program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/core/rps_default_mask\x00', 0x0, 0x0)
pread64$ublk_bdev(r0, 0x0, 0x2f, 0x3)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x162, 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
pipe(&(0x7f0000000340))
open(&(0x7f00000003c0)='.\x00', 0x0, 0x244)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000006c0)={[{@user_xattr}, {@i_version}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}]}, 0x1, 0x490, &(0x7f0000000bc0)="$eJzs3UFrXNUeAPD/nSR9aZu+pO+9RV/BWmwlLdqZpLFtcFEriK4Kat3HmExCyCQTMpO2CUVS/ACCiAquXLkR/ACC9COIUNC9iCiirS5cqCMzudPWOJMETHNx5veD03vOPTPzP6eTOXPPPZe5AXSt4xFxKSJ6IuJ0RAym+3NpivWNVH/c3Ts3puopiVrtyg9JJOm+5msl6fZg+rT+iHj5hYjXkr/GrayuzU+WSsXltFyoLiwVKqtrZ+YWJmeLs8XFsbHR8+MXxs+Nj+xaXy8+9807b374/MVPn7z21cR3p16vN2sgrXuwH7tpo+t9jf+Lpt6IWH4YwTLQk/anL+uGAACwI/Vj/P9ExGON4//B6GkczQEAAACdpPbMQPyaRNQAAACAjpVrXAOb5PLptQADkcvl8xvX8P4vDuRK5Ur1iZnyyuL0xrWyQ9GXm5krFUfSa4WHoi+pl0cb+fvls5vKYxFxOCLeHtzfKOenyqXprE9+AAAAQJc4uGn+//PgxvwfAAAA6DBDWTcAAAAAeOjM/wEAAKDzmf8DAABAR3vx8uV6qjXvfz19dXVlvnz1zHSxMp9fWJnKT5WXl/Kz5fJs4zf7FrZ7vVK5vPRULK5cL1SLlWqhsro2sVBeWaxONO7rPVF0n2gAAADYe4cfvfVlEhHrT+9vpLp9aZ25OnS2XNYNADLTk3UDgMz0Zt0AIDPm+ECyTX1/u4rPdr8tAADAwzH8f+v/0K2s/0P3sv4P3cv6P3Qvc3zA+j8AAHS+gUZKcvl0LXAgcrl8PuJQ47YAfcnMXKk4EhH/jogvBvv+VS+PZt1oAAAAAAAAAAAAAAAAAAAAAAAAAPiHqdWSqAEAAAAdLSL3bZLe/2t48OTA5vMD+5JfBhvbiLj2/pV3r09Wq8uj9f0/3ttffS/dfzaLMxgAAADAZs15enMeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC76e6dG1PNtJdxv382IoZaxe+N/sa2P/oi4sBPSfQ+8LwkInp2If76zYg40ip+Um9WDKWt2Bw/FxH7M45/cBfiQze7VR9/LrX6/OXieGPb+vPXm6a/q/34l7s3/vW0Gf8O7TDG0dsfF9rGvxlxtLf1+NOMn7SJf2KH8V99ZW2tXV3tg4jhlt8/yZ9iFaoLS4XK6tqZuYXJ2eJscXFsbPT8+IXxc+MjhZm5UjH9t2WMtx755Pet+n+gTfyhbfp/cof9/+329Tv/3SL+qROt3/8jW8Sv/008nn4P1OuHm/n1jfyDjn30+bGt+j/dpv/bvf+ndtj/0y+98fUOHwoA7IHK6tr8ZKlUXJaRkZG5l8l6ZAIAAHbb/YP+rFsCAAAAAAAAAAAAAAAAAAAA3Wsvfk4s6z4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzEHwEAAP//0wfUAw==")
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
mkdirat(r0, &(0x7f00000005c0)='./sys\x00', 0xa9)
mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
mkdir(&(0x7f0000000480)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0)
write(r3, &(0x7f0000000580)='1', 0x1)
syz_open_dev$sg(&(0x7f0000000600), 0x0, 0x20002)
write(r2, &(0x7f00000007c0)='3', 0x4e)
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f0000000800)=0xfff, 0x4)
r5 = socket(0x10, 0x803, 0x0)
bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
write(r1, &(0x7f0000000680)='27', 0x2)
socket$netlink(0x10, 0x3, 0x14)
[ 93.425028][ T4644] Bluetooth: hci0: command tx timeout
[ 93.454931][ T56] cfg80211: failed to load regulatory.db
[ 93.657488][ T5326] loop0: detected capacity change from 0 to 512
[ 93.699394][ T5326] EXT4-fs: Ignoring removed i_version option
[ 93.718097][ T5326] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[ 93.801677][ T5326] FAULT_INJECTION: forcing a failure.
