program:
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='0000:00:1d.7', 0xc)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0)
write(r1, &(0x7f00000002c0)='0000:00:1d.7', 0xc) (fail_nth: 37)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='1', 0x1)
[ 104.592235][ T4639] Bluetooth: hci0: command tx timeout
[ 104.706420][ T5318] ehci-pci 0000:00:1d.7: remove, state 1
[ 104.737106][ T5318] usb usb1: USB disconnect, device number 1
[ 104.741082][ T5318] usb 1-1: USB disconnect, device number 2
[ 105.133060][ T5318] ehci-pci 0000:00:1d.7: USB bus 1 deregistered
[ 105.190378][ T5320] uhci_hcd 0000:00:1d.0: remove, state 1
[ 105.245166][ T9] hub 2-0:1.0: activate --> -108
[ 105.255245][ T9] hub 2-0:1.0: hub_ext_port_status failed (err = -108)
[ 105.260288][ T5320] usb usb2: USB disconnect, device number 1
[ 105.307653][ T5319] FAULT_INJECTION: forcing a failure.
[ 105.307653][ T5319] name failslab, interval 1, probability 0, space 0, times 1
[ 105.338590][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 105.338615][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 105.338623][ T5319] Call Trace:
[ 105.338628][ T5319]
[ 105.338634][ T5319] dump_stack_lvl+0xe8/0x150
[ 105.338750][ T5319] should_fail_ex+0x40c/0x560
[ 105.338827][ T5319] should_failslab+0xa8/0x100
[ 105.338865][ T5319] kmem_cache_alloc_noprof+0xa6/0x5f0
[ 105.338878][ T5319] ? acpi_ut_track_stack_ptr+0x13b/0x1f0
[ 105.338892][ T5319] ? acpi_ut_create_update_state+0x76/0x110
[ 105.338908][ T5319] ? acpi_ut_create_update_state+0x76/0x110
[ 105.338934][ T5319] acpi_ut_create_update_state+0x76/0x110
[ 105.338957][ T5319] acpi_ut_create_update_state_and_push+0x2a/0x70
[ 105.338978][ T5319] acpi_ut_update_object_reference+0x2c0/0x870
[ 105.338999][ T5319] ? __pfx_acpi_ut_update_object_reference+0x10/0x10
[ 105.339016][ T5319] ? acpi_ut_status_exit+0x120/0x1f0
[ 105.339031][ T5319] ? acpi_ut_valid_internal_object+0x53/0x280
[ 105.339052][ T5319] acpi_ex_resolve_node_to_value+0x93a/0xa80
[ 105.339074][ T5319] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10
[ 105.339089][ T5319] ? acpi_ut_status_exit+0x120/0x1f0
[ 105.339107][ T5319] ? acpi_ds_create_operand+0x980/0xbe0
[ 105.339132][ T5319] acpi_ex_resolve_to_value+0x23b/0xd50
[ 105.339153][ T5319] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10
[ 105.339170][ T5319] ? __pfx_acpi_ns_lookup+0x10/0x10
[ 105.339185][ T5319] ? acpi_ut_track_stack_ptr+0x13b/0x1f0
[ 105.339198][ T5319] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[ 105.339216][ T5319] acpi_ds_evaluate_name_path+0x253/0x460
[ 105.339238][ T5319] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10
[ 105.339259][ T5319] ? acpi_ps_get_next_namepath+0x4d3/0x9c0
[ 105.339287][ T5319] acpi_ds_exec_end_op+0x28b/0x1b00
[ 105.339314][ T5319] ? __pfx_acpi_ds_exec_end_op+0x10/0x10
[ 105.339334][ T5319] acpi_ps_parse_loop+0xfa3/0x23f0
