program: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/isp1760/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1af4 1005 ffffffff ffffffff', 0x1b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='0000:00:03.0', 0xc) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/pci/drivers/isp1760/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0000:00:03.0', 0xc) (fail_nth: 39) [ 75.917730][ T5281] Bluetooth: hci0: command tx timeout [ 76.145270][ T5319] FAULT_INJECTION: forcing a failure. [ 76.145270][ T5319] name failslab, interval 1, probability 0, space 0, times 1 [ 76.150891][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.150908][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.150914][ T5319] Call Trace: [ 76.150920][ T5319] [ 76.150926][ T5319] dump_stack_lvl+0xe8/0x150 [ 76.150992][ T5319] should_fail_ex+0x40c/0x560 [ 76.151040][ T5319] should_failslab+0xa8/0x100 [ 76.151055][ T5319] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 76.151067][ T5319] ? acpi_ut_track_stack_ptr+0x13b/0x1f0 [ 76.151078][ T5319] ? acpi_ut_create_update_state+0x76/0x110 [ 76.151112][ T5319] ? acpi_ut_create_update_state+0x76/0x110 [ 76.151132][ T5319] acpi_ut_create_update_state+0x76/0x110 [ 76.151148][ T5319] acpi_ut_create_update_state_and_push+0x2a/0x70 [ 76.151162][ T5319] acpi_ut_update_object_reference+0x2c0/0x870 [ 76.151177][ T5319] ? __pfx_acpi_ut_update_object_reference+0x10/0x10 [ 76.151190][ T5319] ? acpi_ut_status_exit+0x120/0x1f0 [ 76.151202][ T5319] ? acpi_ut_valid_internal_object+0x53/0x280 [ 76.151219][ T5319] acpi_ex_resolve_node_to_value+0x93a/0xa80 [ 76.151237][ T5319] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 76.151245][ T5319] ? acpi_ut_status_exit+0x120/0x1f0 [ 76.151253][ T5319] ? acpi_ds_create_operand+0x980/0xbe0 [ 76.151264][ T5319] acpi_ex_resolve_to_value+0x23b/0xd50 [ 76.151276][ T5319] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 76.151288][ T5319] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 76.151299][ T5319] ? acpi_ut_track_stack_ptr+0x13b/0x1f0 [ 76.151309][ T5319] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 76.151322][ T5319] acpi_ds_evaluate_name_path+0x253/0x460 [ 76.151338][ T5319] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 76.151354][ T5319] ? acpi_ps_get_next_namepath+0x4d3/0x9c0 [ 76.151374][ T5319] acpi_ds_exec_end_op+0x28b/0x1b00 [ 76.151392][ T5319] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 76.151406][ T5319] acpi_ps_parse_loop+0xfa3/0x23f0 [ 76.151434][ T5319] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 76.151447][ T5319] ? acpi_ut_create_thread_state+0x73/0x140 [ 76.151467][ T5319] ? acpi_ut_exit+0xf3/0x1c0 [ 76.151478][ T5319] acpi_ps_parse_aml+0x388/0x1020 [ 76.151497][ T5319] acpi_ps_execute_method+0x89d/0xa70 [ 76.151514][ T5319] acpi_ns_evaluate+0xd05/0x1320 [ 76.151533][ T5319] acpi_ut_evaluate_object+0xe1/0x560 [ 76.151545][ T5319] ? acpi_ut_track_stack_ptr+0x13b/0x1f0 [ 76.151555][ T5319] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 76.151568][ T5319] acpi_rs_get_prt_method_data+0xb2/0x150 [ 76.151583][ T5319] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 76.151594][ T5319] ? acpi_ut_status_exit+0x120/0x1f0 [ 76.151606][ T5319] ? acpi_rs_validate_parameters+0x16e/0x1a0 [ 76.151619][ T5319] acpi_get_irq_routing_table+0x98/0xe0 [ 76.151633][ T5319] acpi_pci_irq_find_prt_entry+0x163/0x1040 [ 76.151648][ T5319] ? preempt_schedule_thunk+0x16/0x40 [ 76.151662][ T5319] ? preempt_schedule_common+0x82/0xd0 [ 76.151715][ T5319] ? preempt_schedule_thunk+0x16/0x40 [ 76.151728][ T5319] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 76.151743][ T5319] ? pci_conf1_read+0x162/0x1b0 [ 76.151761][ T5319] acpi_pci_irq_lookup+0x45/0x690 [ 76.151777][ T5319] acpi_pci_irq_enable+0x1ee/0x7a0 [ 76.151789][ T5319] ? lockdep_unlock+0x5d/0xd0 [ 76.151808][ T5319] ? pci_resource_is_optional+0x13a/0x170 [ 76.151845][ T5319] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 76.151857][ T5319] ? pci_enable_resources+0x34d/0x430 [ 76.151883][ T5319] do_pci_enable_device+0x26f/0x4a0 [ 76.151897][ T5319] ? __pfx_do_pci_enable_device+0x10/0x10 [ 76.151907][ T5319] ? trace_rpm_return_int+0x83/0x200 [ 76.151921][ T5319] ? rpm_resume+0xc60/0x16d0 [ 76.151934][ T5319] ? is_acpi_device_node+0x34/0x70 [ 76.151946][ T5319] pci_enable_device_flags+0x5ab/0x700 [ 76.151964][ T5319] ? __pfx_pci_enable_device_flags+0x10/0x10 [ 76.151986][ T5319] isp1761_pci_probe+0xae/0x5b0 [ 76.152002][ T5319] ? __pfx_isp1761_pci_probe+0x10/0x10 [ 76.152012][ T5319] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 76.152026][ T5319] ? lockdep_hardirqs_on+0x7a/0x110 [ 76.152040][ T5319] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 76.152056][ T5319] pci_device_probe+0x431/0xc90 [ 76.152069][ T5319] ? up_write+0x19f/0x4a0 [ 76.152079][ T5319] ? __pfx_pci_device_probe+0x10/0x10 [ 76.152093][ T5319] ? kernfs_put+0x7b9/0x820 [ 76.152108][ T5319] ? kernfs_create_link+0x187/0x200 [ 76.152123][ T5319] ? sysfs_do_create_link_sd+0xe0/0x110 [ 76.152136][ T5319] ? driver_sysfs_add+0x1fe/0x210 [ 76.152153][ T5319] ? __pfx_pci_device_probe+0x10/0x10 [ 76.152163][ T5319] really_probe+0x254/0xae0 [ 76.152177][ T5319] __driver_probe_device+0x1e8/0x360 [ 76.152190][ T5319] device_driver_attach+0xe0/0x1d0 [ 76.152205][ T5319] bind_store+0x1d0/0x220 [ 76.152216][ T5319] ? __pfx_sysfs_kf_write+0x10/0x10 [ 76.152222][ T5319] kernfs_fop_write_iter+0x3a4/0x540 [ 76.152234][ T5319] vfs_write+0x612/0xba0 [ 76.152247][ T5319] ? __pfx_vfs_write+0x10/0x10 [ 76.152265][ T5319] ? __fget_files+0x2a/0x420 [ 76.152282][ T5319] ksys_write+0x150/0x270 [ 76.152297][ T5319] ? __pfx_ksys_write+0x10/0x10 [ 76.152315][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.152326][ T5319] do_syscall_64+0x174/0x580 [ 76.152336][ T5319] ? trace_irq_disable+0x3b/0x140 [ 76.152350][ T5319] ? clear_bhb_loop+0x40/0x90 [ 76.152363][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.152374][ T5319] RIP: 0033:0x7f1213d9de99 [ 76.152385][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.152393][ T5319] RSP: 002b:00007f1214c78fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.152404][ T5319] RAX: ffffffffffffffda RBX: 00007f1214026090 RCX: 00007f1213d9de99 [ 76.152411][ T5319] RDX: 000000000000000c RSI: 0000200000000700 RDI: 0000000000000005 [ 76.152417][ T5319] RBP: 00007f1214c79050 R08: 0000000000000000 R09: 0000000000000000 [ 76.152423][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.152430][ T5319] R13: 00007f1214026128 R14: 00007f1214026090 R15: 00007ffdfff79848 [ 76.152448][ T5319] [ 76.415441][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.418162][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.421442][ T5319] ACPI Error: AE_NO_MEMORY, Could not update object reference count (20260408/utdelete-651) [ 76.480980][ T5319] memory length for this resource is wrong [ 76.484567][ T5319] ================================================================== [ 76.487750][ T5319] BUG: KASAN: slab-use-after-free in acpi_ns_get_attached_object+0x166/0x190 [ 76.491342][ T5319] Read of size 1 at addr ffff88801fa6ab00 by task syz.0.0/5319 [ 76.494250][ T5319] [ 76.495226][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.495239][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.495245][ T5319] Call Trace: [ 76.495253][ T5319] [ 76.495258][ T5319] dump_stack_lvl+0xe8/0x150 [ 76.495276][ T5319] print_address_description+0x55/0x1e0 [ 76.495293][ T5319] ? acpi_ns_get_attached_object+0x166/0x190 [ 76.495305][ T5319] print_report+0x58/0x70 [ 76.495319][ T5319] kasan_report+0x117/0x150 [ 76.495332][ T5319] ? acpi_ns_get_attached_object+0x166/0x190 [ 76.495347][ T5319] acpi_ns_get_attached_object+0x166/0x190 [ 76.495360][ T5319] acpi_ex_resolve_node_to_value+0xcc/0xa80 [ 76.495371][ T5319] ? acpi_ut_trace_ptr+0x1a2/0x310 [ 76.495384][ T5319] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 76.495395][ T5319] ? acpi_ut_status_exit+0x120/0x1f0 [ 76.495406][ T5319] ? acpi_ds_create_operand+0x980/0xbe0 [ 76.495422][ T5319] acpi_ex_resolve_to_value+0x23b/0xd50 [ 76.495433][ T5319] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 76.495446][ T5319] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 76.495455][ T5319] ? acpi_ut_track_stack_ptr+0x13b/0x1f0 [ 76.495464][ T5319] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 76.495476][ T5319] acpi_ds_evaluate_name_path+0x253/0x460 [ 76.495491][ T5319] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 76.495506][ T5319] ? acpi_ps_get_next_namepath+0x4d3/0x9c0 [ 76.495522][ T5319] acpi_ds_exec_end_op+0x28b/0x1b00 [ 76.495538][ T5319] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 76.495552][ T5319] acpi_ps_parse_loop+0xfa3/0x23f0 [ 76.495571][ T5319] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 76.495584][ T5319] ? acpi_ut_create_thread_state+0x73/0x140 [ 76.495602][ T5319] ? acpi_ut_exit+0xf3/0x1c0 [ 76.495612][ T5319] acpi_ps_parse_aml+0x388/0x1020 [ 76.495629][ T5319] acpi_ps_execute_method+0x89d/0xa70 [ 76.495641][ T5319] acpi_ns_evaluate+0xd05/0x1320 [ 76.495654][ T5319] acpi_ut_evaluate_object+0xe1/0x560 [ 76.495665][ T5319] ? acpi_ut_track_stack_ptr+0x13b/0x1f0 [ 76.495674][ T5319] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 76.495684][ T5319] acpi_rs_get_prt_method_data+0xb2/0x150 [ 76.495697][ T5319] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 76.495708][ T5319] ? acpi_ut_status_exit+0x120/0x1f0 [ 76.495719][ T5319] ? acpi_rs_validate_parameters+0x16e/0x1a0 [ 76.495732][ T5319] acpi_get_irq_routing_table+0x98/0xe0 [ 76.495744][ T5319] acpi_pci_irq_find_prt_entry+0x163/0x1040 [ 76.495760][ T5319] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 76.495774][ T5319] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 76.495789][ T5319] ? pci_conf1_read+0x162/0x1b0 [ 76.495805][ T5319] acpi_pci_irq_lookup+0x45/0x690 [ 76.495847][ T5319] acpi_pci_irq_disable+0x151/0x340 [ 76.495861][ T5319] ? pcibios_disable_device+0x8d/0xc0 [ 76.495874][ T5319] pci_disable_device+0x1d6/0x320 [ 76.495887][ T5319] ? __pfx__printk+0x10/0x10 [ 76.495897][ T5319] ? __pfx_pci_disable_device+0x10/0x10 [ 76.495909][ T5319] isp1761_pci_probe+0x52f/0x5b0 [ 76.495924][ T5319] ? __pfx_isp1761_pci_probe+0x10/0x10 [ 76.495939][ T5319] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 76.495954][ T5319] ? lockdep_hardirqs_on+0x7a/0x110 [ 76.495967][ T5319] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 76.495984][ T5319] pci_device_probe+0x431/0xc90 [ 76.495995][ T5319] ? up_write+0x19f/0x4a0 [ 76.496007][ T5319] ? __pfx_pci_device_probe+0x10/0x10 [ 76.496018][ T5319] ? kernfs_put+0x7b9/0x820 [ 76.496030][ T5319] ? kernfs_create_link+0x187/0x200 [ 76.496045][ T5319] ? sysfs_do_create_link_sd+0xe0/0x110 [ 76.496058][ T5319] ? driver_sysfs_add+0x1fe/0x210 [ 76.496073][ T5319] ? __pfx_pci_device_probe+0x10/0x10 [ 76.496083][ T5319] really_probe+0x254/0xae0 [ 76.496092][ T5319] __driver_probe_device+0x1e8/0x360 [ 76.496101][ T5319] device_driver_attach+0xe0/0x1d0 [ 76.496114][ T5319] bind_store+0x1d0/0x220 [ 76.496127][ T5319] ? __pfx_sysfs_kf_write+0x10/0x10 [ 76.496135][ T5319] kernfs_fop_write_iter+0x3a4/0x540 [ 76.496148][ T5319] vfs_write+0x612/0xba0 [ 76.496162][ T5319] ? __pfx_vfs_write+0x10/0x10 [ 76.496175][ T5319] ? __fget_files+0x2a/0x420 [ 76.496187][ T5319] ksys_write+0x150/0x270 [ 76.496198][ T5319] ? __pfx_ksys_write+0x10/0x10 [ 76.496211][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.496221][ T5319] do_syscall_64+0x174/0x580 [ 76.496230][ T5319] ? trace_irq_disable+0x3b/0x140 [ 76.496241][ T5319] ? clear_bhb_loop+0x40/0x90 [ 76.496251][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.496261][ T5319] RIP: 0033:0x7f1213d9de99 [ 76.496271][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.496282][ T5319] RSP: 002b:00007f1214c78fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.496294][ T5319] RAX: ffffffffffffffda RBX: 00007f1214026090 RCX: 00007f1213d9de99 [ 76.496301][ T5319] RDX: 000000000000000c RSI: 0000200000000700 RDI: 0000000000000005 [ 76.496308][ T5319] RBP: 00007f1214c79050 R08: 0000000000000000 R09: 0000000000000000 [ 76.496314][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.496320][ T5319] R13: 00007f1214026128 R14: 00007f1214026090 R15: 00007ffdfff79848 [ 76.496331][ T5319] [ 76.496334][ T5319] [ 76.703773][ T5319] Allocated by task 1: [ 76.705459][ T5319] kasan_save_track+0x3e/0x80 [ 76.707302][ T5319] __kasan_slab_alloc+0x6c/0x80 [ 76.709343][ T5319] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 76.711499][ T5319] acpi_ut_allocate_object_desc_dbg+0x8c/0x230 [ 76.713951][ T5319] acpi_ut_create_internal_object_dbg+0x4d/0x310 [ 76.716343][ T5319] acpi_ds_build_internal_object+0x294/0x690 [ 76.718599][ T5319] acpi_ds_create_node+0xb6/0x1b0 [ 76.720656][ T5319] acpi_ds_exec_end_op+0xe18/0x1b00 [ 76.722812][ T5319] acpi_ps_parse_loop+0xfa3/0x23f0 [ 76.724982][ T5319] acpi_ps_parse_aml+0x388/0x1020 [ 76.726997][ T5319] acpi_ps_execute_table+0x352/0x440 [ 76.729180][ T5319] acpi_ns_execute_table+0x5d0/0x890 [ 76.731386][ T5319] acpi_ns_parse_table+0xef/0x170 [ 76.733501][ T5319] acpi_ns_load_table+0x131/0x430 [ 76.735560][ T5319] acpi_tb_load_namespace+0x2ca/0x880 [ 76.737786][ T5319] acpi_load_tables+0x53/0xf0 [ 76.739901][ T5319] acpi_bus_init+0x82/0x360 [ 76.741800][ T5319] acpi_init+0xa1/0x1f0 [ 76.743580][ T5319] do_one_initcall+0x250/0x870 [ 