[ 93.801677][ T5326] name failslab, interval 1, probability 0, space 0, times 1
[ 93.801705][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 93.801720][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 93.801727][ T5326] Call Trace:
[ 93.801745][ T5326]
[ 93.801751][ T5326] dump_stack_lvl+0xe8/0x150
[ 93.801914][ T5326] should_fail_ex+0x410/0x560
[ 93.801993][ T5326] should_failslab+0xa8/0x100
[ 93.802028][ T5326] ? acpi_ut_create_update_state+0x76/0x110
[ 93.802061][ T5326] kmem_cache_alloc_noprof+0xa1/0x600
[ 93.802094][ T5326] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[ 93.802110][ T5326] ? acpi_ut_create_update_state+0x76/0x110
[ 93.802128][ T5326] acpi_ut_create_update_state+0x76/0x110
[ 93.802143][ T5326] acpi_ut_create_update_state_and_push+0x2a/0x70
[ 93.802158][ T5326] acpi_ut_update_object_reference+0x2c0/0x870
[ 93.802175][ T5326] ? __pfx_acpi_ut_update_object_reference+0x10/0x10
[ 93.802189][ T5326] ? acpi_ut_status_exit+0x120/0x1f0
[ 93.802203][ T5326] ? acpi_ut_valid_internal_object+0x53/0x280
[ 93.802218][ T5326] acpi_ex_resolve_node_to_value+0x93a/0xa80
[ 93.802237][ T5326] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10
[ 93.802252][ T5326] ? acpi_ut_status_exit+0x120/0x1f0
[ 93.802267][ T5326] ? acpi_ds_create_operand+0x980/0xbe0
[ 93.802283][ T5326] acpi_ex_resolve_to_value+0x23b/0xd50
[ 93.802299][ T5326] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10
[ 93.802315][ T5326] ? __pfx_acpi_ns_lookup+0x10/0x10
[ 93.802327][ T5326] ? acpi_ut_track_stack_ptr+0x13b/0x1f0
[ 93.802340][ T5326] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[ 93.802355][ T5326] acpi_ds_evaluate_name_path+0x253/0x460
[ 93.802371][ T5326] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10
[ 93.802384][ T5326] ? acpi_ps_get_next_namepath+0x4d3/0x9c0
[ 93.802401][ T5326] acpi_ds_exec_end_op+0x28b/0x1b00
[ 93.802419][ T5326] ? __pfx_acpi_ds_exec_end_op+0x10/0x10
[ 93.802432][ T5326] acpi_ps_parse_loop+0xfa3/0x23f0
[ 93.802459][ T5326] ? __pfx_acpi_ps_parse_loop+0x10/0x10
[ 93.802470][ T5326] ? acpi_ut_create_thread_state+0x73/0x140
[ 93.802489][ T5326] ? acpi_ut_exit+0xf3/0x1c0
[ 93.802504][ T5326] acpi_ps_parse_aml+0x388/0x1020
[ 93.802537][ T5326] acpi_ps_execute_method+0x89d/0xa70
[ 93.802560][ T5326] acpi_ns_evaluate+0xd05/0x1320
[ 93.802583][ T5326] acpi_ut_evaluate_object+0xe1/0x560
[ 93.802598][ T5326] ? acpi_ut_track_stack_ptr+0x13b/0x1f0
[ 93.802611][ T5326] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[ 93.802628][ T5326] acpi_rs_get_prt_method_data+0xb2/0x150
[ 93.802644][ T5326] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10
[ 93.802659][ T5326] ? acpi_ut_status_exit+0x120/0x1f0
[ 93.802676][ T5326] ? acpi_rs_validate_parameters+0x16e/0x1a0
[ 93.802694][ T5326] acpi_get_irq_routing_table+0x98/0xe0
[ 93.802711][ T5326] acpi_pci_irq_find_prt_entry+0x163/0x1040
[ 93.802737][ T5326] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10
[ 93.802753][ T5326] ? do_raw_spin_lock+0x12b/0x2f0
[ 93.802800][ T5326] acpi_pci_irq_lookup+0x45/0x690
[ 93.802821][ T5326] acpi_pci_irq_disable+0x151/0x340
[ 93.802836][ T5326] ? pcibios_disable_device+0x8d/0xc0
[ 93.802920][ T5326] pci_disable_device+0x1d6/0x320
[ 93.802937][ T5326] ? msi_domain_free_irqs_all_locked+0xaa/0xf0
[ 93.802963][ T5326] ? __pfx_pci_disable_device+0x10/0x10
[ 93.802977][ T5326] ? pci_free_msi_irqs+0x74/0x90