[ 105.339372][ T5319] ? __pfx_acpi_ps_parse_loop+0x10/0x10
[ 105.339389][ T5319] ? acpi_ut_create_thread_state+0x73/0x140
[ 105.339413][ T5319] ? acpi_ut_exit+0xf3/0x1c0
[ 105.339428][ T5319] acpi_ps_parse_aml+0x388/0x1020
[ 105.339447][ T5319] acpi_ps_execute_method+0x89d/0xa70
[ 105.339471][ T5319] acpi_ns_evaluate+0xd05/0x1320
[ 105.339521][ T5319] acpi_ut_evaluate_object+0xe1/0x560
[ 105.339537][ T5319] ? acpi_ut_track_stack_ptr+0x13b/0x1f0
[ 105.339549][ T5319] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[ 105.339564][ T5319] acpi_rs_get_prt_method_data+0xb2/0x150
[ 105.339579][ T5319] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10
[ 105.339592][ T5319] ? acpi_ut_status_exit+0x120/0x1f0
[ 105.339607][ T5319] ? acpi_rs_validate_parameters+0x16e/0x1a0
[ 105.339625][ T5319] acpi_get_irq_routing_table+0x98/0xe0
[ 105.339641][ T5319] acpi_pci_irq_find_prt_entry+0x163/0x1040
[ 105.339666][ T5319] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10
[ 105.339686][ T5319] ? pci_conf1_read+0x162/0x1b0
[ 105.339756][ T5319] acpi_pci_irq_lookup+0x45/0x690
[ 105.339776][ T5319] acpi_pci_irq_enable+0x1ee/0x7a0
[ 105.339794][ T5319] ? pci_resource_is_optional+0x13a/0x170
[ 105.339810][ T5319] ? __pfx_acpi_pci_irq_enable+0x10/0x10
[ 105.339823][ T5319] ? pci_enable_resources+0x34d/0x430
[ 105.339857][ T5319] do_pci_enable_device+0x26f/0x4a0
[ 105.339871][ T5319] ? trace_rpm_return_int+0x83/0x200
[ 105.339888][ T5319] ? __pfx_do_pci_enable_device+0x10/0x10
[ 105.339899][ T5319] ? rpm_resume+0xc60/0x16d0
[ 105.339911][ T5319] ? trace_contention_end+0x3d/0x140
[ 105.339928][ T5319] ? is_acpi_device_node+0x34/0x70
[ 105.339943][ T5319] pci_enable_device_flags+0x5ab/0x700
[ 105.339961][ T5319] ? __pfx_pci_enable_device_flags+0x10/0x10
[ 105.339975][ T5319] ? __pfx_rpm_resume+0x10/0x10
[ 105.339986][ T5319] ? do_raw_spin_lock+0x12b/0x2f0
[ 105.340004][ T5319] usb_hcd_pci_probe+0x60/0x1480
[ 105.340021][ T5319] ? pci_match_id+0x4dd/0x500
[ 105.340042][ T5319] pci_device_probe+0x431/0xc90
[ 105.340058][ T5319] ? up_write+0x19f/0x4a0
[ 105.340072][ T5319] ? __pfx_pci_device_probe+0x10/0x10
[ 105.340090][ T5319] ? kernfs_put+0x7b9/0x820
[ 105.340109][ T5319] ? kernfs_create_link+0x187/0x200
[ 105.340124][ T5319] ? sysfs_do_create_link_sd+0xe0/0x110
[ 105.340142][ T5319] ? driver_sysfs_add+0x1fe/0x210
[ 105.340157][ T5319] ? __pfx_pci_device_probe+0x10/0x10
[ 105.340170][ T5319] really_probe+0x254/0xae0
[ 105.340187][ T5319] __driver_probe_device+0x1e8/0x360
[ 105.340201][ T5319] device_driver_attach+0xe0/0x1d0
[ 105.340217][ T5319] bind_store+0x1d0/0x220
[ 105.340237][ T5319] ? __pfx_sysfs_kf_write+0x10/0x10
[ 105.340249][ T5319] kernfs_fop_write_iter+0x3a4/0x540
[ 105.340271][ T5319] vfs_write+0x612/0xba0
[ 105.340294][ T5319] ? __pfx_vfs_write+0x10/0x10
[ 105.340318][ T5319] ? __fget_files+0x2a/0x420
[ 105.340342][ T5319] ksys_write+0x150/0x270