76.745840][ T5319] do_initcall_level+0x10a/0x1a0 [ 76.748080][ T5319] do_initcalls+0x59/0xa0 [ 76.749910][ T5319] kernel_init_freeable+0x29d/0x3e0 [ 76.752056][ T5319] kernel_init+0x1d/0x1d0 [ 76.753920][ T5319] ret_from_fork+0x514/0xb70 [ 76.755689][ T5319] ret_from_fork_asm+0x1a/0x30 [ 76.757961][ T5319] [ 76.759194][ T5319] Freed by task 5319: [ 76.761126][ T5319] kasan_save_track+0x3e/0x80 [ 76.763222][ T5319] kasan_save_free_info+0x40/0x50 [ 76.765180][ T5319] __kasan_slab_free+0x5c/0x80 [ 76.767083][ T5319] kmem_cache_free+0x182/0x650 [ 76.768949][ T5319] acpi_os_release_object+0x1d/0x30 [ 76.770816][ T5319] acpi_ut_delete_object_desc+0x9b/0x110 [ 76.772909][ T5319] acpi_ut_update_ref_count+0x174c/0x1d10 [ 76.775112][ T5319] acpi_ut_update_object_reference+0x4a8/0x870 [ 76.777381][ T5319] acpi_rs_get_prt_method_data+0xeb/0x150 [ 76.779869][ T5319] acpi_get_irq_routing_table+0x98/0xe0 [ 76.782162][ T5319] acpi_pci_irq_find_prt_entry+0x163/0x1040 [ 76.784620][ T5319] acpi_pci_irq_lookup+0x45/0x690 [ 76.786597][ T5319] acpi_pci_irq_enable+0x1ee/0x7a0 [ 76.788831][ T5319] do_pci_enable_device+0x26f/0x4a0 [ 76.791055][ T5319] pci_enable_device_flags+0x5ab/0x700 [ 76.793274][ T5319] isp1761_pci_probe+0xae/0x5b0 [ 76.795023][ T5319] pci_device_probe+0x431/0xc90 [ 76.796755][ T5319] really_probe+0x254/0xae0 [ 76.798429][ T5319] __driver_probe_device+0x1e8/0x360 [ 76.800446][ T5319] device_driver_attach+0xe0/0x1d0 [ 76.802524][ T5319] bind_store+0x1d0/0x220 [ 76.804297][ T5319] kernfs_fop_write_iter+0x3a4/0x540 [ 76.806451][ T5319] vfs_write+0x612/0xba0 [ 76.808133][ T5319] ksys_write+0x150/0x270 [ 76.809833][ T5319] do_syscall_64+0x174/0x580 [ 76.811679][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.814035][ T5319] [ 76.815044][ T5319] The buggy address belongs to the object at ffff88801fa6aaf8 [ 76.815044][ T5319] which belongs to the cache Acpi-Operand of size 72 [ 76.820346][ T5319] The buggy address is located 8 bytes inside of [ 76.820346][ T5319] freed 72-byte region [ffff88801fa6aaf8, ffff88801fa6ab40) [ 76.825607][ T5319] [ 76.826512][ T5319] The buggy address belongs to the physical page: [ 76.828898][ T5319] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801fa6a548 pfn:0x1fa6a [ 76.832623][ T5319] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 76.835659][ T5319] page_type: f5(slab) [ 76.837355][ T5319] raw: 00fff00000000200 ffff88801b09fdc0 ffffea00007e9ad0 ffffea00007e8a50 [ 76.840843][ T5319] raw: ffff88801fa6a548 000000080027001a 00000000f5000000 0000000000000000 [ 76.844270][ T5319] page dumped because: kasan: bad access detected [ 76.846832][ T5319] page_owner tracks the page as allocated [ 76.849805][ T5319] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3225191678, free_ts 0 [ 76.858329][ T5319] post_alloc_hook+0x1f9/0x250 [ 76.860372][ T5319] get_page_from_freelist+0x21fa/0x2270 [ 76.862623][ T5319] __alloc_frozen_pages_noprof+0x18d/0x380 [ 76.864930][ T5319] allocate_slab+0x79/0x5e0 [ 76.866828][ T5319] refill_objects+0x2d5/0x350 [ 76.868843][ T5319] __pcs_replace_empty_main+0x2bf/0x6b0 [ 76.871161][ T5319] kmem_cache_alloc_noprof+0x382/0x5f0 [ 76.873473][ T5319] acpi_ut_allocate_object_desc_dbg+0x8c/0x230 [ 76.876076][ T5319] acpi_ut_create_internal_object_dbg+0x4d/0x310 [ 76.878583][ T5319] acpi_ds_build_internal_object+0x294/0x690 [ 76.880976][ T5319] acpi_ds_build_internal_package_obj+0x599/0xbe0 [ 76.883614][ T5319] acpi_ds_eval_data_object_operands+0x337/0x5c0 [ 76.886272][ T5319] acpi_ds_exec_end_op+0x1307/0x1b00 [ 76.888546][ T5319] acpi_ps_parse_loop+0xfa3/0x23f0 [ 76.890727][ T5319] acpi_ps_parse_aml+0x388/0x1020 [ 76.892805][ T5319] acpi_ps_execute_table+0x352/0x440 [ 76.895116][ T5319] page_owner free stack trace missing [ 76.897191][ T5319] [ 76.898025][ T5319] Memory state around the buggy address: [ 76.900378][ T5319] ffff88801fa6aa00: 00 fc fc fc fc fa fb fb fb fb fb fb fb fb fc fc [ 76.903613][ T5319] ffff88801fa6aa80: fc fc fa fb fb fb fb fb fb fb fb fc fc fc fc fa [ 76.906470][ T5319] >ffff88801fa6ab00: fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb [ 76.909453][ T5319] ^ [ 76.910974][ T5319] ffff88801fa6ab80: fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb [ 76.913958][ T5319] ffff88801fa6ac00: fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb fc [ 76.917320][ T5319] ================================================================== [ 76.986831][ T5319] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 76.989924][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.993722][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.997903][ T5319] Call Trace: [ 76.999350][ T5319] [ 77.000669][ T5319] vpanic+0x56c/0xa60 [ 77.002365][ T5319] ? __pfx_vpanic+0x10/0x10 [ 77.004372][ T5319] panic+0xc5/0xd0 [ 77.005996][ T5319] ? __pfx_panic+0x10/0x10 [ 77.007951][ T5319] ? preempt_schedule_thunk+0x16/0x40 [ 77.010320][ T5319] ? preempt_schedule_thunk+0x16/0x40 [ 77.012663][ T5319] ? acpi_ns_get_attached_object+0x166/0x190 [ 77.015254][ T5319] check_panic_on_warn+0x89/0xb0 [ 77.017359][ T5319] ? acpi_ns_get_attached_object+0x166/0x190 [ 77.019951][ T5319] end_report+0x73/0x170 [ 77.021600][ T5319] ? acpi_ns_get_attached_object+0x166/0x190 [ 77.023917][ T5319] kasan_report+0x128/0x150 [ 77.025699][ T5319] ? acpi_ns_get_attached_object+0x166/0x190 [ 77.028008][ T5319] acpi_ns_get_attached_object+0x166/0x190 [ 77.030274][ T5319] acpi_ex_resolve_node_to_value+0xcc/0xa80 [ 77.032624][ T5319] ? acpi_ut_trace_ptr+0x1a2/0x310 [ 77.034610][ T5319] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 77.037070][ T5319] ? acpi_ut_status_exit+0x120/0x1f0 [ 77.039243][ T5319] ? acpi_ds_create_operand+0x980/0xbe0 [ 77.041497][ T5319] acpi_ex_resolve_to_value+0x23b/0xd50 [ 77.043775][ T5319] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 77.046384][ T5319] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 77.048577][ T5319] ? acpi_ut_track_stack_ptr+0x13b/0x1f0 [ 77.050864][ T5319] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 77.053350][ T5319] acpi_ds_evaluate_name_path+0x253/0x460 [ 77.055711][ T5319] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 77.058305][ T5319] ? acpi_ps_get_next_namepath+0x4d3/0x9c0 [ 77.060792][ T5319] acpi_ds_exec_end_op+0x28b/0x1b00 [ 77.062937][ T5319] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 77.065343][ T5319] acpi_ps_parse_loop+0xfa3/0x23f0 [ 77.067478][ T5319] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 77.069802][ T5319] ? acpi_ut_create_thread_state+0x73/0x140 [ 77.072270][ T5319] ? acpi_ut_exit+0xf3/0x1c0 [ 77.074142][ T5319] acpi_ps_parse_aml+0x388/0x1020 [ 77.076230][ T5319] acpi_ps_execute_method+0x89d/0xa70 [ 77.078405][ T5319] acpi_ns_evaluate+0xd05/0x1320 [ 77.080447][ T5319] acpi_ut_evaluate_object+0xe1/0x560 [ 77.082631][ T5319] ? acpi_ut_track_stack_ptr+0x13b/0x1f0 [ 77.084929][ T5319] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 77.087295][ T5319] acpi_rs_get_prt_method_data+0xb2/0x150 [ 77.089602][ T5319] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 77.092282][ T5319] ? acpi_ut_status_exit+0x120/0x1f0 [ 77.094555][ T5319] ? acpi_rs_validate_parameters+0x16e/0x1a0 [ 77.097024][ T5319] acpi_get_irq_routing_table+0x98/0xe0 [ 77.099281][ T5319] acpi_pci_irq_find_prt_entry+0x163/0x1040 [ 77.101835][ T5319] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 77.104262][ T5319] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 77.106843][ T5319] ? pci_conf1_read+0x162/0x1b0 [ 77.108947][ T5319] acpi_pci_irq_lookup+0x45/0x690 [ 77.111026][ T5319] acpi_pci_irq_disable+0x151/0x340 [ 77.113220][ T5319] ? pcibios_disable_device+0x8d/0xc0 [ 77.115471][ T5319] pci_disable_device+0x1d6/0x320 [ 77.117602][ T5319] ? __pfx__printk+0x10/0x10 [ 77.119522][ T5319] ? __pfx_pci_disable_device+0x10/0x10 [ 77.121768][ T5319] isp1761_pci_probe+0x52f/0x5b0 [ 77.123889][ T5319] ? __pfx_isp1761_pci_probe+0x10/0x10 [ 77.126105][ T5319] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 77.128483][ T5319] ? lockdep_hardirqs_on+0x7a/0x110 [ 77.130643][ T5319] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 77.133038][ T5319] pci_device_probe+0x431/0xc90 [ 77.135061][ T5319] ? up_write+0x19f/0x4a0 [ 77.136912][ T5319] ? __pfx_pci_device_probe+0x10/0x10 [ 77.139039][ T5319] ? kernfs_put+0x7b9/0x820 [ 77.140953][ T5319] ? kernfs_create_link+0x187/0x200 [ 77.143135][ T5319] ? sysfs_do_create_link_sd+0xe0/0x110 [ 77.145473][ T5319] ? driver_sysfs_add+0x1fe/0x210 [ 77.147657][ T5319] ? __pfx_pci_device_probe+0x10/0x10 [ 77.149971][ T5319] really_probe+0x254/0xae0 [ 77.151914][ T5319] __driver_probe_device+0x1e8/0x360 [ 77.154094][ T5319] device_driver_attach+0xe0/0x1d0 [ 77.156271][ T5319] bind_store+0x1d0/0x220 [ 77.158049][ T5319] ? __pfx_sysfs_kf_write+0x10/0x10 [ 77.160210][ T5319] kernfs_fop_write_iter+0x3a4/0x540 [ 77.162349][ T5319] vfs_write+0x612/0xba0 [ 77.164130][ T5319] ? __pfx_vfs_write+0x10/0x10 [ 77.165951][ T5319] ? __fget_files+0x2a/0x420 [ 77.167822][ T5319] ksys_write+0x150/0x270 [ 77.169491][ T5319] ? __pfx_ksys_write+0x10/0x10 [ 77.171470][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.173705][ T5319] do_syscall_64+0x174/0x580 [ 77.175402][ T5319] ? trace_irq_disable+0x3b/0x140 [ 77.177378][ T5319] ? clear_bhb_loop+0x40/0x90 [ 77.179158][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.181352][ T5319] RIP: 0033:0x7f1213d9de99 [ 77.183134][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.190880][ T5319] RSP: 002b:00007f1214c78fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.194162][ T5319] RAX: ffffffffffffffda RBX: 00007f1214026090 RCX: 00007f1213d9de99 [ 77.197165][ T5319] RDX: 000000000000000c RSI: 0000200000000700 RDI: 0000000000000005 [ 77.200160][ T5319] RBP: 00007f1214c79050 R08: 0000000000000000 R09: 0000000000000000 [ 77.203198][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.206398][ T5319] R13: 00007f1214026128 R14: 00007f1214026090 R15: 00007ffdfff79848 [ 77.209566][ T5319] [ 77.211073][ T5319] Kernel Offset: disabled [ 77.212672][ T5319] Rebooting in 86400 seconds..