[ 93.802996][ T5326] pci_device_remove+0x99/0x1c0
[ 93.803013][ T5326] ? __pfx_pci_device_remove+0x10/0x10
[ 93.803028][ T5326] device_release_driver_internal+0x48b/0x880
[ 93.803066][ T5326] pci_stop_bus_device+0xf6/0x120
[ 93.803080][ T5326] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 93.803094][ T5326] remove_store+0xe5/0x150
[ 93.803111][ T5326] ? __pfx_remove_store+0x10/0x10
[ 93.803124][ T5326] ? sysfs_file_kobj+0x1e4/0x230
[ 93.803165][ T5326] ? sysfs_kf_write+0x166/0x260
[ 93.803184][ T5326] ? __pfx_sysfs_kf_write+0x10/0x10
[ 93.803201][ T5326] kernfs_fop_write_iter+0x3a4/0x540
[ 93.803220][ T5326] vfs_write+0x612/0xba0
[ 93.803251][ T5326] ? __pfx_vfs_write+0x10/0x10
[ 93.803274][ T5326] ? __fget_files+0x2a/0x420
[ 93.803296][ T5326] ksys_write+0x150/0x270
[ 93.803314][ T5326] ? __pfx_ksys_write+0x10/0x10
[ 93.803338][ T5326] do_syscall_64+0x166/0x520
[ 93.803369][ T5326] ? trace_irq_disable+0x3b/0x140
[ 93.803406][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.803418][ T5326] ? clear_bhb_loop+0x70/0xc0
[ 93.803433][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.803445][ T5326] RIP: 0033:0x7f32c179e559
[ 93.803458][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 93.803468][ T5326] RSP: 002b:00007f32c2588fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 93.803483][ T5326] RAX: ffffffffffffffda RBX: 00007f32c1a25fa0 RCX: 00007f32c179e559
[ 93.803492][ T5326] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000009
[ 93.803499][ T5326] RBP: 00007f32c18358b0 R08: 0000000000000000 R09: 0000000000000000
[ 93.803507][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 93.803514][ T5326] R13: 00007f32c1a26038 R14: 00007f32c1a25fa0 R15: 00007fff5dc47ed8
[ 93.803534][ T5326]
[ 93.804573][ T5326] ACPI Error: AE_NO_MEMORY, Could not update object reference count (20260408/utdelete-651)
[ 93.805003][ T5326] FAULT_INJECTION: forcing a failure.
[ 93.805003][ T5326] name failslab, interval 1, probability 0, space 0, times 0
[ 93.805019][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 93.805032][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 93.805040][ T5326] Call Trace:
[ 93.805044][ T5326]
[ 93.805058][ T5326] dump_stack_lvl+0xe8/0x150
[ 93.805079][ T5326] should_fail_ex+0x410/0x560
[ 93.805121][ T5326] should_failslab+0xa8/0x100
[ 93.805137][ T5326] ? acpi_ut_create_update_state+0x76/0x110
[ 93.805152][ T5326] kmem_cache_alloc_noprof+0xa1/0x600
[ 93.805170][ T5326] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[ 93.805184][ T5326] ? acpi_ut_create_update_state+0x76/0x110
[ 93.805201][ T5326] acpi_ut_create_update_state+0x76/0x110
[ 93.805215][ T5326] acpi_ut_create_update_state_and_push+0x2a/0x70
[ 93.805233][ T5326] acpi_ut_update_object_reference+0x2c0/0x870
[ 93.805248][ T5326] ? trace_kmem_cache_alloc+0x29/0xe0
[ 93.805268][ T5326] ? __pfx_acpi_ut_update_object_reference+0x10/0x10
[ 93.805282][ T5326] ? acpi_ut_trace_ptr+0x1a2/0x310
[ 93.805298][ T5326] ? acpi_ut_valid_internal_object+0x53/0x280
[ 93.805308][ T5326] ? acpi_ut_valid_internal_object+0x53/0x280
[ 93.805322][ T5326] acpi_ds_do_implicit_return+0x2ba/0x3c0
[ 93.805338][ T5326] acpi_ds_is_result_used+0x7a/0x8c0
[ 93.805352][ T5326] acpi_ds_delete_result_if_not_used+0xb1/0x190
[ 93.805365][ T5326] ? __pfx_acpi_ds_delete_result_if_not_used+0x10/0x10
[ 93.805379][ T5326] ? acpi_ps_get_next_namepath+0x4d3/0x9c0
