Unable to handle kernel paging request at virtual address fff07ffffd251000
Mem abort info:
  ESR = 0x0000000096000044
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x04: level 0 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000044, ISS2 = 0x00000000
  CM = 0, WnR = 1, TnD = 0, TagAccess = 0
  GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
swapper pgtable: 4k pages, 52-bit VAs, pgdp=0000000042730000
[fff07ffffd251000] pgd=18000000bfdff003, p4d=0000000000000000
Internal error: Oops: 0000000096000044 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 UID: 0 PID: 9528 Comm: syz.0.2130 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0
Hardware name: linux,dummy-virt (DT)
pstate: 61400009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)
pc : __percpu_add_return_case_32 arch/arm64/include/asm/percpu.h:130 [inline]
pc : bond_rr_gen_slave_id+0x38/0x11c drivers/net/bonding/bond_main.c:4858
lr : bond_xdp_xmit_roundrobin_slave_get drivers/net/bonding/bond_main.c:4945 [inline]
lr : bond_xdp_get_xmit_slave+0xc8/0x150 drivers/net/bonding/bond_main.c:5484
sp : ffff8000839f3a50
x29: ffff8000839f3a50 x28: ffff8000839f3b90 x27: 0000000000000001
x26: 0000000000000003 x25: ffff8000839f3ca8 x24: fbff8000894fd048
x23: ffff8000839f3ba8 x22: f9f0000009872480 x21: ffff8000839f3cb0
x20: 0000000000000001 x19: f7f000000db57a00 x18: 0000000000000000
x17: ffff8000801b4278 x16: ffff80008164790c x15: 0000000000000000
x14: ffff8000802c18ac x13: ffff800080011558 x12: ffff800081a07420
x11: ffff800081a06fb0 x10: ffff8000800279f8 x9 : ffff80008158b71c
x8 : ffff8000839f3c18 x7 : f100000000000003 x6 : f9f0000009872480
x5 : 0000000000000001 x4 : fff07ffffd251000 x3 : f9f0000009872480
x2 : fff07ffffd251000 x1 : 0000000000000001 x0 : f7f000000db57a00
Call trace:
 __percpu_add_return_case_32 arch/arm64/include/asm/percpu.h:130 [inline]
 bond_rr_gen_slave_id+0x38/0x11c drivers/net/bonding/bond_main.c:4858
 bond_xdp_xmit_roundrobin_slave_get drivers/net/bonding/bond_main.c:4945 [inline]
 bond_xdp_get_xmit_slave+0xc8/0x150 drivers/net/bonding/bond_main.c:5484
 xdp_master_redirect+0x40/0x98 net/core/filter.c:4333
 bpf_prog_run_xdp include/net/xdp.h:518 [inline]
 bpf_test_run+0x21c/0x36c net/bpf/test_run.c:431
 bpf_prog_test_run_xdp+0x340/0x608 net/bpf/test_run.c:1319
 bpf_prog_test_run kernel/bpf/syscall.c:4313 [inline]
 __sys_bpf+0x6a8/0x2168 kernel/bpf/syscall.c:5728
 __do_sys_bpf kernel/bpf/syscall.c:5817 [inline]
 __se_sys_bpf kernel/bpf/syscall.c:5815 [inline]
 __arm64_sys_bpf+0x24/0x34 kernel/bpf/syscall.c:5815
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x48/0x110 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0x3c/0xe8 arch/arm64/kernel/syscall.c:132
 do_el0_svc+0x20/0x2c arch/arm64/kernel/syscall.c:151
 el0_svc+0x34/0xec arch/arm64/kernel/entry-common.c:712
 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:730
 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:598
Code: b9000862 f9403c02 d53cd044 8b040042 (b8210040) 
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
   0:	b9000862 	str	w2, [x3, #8]
   4:	f9403c02 	ldr	x2, [x0, #120]
   8:	d53cd044 	mrs	x4, tpidr_el2
   c:	8b040042 	add	x2, x2, x4
* 10:	b8210040 	ldadd	w1, w0, [x2] <-- trapping instruction