program: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='dwc3-pci\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/dwc3-pci/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='0000:00:03.0\x00', 0xd) [ 88.112086][ T5287] Bluetooth: hci0: command tx timeout [ 88.331366][ T5329] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI [ 88.335369][ T5329] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 88.338334][ T5329] CPU: 0 UID: 0 PID: 5329 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 88.341465][ T5329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.344846][ T5329] RIP: 0010:software_node_register+0x30/0x1f0 [ 88.346963][ T5329] Code: 57 41 56 41 55 41 54 53 50 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 bf e2 9b fb 4c 8d 63 08 4c 89 e0 48 c1 e8 03 48 89 04 24 <42> 80 3c 30 00 74 08 4c 89 e7 e8 41 15 0b fc 49 8b 2c 24 48 85 ed [ 88.353393][ T5329] RSP: 0018:ffffc9000e4477e0 EFLAGS: 00010202 [ 88.355414][ T5329] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000100000 [ 88.358037][ T5329] RDX: ffffc90020001000 RSI: 0000000000016ae3 RDI: 0000000000016ae4 [ 88.360673][ T5329] RBP: ffffc9000e4479b0 R08: 0000000000000200 R09: ffffffff8ca45260 [ 88.363322][ T5329] R10: 000000000000c0bf R11: 000000000000c0a0 R12: 0000000000000008 [ 88.365928][ T5329] R13: ffff8880336b9010 R14: dffffc0000000000 R15: 0000000000000000 [ 88.368432][ T5329] FS: 00007f55cbfd96c0(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 88.371425][ T5329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.373667][ T5329] CR2: 00007fc93d711ad0 CR3: 0000000012e9e000 CR4: 0000000000352ef0 [ 88.376322][ T5329] Call Trace: [ 88.377498][ T5329] [ 88.378527][ T5329] device_add_software_node+0x1a0/0x300 [ 88.380364][ T5329] dwc3_pci_probe+0x542/0xad0 [ 88.382293][ T5329] ? __pfx_dwc3_pci_probe+0x10/0x10 [ 88.384233][ T5329] pci_device_probe+0x431/0xc90 [ 88.386128][ T5329] ? up_write+0x19f/0x4a0 [ 88.387677][ T5329] ? __pfx_pci_device_probe+0x10/0x10 [ 88.389591][ T5329] ? kernfs_put+0x7b9/0x820 [ 88.391117][ T5329] ? kernfs_create_link+0x187/0x200 [ 88.392852][ T5329] ? sysfs_do_create_link_sd+0xe0/0x110 [ 88.394690][ T5329] ? driver_sysfs_add+0x1fe/0x210 [ 88.396386][ T5329] ? __pfx_pci_device_probe+0x10/0x10 [ 88.398174][ T5329] really_probe+0x254/0xae0 [ 88.399688][ T5329] __driver_probe_device+0x1e8/0x360 [ 88.401370][ T5329] device_driver_attach+0xe0/0x1d0 [ 88.403023][ T5329] bind_store+0x1d0/0x220 [ 88.404503][ T5329] ? __pfx_sysfs_kf_write+0x10/0x10 [ 88.406264][ T5329] kernfs_fop_write_iter+0x3a4/0x540 [ 88.407994][ T5329] vfs_write+0x612/0xba0 [ 88.409440][ T5329] ? __pfx_vfs_write+0x10/0x10 [ 88.410984][ T5329] ? __fget_files+0x2a/0x420 [ 88.412508][ T5329] ksys_write+0x150/0x270 [ 88.413952][ T5329] ? __pfx_ksys_write+0x10/0x10 [ 88.415594][ T5329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.417569][ T5329] do_syscall_64+0x174/0x580 [ 88.419111][ T5329] ? trace_irq_disable+0x3b/0x140 [ 88.420798][ T5329] ? clear_bhb_loop+0x40/0x90 [ 88.422389][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.424364][ T5329] RIP: 0033:0x7f55cb19e019 [ 88.425874][ T5329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.432282][ T5329] RSP: 002b:00007f55cbfd8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.435016][ T5329] RAX: ffffffffffffffda RBX: 00007f55cb426090 RCX: 00007f55cb19e019 [ 88.437623][ T5329] RDX: 000000000000000d RSI: 0000200000000240 RDI: 0000000000000005 [ 88.440185][ T5329] RBP: 00007f55cb23500c R08: 0000000000000000 R09: 0000000000000000 [ 88.443043][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.445677][ T5329] R13: 00007f55cb426128 R14: 00007f55cb426090 R15: 00007ffd9ac9da38 [ 88.448235][ T5329] [ 88.449261][ T5329] Modules linked in: [ 88.450840][ T5329] ---[ end trace 0000000000000000 ]--- [ 88.458101][ T5329] RIP: 0010:software_node_register+0x30/0x1f0 [ 88.464913][ T5329] Code: 57 41 56 41 55 41 54 53 50 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 bf e2 9b fb 4c 8d 63 08 4c 89 e0 48 c1 e8 03 48 89 04 24 <42> 80 3c 30 00 74 08 4c 89 e7 e8 41 15 0b fc 49 8b 2c 24 48 85 ed [ 88.486137][ T5329] RSP: 0018:ffffc9000e4477e0 EFLAGS: 00010202 [ 88.492950][ T5329] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000100000 [ 88.495875][ T5329] RDX: ffffc90020001000 RSI: 0000000000016ae3 RDI: 0000000000016ae4 [ 88.498503][ T5329] RBP: ffffc9000e4479b0 R08: 0000000000000200 R09: ffffffff8ca45260 [ 88.501388][ T5329] R10: 000000000000c0bf R11: 000000000000c0a0 R12: 0000000000000008 [ 88.504031][ T5329] R13: ffff8880336b9010 R14: dffffc0000000000 R15: 0000000000000000 [ 88.506667][ T5329] FS: 00007f55cbfd96c0(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 88.519063][ T5329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.521616][ T5329] CR2: 00007f451b559120 CR3: 0000000012e9e000 CR4: 0000000000352ef0 [ 88.524231][ T5329] Kernel panic - not syncing: Fatal exception [ 88.526545][ T5329] Kernel Offset: disabled [ 88.527919][ T5329] Rebooting in 86400 seconds..