[ 93.805397][ T5326] acpi_ds_exec_end_op+0x1015/0x1b00
[ 93.805415][ T5326] ? __pfx_acpi_ds_exec_end_op+0x10/0x10
[ 93.805427][ T5326] acpi_ps_parse_loop+0xfa3/0x23f0
[ 93.805455][ T5326] ? __pfx_acpi_ps_parse_loop+0x10/0x10
[ 93.805467][ T5326] ? acpi_ut_create_thread_state+0x73/0x140
[ 93.805485][ T5326] ? acpi_ut_exit+0xf3/0x1c0
[ 93.805500][ T5326] acpi_ps_parse_aml+0x388/0x1020
[ 93.805519][ T5326] acpi_ps_execute_method+0x89d/0xa70
[ 93.805539][ T5326] acpi_ns_evaluate+0xd05/0x1320
[ 93.805562][ T5326] acpi_ut_evaluate_object+0xe1/0x560
[ 93.805576][ T5326] ? acpi_ut_track_stack_ptr+0x13b/0x1f0
[ 93.805589][ T5326] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[ 93.805606][ T5326] acpi_rs_get_prt_method_data+0xb2/0x150
[ 93.805622][ T5326] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10
[ 93.805637][ T5326] ? acpi_ut_status_exit+0x120/0x1f0
[ 93.805652][ T5326] ? acpi_rs_validate_parameters+0x16e/0x1a0
[ 93.805669][ T5326] acpi_get_irq_routing_table+0x98/0xe0
[ 93.805686][ T5326] acpi_pci_irq_find_prt_entry+0x163/0x1040
[ 93.805712][ T5326] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10
[ 93.805728][ T5326] ? do_raw_spin_lock+0x12b/0x2f0
[ 93.805753][ T5326] acpi_pci_irq_lookup+0x45/0x690
[ 93.805773][ T5326] acpi_pci_irq_disable+0x151/0x340
[ 93.805788][ T5326] ? pcibios_disable_device+0x8d/0xc0
[ 93.805808][ T5326] pci_disable_device+0x1d6/0x320
[ 93.805825][ T5326] ? msi_domain_free_irqs_all_locked+0xaa/0xf0
[ 93.805838][ T5326] ? __pfx_pci_disable_device+0x10/0x10
[ 93.805853][ T5326] ? pci_free_msi_irqs+0x74/0x90
[ 93.805871][ T5326] pci_device_remove+0x99/0x1c0
[ 93.805888][ T5326] ? __pfx_pci_device_remove+0x10/0x10
[ 93.805904][ T5326] device_release_driver_internal+0x48b/0x880
[ 93.805924][ T5326] pci_stop_bus_device+0xf6/0x120
[ 93.805937][ T5326] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 93.805950][ T5326] remove_store+0xe5/0x150
[ 93.805965][ T5326] ? __pfx_remove_store+0x10/0x10
[ 93.805978][ T5326] ? sysfs_file_kobj+0x1e4/0x230
[ 93.805995][ T5326] ? sysfs_kf_write+0x166/0x260
[ 93.806015][ T5326] ? __pfx_sysfs_kf_write+0x10/0x10
[ 93.806030][ T5326] kernfs_fop_write_iter+0x3a4/0x540
[ 93.806055][ T5326] vfs_write+0x612/0xba0
[ 93.806078][ T5326] ? __pfx_vfs_write+0x10/0x10
[ 93.806103][ T5326] ? __fget_files+0x2a/0x420
[ 93.806124][ T5326] ksys_write+0x150/0x270
[ 93.806142][ T5326] ? __pfx_ksys_write+0x10/0x10
[ 93.806165][ T5326] do_syscall_64+0x166/0x520
[ 93.806178][ T5326] ? trace_irq_disable+0x3b/0x140
[ 93.806192][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.806204][ T5326] ? clear_bhb_loop+0x70/0xc0
[ 93.806219][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 93.806232][ T5326] RIP: 0033:0x7f32c179e559
[ 93.806243][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 93.806252][ T5326] RSP: 002b:00007f32c2588fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 93.806264][ T5326] RAX: ffffffffffffffda RBX: 00007f32c1a25fa0 RCX: 00007f32c179e559
[ 93.806272][ T5326] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000009
[ 93.806279][ T5326] RBP: 00007f32c18358b0 R08: 0000000000000000 R09: 0000000000000000
[ 93.806286][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 93.806293][ T5326] R13: 00007f32c1a26038 R14: 00007f32c1a25fa0 R15: 00007fff5dc47ed8
[ 93.806315][ T5326]
[ 93.806411][ T5326] ACPI Error: AE_NO_MEMORY, Could not update object reference count (20260408/utdelete-651)
