program: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:07.0/driver_override\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='thunderbolt\x00', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/thunderbolt/bind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0000:00:07.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/thunderbolt/devices/0-0/authorized\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) [ 77.071762][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.074496][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.437845][ T4652] Bluetooth: hci0: command tx timeout [ 77.848070][ T5323] thunderbolt 0000:00:07.0: timeout resetting host router [ 77.852887][ T5323] BUG: unable to handle page fault for address: ffffc90000f70208 [ 77.856243][ T5323] #PF: supervisor write access in kernel mode [ 77.858888][ T5323] #PF: error_code(0x0002) - not-present page [ 77.861451][ T5323] PGD 1b000067 P4D 1b000067 PUD 1c2b9067 PMD 30b6b067 PTE 0 [ 77.864591][ T5323] Oops: Oops: 0002 [#1] SMP KASAN NOPTI [ 77.866901][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 77.870732][ T5323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.875095][ T5323] RIP: 0010:iowrite32+0x1e/0x80 [ 77.877253][ T5323] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 48 89 f3 89 fd e8 00 ad e7 fc 48 81 fb 00 00 04 00 72 09 e8 f2 ac e7 fc <89> 2b eb 52 48 81 fb 01 00 01 00 72 0c e8 e0 ac e7 fc 89 e8 89 da [ 77.885232][ T5323] RSP: 0018:ffffc9000f73f7f0 EFLAGS: 00010287 [ 77.887908][ T5323] RAX: ffffffff84df75ce RBX: ffffc90000f70208 RCX: 0000000000100000 [ 77.891245][ T5323] RDX: ffffc9000ee92000 RSI: 00000000000b3ba8 RDI: 00000000000b3ba9 [ 77.897845][ T5323] RBP: 00000000ffffffff R08: ffffc9000f73f3a7 R09: 1ffff92001ee7e74 [ 77.901281][ T5323] R10: dffffc0000000000 R11: fffff52001ee7e75 R12: 1ffff110025ead11 [ 77.904594][ T5323] R13: ffffc90000f70208 R14: 0000000000000000 R15: 0000000000000001 [ 77.907975][ T5323] FS: 00007f59dd5f56c0(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 77.911735][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.914563][ T5323] CR2: ffffc90000f70208 CR3: 00000000430ad000 CR4: 0000000000352ef0 [ 77.918059][ T5323] Call Trace: [ 77.919538][ T5323] [ 77.920850][ T5323] nhi_disable_interrupts+0x150/0x350 [ 77.923214][ T5323] nhi_probe+0x2be/0x880 [ 77.925050][ T5323] nhi_pci_probe+0x46b/0x580 [ 77.927108][ T5323] ? __pfx_nhi_pci_probe+0x10/0x10 [ 77.929270][ T5323] ? __pfx__raw_spin_lock_bh+0x10/0x10 [ 77.931656][ T5323] ? lockdep_hardirqs_on+0x7a/0x110 [ 77.933812][ T5323] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 77.936248][ T5323] pci_device_probe+0x431/0xc90 [ 77.938292][ T5323] ? up_write+0x19f/0x4a0 [ 77.940144][ T5323] ? __pfx_pci_device_probe+0x10/0x10 [ 77.942523][ T5323] ? kernfs_put+0x7b9/0x820 [ 77.944565][ T5323] ? kernfs_create_link+0x187/0x200 [ 77.946998][ T5323] ? sysfs_do_create_link_sd+0xe0/0x110 [ 77.949317][ T5323] ? driver_sysfs_add+0x1fe/0x210 [ 77.951492][ T5323] ? __pfx_pci_device_probe+0x10/0x10 [ 77.953778][ T5323] really_probe+0x254/0xae0 [ 77.955716][ T5323] __driver_probe_device+0x1e8/0x360 [ 77.957780][ T5323] device_driver_attach+0xe0/0x1d0 [ 77.959960][ T5323] bind_store+0x1d0/0x220 [ 77.961675][ T5323] ? __pfx_sysfs_kf_write+0x10/0x10 [ 77.963848][ T5323] kernfs_fop_write_iter+0x3a4/0x540 [ 77.966108][ T5323] vfs_write+0x612/0xba0 [ 77.967911][ T5323] ? __pfx_vfs_write+0x10/0x10 [ 77.970043][ T5323] ? __fget_files+0x2a/0x420 [ 77.972040][ T5323] ksys_write+0x150/0x270 [ 77.973902][ T5323] ? __pfx_ksys_write+0x10/0x10 [ 77.975896][ T5323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.978393][ T5323] do_syscall_64+0x174/0x580 [ 77.980344][ T5323] ? trace_irq_disable+0x3b/0x140 [ 77.982456][ T5323] ? clear_bhb_loop+0x40/0x90 [ 77.984411][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.986957][ T5323] RIP: 0033:0x7f59e119e019 [ 77.988915][ T5323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.997041][ T5323] RSP: 002b:00007f59dd5f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.000539][ T5323] RAX: ffffffffffffffda RBX: 00007f59e1425fa0 RCX: 00007f59e119e019 [ 78.003770][ T5323] RDX: 000000000000000d RSI: 00002000000001c0 RDI: 0000000000000004 [ 78.007098][ T5323] RBP: 00007f59e123500c R08: 0000000000000000 R09: 0000000000000000 [ 78.010524][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.013978][ T5323] R13: 00007f59e1426038 R14: 00007f59e1425fa0 R15: 00007fffc2eb28b8 [ 78.017677][ T5323] [ 78.019018][ T5323] Modules linked in: [ 78.020741][ T5323] CR2: ffffc90000f70208 [ 78.022493][ T5323] ---[ end trace 0000000000000000 ]--- [ 78.024812][ T5323] RIP: 0010:iowrite32+0x1e/0x80 [ 78.027000][ T5323] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 48 89 f3 89 fd e8 00 ad e7 fc 48 81 fb 00 00 04 00 72 09 e8 f2 ac e7 fc <89> 2b eb 52 48 81 fb 01 00 01 00 72 0c e8 e0 ac e7 fc 89 e8 89 da [ 78.035094][ T5323] RSP: 0018:ffffc9000f73f7f0 EFLAGS: 00010287 [ 78.037738][ T5323] RAX: ffffffff84df75ce RBX: ffffc90000f70208 RCX: 0000000000100000 [ 78.041137][ T5323] RDX: ffffc9000ee92000 RSI: 00000000000b3ba8 RDI: 00000000000b3ba9 [ 78.044627][ T5323] RBP: 00000000ffffffff R08: ffffc9000f73f3a7 R09: 1ffff92001ee7e74 [ 78.048065][ T5323] R10: dffffc0000000000 R11: fffff52001ee7e75 R12: 1ffff110025ead11 [ 78.051362][ T5323] R13: ffffc90000f70208 R14: 0000000000000000 R15: 0000000000000001 [ 78.054676][ T5323] FS: 00007f59dd5f56c0(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 78.058243][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.060978][ T5323] CR2: ffffc90000f70208 CR3: 00000000430ad000 CR4: 0000000000352ef0 [ 78.064207][ T5323] Kernel panic - not syncing: Fatal exception [ 78.067107][ T5323] Kernel Offset: disabled [ 78.068910][ T5323] Rebooting in 86400 seconds..