radio-si470x 1-1:0.0: non-zero urb status (-71)
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000098
Mem abort info:
  ESR = 0x0000000096000004
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x04: level 0 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000004
  CM = 0, WnR = 0
user pgtable: 4k pages, 48-bit VAs, pgdp=0000000103e68000
[0000000000000098] pgd=0000000000000000, p4d=0000000000000000
Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 13326 Comm: kworker/u4:41 Not tainted 6.0.0-rc6-syzkaller-17742-gc194837ebb57 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
Workqueue: bat_events batadv_nc_worker
pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : dev_driver_string drivers/base/core.c:2180 [inline]
pc : __dev_printk+0x4c/0xe4 drivers/base/core.c:4760
lr : __dev_printk+0x28/0xe4 drivers/base/core.c:4757
sp : ffff80000800bb50
x29: ffff80000800bb50 x28: ffff00011bdb0e80 x27: ffff000106f88400
x26: ffff00011bdb0e88 x25: 0000000000000000 x24: ffff0000c63bc440
x23: ffff000105af7000 x22: ffff00010b960000 x21: ffff80000cb528ed
x20: 0000000000000030 x19: ffff80000800bbe8 x18: 0000000000000190
x17: ffff80000bffd6bc x16: 0000000000000100 x15: 0000000000000100
x14: 0000000000000002 x13: 00000000fffffffe x12: 0000000000040000
x11: 0000000000000011 x10: ffff80000fd66000 x9 : ffff800009a47d88
x8 : 0000000000000034 x7 : ffff8000082a0f54 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
x2 : ffff80000800bbe8 x1 : 0000000000000030 x0 : ffff80000cb528ed
Call trace:
 __dev_printk+0x4c/0xe4 drivers/base/core.c:4759
 _dev_warn+0x70/0x9c drivers/base/core.c:4803
 si470x_int_in_callback+0x238/0x554 drivers/media/radio/si470x/radio-si470x-usb.c:378
 __usb_hcd_giveback_urb+0x16c/0x244 drivers/usb/core/hcd.c:1671
 usb_hcd_giveback_urb+0x74/0x228 drivers/usb/core/hcd.c:1754
 __ll_sc_atomic_fetch_sub_release arch/arm64/include/asm/atomic_ll_sc.h:96 [inline]
 arch_atomic_fetch_sub_release arch/arm64/include/asm/atomic.h:51 [inline]
 atomic_fetch_sub_release include/linux/atomic/atomic-instrumented.h:177 [inline]
 __refcount_dec include/linux/refcount.h:338 [inline]
 refcount_dec include/linux/refcount.h:359 [inline]
 __dev_put include/linux/netdevice.h:3953 [inline]
 netdev_put include/linux/netdevice.h:4012 [inline]
 dev_put include/linux/netdevice.h:4037 [inline]
 dummy_timer+0x3a0/0x111c drivers/block/aoe/aoedev.c:507
 call_timer_fn+0x90/0x144 kernel/time/timer.c:1474
 expire_timers kernel/time/timer.c:1519 [inline]
 __run_timers+0x280/0x374 kernel/time/timer.c:1790
 run_timer_softirq+0x34/0x5c kernel/time/timer.c:1803
 _stext+0x168/0x37c
 ____do_softirq+0x14/0x20 arch/arm64/kernel/irq.c:79
 call_on_irq_stack+0x2c/0x54
 do_softirq_own_stack+0x20/0x2c arch/arm64/kernel/irq.c:84
 invoke_softirq+0x70/0xbc kernel/softirq.c:452
 __irq_exit_rcu+0xf0/0x140 kernel/softirq.c:650
 irq_exit_rcu+0x10/0x40 kernel/softirq.c:662
 __el1_irq arch/arm64/kernel/entry-common.c:471 [inline]
 el1_interrupt+0x38/0x68 arch/arm64/kernel/entry-common.c:485
 el1h_64_irq_handler+0x18/0x24 arch/arm64/kernel/entry-common.c:490
 el1h_64_irq+0x64/0x68
 arch_local_irq_restore arch/arm64/include/asm/irqflags.h:122 [inline]
 lock_acquire+0x130/0x1f8 kernel/locking/lockdep.c:5669
 rcu_lock_acquire+0x40/0x4c include/linux/rcupdate.h:280
 rcu_read_lock include/linux/rcupdate.h:706 [inline]
 batadv_nc_purge_orig_hash net/batman-adv/network-coding.c:408 [inline]
 batadv_nc_worker+0x78/0x484 net/batman-adv/network-coding.c:719
 process_one_work+0x2d8/0x504 kernel/workqueue.c:2289
 worker_thread+0x340/0x610 kernel/workqueue.c:2436
 kthread+0x12c/0x158 kernel/kthread.c:376
 ret_from_fork+0x10/0x20
Code: aa1303e2 949595a3 14000022 394006a8 (f9403696) 
---[ end trace 0000000000000000 ]---
pstore: crypto_comp_compress failed, ret = -22!
----------------
Code disassembly (best guess):
   0:	aa1303e2 	mov	x2, x19
   4:	949595a3 	bl	0x2565690
   8:	14000022 	b	0x90
   c:	394006a8 	ldrb	w8, [x21, #1]
* 10:	f9403696 	ldr	x22, [x20, #104] <-- trapping instruction