last executing test programs: 403.228134ms ago: executing program 1 (id=2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) 320.889095ms ago: executing program 0 (id=1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068ae53, &(0x7f0000000040)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x1000}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000400)={0x0, 0x40, 0x0, &(0x7f0000000440)}) 0s ago: executing program 1 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='auto\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0000:00:02.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='vfio-pci\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='0000:00:02.0\x00', 0xd) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/vfio-dev\x00', 0x0, 0x0) 0s ago: executing program 0 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)='disk', 0x4}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:56304' (ED25519) to the list of known hosts. syzkaller login: [ 67.292389][ T3369] cgroup: Unknown subsys name 'net' [ 67.516890][ T3369] cgroup: Unknown subsys name 'cpuset' [ 67.541776][ T3369] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.935194][ T3369] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.383626][ T3375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.399863][ T3375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.635589][ T3374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.649765][ T3374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.354647][ T3375] hsr_slave_0: entered promiscuous mode [ 76.363008][ T3375] hsr_slave_1: entered promiscuous mode [ 76.592587][ T3374] hsr_slave_0: entered promiscuous mode [ 76.597777][ T3374] hsr_slave_1: entered promiscuous mode [ 76.601416][ T3374] debugfs: 'hsr0' already exists in 'hsr' [ 76.602985][ T3374] Cannot create hsr debugfs directory [ 77.320882][ T3375] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.344401][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.350430][ T3375] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.360684][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.363870][ T3375] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.378151][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.398217][ T3375] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.414941][ T3375] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.523387][ T3374] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.542673][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.549727][ T3374] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.563348][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.571869][ T3374] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.582319][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.588286][ T3374] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.604713][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.262418][ T3374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.359632][ T3375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.201621][ T3375] veth0_vlan: entered promiscuous mode [ 80.219901][ T3374] veth0_vlan: entered promiscuous mode [ 80.244123][ T3375] veth1_vlan: entered promiscuous mode [ 80.261810][ T3374] veth1_vlan: entered promiscuous mode [ 80.387457][ T3374] veth0_macvtap: entered promiscuous mode [ 80.414945][ T3374] veth1_macvtap: entered promiscuous mode [ 80.423447][ T3375] veth0_macvtap: entered promiscuous mode [ 80.443722][ T3375] veth1_macvtap: entered promiscuous mode [ 80.538692][ T1635] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.539317][ T1635] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.539507][ T1635] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.539648][ T1635] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.601154][ T1659] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.633442][ T1659] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.635145][ T1659] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.652078][ T1659] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.917524][ T3375] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.827478][ T3533] PM: hibernation: hibernation entry [ 81.908922][ T3529] vfio-pci 0000:00:02.0: probe with driver vfio-pci failed with error -22 [ 82.093694][ T1635] Filesystems sync: 0.174 seconds [ 82.097404][ T3533] Freezing user space processes [ 82.104218][ T3533] Freezing user space processes completed (elapsed 0.006 seconds) [ 82.104569][ T3533] OOM killer disabled. [ 82.106957][ T3533] Freezing remaining freezable tasks [ 82.110550][ T3533] Freezing remaining freezable tasks completed (elapsed 0.003 seconds) [ 82.118154][ T3533] PM: hibernation: Preallocating image memory [ 86.760646][ T3533] PM: hibernation: Allocated 64626 pages for snapshot [ 86.761083][ T3533] PM: hibernation: Allocated 258504 kbytes in 4.64 seconds (55.71 MB/s) [ 86.761317][ T3533] printk: Suspending console(s) (use no_console_suspend to debug) [ 86.956970][ T3533] Disabling non-boot CPUs ... [ 86.989552][ T3533] psci: CPU1 killed (polled 0 ms) [ 87.021876][ T3533] hibernate: Saved 0 MTE pages [ 87.021876][ T3533] ================================================================== [ 87.021876][ T3533] BUG: KASAN: invalid-access in swsusp_save+0x2cc/0x590 [ 87.021876][ T3533] Read at addr fdf000000341f100 by task syz.0.4/3533 [ 87.021876][ T3533] Pointer tag: [fd], memory tag: [fe] [ 87.021876][ T3533] [ 87.021876][ T3533] CPU: 0 UID: 0 PID: 3533 Comm: syz.0.4 Not tainted syzkaller #0 PREEMPT [ 87.021876][ T3533] Hardware name: linux,dummy-virt (DT) [ 87.021876][ T3533] Call trace: [ 87.021876][ T3533] show_stack+0x18/0x24 (C) [ 87.021876][ T3533] dump_stack_lvl+0x60/0x80 [ 87.021876][ T3533] print_report+0x1c4/0x4b0 [ 87.021876][ T3533] kasan_report+0x84/0xac [ 87.021876][ T3533] __do_kernel_fault+0x1b4/0x220 [ 87.021876][ T3533] do_bad_area+0x68/0x80 [ 87.021876][ T3533] do_tag_check_fault+0x34/0x44 [ 87.021876][ T3533] do_mem_abort+0x40/0x90 [ 87.021876][ T3533] el1_abort+0x44/0x64 [ 87.021876][ T3533] el1h_64_sync_handler+0x50/0xac [ 87.021876][ T3533] el1h_64_sync+0x6c/0x70 [ 87.021876][ T3533] swsusp_save+0x2cc/0x590 (P) [ 87.021876][ T3533] swsusp_arch_suspend+0x74/0x618 [ 87.021876][ T3533] hibernation_snapshot+0x208/0x438 [ 87.021876][ T3533] hibernate+0x1cc/0x3c0 [ 87.021876][ T3533] state_store+0xe8/0xf4 [ 87.021876][ T3533] kobj_attr_store+0x18/0x34 [ 87.021876][ T3533] sysfs_kf_write+0x7c/0x98 [ 87.021876][ T3533] kernfs_fop_write_iter+0x138/0x200 [ 87.021876][ T3533] do_iter_readv_writev+0x10c/0x1ec [ 87.021876][ T3533] vfs_writev+0x134/0x2c0 [ 87.021876][ T3533] do_writev+0x7c/0x148 [ 87.021876][ T3533] __arm64_sys_writev+0x20/0x34 [ 87.021876][ T3533] invoke_syscall+0x54/0x10c [ 87.021876][ T3533] el0_svc_common.constprop.0+0x40/0xe0 [ 87.021876][ T3533] do_el0_svc+0x1c/0x34 [ 87.021876][ T3533] el0_svc+0x38/0x1fc [ 87.021876][ T3533] el0t_64_sync_handler+0xa0/0xf0 [ 87.021876][ T3533] el0t_64_sync+0x1a4/0x1a8 [ 87.021876][ T3533] [ 87.021876][ T3533] The buggy address belongs to the physical page: [ 87.021876][ T3533] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4341c [ 87.021876][ T3533] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 87.021876][ T3533] flags: 0x1ffc80000000040(head|node=0|zone=0|lastcpupid=0x7ff|kasantag=0x2) [ 87.021876][ T3533] page_type: f8(unknown) [ 87.021876][ T3533] raw: 01ffc80000000040 0000000000000000 dead000000000122 0000000000000000 [ 87.021876][ T3533] raw: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 87.021876][ T3533] head: 01ffc80000000040 0000000000000000 dead000000000122 0000000000000000 [ 87.021876][ T3533] head: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 87.021876][ T3533] head: 01ffc80000000002 ffffc1ffc00d0701 00000000ffffffff 00000000ffffffff [ 87.021876][ T3533] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 87.021876][ T3533] page dumped because: kasan: bad access detected [ 87.021876][ T3533] [ 87.021876][ T3533] Memory state around the buggy address: [ 87.021876][ T3533] fff000000341ef00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd [ 87.021876][ T3533] fff000000341f000: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd [ 87.021876][ T3533] >fff000000341f100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 87.021876][ T3533] ^ [ 87.021876][ T3533] fff000000341f200: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 87.021876][ T3533] fff000000341f300: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 87.021876][ T3533] ================================================================== [ 87.021876][ T3533] Disabling lock debugging due to kernel taint [ 87.048791][ T3533] Enabling non-boot CPUs ... [ 87.065332][ T0] Detected PIPT I-cache on CPU1 [ 87.070923][ T0] CPU1: Booted secondary processor 0x0000000001 [0x000f0510] [ 87.097254][ T3533] CPU1 is up [ 87.151940][ T1689] virtio_blk virtio2: 2/0/0 default/read/poll queues [ 87.223800][ T3533] PM: Cannot find swap device, try swapon -a [ 87.223970][ T3533] PM: Cannot get swap writer [ 88.424782][ T3533] OOM killer enabled. [ 88.424953][ T3533] Restarting tasks: Starting [ 88.444908][ T3533] Restarting tasks: Done [ 88.446011][ T3533] PM: hibernation: hibernation exit VM DIAGNOSIS: 15:33:01 Registers: info registers vcpu 0 CPU#0 PC=ffff8000809adfdc X00=0000000000000002 X01=0000000000000018 X02=ffff800082f21018 X03=ffff800082cbc6b8 X04=f8f0000003fb9880 X05=0000000000000070 X06=ffff800082cbc788 X07=0000000000000001 X08=f3f0000003690000 X09=0000000000000339 X10=0000000000004d70 X11=ffff800082b8ed68 X12=0000000000011bf0 X13=ffff80008326bb58 X14=ffff80008326b9a0 X15=ffff80008326bb4d X16=000000004966b46b X17=00000000b945244c X18=00000000ffffffff X19=f2f0000003458019 X20=ffff8000809ae18c X21=f8f0000003fb9880 X22=f2f0000003458019 X23=ffff8000809ae18c X24=0000000000000031 X25=f3f0000003690000 X26=0000000000000001 X27=0000000000000000 X28=0000000000000000 X29=ffff80008326bcc0 X30=ffff8000809ae1b4 SP=ffff80008326bcc0 PSTATE=814020c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0a0a0a0a0a0a0a0a:0a0a0a0a0a0a0a0a Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:7669726420000073:646e6f6365732034 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6e797320736d6574:737973656c694620 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000ffff00:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00000ff000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2072657669726420:687469772065626f Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:203a29315f657661:6c735f646e6f6220 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:206e612073612067:6e6976616c736e45 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffde5fd7a0:0000ffffde5fd7a0 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000ffffde5fd770 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800081c82fc4 X00=ffff800081c82fc0 X01=f6f00000035ab300 X02=fff07ffffcda2000 X03=0000000000000990 X04=0000000000000245 X05=00000012ee7c9c00 X06=0000000000000000 X07=0000000000000001 X08=0000000000000001 X09=0000000000000001 X10=ffffc1ffbf7c35c0 X11=0000000000000000 X12=0000000000000366 X13=00000000000002fc X14=f8f000000604e680 X15=0000000000000001 X16=f7f000000b7806c0 X17=0000000000000000 X18=0000000000000001 X19=0000000000000000 X20=ffff800082c71308 X21=ffff800082c71300 X22=0000000000000006 X23=ffff800082c71308 X24=0000000000000028 X25=fff07ffffcda2000 X26=ffff800082b621a0 X27=f6f00000035ab300 X28=f8f000000604e600 X29=ffff800082fcbcb0 X30=ffff8000801b6778 SP=ffff800082fcbcb0 PSTATE=604020c9 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000 Z02=0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000 Z05=0000000000000000:0000000000000000 Z06=0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000