[ 105.340359][ T5319] ? __pfx_ksys_write+0x10/0x10
[ 105.340378][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.340392][ T5319] do_syscall_64+0x174/0x580
[ 105.340406][ T5319] ? trace_irq_disable+0x3b/0x140
[ 105.340422][ T5319] ? clear_bhb_loop+0x70/0xc0
[ 105.340436][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.340448][ T5319] RIP: 0033:0x7f2219b9e0d9
[ 105.340462][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 105.340473][ T5319] RSP: 002b:00007f221aaf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 105.340489][ T5319] RAX: ffffffffffffffda RBX: 00007f2219e26090 RCX: 00007f2219b9e0d9
[ 105.340498][ T5319] RDX: 000000000000000c RSI: 00002000000002c0 RDI: 0000000000000004
[ 105.340506][ T5319] RBP: 00007f221aaf6050 R08: 0000000000000000 R09: 0000000000000000
[ 105.340512][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 105.340521][ T5319] R13: 00007f2219e26128 R14: 00007f2219e26090 R15: 00007fff36a83e98
[ 105.340539][ T5319]
[ 105.616807][ T5319] ACPI Error: AE_NO_MEMORY, Could not update object reference count (20260408/utdelete-651)
[ 105.772750][ T5320] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered
[ 105.802069][ T5320] ==================================================================
[ 105.806288][ T5320] BUG: KASAN: slab-use-after-free in acpi_ns_get_attached_object+0x166/0x190
[ 105.811219][ T5320] Read of size 1 at addr ffff88801f1c5b00 by task syz.0.0/5320
[ 105.814444][ T5320]
[ 105.815528][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 105.815539][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 105.815544][ T5320] Call Trace:
[ 105.815550][ T5320]
[ 105.815554][ T5320] dump_stack_lvl+0xe8/0x150
[ 105.815568][ T5320] print_address_description+0x55/0x1e0
[ 105.815579][ T5320] ? acpi_ns_get_attached_object+0x166/0x190
[ 105.815592][ T5320] print_report+0x58/0x70
[ 105.815602][ T5320] kasan_report+0x117/0x150
[ 105.815616][ T5320] ? acpi_ns_get_attached_object+0x166/0x190
[ 105.815631][ T5320] acpi_ns_get_attached_object+0x166/0x190
[ 105.815644][ T5320] acpi_ex_resolve_node_to_value+0xcc/0xa80
[ 105.815658][ T5320] ? acpi_ut_trace_ptr+0x1a2/0x310
[ 105.815669][ T5320] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10
[ 105.815680][ T5320] ? acpi_ut_status_exit+0x120/0x1f0
[ 105.815691][ T5320] ? acpi_ds_create_operand+0x980/0xbe0
[ 105.815707][ T5320] acpi_ex_resolve_to_value+0x23b/0xd50
[ 105.815725][ T5320] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10
[ 105.815736][ T5320] ? __pfx_acpi_ns_lookup+0x10/0x10
[ 105.815745][ T5320] ? acpi_ut_track_stack_ptr+0x13b/0x1f0
[ 105.815755][ T5320] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[ 105.815767][ T5320] acpi_ds_evaluate_name_path+0x253/0x460
[ 105.815782][ T5320] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10
[ 105.815797][ T5320] ? acpi_ps_get_next_namepath+0x4d3/0x9c0
