last executing test programs: 589.734863ms ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='mem\x00', 0x4) 155.170537ms ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/disk\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='test_resume\n', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='disk\n', 0x5) 0s ago: executing program 1 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0000:00:02.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='vfio-pci\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='0000:00:02.0\x00', 0xd) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:62378' (ED25519) to the list of known hosts. syzkaller login: [ 68.818285][ T3358] cgroup: Unknown subsys name 'net' [ 68.990682][ T3358] cgroup: Unknown subsys name 'cpuset' [ 69.018436][ T3358] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.525176][ T3358] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.810183][ T3374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.828253][ T3374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.091887][ T3373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.105918][ T3373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.757861][ T3374] hsr_slave_0: entered promiscuous mode [ 80.765611][ T3374] hsr_slave_1: entered promiscuous mode [ 80.996072][ T3373] hsr_slave_0: entered promiscuous mode [ 81.000243][ T3373] hsr_slave_1: entered promiscuous mode [ 81.002815][ T3373] debugfs: 'hsr0' already exists in 'hsr' [ 81.003460][ T3373] Cannot create hsr debugfs directory [ 81.864086][ T3374] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.888750][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.902620][ T3374] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.922322][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.950769][ T3374] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.968540][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.999303][ T3374] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.023827][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.163377][ T3373] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.181416][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.188536][ T3373] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.207982][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.231460][ T3373] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.249001][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.257222][ T3373] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.272753][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.984169][ T3374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.211963][ T3373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.113635][ T3374] veth0_vlan: entered promiscuous mode [ 86.148395][ T3374] veth1_vlan: entered promiscuous mode [ 86.238828][ T3374] veth0_macvtap: entered promiscuous mode [ 86.272822][ T3374] veth1_macvtap: entered promiscuous mode [ 86.404236][ T29] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.405022][ T29] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.409279][ T29] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.413223][ T29] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.589742][ T3373] veth0_vlan: entered promiscuous mode [ 86.616648][ T3373] veth1_vlan: entered promiscuous mode [ 86.708570][ T3373] veth0_macvtap: entered promiscuous mode [ 86.723869][ T3373] veth1_macvtap: entered promiscuous mode [ 86.764433][ T3374] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.847937][ T1648] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.848398][ T1648] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.848567][ T1648] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.848733][ T1648] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.967104][ T3527] PM: hibernation: hibernation entry [ 87.998031][ T3524] vfio-pci 0000:00:02.0: probe with driver vfio-pci failed with error -22 [ 