program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='e1000e\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd) r3 = socket$inet(0x2, 0x2, 0x0) ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}}) [ 85.043428][ T4654] Bluetooth: hci0: command tx timeout [ 85.330333][ T5332] e1000e 0000:00:03.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 85.342171][ T5332] e1000e 0000:00:03.0 0000:00:03.0 (uninitialized): Failed to initialize MSI interrupts. Falling back to legacy interrupts. [ 86.518495][ T11] cfg80211: failed to load regulatory.db [ 87.070746][ T4654] Bluetooth: hci0: command tx timeout [ 87.171851][ T5332] e1000e 0000:00:03.0: The NVM Checksum Is Not Valid [ 87.174496][ T5332] BUG: unable to handle page fault for address: ffffc900014a00b0 [ 87.176938][ T5332] #PF: supervisor read access in kernel mode [ 87.178828][ T5332] #PF: error_code(0x0000) - not-present page [ 87.180718][ T5332] PGD 1b000067 P4D 1b000067 PUD 1c2b9067 PMD 313d2067 PTE 0 [ 87.183057][ T5332] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 87.184822][ T5332] CPU: 0 UID: 0 PID: 5332 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.187620][ T5332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.190795][ T5332] RIP: 0010:e1000_get_cfg_done_82571+0x42/0x130 [ 87.192819][ T5332] Code: fc ff df e8 a0 97 f9 fa 4c 8d 73 08 bd 9d ff ff ff 4d 89 f4 49 c1 ec 03 43 80 3c 3c 00 74 08 4c 89 f7 e8 21 ca 68 fb 49 8b 06 <44> 8b a8 10 10 00 00 44 89 ee 81 e6 00 00 04 00 31 ff e8 a7 9b f9 [ 87.198781][ T5332] RSP: 0018:ffffc9000e5ff828 EFLAGS: 00010246 [ 87.200728][ T5332] RAX: ffffc9000149f0a0 RBX: ffff888034a415b8 RCX: 0000000000100000 [ 87.203273][ T5332] RDX: ffffc90020001000 RSI: 000000000007bca8 RDI: 000000000007bca9 [ 87.205794][ T5332] RBP: 00000000ffffff9d R08: ffffffff9057c237 R09: 1ffffffff20af846 [ 87.208316][ T5332] R10: dffffc0000000000 R11: ffffffff86cd8b00 R12: 1ffff110069482b8 [ 87.210871][ T5332] R13: ffff888034a40ec0 R14: ffff888034a415c0 R15: dffffc0000000000 [ 87.213411][ T5332] FS: 00007f29cd07d6c0(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 87.216361][ T5332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.218507][ T5332] CR2: ffffc900014a00b0 CR3: 0000000043e75000 CR4: 0000000000352ef0 [ 87.221188][ T5332] Call Trace: [ 87.222315][ T5332] [ 87.223296][ T5332] e1000_probe+0x1fb5/0x2b20 [ 87.224852][ T5332] ? __pfx_e1000_probe+0x10/0x10 [ 87.226522][ T5332] ? __ww_mutex_lock+0x1850/0x3350 [ 87.228235][ T5332] ? lockdep_hardirqs_on+0x7a/0x110 [ 87.229865][ T5332] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 87.231707][ T5332] pci_device_probe+0x431/0xc90 [ 87.233243][ T5332] ? up_write+0x19f/0x4a0 [ 87.234660][ T5332] ? __pfx_pci_device_probe+0x10/0x10 [ 87.236394][ T5332] ? kernfs_put+0x7b9/0x820 [ 87.237866][ T5332] ? kernfs_create_link+0x187/0x200 [ 87.239564][ T5332] ? sysfs_do_create_link_sd+0xe0/0x110 [ 87.241401][ T5332] ? driver_sysfs_add+0x1fe/0x210 [ 87.243092][ T5332] ? __pfx_pci_device_probe+0x10/0x10 [ 87.244838][ T5332] really_probe+0x254/0xae0 [ 87.246319][ T5332] __driver_probe_device+0x1e8/0x360 [ 87.248092][ T5332] device_driver_attach+0xe0/0x1d0 [ 87.249759][ T5332] bind_store+0x1d0/0x220 [ 87.251255][ T5332] ? __pfx_sysfs_kf_write+0x10/0x10 [ 87.253014][ T5332] kernfs_fop_write_iter+0x3a4/0x540 [ 87.254794][ T5332] vfs_write+0x612/0xba0 [ 87.256215][ T5332] ? __pfx_vfs_write+0x10/0x10 [ 87.257797][ T5332] ? __fget_files+0x2a/0x420 [ 87.259361][ T5332] ksys_write+0x150/0x270 [ 87.260821][ T5332] ? __pfx_ksys_write+0x10/0x10 [ 87.262532][ T5332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.264626][ T5332] do_syscall_64+0x174/0x580 [ 87.266260][ T5332] ? trace_irq_disable+0x3b/0x140 [ 87.268140][ T5332] ? clear_bhb_loop+0x40/0x90 [ 87.269857][ T5332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.271990][ T5332] RIP: 0033:0x7f29cc19e019 [ 87.273469][ T5332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.279595][ T5332] RSP: 002b:00007f29cd07cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.282328][ T5332] RAX: ffffffffffffffda RBX: 00007f29cc426090 RCX: 00007f29cc19e019 [ 87.284811][ T5332] RDX: 000000000000000d RSI: 0000200000000700 RDI: 0000000000000005 [ 87.287361][ T5332] RBP: 00007f29cc23500c R08: 0000000000000000 R09: 0000000000000000 [ 87.289848][ T5332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.292444][ T5332] R13: 00007f29cc426128 R14: 00007f29cc426090 R15: 00007ffe0d6d9878 [ 87.295175][ T5332] [ 87.296341][ T5332] Modules linked in: [ 87.297719][ T5332] CR2: ffffc900014a00b0 [ 87.299120][ T5332] ---[ end trace 0000000000000000 ]--- [ 87.300914][ T5332] RIP: 0010:e1000_get_cfg_done_82571+0x42/0x130 [ 87.303269][ T5332] Code: fc ff df e8 a0 97 f9 fa 4c 8d 73 08 bd 9d ff ff ff 4d 89 f4 49 c1 ec 03 43 80 3c 3c 00 74 08 4c 89 f7 e8 21 ca 68 fb 49 8b 06 <44> 8b a8 10 10 00 00 44 89 ee 81 e6 00 00 04 00 31 ff e8 a7 9b f9 [ 87.310097][ T5332] RSP: 0018:ffffc9000e5ff828 EFLAGS: 00010246 [ 87.312196][ T5332] RAX: ffffc9000149f0a0 RBX: ffff888034a415b8 RCX: 0000000000100000 [ 87.314901][ T5332] RDX: ffffc90020001000 RSI: 000000000007bca8 RDI: 000000000007bca9 [ 87.317463][ T5332] RBP: 00000000ffffff9d R08: ffffffff9057c237 R09: 1ffffffff20af846 [ 87.320174][ T5332] R10: dffffc0000000000 R11: ffffffff86cd8b00 R12: 1ffff110069482b8 [ 87.322946][ T5332] R13: ffff888034a40ec0 R14: ffff888034a415c0 R15: dffffc0000000000 [ 87.325571][ T5332] FS: 00007f29cd07d6c0(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000 [ 87.328679][ T5332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.330842][ T5332] CR2: ffffc900014a00b0 CR3: 0000000043e75000 CR4: 0000000000352ef0 [ 87.333812][ T5332] Kernel panic - not syncing: Fatal exception [ 87.336169][ T5332] Kernel Offset: disabled [ 87.337591][ T5332] Rebooting in 86400 seconds..