[ 105.815809][ T5320] acpi_ds_exec_end_op+0x28b/0x1b00
[ 105.815820][ T5320] ? __pfx_acpi_ds_exec_end_op+0x10/0x10
[ 105.815829][ T5320] acpi_ps_parse_loop+0xfa3/0x23f0
[ 105.815842][ T5320] ? __pfx_acpi_ps_parse_loop+0x10/0x10
[ 105.815851][ T5320] ? acpi_ut_create_thread_state+0x73/0x140
[ 105.815862][ T5320] ? acpi_ut_exit+0xf3/0x1c0
[ 105.815869][ T5320] acpi_ps_parse_aml+0x388/0x1020
[ 105.815876][ T5320] acpi_ps_execute_method+0x89d/0xa70
[ 105.815885][ T5320] acpi_ns_evaluate+0xd05/0x1320
[ 105.815893][ T5320] acpi_ut_evaluate_object+0xe1/0x560
[ 105.815901][ T5320] ? acpi_ut_track_stack_ptr+0x13b/0x1f0
[ 105.815907][ T5320] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[ 105.815914][ T5320] acpi_rs_get_prt_method_data+0xb2/0x150
[ 105.815922][ T5320] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10
[ 105.815929][ T5320] ? acpi_ut_status_exit+0x120/0x1f0
[ 105.815935][ T5320] ? acpi_rs_validate_parameters+0x16e/0x1a0
[ 105.815943][ T5320] acpi_get_irq_routing_table+0x98/0xe0
[ 105.815951][ T5320] acpi_pci_irq_find_prt_entry+0x163/0x1040
[ 105.815961][ T5320] ? lockdep_hardirqs_on+0x7a/0x110
[ 105.815969][ T5320] ? irqentry_exit+0x218/0x8f0
[ 105.815976][ T5320] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10
[ 105.815984][ T5320] ? preempt_schedule_thunk+0x16/0x40
[ 105.815992][ T5320] ? preempt_schedule_common+0x82/0xd0
[ 105.815999][ T5320] acpi_pci_irq_lookup+0x45/0x690
[ 105.816008][ T5320] acpi_pci_irq_disable+0x151/0x340
[ 105.816015][ T5320] ? pcibios_disable_device+0x8d/0xc0
[ 105.816027][ T5320] pci_disable_device+0x1d6/0x320
[ 105.816035][ T5320] ? usb_hcd_pci_remove+0x462/0x500
[ 105.816043][ T5320] ? __pfx_pci_disable_device+0x10/0x10
[ 105.816050][ T5320] ? usb_hcd_pci_remove+0x483/0x500
[ 105.816057][ T5320] pci_device_remove+0x99/0x1c0
[ 105.816065][ T5320] ? __pfx_pci_device_remove+0x10/0x10
[ 105.816073][ T5320] device_release_driver_internal+0x48b/0x880
[ 105.816081][ T5320] pci_stop_bus_device+0xf6/0x120
[ 105.816092][ T5320] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 105.816102][ T5320] remove_store+0xe5/0x150
[ 105.816113][ T5320] ? __pfx_remove_store+0x10/0x10
[ 105.816127][ T5320] ? sysfs_file_kobj+0x1e4/0x230
[ 105.816137][ T5320] ? sysfs_kf_write+0x166/0x260
[ 105.816149][ T5320] ? __pfx_sysfs_kf_write+0x10/0x10
[ 105.816159][ T5320] kernfs_fop_write_iter+0x3a4/0x540
[ 105.816176][ T5320] vfs_write+0x612/0xba0
[ 105.816192][ T5320] ? __pfx_vfs_write+0x10/0x10
[ 105.816207][ T5320] ? __fget_files+0x2a/0x420
[ 105.816221][ T5320] ksys_write+0x150/0x270
[ 105.816235][ T5320] ? __pfx_ksys_write+0x10/0x10
[ 105.816246][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.816253][ T5320] do_syscall_64+0x174/0x580
[ 105.816261][ T5320] ? clear_bhb_loop+0x70/0xc0
[ 105.816269][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.816276][ T5320] RIP: 0033:0x7f2219b9e0d9