[ 94.381696][ T5326] ==================================================================
[ 94.381726][ T5326] BUG: KASAN: slab-use-after-free in acpi_ns_check_package+0x163c/0x1950
[ 94.381865][ T5326] Read of size 1 at addr ffff888000d624e9 by task syz.0.0/5326
[ 94.381876][ T5326]
[ 94.381884][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.381897][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.381904][ T5326] Call Trace:
[ 94.381928][ T5326]
[ 94.381933][ T5326] dump_stack_lvl+0xe8/0x150
[ 94.381985][ T5326] print_address_description+0x55/0x1e0
[ 94.382002][ T5326] ? acpi_ns_check_package+0x163c/0x1950
[ 94.382017][ T5326] print_report+0x58/0x70
[ 94.382033][ T5326] kasan_report+0x117/0x150
[ 94.382072][ T5326] ? acpi_ns_check_package+0x163c/0x1950
[ 94.382090][ T5326] acpi_ns_check_package+0x163c/0x1950
[ 94.382109][ T5326] acpi_ns_check_return_value+0x22f/0x3a0
[ 94.382127][ T5326] acpi_ns_evaluate+0xd5f/0x1320
[ 94.382145][ T5326] acpi_ut_evaluate_object+0xe1/0x560
[ 94.382160][ T5326] ? acpi_ut_track_stack_ptr+0x13b/0x1f0
[ 94.382172][ T5326] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[ 94.382186][ T5326] acpi_rs_get_prt_method_data+0xb2/0x150
[ 94.382200][ T5326] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10
[ 94.382214][ T5326] ? acpi_ut_status_exit+0x120/0x1f0
[ 94.382227][ T5326] ? acpi_rs_validate_parameters+0x16e/0x1a0
[ 94.382243][ T5326] acpi_get_irq_routing_table+0x98/0xe0
[ 94.382258][ T5326] acpi_pci_irq_find_prt_entry+0x163/0x1040
[ 94.382277][ T5326] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10
[ 94.382292][ T5326] ? do_raw_spin_lock+0x12b/0x2f0
[ 94.382334][ T5326] acpi_pci_irq_lookup+0x45/0x690
[ 94.382350][ T5326] acpi_pci_irq_disable+0x151/0x340
[ 94.382367][ T5326] ? pcibios_disable_device+0x8d/0xc0
[ 94.382419][ T5326] pci_disable_device+0x1d6/0x320
[ 94.382434][ T5326] ? msi_domain_free_irqs_all_locked+0xaa/0xf0
[ 94.382463][ T5326] ? __pfx_pci_disable_device+0x10/0x10
[ 94.382475][ T5326] ? pci_free_msi_irqs+0x74/0x90
[ 94.382488][ T5326] pci_device_remove+0x99/0x1c0
[ 94.382520][ T5326] ? __pfx_pci_device_remove+0x10/0x10
[ 94.382535][ T5326] device_release_driver_internal+0x48b/0x880
[ 94.382561][ T5326] pci_stop_bus_device+0xf6/0x120
[ 94.382574][ T5326] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 94.382587][ T5326] remove_store+0xe5/0x150
[ 94.382600][ T5326] ? __pfx_remove_store+0x10/0x10
[ 94.382613][ T5326] ? sysfs_file_kobj+0x1e4/0x230
[ 94.382661][ T5326] ? sysfs_kf_write+0x166/0x260
[ 94.382677][ T5326] ? __pfx_sysfs_kf_write+0x10/0x10
[ 94.382692][ T5326] kernfs_fop_write_iter+0x3a4/0x540
[ 94.382708][ T5326] vfs_write+0x612/0xba0
[ 94.382740][ T5326] ? __pfx_vfs_write+0x10/0x10
[ 94.382757][ T5326] ? __fget_files+0x2a/0x420
[ 94.382773][ T5326] ksys_write+0x150/0x270
[ 94.382788][ T5326] ? __pfx_ksys_write+0x10/0x10
[ 94.382806][ T5326] do_syscall_64+0x166/0x520
[ 94.382826][ T5326] ? trace_irq_disable+0x3b/0x140
[ 94.382857][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.382869][ T5326] ? clear_bhb_loop+0x70/0xc0
[ 94.382882][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.382894][ T5326] RIP: 0033:0x7f32c179e559
[ 94.382906][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.382927][ T5326] RSP: 002b:00007f32c2588fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.382940][ T5326] RAX: ffffffffffffffda RBX: 00007f32c1a25fa0 RCX: 00007f32c179e559
