last executing test programs: 129.695215ms ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='auto\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0000:00:02.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='vfio-pci\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='0000:00:02.0\x00', 0xd) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/iommu\x00', 0x0, 0x0) 0s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='disk\n\x00', 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:21183' (ED25519) to the list of known hosts. syzkaller login: [ 72.781368][ T3367] cgroup: Unknown subsys name 'net' [ 72.972886][ T3367] cgroup: Unknown subsys name 'cpuset' [ 72.999095][ T3367] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.403675][ T3367] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.940637][ T3373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.950522][ T3373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.286714][ T3372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.300672][ T3372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.631369][ T3373] hsr_slave_0: entered promiscuous mode [ 81.639780][ T3373] hsr_slave_1: entered promiscuous mode [ 82.233599][ T3372] hsr_slave_0: entered promiscuous mode [ 82.238204][ T3372] hsr_slave_1: entered promiscuous mode [ 82.240488][ T3372] debugfs: 'hsr0' already exists in 'hsr' [ 82.242270][ T3372] Cannot create hsr debugfs directory [ 82.668859][ T3373] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.696734][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.705518][ T3373] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.720106][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.738613][ T3373] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.752968][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.759670][ T3373] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.771134][ T3373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.872700][ T3372] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.888496][ T3372] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.892089][ T3372] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.907821][ T3372] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.913723][ T3372] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.928859][ T3372] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.944998][ T3372] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.960752][ T3372] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.570988][ T3373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.588102][ T3372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.240476][ T3373] veth0_vlan: entered promiscuous mode [ 86.308652][ T3373] veth1_vlan: entered promiscuous mode [ 86.389236][ T3372] veth0_vlan: entered promiscuous mode [ 86.435875][ T3372] veth1_vlan: entered promiscuous mode [ 86.523697][ T3373] veth0_macvtap: entered promiscuous mode [ 86.555115][ T3373] veth1_macvtap: entered promiscuous mode [ 86.717449][ T3372] veth0_macvtap: entered promiscuous mode [ 86.748919][ T2210] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.749755][ T2210] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.749911][ T2210] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.750070][ T2210] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.797374][ T3372] veth1_macvtap: entered promiscuous mode [ 86.988543][ T1297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.988838][ T1297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.989040][ T1297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.989268][ T1297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.125807][ T3373] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.861888][ T3526] PM: hibernation: hibernation entry [ 87.968330][ T3524] vfio-pci 0000:00:02.0: probe with driver vfio-pci failed with error -22 [ 88.181992][ T1520] Filesystems sync: 0.244 seconds [ 