[ 105.816285][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 105.816292][ T5320] RSP: 002b:00007f221aad4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 105.816301][ T5320] RAX: ffffffffffffffda RBX: 00007f2219e26180 RCX: 00007f2219b9e0d9
[ 105.816306][ T5320] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000006
[ 105.816311][ T5320] RBP: 00007f2219c35024 R08: 0000000000000000 R09: 0000000000000000
[ 105.816315][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 105.816319][ T5320] R13: 00007f2219e26218 R14: 00007f2219e26180 R15: 00007fff36a83e98
[ 105.816326][ T5320]
[ 105.816329][ T5320]
[ 106.033393][ T5320] Allocated by task 1:
[ 106.035266][ T5320] kasan_save_track+0x3e/0x80
[ 106.037476][ T5320] __kasan_slab_alloc+0x6c/0x80
[ 106.039964][ T5320] kmem_cache_alloc_noprof+0x2a0/0x5f0
[ 106.042314][ T5320] acpi_ut_allocate_object_desc_dbg+0x8c/0x230
[ 106.044875][ T5320] acpi_ut_create_internal_object_dbg+0x4d/0x310
[ 106.047569][ T5320] acpi_ds_build_internal_object+0x294/0x690
[ 106.050579][ T5320] acpi_ds_create_node+0xb6/0x1b0
[ 106.053420][ T5320] acpi_ds_exec_end_op+0xe18/0x1b00
[ 106.055651][ T5320] acpi_ps_parse_loop+0xfa3/0x23f0
[ 106.057878][ T5320] acpi_ps_parse_aml+0x388/0x1020
[ 106.060098][ T5320] acpi_ps_execute_table+0x352/0x440
[ 106.062425][ T5320] acpi_ns_execute_table+0x5d0/0x890
[ 106.065080][ T5320] acpi_ns_parse_table+0xef/0x170
[ 106.067964][ T5320] acpi_ns_load_table+0x131/0x430
[ 106.070132][ T5320] acpi_tb_load_namespace+0x2ca/0x880
[ 106.072272][ T5320] acpi_load_tables+0x53/0xf0
[ 106.074448][ T5320] acpi_bus_init+0x82/0x360
[ 106.076558][ T5320] acpi_init+0xa1/0x1f0
[ 106.078557][ T5320] do_one_initcall+0x250/0x870
[ 106.080898][ T5320] do_initcall_level+0x10a/0x1a0
[ 106.083302][ T5320] do_initcalls+0x59/0xa0
[ 106.085414][ T5320] kernel_init_freeable+0x29d/0x3e0
[ 106.087730][ T5320] kernel_init+0x1d/0x1d0
[ 106.089549][ T5320] ret_from_fork+0x514/0xb70
[ 106.091536][ T5320] ret_from_fork_asm+0x1a/0x30
[ 106.093893][ T5320]
[ 106.095247][ T5320] Freed by task 5319:
[ 106.097327][ T5320] kasan_save_track+0x3e/0x80
[ 106.099582][ T5320] kasan_save_free_info+0x40/0x50
[ 106.101715][ T5320] __kasan_slab_free+0x5c/0x80
[ 106.103844][ T5320] kmem_cache_free+0x182/0x650
[ 106.105791][ T5320] acpi_os_release_object+0x1d/0x30
[ 106.107997][ T5320] acpi_ut_delete_object_desc+0x9b/0x110
[ 106.110854][ T5320] acpi_ut_update_ref_count+0x174c/0x1d10
[ 106.115335][ T5320] acpi_ut_update_object_reference+0x4a8/0x870
[ 106.118720][ T5320] acpi_rs_get_prt_method_data+0xeb/0x150
[ 106.121313][ T5320] acpi_get_irq_routing_table+0x98/0xe0
[ 106.123801][ T5320] acpi_pci_irq_find_prt_entry+0x163/0x1040
[ 106.126429][ T5320] acpi_pci_irq_lookup+0x45/0x690
[ 106.129210][ T5320] acpi_pci_irq_enable+0x1ee/0x7a0
[ 106.132280][ T5320] do_pci_enable_device+0x26f/0x4a0
[ 106.135093][ T5320] pci_enable_device_flags+0x5ab/0x700