[ 94.382949][ T5326] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000009
[ 94.382956][ T5326] RBP: 00007f32c18358b0 R08: 0000000000000000 R09: 0000000000000000
[ 94.382963][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.382971][ T5326] R13: 00007f32c1a26038 R14: 00007f32c1a25fa0 R15: 00007fff5dc47ed8
[ 94.382985][ T5326]
[ 94.382989][ T5326]
[ 94.382993][ T5326] Allocated by task 1:
[ 94.382999][ T5326] kasan_save_track+0x3e/0x80
[ 94.383009][ T5326] __kasan_slab_alloc+0x6c/0x80
[ 94.383020][ T5326] kmem_cache_alloc_noprof+0x2b9/0x600
[ 94.383037][ T5326] acpi_ut_allocate_object_desc_dbg+0x8c/0x230
[ 94.383047][ T5326] acpi_ut_create_internal_object_dbg+0x4d/0x310
[ 94.383057][ T5326] acpi_ds_build_internal_package_obj+0x126/0xbe0
[ 94.383067][ T5326] acpi_ds_eval_data_object_operands+0x337/0x5c0
[ 94.383077][ T5326] acpi_ds_exec_end_op+0x1307/0x1b00
[ 94.383086][ T5326] acpi_ps_parse_loop+0xfa3/0x23f0
[ 94.383096][ T5326] acpi_ps_parse_aml+0x388/0x1020
[ 94.383107][ T5326] acpi_ps_execute_table+0x352/0x440
[ 94.383118][ T5326] acpi_ns_execute_table+0x5d0/0x890
[ 94.383132][ T5326] acpi_ns_parse_table+0xef/0x170
[ 94.383146][ T5326] acpi_ns_load_table+0x131/0x430
[ 94.383157][ T5326] acpi_tb_load_namespace+0x2ca/0x880
[ 94.383167][ T5326] acpi_load_tables+0x53/0xf0
[ 94.383276][ T5326] acpi_bus_init+0x82/0x360
[ 94.383290][ T5326] acpi_init+0xa1/0x1f0
[ 94.383302][ T5326] do_one_initcall+0x250/0x870
[ 94.383317][ T5326] do_initcall_level+0x10a/0x1a0
[ 94.383327][ T5326] do_initcalls+0x59/0xa0
[ 94.383334][ T5326] kernel_init_freeable+0x29d/0x3e0
[ 94.383343][ T5326] kernel_init+0x22/0x1d0
[ 94.383357][ T5326] ret_from_fork+0x514/0xb70
[ 94.383383][ T5326] ret_from_fork_asm+0x1a/0x30
[ 94.383393][ T5326]
[ 94.383396][ T5326] Freed by task 5326:
[ 94.383402][ T5326] kasan_save_track+0x3e/0x80
[ 94.383412][ T5326] kasan_save_free_info+0x40/0x50
[ 94.383435][ T5326] __kasan_slab_free+0x5c/0x80
[ 94.383444][ T5326] kmem_cache_free+0x182/0x650
[ 94.383454][ T5326] acpi_os_release_object+0x1d/0x30
[ 94.383469][ T5326] acpi_ut_delete_object_desc+0x9b/0x110
[ 94.383480][ T5326] acpi_ut_update_ref_count+0x174c/0x1d10
[ 94.383493][ T5326] acpi_ut_update_object_reference+0x4a8/0x870
[ 94.383530][ T5326] acpi_ds_clear_implicit_return+0x156/0x1f0
[ 94.383568][ T5326] acpi_ds_exec_end_control_op+0x533/0xe00
[ 94.383585][ T5326] acpi_ds_exec_end_op+0x799/0x1b00
[ 94.383596][ T5326] acpi_ps_parse_loop+0xfa3/0x23f0
[ 94.383607][ T5326] acpi_ps_parse_aml+0x388/0x1020
[ 94.383620][ T5326] acpi_ps_execute_method+0x89d/0xa70
[ 94.383633][ T5326] acpi_ns_evaluate+0xd05/0x1320
[ 94.383645][ T5326] acpi_ut_evaluate_object+0xe1/0x560
[ 94.383657][ T5326] acpi_rs_get_prt_method_data+0xb2/0x150
[ 94.383670][ T5326] acpi_get_irq_routing_table+0x98/0xe0
[ 94.383683][ T5326] acpi_pci_irq_find_prt_entry+0x163/0x1040
[ 94.383697][ T5326] acpi_pci_irq_lookup+0x45/0x690
[ 94.383710][ T5326] acpi_pci_irq_disable+0x151/0x340
[ 94.383723][ T5326] pci_disable_device+0x1d6/0x320
[ 94.383735][ T5326] pci_device_remove+0x99/0x1c0
[ 94.383746][ T5326] device_release_driver_internal+0x48b/0x880
[ 94.383759][ T5326] pci_stop_bus_device+0xf6/0x120
[ 94.383768][ T5326] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 94.383777][ T5326] remove_store+0xe5/0x150
[ 94.383788][ T5326] kernfs_fop_write_iter+0x3a4/0x540
[ 94.383802][ T5326] vfs_write+0x612/0xba0
