Unable to handle kernel paging request at virtual address fff07ffffd251000
Mem abort info:
ESR = 0x0000000096000044
EC = 0x25: DABT (current EL), IL = 32 bits
SET = 0, FnV = 0
EA = 0, S1PTW = 0
FSC = 0x04: level 0 translation fault
Data abort info:
ISV = 0, ISS = 0x00000044, ISS2 = 0x00000000
CM = 0, WnR = 1, TnD = 0, TagAccess = 0
GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
swapper pgtable: 4k pages, 52-bit VAs, pgdp=0000000042730000
[fff07ffffd251000] pgd=18000000bfdff003, p4d=0000000000000000
Internal error: Oops: 0000000096000044 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 UID: 0 PID: 9528 Comm: syz.0.2130 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0
Hardware name: linux,dummy-virt (DT)
pstate: 61400009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)
pc : __percpu_add_return_case_32 arch/arm64/include/asm/percpu.h:130 [inline]
pc : bond_rr_gen_slave_id+0x38/0x11c drivers/net/bonding/bond_main.c:4858
lr : bond_xdp_xmit_roundrobin_slave_get drivers/net/bonding/bond_main.c:4945 [inline]
lr : bond_xdp_get_xmit_slave+0xc8/0x150 drivers/net/bonding/bond_main.c:5484
sp : ffff8000839f3a50
x29: ffff8000839f3a50 x28: ffff8000839f3b90 x27: 0000000000000001
x26: 0000000000000003 x25: ffff8000839f3ca8 x24: fbff8000894fd048
x23: ffff8000839f3ba8 x22: f9f0000009872480 x21: ffff8000839f3cb0
x20: 0000000000000001 x19: f7f000000db57a00 x18: 0000000000000000
x17: ffff8000801b4278 x16: ffff80008164790c x15: 0000000000000000
x14: ffff8000802c18ac x13: ffff800080011558 x12: ffff800081a07420
x11: ffff800081a06fb0 x10: ffff8000800279f8 x9 : ffff80008158b71c
x8 : ffff8000839f3c18 x7 : f100000000000003 x6 : f9f0000009872480
x5 : 0000000000000001 x4 : fff07ffffd251000 x3 : f9f0000009872480
x2 : fff07ffffd251000 x1 : 0000000000000001 x0 : f7f000000db57a00
Call trace:
__percpu_add_return_case_32 arch/arm64/include/asm/percpu.h:130 [inline]
bond_rr_gen_slave_id+0x38/0x11c drivers/net/bonding/bond_main.c:4858
bond_xdp_xmit_roundrobin_slave_get drivers/net/bonding/bond_main.c:4945 [inline]
bond_xdp_get_xmit_slave+0xc8/0x150 drivers/net/bonding/bond_main.c:5484
xdp_master_redirect+0x40/0x98 net/core/filter.c:4333
bpf_prog_run_xdp include/net/xdp.h:518 [inline]
bpf_test_run+0x21c/0x36c net/bpf/test_run.c:431
bpf_prog_test_run_xdp+0x340/0x608 net/bpf/test_run.c:1319
bpf_prog_test_run kernel/bpf/syscall.c:4313 [inline]
__sys_bpf+0x6a8/0x2168 kernel/bpf/syscall.c:5728
__do_sys_bpf kernel/bpf/syscall.c:5817 [inline]
__se_sys_bpf kernel/bpf/syscall.c:5815 [inline]
__arm64_sys_bpf+0x24/0x34 kernel/bpf/syscall.c:5815
__invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
invoke_syscall+0x48/0x110 arch/arm64/kernel/syscall.c:49
el0_svc_common+0x3c/0xe8 arch/arm64/kernel/syscall.c:132
do_el0_svc+0x20/0x2c arch/arm64/kernel/syscall.c:151
el0_svc+0x34/0xec arch/arm64/kernel/entry-common.c:712
el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:730
el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:598
Code: b9000862 f9403c02 d53cd044 8b040042 (b8210040)
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
0: b9000862 str w2, [x3, #8]
4: f9403c02 ldr x2, [x0, #120]
8: d53cd044 mrs x4, tpidr_el2
c: 8b040042 add x2, x2, x4
* 10: b8210040 ldadd w1, w0, [x2] <-- trapping instruction