[ 106.137864][ T5320] usb_hcd_pci_probe+0x60/0x1480
[ 106.140430][ T5320] pci_device_probe+0x431/0xc90
[ 106.143058][ T5320] really_probe+0x254/0xae0
[ 106.145237][ T5320] __driver_probe_device+0x1e8/0x360
[ 106.147568][ T5320] device_driver_attach+0xe0/0x1d0
[ 106.150148][ T5320] bind_store+0x1d0/0x220
[ 106.152121][ T5320] kernfs_fop_write_iter+0x3a4/0x540
[ 106.154235][ T5320] vfs_write+0x612/0xba0
[ 106.156003][ T5320] ksys_write+0x150/0x270
[ 106.157779][ T5320] do_syscall_64+0x174/0x580
[ 106.159716][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.162395][ T5320]
[ 106.163653][ T5320] The buggy address belongs to the object at ffff88801f1c5af8
[ 106.163653][ T5320] which belongs to the cache Acpi-Operand of size 72
[ 106.170948][ T5320] The buggy address is located 8 bytes inside of
[ 106.170948][ T5320] freed 72-byte region [ffff88801f1c5af8, ffff88801f1c5b40)
[ 106.175708][ T5320]
[ 106.176591][ T5320] The buggy address belongs to the physical page:
[ 106.179193][ T5320] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801f1c5618 pfn:0x1f1c5
[ 106.183326][ T5320] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[ 106.187061][ T5320] page_type: f5(slab)
[ 106.189261][ T5320] raw: 00fff00000000200 ffff88801b0a0dc0 ffffea00007d9c10 ffffea000070b890
[ 106.193631][ T5320] raw: ffff88801f1c5618 000000080027001e 00000000f5000000 0000000000000000
[ 106.197484][ T5320] page dumped because: kasan: bad access detected
[ 106.200237][ T5320] page_owner tracks the page as allocated
[ 106.202396][ T5320] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3488104973, free_ts 0
[ 106.209821][ T5320] post_alloc_hook+0x1f9/0x250
[ 106.211876][ T5320] get_page_from_freelist+0x21fa/0x2270
[ 106.215540][ T5320] __alloc_frozen_pages_noprof+0x18d/0x380
[ 106.218738][ T5320] allocate_slab+0x79/0x5e0
[ 106.220659][ T5320] refill_objects+0x2d5/0x350
[ 106.222727][ T5320] __pcs_replace_empty_main+0x2bf/0x6b0
[ 106.225119][ T5320] kmem_cache_alloc_noprof+0x382/0x5f0
[ 106.228000][ T5320] acpi_ut_allocate_object_desc_dbg+0x8c/0x230
[ 106.231307][ T5320] acpi_ut_create_internal_object_dbg+0x4d/0x310
[ 106.234426][ T5320] acpi_ds_build_internal_object+0x294/0x690
[ 106.237439][ T5320] acpi_ds_build_internal_package_obj+0x599/0xbe0
[ 106.240453][ T5320] acpi_ds_eval_data_object_operands+0x337/0x5c0
[ 106.243182][ T5320] acpi_ds_exec_end_op+0x1307/0x1b00
[ 106.245362][ T5320] acpi_ps_parse_loop+0xfa3/0x23f0
[ 106.247543][ T5320] acpi_ps_parse_aml+0x388/0x1020
[ 106.249869][ T5320] acpi_ps_execute_table+0x352/0x440
[ 106.252202][ T5320] page_owner free stack trace missing
[ 106.254471][ T5320]
[ 106.255564][ T5320] Memory state around the buggy address:
[ 106.258325][ T5320] ffff88801f1c5a00: 00 fc fc fc fc 00 00 00 00 00 00 00 00 00 fc fc
[ 106.262036][ T5320] ffff88801f1c5a80: fc fc fa fb fb fb fb fb fb fb fb fc fc fc fc fa
