------------[ cut here ]------------
WARNING: CPU: 0 PID: 8496 at mm/page_alloc.c:5154 __alloc_frozen_pages_noprof+0xd0/0x318 mm/page_alloc.c:5154
Modules linked in:
CPU: 0 UID: 0 PID: 8496 Comm: syz.4.300 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : __alloc_frozen_pages_noprof+0xd0/0x318 mm/page_alloc.c:5154
lr : __alloc_frozen_pages_noprof+0xac/0x318 mm/page_alloc.c:5148
sp : ffff8000a2eb7760
x29: ffff8000a2eb7820 x28: dfff800000000000 x27: 0000000000000004
x26: 1ffff00012e7a250 x25: dfff800000000000 x24: ffff8000a2eb7780
x23: ffff7000145d6ef0 x22: 0000000000000000 x21: 0000000000040cc0
x20: 0000000000000000 x19: 000000000000000b x18: 0000000000000000
x17: 0000000000000000 x16: ffff80008ad6b188 x15: 0000000000000005
x14: 1ffff000145d6ef4 x13: 0000000000000000 x12: 0000000000000000
x11: ffff7000145d6ef9 x10: dfff800000000000 x9 : 0000000000000001
x8 : ffff800092c29000 x7 : 0000000000000000 x6 : ffff8000a2eb7ae8
x5 : ffff8000a2eb7ae8 x4 : 0000000000000000 x3 : 0000000000000020
x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
 __alloc_frozen_pages_noprof+0xd0/0x318 mm/page_alloc.c:5154 (P)
 alloc_pages_mpol+0x1e4/0x460 mm/mempolicy.c:2416
 alloc_frozen_pages_noprof+0xe0/0x210 mm/mempolicy.c:2487
 ___kmalloc_large_node+0xac/0x154 mm/slub.c:5591
 __kmalloc_large_node_noprof+0x2c/0x8c mm/slub.c:5622
 __do_kmalloc_node mm/slub.c:5638 [inline]
 __kmalloc_noprof+0x4bc/0x728 mm/slub.c:5662
 kmalloc_noprof include/linux/slab.h:961 [inline]
 raw_alloc_io_data drivers/usb/gadget/legacy/raw_gadget.c:673 [inline]
 raw_ioctl_ep0_read drivers/usb/gadget/legacy/raw_gadget.c:776 [inline]
 raw_ioctl+0x1320/0x3368 drivers/usb/gadget/legacy/raw_gadget.c:1313
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __arm64_sys_ioctl+0x14c/0x1c4 fs/ioctl.c:583
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0xe8/0x23c arch/arm64/kernel/syscall.c:132
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
 el0_svc+0x5c/0x254 arch/arm64/kernel/entry-common.c:724
 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:743
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596
irq event stamp: 374
hardirqs last  enabled at (373): [<ffff800080c8703c>] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234
hardirqs last disabled at (374): [<ffff80008adf99f4>] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:412
softirqs last  enabled at (350): [<ffff8000801f96d0>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (348): [<ffff8000801f969c>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---
bridge_slave_0: left allmulticast mode
bridge_slave_0: left promiscuous mode
bridge0: port 1(bridge_slave_0) entered disabled state
bridge_slave_1: left allmulticast mode
bridge_slave_1: left promiscuous mode
bridge0: port 2(bridge_slave_1) entered disabled state
bond0: (slave bond_slave_0): Releasing backup interface
bond0: (slave bond_slave_1): Releasing backup interface
team0: Port device team_slave_0 removed
team0: Port device team_slave_1 removed
batman_adv: batadv0: Interface deactivated: batadv_slave_0
batman_adv: batadv0: Removing interface: batadv_slave_0
batman_adv: batadv0: Interface deactivated: batadv_slave_1
batman_adv: batadv0: Removing interface: batadv_slave_1
A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.