? process_one_work+0x1600/0x1600
[ 74.998946][ C1] kthread+0x3b1/0x4a0
[ 75.003007][ C1] ? __kthread_bind_mask+0xc0/0xc0
[ 75.008115][ C1] ret_from_fork+0x1f/0x30
[ 75.012531][ C1]
[ 75.015043][ C1] Allocated by task 23:
[ 75.019181][ C1] kasan_save_stack+0x1b/0x40
[ 75.023862][ C1] __kasan_kmalloc+0x9b/0xd0
[ 75.028527][ C1] si470x_usb_driver_probe+0x51/0xf90
[ 75.033897][ C1] usb_probe_interface+0x315/0x7f0
[ 75.039017][ C1] really_probe+0x291/0xf60
[ 75.043526][ C1] driver_probe_device+0x298/0x410
[ 75.048899][ C1] __device_attach_driver+0x203/0x2c0
[ 75.054262][ C1] bus_for_each_drv+0x15f/0x1e0
[ 75.059100][ C1] __device_attach+0x228/0x4a0
[ 75.063852][ C1] bus_probe_device+0x1e4/0x290
[ 75.069197][ C1] device_add+0xbe0/0x2100
[ 75.073813][ C1] usb_set_configuration+0x113f/0x1910
[ 75.079615][ C1] usb_generic_driver_probe+0xba/0x100
[ 75.085078][ C1] usb_probe_device+0xd9/0x2c0
[ 75.089835][ C1] really_probe+0x291/0xf60
[ 75.094363][ C1] driver_probe_device+0x298/0x410
[ 75.099491][ C1] __device_attach_driver+0x203/0x2c0
[ 75.104947][ C1] bus_for_each_drv+0x15f/0x1e0
[ 75.109886][ C1] __device_attach+0x228/0x4a0
[ 75.114638][ C1] bus_probe_device+0x1e4/0x290
[ 75.119475][ C1] device_add+0xbe0/0x2100
[ 75.124282][ C1] usb_new_device.cold+0x721/0x1058
[ 75.129553][ C1] hub_event+0x2357/0x4330
[ 75.134175][ C1] process_one_work+0x98d/0x1600
[ 75.139326][ C1] worker_thread+0x64c/0x1120
[ 75.144010][ C1] kthread+0x3b1/0x4a0
[ 75.148070][ C1] ret_from_fork+0x1f/0x30
[ 75.152475][ C1]
[ 75.154780][ C1] Freed by task 23:
[ 75.158569][ C1] kasan_save_stack+0x1b/0x40
[ 75.163234][ C1] kasan_set_track+0x1c/0x30
[ 75.167829][ C1] kasan_set_free_info+0x20/0x30
[ 75.172756][ C1] __kasan_slab_free+0xfb/0x130
[ 75.177593][ C1] slab_free_freelist_hook+0xdf/0x240
[ 75.182954][ C1] kfree+0xeb/0x650
[ 75.186750][ C1] si470x_usb_driver_probe+0xb3d/0xf90
[ 75.192202][ C1] usb_probe_interface+0x315/0x7f0
[ 75.197416][ C1] really_probe+0x291/0xf60
[ 75.202022][ C1] driver_probe_device+0x298/0x410
[ 75.207177][ C1] __device_attach_driver+0x203/0x2c0
[ 75.212545][ C1] bus_for_each_drv+0x15f/0x1e0
[ 75.217491][ C1] __device_attach+0x228/0x4a0
[ 75.222265][ C1] bus_probe_device+0x1e4/0x290
[ 75.227104][ C1] device_add+0xbe0/0x2100
[ 75.231540][ C1] usb_set_configuration+0x113f/0x1910
[ 75.237007][ C1] usb_generic_driver_probe+0xba/0x100
[ 75.242818][ C1] usb_probe_device+0xd9/0x2c0
[ 75.247781][ C1] really_probe+0x291/0xf60
[ 75.252280][ C1] driver_probe_device+0x298/0x410
[ 75.257389][ C1] __device_attach_driver+0x203/0x2c0
[ 75.262748][ C1] bus_for_each_drv+0x15f/0x1e0
[ 75.267610][ C1] __device_attach+0x228/0x4a0
[ 75.272361][ C1] bus_probe_device+0x1e4/0x290
[ 75.277218][ C1] device_add+0xbe0/0x2100
[ 75.281637][ C1] usb_new_device.cold+0x721/0x1058
[ 75.286845][ C1] hub_event+0x2357/0x4330
[ 75.291271][ C1] process_one_work+0x98d/0x1600
[ 75.296533][ C1] worker_thread+0x64c/0x1120
[ 75.301245][ C1] kthread+0x3b1/0x4a0
[ 75.305309][ C1] ret_from_fork+0x1f/0x30
[ 75.309838][ C1]