[ 94.383816][ T5326] ksys_write+0x150/0x270
[ 94.383832][ T5326] do_syscall_64+0x166/0x520
[ 94.383842][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.383853][ T5326]
[ 94.383856][ T5326] The buggy address belongs to the object at ffff888000d624e0
[ 94.383856][ T5326] which belongs to the cache Acpi-Operand of size 72
[ 94.383877][ T5326] The buggy address is located 9 bytes inside of
[ 94.383877][ T5326] freed 72-byte region [ffff888000d624e0, ffff888000d62528)
[ 94.383889][ T5326]
[ 94.383892][ T5326] The buggy address belongs to the physical page:
[ 94.383899][ T5326] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xd62
[ 94.383910][ T5326] flags: 0x7ff00000000000(node=0|zone=0|lastcpupid=0x7ff)
[ 94.383919][ T5326] page_type: f5(slab)
[ 94.383930][ T5326] raw: 007ff00000000000 ffff88801c0a0dc0 dead000000000100 dead000000000122
[ 94.383941][ T5326] raw: 0000000000000000 0000000200270027 00000000f5000000 0000000000000000
[ 94.383947][ T5326] page dumped because: kasan: bad access detected
[ 94.383995][ T5326] page_owner tracks the page as allocated
[ 94.384001][ T5326] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3956366881
[ 94.384019][ T5326] post_alloc_hook+0x1f9/0x250
[ 94.384051][ T5326] get_page_from_freelist+0x2209/0x2280
[ 94.384063][ T5326] __alloc_frozen_pages_noprof+0x217/0x5a0
[ 94.384073][ T5326] allocate_slab+0x7d/0x620
[ 94.384085][ T5326] refill_objects+0x2d5/0x350
[ 94.384096][ T5326] __pcs_replace_empty_main+0x2c8/0x6c0
[ 94.384108][ T5326] kmem_cache_alloc_noprof+0x399/0x600
[ 94.384122][ T5326] acpi_ut_allocate_object_desc_dbg+0x8c/0x230
[ 94.384132][ T5326] acpi_ut_create_internal_object_dbg+0x4d/0x310
[ 94.384141][ T5326] acpi_ds_build_internal_object+0x294/0x690
[ 94.384150][ T5326] acpi_ds_build_internal_package_obj+0x599/0xbe0
[ 94.384160][ T5326] acpi_ds_eval_data_object_operands+0x337/0x5c0
[ 94.384171][ T5326] acpi_ds_exec_end_op+0x1307/0x1b00
[ 94.384181][ T5326] acpi_ps_parse_loop+0xfa3/0x23f0
[ 94.384190][ T5326] acpi_ps_parse_aml+0x388/0x1020
[ 94.384201][ T5326] acpi_ps_execute_table+0x352/0x440
[ 94.384213][ T5326] page_owner free stack trace missing
[ 94.384216][ T5326]
[ 94.384219][ T5326] Memory state around the buggy address:
[ 94.384225][ T5326] ffff888000d62380: fb fc fc fc fc fa fb fb fb fb fb fb fb fb fc fc
[ 94.384232][ T5326] ffff888000d62400: fc fc 00 00 00 00 00 00 00 00 00 fc fc fc fc 00
[ 94.384239][ T5326] >ffff888000d62480: 00 00 00 00 00 00 00 00 fc fc fc fc fa fb fb fb
[ 94.384244][ T5326] ^
[ 94.384249][ T5326] ffff888000d62500: fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb
[ 94.384255][ T5326] ffff888000d62580: fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb fc
[ 94.384260][ T5326] ==================================================================
[ 94.384376][ T5326] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 94.795866][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.799528][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.803742][ T5326] Call Trace:
[ 94.805331][ T5326]
[ 94.806751][ T5326] vpanic+0x56d/0xa60
[ 94.808666][ T5326] ? __pfx_vpanic+0x10/0x10
[ 94.810620][ T5326] panic+0xc5/0xd0
[ 94.812161][ T5326] ? __pfx_panic+0x10/0x10
[ 94.814008][ T5326] ? preempt_schedule_thunk+0x16/0x40
[ 94.816382][ T5326] ? preempt_schedule_thunk+0x16/0x40
[ 94.819052][ T5326] ? acpi_ns_check_package+0x163c/0x1950
