program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000140)='\x00\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000180)="0100", 0x2, 0xe) pwrite64(r1, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4, 0x20) pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x5a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='snd_hda_intel\x00', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/drivers/snd_hda_intel/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='0000:00:03.0\x00', 0xd) nanosleep(&(0x7f0000000000)={0x1}, 0x0) [ 89.489285][ T1057] usb 5-1: USB disconnect, device number 2 [ 86.489892][ T10] cfg80211: failed to load regulatory.db [ 86.671048][ T5310] BUG: unable to handle page fault for address: 000000000001c0a0 [ 86.673653][ T5310] #PF: supervisor read access in kernel mode [ 86.675637][ T5310] #PF: error_code(0x0000) - not-present page [ 86.677662][ T5310] PGD 0 P4D 0 [ 86.678840][ T5310] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 86.680639][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 86.683698][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.687037][ T5310] Workqueue: events azx_probe_work [ 86.688804][ T5310] RIP: 0010:azx_probe_work+0x969/0x2860 [ 86.690659][ T5310] Code: 8b 7c 24 38 0f 85 01 1b 00 00 66 45 89 27 48 8b 7c 24 48 e8 e9 f8 84 fb 42 80 3c 2b 00 74 08 4c 89 f7 e8 ea 4b 9f f8 49 8b 06 <66> 8b 00 89 44 24 30 0f 1f 44 00 00 e8 36 19 30 f8 48 8b 9c 24 88 [ 86.697012][ T5310] RSP: 0000:ffffc9000e657940 EFLAGS: 00010246 [ 86.699048][ T5310] RAX: 000000000001c0a0 RBX: 1ffff11007231c0b RCX: 0000000000000000 [ 86.701679][ T5310] RDX: 0000000000000006 RSI: ffffffff8e231ffb RDI: 00000000ffffffff [ 86.704314][ T5310] RBP: ffffc9000e657af0 R08: ffffffff9057c237 R09: 1ffffffff20af846 [ 86.706903][ T5310] R10: dffffc0000000000 R11: fffffbfff20af847 R12: 000000000000002a [ 86.709525][ T5310] R13: dffffc0000000000 R14: ffff88803918e058 R15: ffff88803918e890 [ 86.712119][ T5310] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 86.715096][ T5310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.717323][ T5310] CR2: 000000000001c0a0 CR3: 0000000044b56000 CR4: 0000000000352ef0 [ 86.719952][ T5310] Call Trace: [ 86.721100][ T5310] [ 86.722118][ T5310] ? __pfx_azx_probe_work+0x10/0x10 [ 86.723876][ T5310] ? rcu_is_watching+0x15/0xb0 [ 86.725494][ T5310] ? process_scheduled_works+0xa20/0x14e0 [ 86.727565][ T5310] process_scheduled_works+0xa8e/0x14e0 [ 86.729465][ T5310] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.731563][ T5310] ? assign_work+0x3cf/0x5d0 [ 86.733220][ T5310] worker_thread+0xa47/0xfb0 [ 86.734862][ T5310] ? __kthread_parkme+0x71/0x1f0 [ 86.736599][ T5310] kthread+0x388/0x470 [ 86.737988][ T5310] ? __pfx_worker_thread+0x10/0x10 [ 86.739718][ T5310] ? __pfx_kthread+0x10/0x10 [ 86.741399][ T5310] ret_from_fork+0x514/0xb70 [ 86.743016][ T5310] ? __pfx_ret_from_fork+0x10/0x10 [ 86.744835][ T5310] ? __switch_to+0xc89/0x1420 [ 86.746463][ T5310] ? __pfx_kthread+0x10/0x10 [ 86.748032][ T5310] ret_from_fork_asm+0x1a/0x30 [ 86.749727][ T5310] [ 86.750865][ T5310] Modules linked in: [ 86.752226][ T5310] CR2: 000000000001c0a0 [ 86.753697][ T5310] ---[ end trace 0000000000000000 ]--- [ 86.755550][ T5310] RIP: 0010:azx_probe_work+0x969/0x2860 [ 86.757448][ T5310] Code: 8b 7c 24 38 0f 85 01 1b 00 00 66 45 89 27 48 8b 7c 24 48 e8 e9 f8 84 fb 42 80 3c 2b 00 74 08 4c 89 f7 e8 ea 4b 9f f8 49 8b 06 <66> 8b 00 89 44 24 30 0f 1f 44 00 00 e8 36 19 30 f8 48 8b 9c 24 88 [ 86.764114][ T5310] RSP: 0000:ffffc9000e657940 EFLAGS: 00010246 [ 86.766231][ T5310] RAX: 000000000001c0a0 RBX: 1ffff11007231c0b RCX: 0000000000000000 [ 86.768961][ T5310] RDX: 0000000000000006 RSI: ffffffff8e231ffb RDI: 00000000ffffffff [ 86.771689][ T5310] RBP: ffffc9000e657af0 R08: ffffffff9057c237 R09: 1ffffffff20af846 [ 86.774422][ T5310] R10: dffffc0000000000 R11: fffffbfff20af847 R12: 000000000000002a [ 86.777156][ T5310] R13: dffffc0000000000 R14: ffff88803918e058 R15: ffff88803918e890 [ 86.779917][ T5310] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 86.782901][ T5310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.785112][ T5310] CR2: 000000000001c0a0 CR3: 0000000044b56000 CR4: 0000000000352ef0 [ 86.787876][ T5310] Kernel panic - not syncing: Fatal exception [ 86.790505][ T5310] Kernel Offset: disabled [ 86.791975][ T5310] Rebooting in 86400 seconds..