[ 106.265450][ T5320] >ffff88801f1c5b00: fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb
[ 106.269615][ T5320] ^
[ 106.271607][ T5320] ffff88801f1c5b80: fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb
[ 106.275675][ T5320] ffff88801f1c5c00: fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb fc
[ 106.279418][ T5320] ==================================================================
[ 106.387154][ T5320] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 106.390109][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 106.394902][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 106.399354][ T5320] Call Trace:
[ 106.400788][ T5320]
[ 106.402050][ T5320] vpanic+0x56c/0xa60
[ 106.403856][ T5320] ? __pfx_vpanic+0x10/0x10
[ 106.406167][ T5320] panic+0xc5/0xd0
[ 106.407908][ T5320] ? __pfx_panic+0x10/0x10
[ 106.410258][ T5320] ? preempt_schedule_thunk+0x16/0x40
[ 106.413616][ T5320] ? preempt_schedule_thunk+0x16/0x40
[ 106.417333][ T5320] ? acpi_ns_get_attached_object+0x166/0x190
[ 106.419995][ T5320] check_panic_on_warn+0x89/0xb0
[ 106.422433][ T5320] ? acpi_ns_get_attached_object+0x166/0x190
[ 106.425118][ T5320] end_report+0x73/0x170
[ 106.427141][ T5320] ? acpi_ns_get_attached_object+0x166/0x190
[ 106.429859][ T5320] kasan_report+0x128/0x150
[ 106.431873][ T5320] ? acpi_ns_get_attached_object+0x166/0x190
[ 106.434486][ T5320] acpi_ns_get_attached_object+0x166/0x190
[ 106.437093][ T5320] acpi_ex_resolve_node_to_value+0xcc/0xa80
[ 106.440039][ T5320] ? acpi_ut_trace_ptr+0x1a2/0x310
[ 106.442831][ T5320] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10
[ 106.446233][ T5320] ? acpi_ut_status_exit+0x120/0x1f0
[ 106.448599][ T5320] ? acpi_ds_create_operand+0x980/0xbe0
[ 106.451157][ T5320] acpi_ex_resolve_to_value+0x23b/0xd50
[ 106.453514][ T5320] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10
[ 106.456190][ T5320] ? __pfx_acpi_ns_lookup+0x10/0x10
[ 106.458488][ T5320] ? acpi_ut_track_stack_ptr+0x13b/0x1f0
[ 106.461653][ T5320] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[ 106.464950][ T5320] acpi_ds_evaluate_name_path+0x253/0x460
[ 106.467402][ T5320] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10
[ 106.470159][ T5320] ? acpi_ps_get_next_namepath+0x4d3/0x9c0
[ 106.472710][ T5320] acpi_ds_exec_end_op+0x28b/0x1b00
[ 106.475249][ T5320] ? __pfx_acpi_ds_exec_end_op+0x10/0x10
[ 106.478014][ T5320] acpi_ps_parse_loop+0xfa3/0x23f0
[ 106.480668][ T5320] ? __pfx_acpi_ps_parse_loop+0x10/0x10
[ 106.483013][ T5320] ? acpi_ut_create_thread_state+0x73/0x140
[ 106.485560][ T5320] ? acpi_ut_exit+0xf3/0x1c0
[ 106.487537][ T5320] acpi_ps_parse_aml+0x388/0x1020
[ 106.489617][ T5320] acpi_ps_execute_method+0x89d/0xa70
[ 106.492313][ T5320] acpi_ns_evaluate+0xd05/0x1320
[ 106.495018][ T5320] acpi_ut_evaluate_object+0xe1/0x560
[ 106.497581][ T5320] ? acpi_ut_track_stack_ptr+0x13b/0x1f0