[ 75.312166][ C1] The buggy address belongs to the object at ffff888018e48000
[ 75.312166][ C1] which belongs to the cache kmalloc-4k of size 4096
[ 75.326434][ C1] The buggy address is located 2880 bytes inside of
[ 75.326434][ C1] 4096-byte region [ffff888018e48000, ffff888018e49000)
[ 75.340149][ C1] The buggy address belongs to the page:
[ 75.345806][ C1] page:ffffea0000639200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18e48
[ 75.356031][ C1] head:ffffea0000639200 order:3 compound_mapcount:0 compound_pincount:0
[ 75.364341][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 75.372340][ C1] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888011042140
[ 75.380911][ C1] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[ 75.389478][ C1] page dumped because: kasan: bad access detected
[ 75.395921][ C1] page_owner tracks the page as allocated
[ 75.401625][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 23, ts 73921585668, free_ts 73880402782
[ 75.420628][ C1] get_page_from_freelist+0x125c/0x2ed0
[ 75.426171][ C1] __alloc_pages+0x1b2/0x500
[ 75.430749][ C1] alloc_pages+0x18c/0x2a0
[ 75.435159][ C1] allocate_slab+0x2c2/0x4c0
[ 75.439762][ C1] ___slab_alloc+0x4ba/0x820
[ 75.444345][ C1] __slab_alloc.constprop.0+0xa7/0xf0
[ 75.449714][ C1] kmem_cache_alloc_trace+0x30f/0x3c0
[ 75.455107][ C1] si470x_usb_driver_probe+0x51/0xf90
[ 75.460488][ C1] usb_probe_interface+0x315/0x7f0
[ 75.465613][ C1] really_probe+0x291/0xf60
[ 75.470195][ C1] driver_probe_device+0x298/0x410
[ 75.475315][ C1] __device_attach_driver+0x203/0x2c0
[ 75.480781][ C1] bus_for_each_drv+0x15f/0x1e0
[ 75.485620][ C1] __device_attach+0x228/0x4a0
[ 75.490371][ C1] bus_probe_device+0x1e4/0x290
[ 75.495228][ C1] device_add+0xbe0/0x2100
[ 75.499633][ C1] page last free stack trace:
[ 75.504397][ C1] __free_pages_ok+0x4cb/0xf30
[ 75.509173][ C1] qlist_free_all+0x5a/0xc0
[ 75.513666][ C1] kasan_quarantine_reduce+0x180/0x200
[ 75.519116][ C1] __kasan_slab_alloc+0x8e/0xa0
[ 75.524057][ C1] kmem_cache_alloc+0x285/0x4a0
[ 75.528912][ C1] getname_flags.part.0+0x50/0x4f0
[ 75.534010][ C1] getname+0x8e/0xd0
[ 75.537897][ C1] do_sys_openat2+0xf5/0x420
[ 75.542494][ C1] __x64_sys_open+0x119/0x1c0
[ 75.547499][ C1] do_syscall_64+0x31/0xb0
[ 75.551989][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 75.557925][ C1]
[ 75.560281][ C1] Memory state around the buggy address:
[ 75.565988][ C1] ffff888018e48a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 75.574125][ C1] ffff888018e48a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 75.582382][ C1] >ffff888018e48b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 75.590546][ C1] ^
[ 75.596968][ C1] ffff888018e48b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 75.605036][ C1] ffff888018e48c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 75.613079][ C1] ==================================================================
[ 75.621164][ C1] Disabling lock debugging due to kernel taint
[ 75.627514][ C1] Kernel panic - not syncing: panic_on_warn set ...
