last executing test programs: 572.804345ms ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/vfio/vfio\x00', 0x2, 0x0) 278.295039ms ago: executing program 1 (id=3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl(r2, 0x4048aecb, &(0x7f00000000c0)="0000000000000000001000"/72) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000140)="070000000000000001000000ffffffff40420f00"/72) 0s ago: executing program 1 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='auto\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0000:00:02.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='vfio-pci\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='0000:00:02.0\x00', 0xd) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/devices/0000:00:02.0/vfio-dev/vfio0\x00', 0x0, 0x0) 0s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='disk\n\x00', 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:5795' (ED25519) to the list of known hosts. syzkaller login: [ 66.988049][ T3366] cgroup: Unknown subsys name 'net' [ 67.172886][ T3366] cgroup: Unknown subsys name 'cpuset' [ 67.187435][ T3366] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.665745][ T3366] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.275577][ T3373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.285363][ T3373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.493152][ T3374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.501941][ T3374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.025233][ T3373] hsr_slave_0: entered promiscuous mode [ 77.029490][ T3373] hsr_slave_1: entered promiscuous mode [ 77.225355][ T3374] hsr_slave_0: entered promiscuous mode [ 77.228665][ T3374] hsr_slave_1: entered promiscuous mode [ 77.232109][ T3374] debugfs: 'hsr0' already exists in 'hsr' [ 77.232515][ T3374] Cannot create hsr debugfs directory [ 77.777613][ T3373] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.800506][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.807542][ T3373] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.826685][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.849449][ T3373] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.867136][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.895586][ T3373] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.912874][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.025422][ T3374] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.041643][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.061008][ T3374] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.076372][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.086513][ T3374] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.103653][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.119900][ T3374] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.137304][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.616791][ T3374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.884847][ T3373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.446878][ T3374] veth0_vlan: entered promiscuous mode [ 80.476010][ T3374] veth1_vlan: entered promiscuous mode [ 80.582345][ T3374] veth0_macvtap: entered promiscuous mode [ 80.605287][ T3374] veth1_macvtap: entered promiscuous mode [ 80.783668][ T2181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.784351][ T2181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.784485][ T2181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.784606][ T2181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.166104][ T3374] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.502350][ T3373] veth0_vlan: entered promiscuous mode [ 81.530765][ T3373] veth1_vlan: entered promiscuous mode [ 81.642166][ T3373] veth0_macvtap: entered promiscuous mode [ 81.666300][ T3373] veth1_macvtap: entered promiscuous mode [ 81.971411][ T2181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.974386][ T2230] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.974889][ T2181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.975277][ T2181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.146943][ T3528] vfio-pci 0000:00:02.0: probe with driver vfio-pci failed with error -22 [ 82.802517][ T3539] PM: hibernation: hibernation entry [ 83.065796][ T3545] PM: suspend entry (s2idle) [ 83.066139][ T3545] PM: suspend exit [ 83.079150][ T2230] Filesystems sync: 0.225 seconds [ 83.081374][ T3539] Freezing user space processes [ 83.091080][ T3539] Freezing user space processes completed (elapsed 0.009 seconds) [ 83.091455][ T3539] OOM killer disabled. [ 83.093452][ T3539] Freezing remaining freezable tasks [ 83.097750][ T3539] Freezing remaining freezable tasks completed (elapsed 0.004 seconds) [ 83.106942][ T3539] PM: hibernation: Preallocating image memory [ 88.634782][ T3539] PM: hibernation: Allocated 64544 pages for snapshot [ 88.635073][ T3539] PM: hibernation: Allocated 258176 kbytes in 5.52 seconds (46.77 MB/s) [ 88.635242][ T3539] printk: Suspending console(s) (use no_console_suspend to debug) [ 88.814745][ T3539] Disabling non-boot CPUs ... [ 88.848780][ T3539] psci: CPU1 killed (polled 0 ms) [ 88.876404][ T3539] hibernate: Saved 0 MTE pages [ 88.876404][ T3539] ================================================================== [ 88.876404][ T3539] BUG: KASAN: invalid-access in swsusp_save+0x2cc/0x590 [ 88.876404][ T3539] Read at addr f8f000000341f100 by task syz.0.1/3539 [ 88.876404][ T3539] Pointer tag: [f8], memory tag: [fe] [ 88.876404][ T3539] [ 88.876404][ T3539] CPU: 0 UID: 0 PID: 3539 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT [ 88.876404][ T3539] Hardware name: linux,dummy-virt (DT) [ 88.876404][ T3539] Call trace: [ 88.876404][ T3539] show_stack+0x18/0x24 (C) [ 88.876404][ T3539] dump_stack_lvl+0x60/0x80 [ 88.876404][ T3539] print_report+0x1c4/0x4b0 [ 88.876404][ T3539] kasan_report+0x84/0xac [ 88.876404][ T3539] __do_kernel_fault+0x1b4/0x220 [ 88.876404][ T3539] do_bad_area+0x68/0x80 [ 88.876404][ T3539] do_tag_check_fault+0x34/0x44 [ 88.876404][ T3539] do_mem_abort+0x40/0x90 [ 88.876404][ T3539] el1_abort+0x44/0x64 [ 88.876404][ T3539] el1h_64_sync_handler+0x50/0xac [ 88.876404][ T3539] el1h_64_sync+0x6c/0x70 [ 88.876404][ T3539] swsusp_save+0x2cc/0x590 (P) [ 88.876404][ T3539] swsusp_arch_suspend+0x74/0x618 [ 88.876404][ T3539] hibernation_snapshot+0x208/0x438 [ 88.876404][ T3539] hibernate+0x1cc/0x3c0 [ 88.876404][ T3539] state_store+0xe8/0xf4 [ 88.876404][ T3539] kobj_attr_store+0x18/0x34 [ 88.876404][ T3539] sysfs_kf_write+0x7c/0x98 [ 88.876404][ T3539] kernfs_fop_write_iter+0x138/0x200 [ 88.876404][ T3539] vfs_write+0x244/0x36c [ 88.876404][ T3539] ksys_write+0x70/0x108 [ 88.876404][ T3539] __arm64_sys_write+0x1c/0x30 [ 88.876404][ T3539] invoke_syscall+0x54/0x10c [ 88.876404][ T3539] el0_svc_common.constprop.0+0x40/0xe0 [ 88.876404][ T3539] do_el0_svc+0x1c/0x34 [ 88.876404][ T3539] el0_svc+0x38/0x1fc [ 88.876404][ T3539] el0t_64_sync_handler+0xa0/0xf0 [ 88.876404][ T3539] el0t_64_sync+0x1a4/0x1a8 [ 88.876404][ T3539] [ 88.876404][ T3539] The buggy address belongs to the physical page: [ 88.876404][ T3539] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4341c [ 88.876404][ T3539] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 88.876404][ T3539] flags: 0x1ffdc0000000040(head|node=0|zone=0|lastcpupid=0x7ff|kasantag=0x7) [ 88.876404][ T3539] page_type: f8(unknown) [ 88.876404][ T3539] raw: 01ffdc0000000040 0000000000000000 dead000000000122 0000000000000000 [ 88.876404][ T3539] raw: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 88.876404][ T3539] head: 01ffdc0000000040 0000000000000000 dead000000000122 0000000000000000 [ 88.876404][ T3539] head: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 88.876404][ T3539] head: 01ffdc0000000002 ffffc1ffc00d0701 00000000ffffffff 00000000ffffffff [ 88.876404][ T3539] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 88.876404][ T3539] page dumped because: kasan: bad access detected [ 88.876404][ T3539] [ 88.876404][ T3539] Memory state around the buggy address: [ 88.876404][ T3539] fff000000341ef00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 88.876404][ T3539] fff000000341f000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 88.876404][ T3539] >fff000000341f100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 88.876404][ T3539] ^ [ 88.876404][ T3539] fff000000341f200: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 88.876404][ T3539] fff000000341f300: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 88.876404][ T3539] ================================================================== [ 88.876404][ T3539] Disabling lock debugging due to kernel taint [ 88.892979][ T3539] Enabling non-boot CPUs ... [ 88.913322][ T0] Detected PIPT I-cache on CPU1 [ 88.918745][ T0] CPU1: Booted secondary processor 0x0000000001 [0x000f0510] [ 88.947533][ T3539] CPU1 is up [ 89.043188][ T2181] virtio_blk virtio2: 2/0/0 default/read/poll queues [ 89.186129][ T3539] PM: Cannot find swap device, try swapon -a [ 89.186355][ T3539] PM: Cannot get swap writer [ 90.942433][ T3539] OOM killer enabled. [ 90.942750][ T3539] Restarting tasks: Starting [ 90.980863][ T3539] Restarting tasks: Done [ 90.996997][ T3539] PM: hibernation: hibernation exit VM DIAGNOSIS: 16:43:16 Registers: info registers vcpu 0 CPU#0 PC=ffff8000809adfdc X00=0000000000000002 X01=0000000000000018 X02=ffff800082f21018 X03=ffff800082cbc6b8 X04=f0f0000003fb9880 X05=0000000000000079 X06=ffff800082cbc788 X07=0000000000000001 X08=f4f0000003fc0000 X09=0000000000000337 X10=0000000000004d40 X11=ffff800082b8ed68 X12=0000000000011b40 X13=ffff80008326bb58 X14=ffff80008326b9a0 X15=ffff80008326bb4d X16=00000000df02e7fe X17=ffff800082cbd440 X18=00000000ffffffff X19=f7f0000003458031 X20=ffff8000809ae18c X21=f0f0000003fb9880 X22=f7f0000003458031 X23=ffff8000809ae18c X24=000000000000003c X25=f4f0000003fc0000 X26=0000000000000001 X27=0000000000000000 X28=0000000000000000 X29=ffff80008326bcc0 X30=ffff8000809ae1b4 SP=ffff80008326bcc0 PSTATE=804020c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00524f5252450040:0000000000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00524f5252450040:0000000000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:bb448243222c92da:e3914ed4e87380b0 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:43788d6f07084f17:4508b00c6052a10f Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:8e9f894b2581e79e:20c883c9819d5c97 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:57c93d417f4d0394:89cd11f6992873d1 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6b69be1163cb6500:a4ac85c293540e63 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0009000700030001 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000ffffed22a5f0 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800081c83148 X00=00000000000098f4 X01=fff000007f8d7988 X02=fff07ffffcda2000 X03=ffff800082fcbdf0 X04=fff07ffffcda2000 X05=4000000000000000 X06=fff07ffffcda2000 X07=fff000007f8d57c0 X08=ffff800082de1ac0 X09=fff000007f8d5868 X10=00000000000000c0 X11=00000014ef69ba2d X12=0000000000000001 X13=000000000000019d X14=000000000000019d X15=0000000000000000 X16=f9f0000008bb48c0 X17=0000000000000000 X18=0000000000000001 X19=0000000000000000 X20=ffff800082b5ed70 X21=ffff800082b390e8 X22=0000000000000000 X23=ffff800082b5ed94 X24=fbf00000035ab300 X25=0000000000000000 X26=0000000000000000 X27=0000000000000000 X28=0000000000000000 X29=ffff800082fcbe10 X30=ffff800081c8315c SP=ffff800082fcbe10 PSTATE=614020c9 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000 Z02=0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000 Z05=0000000000000000:0000000000000000 Z06=0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000