[ 106.500046][ T5320] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[ 106.502495][ T5320] acpi_rs_get_prt_method_data+0xb2/0x150
[ 106.504945][ T5320] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10
[ 106.508067][ T5320] ? acpi_ut_status_exit+0x120/0x1f0
[ 106.510931][ T5320] ? acpi_rs_validate_parameters+0x16e/0x1a0
[ 106.513731][ T5320] acpi_get_irq_routing_table+0x98/0xe0
[ 106.516194][ T5320] acpi_pci_irq_find_prt_entry+0x163/0x1040
[ 106.518777][ T5320] ? lockdep_hardirqs_on+0x7a/0x110
[ 106.521112][ T5320] ? irqentry_exit+0x218/0x8f0
[ 106.523229][ T5320] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10
[ 106.526207][ T5320] ? preempt_schedule_thunk+0x16/0x40
[ 106.529749][ T5320] ? preempt_schedule_common+0x82/0xd0
[ 106.532592][ T5320] acpi_pci_irq_lookup+0x45/0x690
[ 106.534785][ T5320] acpi_pci_irq_disable+0x151/0x340
[ 106.537033][ T5320] ? pcibios_disable_device+0x8d/0xc0
[ 106.539516][ T5320] pci_disable_device+0x1d6/0x320
[ 106.541815][ T5320] ? usb_hcd_pci_remove+0x462/0x500
[ 106.544185][ T5320] ? __pfx_pci_disable_device+0x10/0x10
[ 106.546796][ T5320] ? usb_hcd_pci_remove+0x483/0x500
[ 106.549554][ T5320] pci_device_remove+0x99/0x1c0
[ 106.552208][ T5320] ? __pfx_pci_device_remove+0x10/0x10
[ 106.554810][ T5320] device_release_driver_internal+0x48b/0x880
[ 106.557396][ T5320] pci_stop_bus_device+0xf6/0x120
[ 106.559661][ T5320] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 106.562274][ T5320] remove_store+0xe5/0x150
[ 106.564044][ T5320] ? __pfx_remove_store+0x10/0x10
[ 106.566151][ T5320] ? sysfs_file_kobj+0x1e4/0x230
[ 106.568991][ T5320] ? sysfs_kf_write+0x166/0x260
[ 106.572195][ T5320] ? __pfx_sysfs_kf_write+0x10/0x10
[ 106.574965][ T5320] kernfs_fop_write_iter+0x3a4/0x540
[ 106.577337][ T5320] vfs_write+0x612/0xba0
[ 106.579048][ T5320] ? __pfx_vfs_write+0x10/0x10
[ 106.581107][ T5320] ? __fget_files+0x2a/0x420
[ 106.583022][ T5320] ksys_write+0x150/0x270
[ 106.584906][ T5320] ? __pfx_ksys_write+0x10/0x10
[ 106.587169][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.590274][ T5320] do_syscall_64+0x174/0x580
[ 106.593103][ T5320] ? clear_bhb_loop+0x70/0xc0
[ 106.595653][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.598275][ T5320] RIP: 0033:0x7f2219b9e0d9
[ 106.600196][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 106.609020][ T5320] RSP: 002b:00007f221aad4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 106.613572][ T5320] RAX: ffffffffffffffda RBX: 00007f2219e26180 RCX: 00007f2219b9e0d9
[ 106.617076][ T5320] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000006
[ 106.620369][ T5320] RBP: 00007f2219c35024 R08: 0000000000000000 R09: 0000000000000000
[ 106.623581][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 106.626809][ T5320] R13: 00007f2219e26218 R14: 00007f2219e26180 R15: 00007fff36a83e98
[ 106.630003][ T5320]
[ 106.631971][ T5320] Kernel Offset: disabled
[ 106.634449][ T5320] Rebooting in 86400 seconds..