program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)='0000:00:03.0\n\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='snd_hda_intel\n\x00', 0xe)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/snd_hda_intel/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000180)='0000:00:03.0\n\x00', 0xd)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/hdaudio/devices/hdaudioC0D0/hints\x00', 0x2, 0x0)
write(r3, &(0x7f0000000240)='mykey=myval\n\x00', 0xc)

[  107.928105][ T5320] BUG: unable to handle page fault for address: 000000000001c0a0
[  107.931081][ T5320] #PF: supervisor read access in kernel mode
[  107.933598][ T5320] #PF: error_code(0x0000) - not-present page
[  107.936074][ T5320] PGD 0 P4D 0 
[  107.937246][ T5320] Oops: Oops: 0000 [#1] SMP KASAN NOPTI
[  107.939162][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) 
[  107.942528][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  107.946100][ T5320] Workqueue: events azx_probe_work
[  107.947883][ T5320] RIP: 0010:azx_probe_work+0x969/0x2860
[  107.949753][ T5320] Code: 8b 7c 24 38 0f 85 01 1b 00 00 66 45 89 27 48 8b 7c 24 48 e8 e9 f8 84 fb 42 80 3c 2b 00 74 08 4c 89 f7 e8 ea 4b 9f f8 49 8b 06 <66> 8b 00 89 44 24 30 0f 1f 44 00 00 e8 36 19 30 f8 48 8b 9c 24 88
[  107.956163][ T5320] RSP: 0000:ffffc9000f74f940 EFLAGS: 00010246
[  107.958243][ T5320] RAX: 000000000001c0a0 RBX: 1ffff11007c1900b RCX: 0000000000000000
[  107.961133][ T5320] RDX: 0000000000000006 RSI: ffffffff8e231ffb RDI: 00000000ffffffff
[  107.964140][ T5320] RBP: ffffc9000f74faf0 R08: ffffffff9057c237 R09: 1ffffffff20af846
[  107.967081][ T5320] R10: dffffc0000000000 R11: fffffbfff20af847 R12: 000000000000002a
[  107.970052][ T5320] R13: dffffc0000000000 R14: ffff88803e0c8058 R15: ffff88803e0c8890
[  107.973182][ T5320] FS:  0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[  107.976525][ T5320] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  107.979044][ T5320] CR2: 000000000001c0a0 CR3: 00000000407b4000 CR4: 0000000000352ef0
[  107.981979][ T5320] Call Trace:
[  107.983192][ T5320]  <TASK>
[  107.984303][ T5320]  ? __pfx_azx_probe_work+0x10/0x10
[  107.986135][ T5320]  ? rcu_is_watching+0x15/0xb0
[  107.987802][ T5320]  ? process_scheduled_works+0xa20/0x14e0
[  107.989783][ T5320]  process_scheduled_works+0xa8e/0x14e0
[  107.991860][ T5320]  ? __pfx_process_scheduled_works+0x10/0x10
[  107.994081][ T5320]  ? assign_work+0x3cf/0x5d0
[  107.995695][ T5320]  worker_thread+0xa47/0xfb0
[  107.997436][ T5320]  ? __kthread_parkme+0x71/0x1f0
[  107.999275][ T5320]  kthread+0x388/0x470
[  108.000726][ T5320]  ? __pfx_worker_thread+0x10/0x10
[  108.002521][ T5320]  ? __pfx_kthread+0x10/0x10
[  108.004019][ T5320]  ret_from_fork+0x514/0xb70
[  108.005522][ T5320]  ? __pfx_ret_from_fork+0x10/0x10
[  108.007222][ T5320]  ? __switch_to+0xc89/0x1420
[  108.008767][ T5320]  ? __pfx_kthread+0x10/0x10
[  108.010278][ T5320]  ret_from_fork_asm+0x1a/0x30
[  108.011821][ T5320]  </TASK>
[  108.012839][ T5320] Modules linked in:
[  108.014114][ T5320] CR2: 000000000001c0a0
[  108.015440][ T5320] ---[ end trace 0000000000000000 ]---
[  108.017185][ T5320] RIP: 0010:azx_probe_work+0x969/0x2860
[  108.019121][ T5320] Code: 8b 7c 24 38 0f 85 01 1b 00 00 66 45 89 27 48 8b 7c 24 48 e8 e9 f8 84 fb 42 80 3c 2b 00 74 08 4c 89 f7 e8 ea 4b 9f f8 49 8b 06 <66> 8b 00 89 44 24 30 0f 1f 44 00 00 e8 36 19 30 f8 48 8b 9c 24 88
[  108.026032][ T5320] RSP: 0000:ffffc9000f74f940 EFLAGS: 00010246
[  108.028613][ T5320] RAX: 000000000001c0a0 RBX: 1ffff11007c1900b RCX: 0000000000000000
[  108.031911][ T5320] RDX: 0000000000000006 RSI: ffffffff8e231ffb RDI: 00000000ffffffff
[  108.035498][ T5320] RBP: ffffc9000f74faf0 R08: ffffffff9057c237 R09: 1ffffffff20af846
[  108.038930][ T5320] R10: dffffc0000000000 R11: fffffbfff20af847 R12: 000000000000002a
[  108.042322][ T5320] R13: dffffc0000000000 R14: ffff88803e0c8058 R15: ffff88803e0c8890
[  108.045604][ T5320] FS:  0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[  108.049335][ T5320] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  108.052192][ T5320] CR2: 000000000001c0a0 CR3: 00000000407b4000 CR4: 0000000000352ef0
[  108.055615][ T5320] Kernel panic - not syncing: Fatal exception
[  108.058559][ T5320] Kernel Offset: disabled
[  108.060275][ T5320] Rebooting in 86400 seconds..