program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='snd_hda_intel\x00', 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/drivers/snd_hda_intel/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0000:00:03.0\x00', 0xd) [ 106.130127][ T5286] Bluetooth: hci0: command tx timeout [ 106.398546][ T10] BUG: unable to handle page fault for address: 000000000001c0a0 [ 106.401060][ T10] #PF: supervisor read access in kernel mode [ 106.402979][ T10] #PF: error_code(0x0000) - not-present page [ 106.404879][ T10] PGD 0 P4D 0 [ 106.406010][ T10] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 106.407780][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 106.410678][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.413909][ T10] Workqueue: events azx_probe_work [ 106.415634][ T10] RIP: 0010:azx_probe_work+0x969/0x2860 [ 106.417460][ T10] Code: 8b 7c 24 38 0f 85 01 1b 00 00 66 45 89 27 48 8b 7c 24 48 e8 e9 f8 84 fb 42 80 3c 2b 00 74 08 4c 89 f7 e8 ea 4b 9f f8 49 8b 06 <66> 8b 00 89 44 24 30 0f 1f 44 00 00 e8 36 19 30 f8 48 8b 9c 24 88 [ 106.423956][ T10] RSP: 0018:ffffc9000023f940 EFLAGS: 00010246 [ 106.426053][ T10] RAX: 000000000001c0a0 RBX: 1ffff1100849dc0b RCX: 0000000000000000 [ 106.428769][ T10] RDX: 0000000000000006 RSI: ffffffff8e231ffb RDI: 00000000ffffffff [ 106.431516][ T10] RBP: ffffc9000023faf0 R08: ffffffff9057c237 R09: 1ffffffff20af846 [ 106.434455][ T10] R10: dffffc0000000000 R11: fffffbfff20af847 R12: 000000000000002a [ 106.437326][ T10] R13: dffffc0000000000 R14: ffff8880424ee058 R15: ffff8880424ee890 [ 106.440037][ T10] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 106.443247][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.445794][ T10] CR2: 000000000001c0a0 CR3: 00000000511c8000 CR4: 0000000000352ef0 [ 106.448980][ T10] Call Trace: [ 106.450278][ T10] [ 106.451442][ T10] ? lapic_next_event+0x11/0x20 [ 106.453284][ T10] ? __pfx_azx_probe_work+0x10/0x10 [ 106.455195][ T10] ? rcu_is_watching+0x15/0xb0 [ 106.456914][ T10] ? process_scheduled_works+0xa20/0x14e0 [ 106.459044][ T10] process_scheduled_works+0xa8e/0x14e0 [ 106.461135][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 106.463423][ T10] ? assign_work+0x3cf/0x5d0 [ 106.465163][ T10] worker_thread+0xa47/0xfb0 [ 106.466950][ T10] kthread+0x388/0x470 [ 106.468479][ T10] ? __pfx_worker_thread+0x10/0x10 [ 106.470322][ T10] ? __pfx_kthread+0x10/0x10 [ 106.472020][ T10] ret_from_fork+0x514/0xb70 [ 106.473756][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 106.475726][ T10] ? __switch_to+0xc89/0x1420 [ 106.477457][ T10] ? __pfx_kthread+0x10/0x10 [ 106.479191][ T10] ret_from_fork_asm+0x1a/0x30 [ 106.480991][ T10] [ 106.482192][ T10] Modules linked in: [ 106.483700][ T10] CR2: 000000000001c0a0 [ 106.485256][ T10] ---[ end trace 0000000000000000 ]--- [ 106.487269][ T10] RIP: 0010:azx_probe_work+0x969/0x2860 [ 106.489314][ T10] Code: 8b 7c 24 38 0f 85 01 1b 00 00 66 45 89 27 48 8b 7c 24 48 e8 e9 f8 84 fb 42 80 3c 2b 00 74 08 4c 89 f7 e8 ea 4b 9f f8 49 8b 06 <66> 8b 00 89 44 24 30 0f 1f 44 00 00 e8 36 19 30 f8 48 8b 9c 24 88 [ 106.496433][ T10] RSP: 0018:ffffc9000023f940 EFLAGS: 00010246 [ 106.498658][ T10] RAX: 000000000001c0a0 RBX: 1ffff1100849dc0b RCX: 0000000000000000 [ 106.501690][ T10] RDX: 0000000000000006 RSI: ffffffff8e231ffb RDI: 00000000ffffffff [ 106.504653][ T10] RBP: ffffc9000023faf0 R08: ffffffff9057c237 R09: 1ffffffff20af846 [ 106.507571][ T10] R10: dffffc0000000000 R11: fffffbfff20af847 R12: 000000000000002a [ 106.510665][ T10] R13: dffffc0000000000 R14: ffff8880424ee058 R15: ffff8880424ee890 [ 106.513529][ T10] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 106.516794][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.519240][ T10] CR2: 000000000001c0a0 CR3: 00000000511c8000 CR4: 0000000000352ef0 [ 106.522186][ T10] Kernel panic - not syncing: Fatal exception [ 106.524830][ T10] Kernel Offset: disabled [ 106.526472][ T10] Rebooting in 86400 seconds..