[ 75.634110][ C1] CPU: 1 PID: 20 Comm: kworker/1:0 Tainted: G B 5.13.0-rc2-next-20210518-syzkaller #0
[ 75.644943][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 75.655236][ C1] Workqueue: ipv6_addrconf addrconf_dad_work
[ 75.661569][ C1] Call Trace:
[ 75.664837][ C1]
[ 75.667687][ C1] dump_stack_lvl+0x13e/0x1d6
[ 75.672373][ C1] ? si470x_int_in_callback.cold+0x81/0xbf
[ 75.678256][ C1] panic+0x306/0x73d
[ 75.682140][ C1] ? __warn_printk+0xf3/0xf3
[ 75.686947][ C1] ? si470x_int_in_callback.cold+0x96/0xbf
[ 75.692743][ C1] ? si470x_int_in_callback.cold+0x96/0xbf
[ 75.698536][ C1] end_report.cold+0x5a/0x5a
[ 75.703117][ C1] kasan_report.cold+0x71/0xdf
[ 75.707870][ C1] ? si470x_int_in_callback.cold+0x96/0xbf
[ 75.713664][ C1] si470x_int_in_callback.cold+0x96/0xbf
[ 75.719311][ C1] ? __usb_hcd_giveback_urb+0x413/0x5c0
[ 75.724847][ C1] ? lock_downgrade+0x6e0/0x6e0
[ 75.729680][ C1] ? si470x_fops_read+0x790/0x790
[ 75.734693][ C1] __usb_hcd_giveback_urb+0x2b0/0x5c0
[ 75.740071][ C1] usb_hcd_giveback_urb+0x367/0x410
[ 75.745264][ C1] dummy_timer+0x11f9/0x32b0
[ 75.749848][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 75.755851][ C1] ? lock_chain_count+0x20/0x20
[ 75.760691][ C1] ? dummy_dequeue+0x500/0x500
[ 75.765439][ C1] ? dummy_dequeue+0x500/0x500
[ 75.770455][ C1] call_timer_fn+0x1a5/0x6b0
[ 75.775039][ C1] ? add_timer_on+0x4a0/0x4a0
[ 75.779962][ C1] ? _raw_spin_unlock_irq+0x1f/0x40
[ 75.785172][ C1] ? dummy_dequeue+0x500/0x500
[ 75.790269][ C1] __run_timers.part.0+0x67c/0xa50
[ 75.795928][ C1] ? call_timer_fn+0x6b0/0x6b0
[ 75.800701][ C1] ? lapic_next_event+0x4d/0x80
[ 75.805551][ C1] run_timer_softirq+0xb3/0x1d0
[ 75.810392][ C1] __do_softirq+0x29b/0x9fb
[ 75.814891][ C1] __irq_exit_rcu+0x136/0x200
[ 75.819584][ C1] irq_exit_rcu+0x5/0x20
[ 75.823813][ C1] sysvec_apic_timer_interrupt+0x93/0xc0
[ 75.829434][ C1]
[ 75.832350][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 75.838329][ C1] RIP: 0010:mutex_spin_on_owner+0x1fc/0x330
[ 75.844216][ C1] Code: 24 00 0f 84 9d 00 00 00 48 8d 7d 50 48 89 f8 48 c1 e8 03 42 80 3c 38 00 0f 85 13 01 00 00 48 8b 04 24 48 3b 45 50 75 9f f3 90 6a fe ff ff e8 ba 6f c3 07 85 c0 74 9b 80 3d cf 48 7b 0c 00 75
[ 75.863957][ C1] RSP: 0018:ffffc90000da7aa0 EFLAGS: 00000246
[ 75.870104][ C1] RAX: ffff8880b9c00000 RBX: ffff888015de8000 RCX: 1ffffffff17fe03f
[ 75.878061][ C1] RDX: ffffed100248b001 RSI: 0000000000000008 RDI: 0000000000000000
[ 75.886038][ C1] RBP: ffffffff8d8aab80 R08: 0000000000000000 R09: ffff888012458007
[ 75.894024][ C1] R10: ffffed100248b000 R11: 0000000000000000 R12: ffff888012458000
[ 75.902330][ C1] R13: 0000000000000000 R14: ffffed100248b000 R15: dffffc0000000000
[ 75.910296][ C1] __mutex_lock+0x733/0x1120
[ 75.914928][ C1] ? addrconf_dad_work+0xa3/0x1340
[ 75.920120][ C1] ? mutex_lock_io_nested+0xf70/0xf70
[ 75.925495][ C1] ? debug_object_deactivate+0x264/0x300
[ 75.931126][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 75.937094][ C1] ? finish_task_switch.isra.0+0x30f/0xb80
[ 75.942903][ C1] addrconf_dad_work+0xa3/0x1340
[ 75.948058][ C1] ? addrconf_dad_completed+0xd60/0xd60
[ 75.953645][ C1] process_one_work+0x98d/0x1600
[ 75.958713][ C1] ? pwq_dec_nr_in_flight+0x320/0x320
[ 75.964214][ C1] ? rwlock_bug.part.0+0x90/0x90
[ 75.969155][ C1] ? _raw_spin_lock_irq+0x41/0x50
[ 75.974205][ C1] worker_thread+0x64c/0x1120
[ 75.979179][ C1] ? process_one_work+0x1600/0x1600
[ 75.984731][ C1] kthread+0x3b1/0x4a0
[ 75.988846][ C1] ? __kthread_bind_mask+0xc0/0xc0
[ 75.994143][ C1] ret_from_fork+0x1f/0x30
[ 76.000068][ C1] Kernel Offset: disabled
[ 76.004513][ C1] Rebooting in 86400 seconds..