88.188327][ T3526] Freezing user space processes [ 88.199813][ T3526] Freezing user space processes completed (elapsed 0.011 seconds) [ 88.201652][ T3526] OOM killer disabled. [ 88.207059][ T3526] Freezing remaining freezable tasks [ 88.213440][ T3526] Freezing remaining freezable tasks completed (elapsed 0.005 seconds) [ 88.230437][ T3526] PM: hibernation: Preallocating image memory [ 93.302031][ T3526] PM: hibernation: Allocated 64793 pages for snapshot [ 93.302277][ T3526] PM: hibernation: Allocated 259172 kbytes in 5.06 seconds (51.21 MB/s) [ 93.302468][ T3526] printk: Suspending console(s) (use no_console_suspend to debug) [ 93.461476][ T3526] Disabling non-boot CPUs ... [ 93.489091][ T3526] psci: CPU1 killed (polled 0 ms) [ 93.511114][ T3526] hibernate: Saved 0 MTE pages [ 93.511114][ T3526] ================================================================== [ 93.511114][ T3526] BUG: KASAN: invalid-access in swsusp_save+0x2cc/0x590 [ 93.511114][ T3526] Read at addr fdf000000341f100 by task syz.0.1/3526 [ 93.511114][ T3526] Pointer tag: [fd], memory tag: [fe] [ 93.511114][ T3526] [ 93.511114][ T3526] CPU: 0 UID: 0 PID: 3526 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT [ 93.511114][ T3526] Hardware name: linux,dummy-virt (DT) [ 93.511114][ T3526] Call trace: [ 93.511114][ T3526] show_stack+0x18/0x24 (C) [ 93.511114][ T3526] dump_stack_lvl+0x60/0x80 [ 93.511114][ T3526] print_report+0x1c4/0x4b0 [ 93.511114][ T3526] kasan_report+0x84/0xac [ 93.511114][ T3526] __do_kernel_fault+0x1b4/0x220 [ 93.511114][ T3526] do_bad_area+0x68/0x80 [ 93.511114][ T3526] do_tag_check_fault+0x34/0x44 [ 93.511114][ T3526] do_mem_abort+0x40/0x90 [ 93.511114][ T3526] el1_abort+0x44/0x64 [ 93.511114][ T3526] el1h_64_sync_handler+0x50/0xac [ 93.511114][ T3526] el1h_64_sync+0x6c/0x70 [ 93.511114][ T3526] swsusp_save+0x2cc/0x590 (P) [ 93.511114][ T3526] swsusp_arch_suspend+0x74/0x618 [ 93.511114][ T3526] hibernation_snapshot+0x208/0x438 [ 93.511114][ T3526] hibernate+0x1cc/0x3c0 [ 93.511114][ T3526] state_store+0xe8/0xf4 [ 93.511114][ T3526] kobj_attr_store+0x18/0x34 [ 93.511114][ T3526] sysfs_kf_write+0x7c/0x98 [ 93.511114][ T3526] kernfs_fop_write_iter+0x138/0x200 [ 93.511114][ T3526] vfs_write+0x244/0x36c [ 93.511114][ T3526] ksys_write+0x70/0x108 [ 93.511114][ T3526] __arm64_sys_write+0x1c/0x30 [ 93.511114][ T3526] invoke_syscall+0x54/0x10c [ 93.511114][ T3526] el0_svc_common.constprop.0+0x40/0xe0 [ 93.511114][ T3526] do_el0_svc+0x1c/0x34 [ 93.511114][ T3526] el0_svc+0x38/0x1fc [ 93.511114][ T3526] el0t_64_sync_handler+0xa0/0xf0 [ 93.511114][ T3526] el0t_64_sync+0x1a4/0x1a8 [ 93.511114][ T3526] [ 93.511114][ T3526] The buggy address belongs to the physical page: [ 93.511114][ T3526] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4341c [ 93.511114][ T3526] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 93.511114][ T3526] flags: 0x1ffc80000000040(head|node=0|zone=0|lastcpupid=0x7ff|kasantag=0x2) [ 93.511114][ T3526] page_type: f8(unknown) [ 93.511114][ T3526] raw: 01ffc80000000040 0000000000000000 dead000000000122 0000000000000000 [ 93.511114][ T3526] raw: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 93.511114][ T3526] head: 01ffc80000000040 0000000000000000 dead000000000122 0000000000000000 [ 93.511114][ T3526] head: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 93.511114][ T3526] head: 01ffc80000000002 ffffc1ffc00d0701 00000000ffffffff 00000000ffffffff [ 93.511114][ T3526] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 93.511114][ T3526] page dumped because: kasan: bad access detected [ 93.511114][ T3526] [ 93.511114][ T3526] Memory state around the buggy address: [ 93.511114][ T3526] fff000000341ef00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd [ 93.511114][ T3526] fff000000341f000: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd [ 93.511114][ T3526] >fff000000341f100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 93.511114][ T3526] ^ [ 93.511114][ T3526] fff000000341f200: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 93.511114][ T3526] fff000000341f300: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 93.511114][ T3526] ================================================================== [ 93.511114][ T3526] Disabling lock debugging due to kernel taint [ 93.549926][ T3526] Enabling non-boot CPUs ... [ 93.583629][ T0] Detected PIPT I-cache on CPU1 [ 93.589819][ T0] CPU1: Booted secondary processor 0x0000000001 [0x000f0510] [ 93.620806][ T3526] CPU1 is up [ 93.688018][ T12] virtio_blk virtio2: 2/0/0 default/read/poll queues [ 93.800540][ T3526] PM: Cannot find swap device, try swapon -a [ 93.800759][ T3526] PM: Cannot get swap writer [ 94.994453][ T3526] OOM killer enabled. [ 94.994684][ T3526] Restarting tasks: Starting [ 95.017921][ T3526] Restarting tasks: Done [ 95.081553][ T3526] PM: hibernation: hibernation exit [ 95.334515][ T3532] PM: suspend entry (s2idle) [ 95.370331][ T1520] Filesystems sync: 0.035 seconds [ 95.410188][ T3532] Freezing user space processes [ 95.448672][ T3532] Freezing user space processes completed (elapsed 0.038 seconds) [ 95.450359][ T3532] OOM killer disabled. [ 95.451392][ T3532] Freezing remaining freezable tasks [ 95.458104][ T3532] Freezing remaining freezable tasks completed (elapsed 0.005 seconds) [ 95.459472][ T3532] printk: Suspending console(s) (use no_console_suspend to debug) VM DIAGNOSIS: 17:06:57 Registers: info registers vcpu 0 CPU#0 PC=ffff800081c83148 X00=0000000000015e34 X01=fff000007f8bd988 X02=fff07ffffcd88000 X03=ffff800082b53d80 X04=fff07ffffcd88000 X05=4000000000000000 X06=0000000000000000 X07=0000000000000004 X08=ffff800082b7da78 X09=9503476f5f5c7e19 X10=ed2caef9f70fa932 X11=00000000000000c0 X12=0000000000000001 X13=00000000000009d9 X14=0000000000000786 X15=0000000000000000 X16=f8f000000793fec0 X17=0000000000000000 X18=0000000000000001 X19=0000000000000000 X20=ffff800082b5ed70 X21=ffff800082b390e8 X22=0000000000000000 X23=ffff800082b5ed94 X24=ffff800082b7ca00 X25=ffff8000828b0000 X26=fff000007f8ec400 X27=0000000000000000 X28=0000000000000000 X29=ffff800082b53da0 X30=ffff800081c8315c SP=ffff800082b53da0 PSTATE=614020c9 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2525252525252525:2525252525252525 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:65642f000a732520:7325207334362e25 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6e797320736d6574:737973656c694620 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000ff0000ff00:00ff0000000000ff Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000f00f00f00000f Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:687469772065626f:7270203a302e3230 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:203a302e32303a30:303a303030302069 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6576697264206874:69772065626f7270 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000fffff1c3ed10:0000fffff1c3ed10 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000fffff1c3ece0 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff8000809adfdc X00=0000000000000002 X01=0000000000000018 X02=ffff800082f21018 X03=ffff800082cbc6b8 X04=f9f0000003fb9880 X05=0000000000000074 X06=ffff800082cbc788 X07=0000000000000001 X08=f4f0000003690000 X09=0000000000000336 X10=0000000000004d28 X11=ffff800082b8ed68 X12=0000000000011ae8 X13=ffff80008326bb58 X14=ffff80008326b9a0 X15=ffff80008326bb4d X16=f5f000000793fe40 X17=0000000000000000 X18=00000000ffffffff X19=f6f000000345801d X20=ffff8000809ae18c X21=f9f0000003fb9880 X22=f6f000000345801d X23=ffff8000809ae18c X24=0000000000000023 X25=f4f0000003690000 X26=0000000000000001 X27=0000000000000000 X28=0000000000000000 X29=ffff80008326bcc0 X30=ffff8000809ae1b4 SP=ffff80008326bcc0 PSTATE=814000c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000 Z02=0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000 Z05=0000000000000000:0000000000000000 Z06=0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000