program: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='dwc3-pci\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/dwc3-pci/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='0000:00:03.0\x00', 0xd) [ 85.920157][ T4647] Bluetooth: hci0: command tx timeout [ 86.291570][ T5324] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI [ 86.296165][ T5324] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 86.299383][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 86.303630][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.307426][ T5324] RIP: 0010:software_node_register+0x30/0x1f0 [ 86.309831][ T5324] Code: 57 41 56 41 55 41 54 53 50 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 bf e2 9b fb 4c 8d 63 08 4c 89 e0 48 c1 e8 03 48 89 04 24 <42> 80 3c 30 00 74 08 4c 89 e7 e8 41 15 0b fc 49 8b 2c 24 48 85 ed [ 86.317242][ T5324] RSP: 0018:ffffc9000e1a77e0 EFLAGS: 00010202 [ 86.319534][ T5324] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000100000 [ 86.322423][ T5324] RDX: ffffc9000f731000 RSI: 0000000000016b54 RDI: 0000000000016b55 [ 86.325022][ T5324] RBP: ffffc9000e1a79b0 R08: 0000000000000200 R09: ffffffff8ca45260 [ 86.327906][ T5324] R10: 000000000000c0bf R11: 000000000000c0a0 R12: 0000000000000008 [ 86.330981][ T5324] R13: ffff88803fbcf010 R14: dffffc0000000000 R15: 0000000000000000 [ 86.333921][ T5324] FS: 00007fe8acee56c0(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 86.337077][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.339563][ T5324] CR2: 000056499a497cdf CR3: 000000001fcfd000 CR4: 0000000000352ef0 [ 86.342814][ T5324] Call Trace: [ 86.344155][ T5324] [ 86.345321][ T5324] device_add_software_node+0x1a0/0x300 [ 86.347370][ T5324] dwc3_pci_probe+0x542/0xad0 [ 86.348963][ T5324] ? __pfx_dwc3_pci_probe+0x10/0x10 [ 86.350702][ T5324] ? do_raw_spin_lock+0x12b/0x2f0 [ 86.352394][ T5324] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 86.354420][ T5324] ? lockdep_hardirqs_on+0x7a/0x110 [ 86.356211][ T5324] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 86.358184][ T5324] pci_device_probe+0x431/0xc90 [ 86.359883][ T5324] ? up_write+0x19f/0x4a0 [ 86.361347][ T5324] ? __pfx_pci_device_probe+0x10/0x10 [ 86.363183][ T5324] ? kernfs_put+0x7b9/0x820 [ 86.364734][ T5324] ? kernfs_create_link+0x187/0x200 [ 86.366558][ T5324] ? sysfs_do_create_link_sd+0xe0/0x110 [ 86.368515][ T5324] ? driver_sysfs_add+0x1fe/0x210 [ 86.370565][ T5324] ? __pfx_pci_device_probe+0x10/0x10 [ 86.372733][ T5324] really_probe+0x254/0xae0 [ 86.374498][ T5324] __driver_probe_device+0x1e8/0x360 [ 86.376420][ T5324] device_driver_attach+0xe0/0x1d0 [ 86.378354][ T5324] bind_store+0x1d0/0x220 [ 86.380003][ T5324] ? __pfx_sysfs_kf_write+0x10/0x10 [ 86.382115][ T5324] kernfs_fop_write_iter+0x3a4/0x540 [ 86.384232][ T5324] vfs_write+0x612/0xba0 [ 86.386024][ T5324] ? __pfx_vfs_write+0x10/0x10 [ 86.388013][ T5324] ? __fget_files+0x2a/0x420 [ 86.390005][ T5324] ksys_write+0x150/0x270 [ 86.391945][ T5324] ? __pfx_ksys_write+0x10/0x10 [ 86.394531][ T5324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.397647][ T5324] do_syscall_64+0x174/0x580 [ 86.399957][ T5324] ? trace_irq_disable+0x3b/0x140 [ 86.402548][ T5324] ? clear_bhb_loop+0x40/0x90 [ 86.406082][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.408605][ T5324] RIP: 0033:0x7fe8abf9e019 [ 86.410823][ T5324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.419857][ T5324] RSP: 002b:00007fe8acee4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.423214][ T5324] RAX: ffffffffffffffda RBX: 00007fe8ac226090 RCX: 00007fe8abf9e019 [ 86.426783][ T5324] RDX: 000000000000000d RSI: 0000200000000240 RDI: 0000000000000005 [ 86.430390][ T5324] RBP: 00007fe8ac03500c R08: 0000000000000000 R09: 0000000000000000 [ 86.433956][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.437158][ T5324] R13: 00007fe8ac226128 R14: 00007fe8ac226090 R15: 00007ffd6dc09908 [ 86.440193][ T5324] [ 86.441320][ T5324] Modules linked in: [ 86.444313][ T5324] ---[ end trace 0000000000000000 ]--- [ 86.453445][ T5324] RIP: 0010:software_node_register+0x30/0x1f0 [ 86.460511][ T5324] Code: 57 41 56 41 55 41 54 53 50 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 bf e2 9b fb 4c 8d 63 08 4c 89 e0 48 c1 e8 03 48 89 04 24 <42> 80 3c 30 00 74 08 4c 89 e7 e8 41 15 0b fc 49 8b 2c 24 48 85 ed [ 86.468475][ T5324] RSP: 0018:ffffc9000e1a77e0 EFLAGS: 00010202 [ 86.470932][ T5324] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000100000 [ 86.474067][ T5324] RDX: ffffc9000f731000 RSI: 0000000000016b54 RDI: 0000000000016b55 [ 86.477388][ T5324] RBP: ffffc9000e1a79b0 R08: 0000000000000200 R09: ffffffff8ca45260 [ 86.481033][ T5324] R10: 000000000000c0bf R11: 000000000000c0a0 R12: 0000000000000008 [ 86.484134][ T5324] R13: ffff88803fbcf010 R14: dffffc0000000000 R15: 0000000000000000 [ 86.487631][ T5324] FS: 00007fe8acee56c0(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 86.491013][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.493300][ T5324] CR2: 00007ff40e593120 CR3: 000000001fcfd000 CR4: 0000000000352ef0 [ 86.495928][ T5324] Kernel panic - not syncing: Fatal exception [ 86.498209][ T5324] Kernel Offset: disabled [ 86.499612][ T5324] Rebooting in 86400 seconds..