88.196255][ T50] Filesystems sync: 0.193 seconds [ 88.201079][ T3527] Freezing user space processes [ 88.225706][ T3527] Freezing user space processes completed (elapsed 0.023 seconds) [ 88.227545][ T3527] OOM killer disabled. [ 88.232277][ T3527] Freezing remaining freezable tasks [ 88.240185][ T3527] Freezing remaining freezable tasks completed (elapsed 0.006 seconds) [ 88.256198][ T3527] PM: hibernation: Preallocating image memory [ 94.087393][ T3527] PM: hibernation: Allocated 65009 pages for snapshot [ 94.087696][ T3527] PM: hibernation: Allocated 260036 kbytes in 5.82 seconds (44.67 MB/s) [ 94.087931][ T3527] printk: Suspending console(s) (use no_console_suspend to debug) [ 94.278399][ T3527] Disabling non-boot CPUs ... [ 94.301932][ T3527] psci: CPU1 killed (polled 0 ms) [ 94.318479][ T3527] hibernate: Saved 0 MTE pages [ 94.318479][ T3527] ================================================================== [ 94.318479][ T3527] BUG: KASAN: invalid-access in swsusp_save+0x2cc/0x590 [ 94.318479][ T3527] Read at addr f7f000000341f100 by task syz.0.1/3527 [ 94.318479][ T3527] Pointer tag: [f7], memory tag: [fe] [ 94.318479][ T3527] [ 94.318479][ T3527] CPU: 0 UID: 0 PID: 3527 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT [ 94.318479][ T3527] Hardware name: linux,dummy-virt (DT) [ 94.318479][ T3527] Call trace: [ 94.318479][ T3527] show_stack+0x18/0x24 (C) [ 94.318479][ T3527] dump_stack_lvl+0x60/0x80 [ 94.318479][ T3527] print_report+0x1c4/0x4b0 [ 94.318479][ T3527] kasan_report+0x84/0xac [ 94.318479][ T3527] __do_kernel_fault+0x1b4/0x220 [ 94.318479][ T3527] do_bad_area+0x68/0x80 [ 94.318479][ T3527] do_tag_check_fault+0x34/0x44 [ 94.318479][ T3527] do_mem_abort+0x40/0x90 [ 94.318479][ T3527] el1_abort+0x44/0x64 [ 94.318479][ T3527] el1h_64_sync_handler+0x50/0xac [ 94.318479][ T3527] el1h_64_sync+0x6c/0x70 [ 94.318479][ T3527] swsusp_save+0x2cc/0x590 (P) [ 94.318479][ T3527] swsusp_arch_suspend+0x74/0x618 [ 94.318479][ T3527] hibernation_snapshot+0x208/0x438 [ 94.318479][ T3527] hibernate+0x1cc/0x3c0 [ 94.318479][ T3527] state_store+0xe8/0xf4 [ 94.318479][ T3527] kobj_attr_store+0x18/0x34 [ 94.318479][ T3527] sysfs_kf_write+0x7c/0x98 [ 94.318479][ T3527] kernfs_fop_write_iter+0x138/0x200 [ 94.318479][ T3527] vfs_write+0x244/0x36c [ 94.318479][ T3527] ksys_write+0x70/0x108 [ 94.318479][ T3527] __arm64_sys_write+0x1c/0x30 [ 94.318479][ T3527] invoke_syscall+0x54/0x10c [ 94.318479][ T3527] el0_svc_common.constprop.0+0x40/0xe0 [ 94.318479][ T3527] do_el0_svc+0x1c/0x34 [ 94.318479][ T3527] el0_svc+0x38/0x1fc [ 94.318479][ T3527] el0t_64_sync_handler+0xa0/0xf0 [ 94.318479][ T3527] el0t_64_sync+0x1a4/0x1a8 [ 94.318479][ T3527] [ 94.318479][ T3527] The buggy address belongs to the physical page: [ 94.318479][ T3527] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4341c [ 94.318479][ T3527] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 94.318479][ T3527] flags: 0x1ffe00000000040(head|node=0|zone=0|lastcpupid=0x7ff|kasantag=0x8) [ 94.318479][ T3527] page_type: f8(unknown) [ 94.318479][ T3527] raw: 01ffe00000000040 0000000000000000 dead000000000122 0000000000000000 [ 94.318479][ T3527] raw: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 94.318479][ T3527] head: 01ffe00000000040 0000000000000000 dead000000000122 0000000000000000 [ 94.318479][ T3527] head: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 94.318479][ T3527] head: 01ffe00000000002 ffffc1ffc00d0701 00000000ffffffff 00000000ffffffff [ 94.318479][ T3527] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 94.318479][ T3527] page dumped because: kasan: bad access detected [ 94.318479][ T3527] [ 94.318479][ T3527] Memory state around the buggy address: [ 94.318479][ T3527] fff000000341ef00: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 [ 94.318479][ T3527] fff000000341f000: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 [ 94.318479][ T3527] >fff000000341f100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 