program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/resource1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/resource2\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='0000:00:02.0\x00', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000500)='0000:00:03.0\x00', 0xc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x2, 0x0) write(r7, &(0x7f0000000600)='dwc3-pci\x00', 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/pci/drivers/dwc3-pci/bind\x00', 0x1, 0x0) write(r8, &(0x7f0000000400)='0000:00:02.0\x00', 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x2, 0x0) write(r9, &(0x7f0000000600)='dwc3-pci\x00', 0x8) write(r8, &(0x7f0000000500)='0000:00:03.0\x00', 0xc) [ 84.879055][ T5282] Bluetooth: hci0: command tx timeout [ 85.110537][ T5321] e1000e 0000:00:02.0 eth1: removed PHC [ 85.449835][ T5321] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 85.747984][ T5331] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI [ 85.752972][ T5331] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 85.756449][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.760169][ T5331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.764346][ T5331] RIP: 0010:software_node_register+0x30/0x1f0 [ 85.767027][ T5331] Code: 57 41 56 41 55 41 54 53 50 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 bf e2 9b fb 4c 8d 63 08 4c 89 e0 48 c1 e8 03 48 89 04 24 <42> 80 3c 30 00 74 08 4c 89 e7 e8 41 15 0b fc 49 8b 2c 24 48 85 ed [ 85.775255][ T5331] RSP: 0018:ffffc9000d8977e0 EFLAGS: 00010202 [ 85.777975][ T5331] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000100000 [ 85.781225][ T5331] RDX: ffffc90020001000 RSI: 0000000000016370 RDI: 0000000000016371 [ 85.784501][ T5331] RBP: ffffc9000d8979b0 R08: ffff888000fda540 R09: 0000000000000003 [ 85.788351][ T5331] R10: 0000000000004b7e R11: 0000000000000002 R12: 0000000000000008 [ 85.791819][ T5331] R13: ffff888012cd9010 R14: dffffc0000000000 R15: 0000000000000000 [ 85.795123][ T5331] FS: 00007fb5687f56c0(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 85.798918][ T5331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.801673][ T5331] CR2: 00007f169f29e7d9 CR3: 0000000043a73000 CR4: 0000000000352ef0 [ 85.804835][ T5331] Call Trace: [ 85.806253][ T5331] [ 85.807517][ T5331] device_add_software_node+0x1a0/0x300 [ 85.809840][ T5331] dwc3_pci_probe+0x542/0xad0 [ 85.811867][ T5331] ? __pfx_dwc3_pci_probe+0x10/0x10 [ 85.814473][ T5331] ? do_raw_spin_lock+0x12b/0x2f0 [ 85.816862][ T5331] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 85.819322][ T5331] ? lockdep_hardirqs_on+0x7a/0x110 [ 85.821550][ T5331] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 85.824053][ T5331] pci_device_probe+0x431/0xc90 [ 85.826216][ T5331] ? up_write+0x19f/0x4a0 [ 85.828162][ T5331] ? __pfx_pci_device_probe+0x10/0x10 [ 85.830514][ T5331] ? kernfs_put+0x7b9/0x820 [ 85.832441][ T5331] ? kernfs_create_link+0x187/0x200 [ 85.834667][ T5331] ? sysfs_do_create_link_sd+0xe0/0x110 [ 85.837007][ T5331] ? driver_sysfs_add+0x1fe/0x210 [ 85.839185][ T5331] ? __pfx_pci_device_probe+0x10/0x10 [ 85.841559][ T5331] really_probe+0x254/0xae0 [ 85.843755][ T5331] __driver_probe_device+0x1e8/0x360 [ 85.846536][ T5331] device_driver_attach+0xe0/0x1d0 [ 85.848889][ T5331] bind_store+0x1d0/0x220 [ 85.850808][ T5331] ? __pfx_sysfs_kf_write+0x10/0x10 [ 85.853309][ T5331] kernfs_fop_write_iter+0x3a4/0x540 [ 85.855591][ T5331] vfs_write+0x612/0xba0 [ 85.857779][ T5331] ? __pfx_vfs_write+0x10/0x10 [ 85.860474][ T5331] ? __fget_files+0x2a/0x420 [ 85.862710][ T5331] ksys_write+0x150/0x270 [ 85.864718][ T5331] ? __pfx_ksys_write+0x10/0x10 [ 85.866895][ T5331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.869509][ T5331] do_syscall_64+0x174/0x580 [ 85.871520][ T5331] ? trace_irq_disable+0x3b/0x140 [ 85.873732][ T5331] ? clear_bhb_loop+0x40/0x90 [ 85.875727][ T5331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.878216][ T5331] RIP: 0033:0x7fb56c39e019 [ 85.880114][ T5331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.888466][ T5331] RSP: 002b:00007fb5687f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.892084][ T5331] RAX: ffffffffffffffda RBX: 00007fb56c626180 RCX: 00007fb56c39e019 [ 85.895643][ T5331] RDX: 000000000000000c RSI: 0000200000000400 RDI: 000000000000000b [ 85.899044][ T5331] RBP: 00007fb56c43500c R08: 0000000000000000 R09: 0000000000000000 [ 85.902407][ T5331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.905804][ T5331] R13: 00007fb56c626218 R14: 00007fb56c626180 R15: 00007ffd72cd7408 [ 85.909159][ T5331] [ 85.910494][ T5331] Modules linked in: [ 85.912741][ T5331] ---[ end trace 0000000000000000 ]--- [ 85.999255][ T5331] RIP: 0010:software_node_register+0x30/0x1f0 [ 86.001985][ T5331] Code: 57 41 56 41 55 41 54 53 50 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 bf e2 9b fb 4c 8d 63 08 4c 89 e0 48 c1 e8 03 48 89 04 24 <42> 80 3c 30 00 74 08 4c 89 e7 e8 41 15 0b fc 49 8b 2c 24 48 85 ed [ 86.024393][ T5331] RSP: 0018:ffffc9000d8977e0 EFLAGS: 00010202 [ 86.036025][ T5331] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000100000 [ 86.039515][ T5331] RDX: ffffc90020001000 RSI: 0000000000016370 RDI: 0000000000016371 [ 86.042910][ T5331] RBP: ffffc9000d8979b0 R08: ffff888000fda540 R09: 0000000000000003 [ 86.054034][ T5331] R10: 0000000000004b7e R11: 0000000000000002 R12: 0000000000000008 [ 86.066875][ T5331] R13: ffff888012cd9010 R14: dffffc0000000000 R15: 0000000000000000 [ 86.076026][ T5331] FS: 00007fb5687f56c0(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 86.084266][ T5331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.094432][ T5331] CR2: 00007ffefefbdf70 CR3: 0000000043a73000 CR4: 0000000000352ef0 [ 86.098066][ T5331] Kernel panic - not syncing: Fatal exception [ 86.100965][ T5331] Kernel Offset: disabled [ 86.102806][ T5331] Rebooting in 86400 seconds..