last executing test programs: 602.660601ms ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)='disk', 0x4}], 0x1) 356.747657ms ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0000:00:02.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='vfio-pci\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='0000:00:02.0\x00', 0xd) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver\x00', 0x0, 0x0) 0s ago: executing program 0 (id=3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='disk', 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:59393' (ED25519) to the list of known hosts. syzkaller login: [ 85.283800][ T3370] cgroup: Unknown subsys name 'net' [ 85.427390][ T3370] cgroup: Unknown subsys name 'cpuset' [ 85.453549][ T3370] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.895620][ T3370] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.029104][ T3376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.068951][ T3376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.101219][ T3375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.150177][ T3375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.972932][ T3376] hsr_slave_0: entered promiscuous mode [ 95.980751][ T3376] hsr_slave_1: entered promiscuous mode [ 96.213105][ T3375] hsr_slave_0: entered promiscuous mode [ 96.219209][ T3375] hsr_slave_1: entered promiscuous mode [ 96.222584][ T3375] debugfs: 'hsr0' already exists in 'hsr' [ 96.223347][ T3375] Cannot create hsr debugfs directory [ 97.029826][ T3376] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.070378][ T3376] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.090802][ T3376] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.111317][ T3376] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.155197][ T3376] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.177531][ T3376] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.206809][ T3376] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.226173][ T3376] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.362752][ T3375] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.381496][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.402317][ T3375] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.422055][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.428460][ T3375] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.445780][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.456803][ T3375] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.477964][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.060120][ T3376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.313458][ T3375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.206689][ T3375] veth0_vlan: entered promiscuous mode [ 101.242517][ T3375] veth1_vlan: entered promiscuous mode [ 101.344031][ T3376] veth0_vlan: entered promiscuous mode [ 101.413294][ T3376] veth1_vlan: entered promiscuous mode [ 101.421517][ T3375] veth0_macvtap: entered promiscuous mode [ 101.443798][ T3375] veth1_macvtap: entered promiscuous mode [ 101.617846][ T1183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.618437][ T1183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.618528][ T1183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.618596][ T1183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.629574][ T3376] veth0_macvtap: entered promiscuous mode [ 101.663181][ T3376] veth1_macvtap: entered promiscuous mode [ 101.947361][ T1183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.947804][ T1183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.948138][ T1183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.948333][ T1183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.096987][ T3375] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.997689][ T3530] PM: hibernation: hibernation entry [ 103.262101][ T3527] vfio-pci 