94.318479][ T3527] ^ [ 94.318479][ T3527] fff000000341f200: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 94.318479][ T3527] fff000000341f300: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 94.318479][ T3527] ================================================================== [ 94.318479][ T3527] Disabling lock debugging due to kernel taint [ 94.336789][ T3527] Enabling non-boot CPUs ... [ 94.352747][ T0] Detected PIPT I-cache on CPU1 [ 94.358346][ T0] CPU1: Booted secondary processor 0x0000000001 [0x000f0510] [ 94.402383][ T3527] CPU1 is up [ 94.478747][ T1648] virtio_blk virtio2: 2/0/0 default/read/poll queues [ 94.618277][ T3527] PM: Cannot find swap device, try swapon -a [ 94.618440][ T3527] PM: Cannot get swap writer [ 95.969948][ T3527] OOM killer enabled. [ 95.970145][ T3527] Restarting tasks: Starting [ 96.022117][ T3527] Restarting tasks: Done [ 96.024050][ T3527] PM: hibernation: hibernation exit [ 96.510446][ T3539] PM: suspend entry (s2idle) [ 96.602660][ T1050] Filesystems sync: 0.091 seconds [ 96.676766][ T3539] Freezing user space processes [ 96.691294][ T3539] Freezing user space processes completed (elapsed 0.014 seconds) [ 96.691484][ T3539] OOM killer disabled. [ 96.691581][ T3539] Freezing remaining freezable tasks [ 96.697523][ T3539] Freezing remaining freezable tasks completed (elapsed 0.005 seconds) [ 96.697938][ T3539] printk: Suspending console(s) (use no_console_suspend to debug) VM DIAGNOSIS: 16:30:12 Registers: info registers vcpu 0 CPU#0 PC=ffff8000809adfdc X00=0000000000000002 X01=0000000000000018 X02=ffff800082f21018 X03=ffff800082cbc6b8 X04=f1f0000003fb9880 X05=000000000000006e X06=ffff800082cbc788 X07=0000000000000001 X08=f1f0000003690000 X09=0000000000000335 X10=0000000000004d10 X11=ffff800082b8ed68 X12=0000000000011a90 X13=ffff80008326bb58 X14=ffff80008326b9a0 X15=ffff80008326bb4d X16=f0f000000656ff00 X17=0000000000000000 X18=00000000ffffffff X19=f4f0000003458029 X20=ffff8000809ae18c X21=f1f0000003fb9880 X22=f4f0000003458029 X23=ffff8000809ae18c X24=000000000000003c X25=f1f0000003690000 X26=0000000000000001 X27=0000000000000000 X28=0000000000000000 X29=ffff80008326bcc0 X30=ffff8000809ae1b4 SP=ffff80008326bcc0 PSTATE=804020c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000005426000000:0000005426000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000054 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000028:0000000000000b54 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:bb448243222c92da:e3914ed4e87380b0 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:43788d6f07084f17:4508b00c6052a10f Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:8e9f894b2581e79e:20c883c9819d5c97 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:57c93d417f4d0394:89cd11f6992873d1 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6b69be1163cb6500:a4ac85c293540e63 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0009000700030001 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000ffffe84b3870 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800081c83148 X00=00000000000095ac X01=fff000007f8d7988 X02=fff07ffffcda2000 X03=ffff800082fcbdf0 X04=fff07ffffcda2000 X05=4000000000000000 X06=0000000000000000 X07=0000000000000004 X08=f2f00000035ac378 X09=f23bfac91d494ae4 X10=a226cb97e391f020 X11=00000000000000c0 X12=00000000050c6e20 X13=0000000000000078 X14=0000000000000078 X15=0000000000000000 X16=0000000043a198c2 X17=0000000053a6540f X18=0000000000000001 X19=0000000000000000 X20=ffff800082b5ed70 X21=ffff800082b390e8 X22=0000000000000000 X23=ffff800082b5ed94 X24=f2f00000035ab300 X25=0000000000000000 X26=0000000000000000 X27=0000000000000000 X28=0000000000000000 X29=ffff800082fcbe10 X30=ffff800081c8315c SP=ffff800082fcbe10 PSTATE=604020c9 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000 Z02=0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000 Z05=0000000000000000:0000000000000000 Z06=0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000