[ 94.821702][ T5326] check_panic_on_warn+0x89/0xb0
[ 94.823843][ T5326] ? acpi_ns_check_package+0x163c/0x1950
[ 94.826229][ T5326] end_report+0x73/0x170
[ 94.828123][ T5326] ? acpi_ns_check_package+0x163c/0x1950
[ 94.830464][ T5326] kasan_report+0x128/0x150
[ 94.832463][ T5326] ? acpi_ns_check_package+0x163c/0x1950
[ 94.834846][ T5326] acpi_ns_check_package+0x163c/0x1950
[ 94.837211][ T5326] acpi_ns_check_return_value+0x22f/0x3a0
[ 94.839611][ T5326] acpi_ns_evaluate+0xd5f/0x1320
[ 94.842038][ T5326] acpi_ut_evaluate_object+0xe1/0x560
[ 94.844682][ T5326] ? acpi_ut_track_stack_ptr+0x13b/0x1f0
[ 94.847094][ T5326] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[ 94.849712][ T5326] acpi_rs_get_prt_method_data+0xb2/0x150
[ 94.852158][ T5326] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10
[ 94.854823][ T5326] ? acpi_ut_status_exit+0x120/0x1f0
[ 94.857055][ T5326] ? acpi_rs_validate_parameters+0x16e/0x1a0
[ 94.859596][ T5326] acpi_get_irq_routing_table+0x98/0xe0
[ 94.861935][ T5326] acpi_pci_irq_find_prt_entry+0x163/0x1040
[ 94.864439][ T5326] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10
[ 94.867049][ T5326] ? do_raw_spin_lock+0x12b/0x2f0
[ 94.869178][ T5326] acpi_pci_irq_lookup+0x45/0x690
[ 94.871311][ T5326] acpi_pci_irq_disable+0x151/0x340
[ 94.873665][ T5326] ? pcibios_disable_device+0x8d/0xc0
[ 94.876130][ T5326] pci_disable_device+0x1d6/0x320
[ 94.878351][ T5326] ? msi_domain_free_irqs_all_locked+0xaa/0xf0
[ 94.881072][ T5326] ? __pfx_pci_disable_device+0x10/0x10
[ 94.883485][ T5326] ? pci_free_msi_irqs+0x74/0x90
[ 94.885712][ T5326] pci_device_remove+0x99/0x1c0
[ 94.887880][ T5326] ? __pfx_pci_device_remove+0x10/0x10
[ 94.890200][ T5326] device_release_driver_internal+0x48b/0x880
[ 94.892923][ T5326] pci_stop_bus_device+0xf6/0x120
[ 94.894820][ T5326] pci_stop_and_remove_bus_device_locked+0x77/0xb0
[ 94.897393][ T5326] remove_store+0xe5/0x150
[ 94.899218][ T5326] ? __pfx_remove_store+0x10/0x10
[ 94.901222][ T5326] ? sysfs_file_kobj+0x1e4/0x230
[ 94.903296][ T5326] ? sysfs_kf_write+0x166/0x260
[ 94.905375][ T5326] ? __pfx_sysfs_kf_write+0x10/0x10
[ 94.907596][ T5326] kernfs_fop_write_iter+0x3a4/0x540
[ 94.909778][ T5326] vfs_write+0x612/0xba0
[ 94.911743][ T5326] ? __pfx_vfs_write+0x10/0x10
[ 94.913795][ T5326] ? __fget_files+0x2a/0x420
[ 94.915719][ T5326] ksys_write+0x150/0x270
[ 94.917596][ T5326] ? __pfx_ksys_write+0x10/0x10
[ 94.919674][ T5326] do_syscall_64+0x166/0x520
[ 94.921739][ T5326] ? trace_irq_disable+0x3b/0x140
[ 94.923903][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.926512][ T5326] ? clear_bhb_loop+0x70/0xc0
[ 94.928463][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.930910][ T5326] RIP: 0033:0x7f32c179e559
[ 94.932927][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.940474][ T5326] RSP: 002b:00007f32c2588fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 94.943939][ T5326] RAX: ffffffffffffffda RBX: 00007f32c1a25fa0 RCX: 00007f32c179e559
[ 94.947264][ T5326] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000009
[ 94.950401][ T5326] RBP: 00007f32c18358b0 R08: 0000000000000000 R09: 0000000000000000
[ 94.953619][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 94.956872][ T5326] R13: 00007f32c1a26038 R14: 00007f32c1a25fa0 R15: 00007fff5dc47ed8
[ 94.960914][ T5326]
[ 94.963179][ T5326] Kernel Offset: disabled
[ 94.965586][ T5326] Rebooting in 86400 seconds..