0000:00:02.0: probe with driver vfio-pci failed with error -22 [ 103.375049][ T29] Filesystems sync: 0.307 seconds [ 103.388039][ T3530] Freezing user space processes [ 103.399567][ T3530] Freezing user space processes completed (elapsed 0.011 seconds) [ 103.400175][ T3530] OOM killer disabled. [ 103.403339][ T3530] Freezing remaining freezable tasks [ 103.410179][ T3530] Freezing remaining freezable tasks completed (elapsed 0.006 seconds) [ 103.428543][ T3530] PM: hibernation: Preallocating image memory [ 109.069094][ T3530] PM: hibernation: Allocated 66980 pages for snapshot [ 109.069425][ T3530] PM: hibernation: Allocated 267920 kbytes in 5.64 seconds (47.50 MB/s) [ 109.069632][ T3530] printk: Suspending console(s) (use no_console_suspend to debug) [ 109.247328][ T3530] Disabling non-boot CPUs ... [ 109.272395][ T3530] psci: CPU1 killed (polled 0 ms) [ 109.291608][ T3530] hibernate: Saved 0 MTE pages [ 109.291608][ T3530] ================================================================== [ 109.291608][ T3530] BUG: KASAN: invalid-access in swsusp_save+0x2cc/0x590 [ 109.291608][ T3530] Read at addr f0f000000341f100 by task syz.0.3/3530 [ 109.291608][ T3530] Pointer tag: [f0], memory tag: [fe] [ 109.291608][ T3530] [ 109.291608][ T3530] CPU: 0 UID: 0 PID: 3530 Comm: syz.0.3 Not tainted syzkaller #0 PREEMPT [ 109.291608][ T3530] Hardware name: linux,dummy-virt (DT) [ 109.291608][ T3530] Call trace: [ 109.291608][ T3530] show_stack+0x18/0x24 (C) [ 109.291608][ T3530] dump_stack_lvl+0x60/0x80 [ 109.291608][ T3530] print_report+0x1c4/0x4b0 [ 109.291608][ T3530] kasan_report+0x84/0xac [ 109.291608][ T3530] __do_kernel_fault+0x1b4/0x220 [ 109.291608][ T3530] do_bad_area+0x68/0x80 [ 109.291608][ T3530] do_tag_check_fault+0x34/0x44 [ 109.291608][ T3530] do_mem_abort+0x40/0x90 [ 109.291608][ T3530] el1_abort+0x44/0x64 [ 109.291608][ T3530] el1h_64_sync_handler+0x50/0xac [ 109.291608][ T3530] el1h_64_sync+0x6c/0x70 [ 109.291608][ T3530] swsusp_save+0x2cc/0x590 (P) [ 109.291608][ T3530] swsusp_arch_suspend+0x74/0x618 [ 109.291608][ T3530] hibernation_snapshot+0x208/0x438 [ 109.291608][ T3530] hibernate+0x1cc/0x3c0 [ 109.291608][ T3530] state_store+0xe8/0xf4 [ 109.291608][ T3530] kobj_attr_store+0x18/0x34 [ 109.291608][ T3530] sysfs_kf_write+0x7c/0x98 [ 109.291608][ T3530] kernfs_fop_write_iter+0x138/0x200 [ 109.291608][ T3530] vfs_write+0x244/0x36c [ 109.291608][ T3530] ksys_write+0x70/0x108 [ 109.291608][ T3530] __arm64_sys_write+0x1c/0x30 [ 109.291608][ T3530] invoke_syscall+0x54/0x10c [ 109.291608][ T3530] el0_svc_common.constprop.0+0x40/0xe0 [ 109.291608][ T3530] do_el0_svc+0x1c/0x34 [ 109.291608][ T3530] el0_svc+0x38/0x1fc [ 109.291608][ T3530] el0t_64_sync_handler+0xa0/0xf0 [ 109.291608][ T3530] el0t_64_sync+0x1a4/0x1a8 [ 109.291608][ T3530] [ 109.291608][ T3530] The buggy address belongs to the physical page: [ 109.291608][ T3530] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4341c [ 109.291608][ T3530] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 109.291608][ T3530] flags: 0x1fffc0000000040(head|node=0|zone=0|lastcpupid=0x7ff|kasantag=0xf) [ 109.291608][ T3530] page_type: f8(unknown) [ 109.291608][ T3530] raw: 01fffc0000000040 0000000000000000 dead000000000122 0000000000000000 [ 109.291608][ T3530] raw: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 109.291608][ T3530] head: 01fffc0000000040 0000000000000000 dead000000000122 0000000000000000 [ 109.291608][ T3530] head: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 109.291608][ T3530] head: 01fffc0000000002 ffffc1ffc00d0701 00000000ffffffff 00000000ffffffff [ 109.291608][ T3530] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 109.291608][ T3530] page dumped because: kasan: bad access detected [ 109.291608][ T3530] [ 109.291608][ T3530] Memory state around the buggy address: [ 109.291608][ T3530] fff000000341ef00: f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 [ 109.291608][ T3530] fff000000341f000: f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 f0 [ 109.291608][ T3530] >fff000000341f100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 109.291608][ T3530] ^ [ 109.291608][ T3530] fff000000341f200: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 109.291608][ T3530] fff000000341f300: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 109.291608][ T3530] ================================================================== [ 109.291608][ T3530] Disabling lock debugging due to kernel taint [ 109.342959][ T3530] Enabling non-boot CPUs ... [ 109.359392][ T0] Detected PIPT I-cache on CPU1 [ 109.363286][ T0] CPU1: Booted secondary processor 0x0000000001 [0x000f0510] [ 109.383446][ T3530] CPU1 is up [ 109.461301][ T1207] virtio_blk virtio2: 2/0/0 default/read/poll queues [ 109.612653][ T3530] PM: Cannot find swap device, try swapon -a [ 109.613023][ T3530] PM: Cannot get swap writer [ 110.942421][ T3530] OOM killer enabled. [ 110.944202][ T3530] Restarting tasks: Starting [ 110.971240][ T3530] Restarting tasks: Done [ 110.974961][ T3530] PM: hibernation: hibernation exit [ 111.440090][ T3537] vfio-pci 0000:00:02.0: probe with driver vfio-pci failed with error -22 [ 111.471919][ T3539] PM: suspend entry (s2idle) [ 111.509260][ T12] Filesystems sync: 0.035 seconds [ 111.561152][ T3539] Freezing user space processes [ 111.576575][ T3539] Freezing user space processes completed (elapsed 0.015 seconds) [ 111.578990][ T3539] OOM killer disabled. [ 111.579822][ T3539] Freezing remaining freezable tasks [ 111.583295][ T3539] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 111.584192][ T3539] printk: Suspending console(s) (use no_console_suspend to debug) VM DIAGNOSIS: 20:39:52 Registers: info registers vcpu 0 CPU#0 PC=ffff8000809adfdc X00=0000000000000002 X01=0000000000000030 X02=ffff800082f21030 X03=ffff800082cbc6b8 X04=0000000000000000 X05=ffff800082cbc6e8 X06=ffff800082cbc788 X07=0000000000000001 X08=f0f0000003690000 X09=0000000000000337 X10=0000000000004d40 X11=ffff800082b8ed68 X12=0000000000011b40 X13=ffff80008326bb58 X14=ffff80008326b9a0 X15=ffff80008326bb4d X16=f7f000000ba67680 X17=0000000000000000 X18=00000000ffffffff X19=ffff80008326bdf0 X20=f9f0000003fb9880 X21=0000000000000000 X22=0000000000000000 X23=0000000000000000 X24=0000000000000000 X25=f0f0000003690000 X26=0000000000000001 X27=0000000000000000 X28=0000000000000000 X29=ffff80008326bd00 X30=ffff8000809ae464 SP=ffff80008326bd00 PSTATE=804020c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:637062696c2f3436:62696c2f7273752f Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00302e6f732e382d:326572637062696c Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000f000000000f0 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:3333333333333333:3333333333333333 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000c000000000c0 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800081c82fc4 X00=ffff800081c82fc0 X01=f3f00000035ab300 X02=ffff800082b2ffe0 X03=0000000000000000 X04=0000000000000000 X05=0000000000000001 X06=ffff800082b5ed50 X07=0000000000000000 X08=0000000000000000 X09=0000000000000000 X10=0000000000000000 X11=0000000000000001 X12=0000000000000001 X13=0000000000004452 X14=0000000000000764 X15=0000000000000000 X16=faf0000005497400 X17=0000000000000001 X18=0000000000000001 X19=0000000000000000 X20=ffff800082c71308 X21=ffff800082c71300 X22=0000000000000006 X23=ffff800082c71308 X24=0000000000000028 X25=f3f00000035ab300 X26=ffff800082b550f8 X27=0000000000000000 X28=0000000000000000 X29=ffff800082f03ea0 X30=ffff8000801b6778 SP=ffff800082f03ea0 PSTATE=604020c9 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000 Z02=0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000 Z05=0000000000000000:0000000000000000 Z06=0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000