program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0000:00:02.0\x00', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='dwc3-pci\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/drivers/dwc3-pci/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='0000:00:02.0\x00', 0xc) close(r2) [ 88.077548][ T5274] Bluetooth: hci0: command tx timeout [ 88.086777][ T5313] e1000e 0000:00:02.0 eth1: removed PHC [ 88.407931][ T5313] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 88.876090][ T5314] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI [ 88.880546][ T5314] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 88.883737][ T5314] CPU: 0 UID: 0 PID: 5314 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 88.887140][ T5314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.891249][ T5314] RIP: 0010:software_node_register+0x30/0x1f0 [ 88.893766][ T5314] Code: 57 41 56 41 55 41 54 53 50 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 df 8c 9d fb 4c 8d 63 08 4c 89 e0 48 c1 e8 03 48 89 04 24 <42> 80 3c 30 00 74 08 4c 89 e7 e8 91 c2 0c fc 49 8b 2c 24 48 85 ed [ 88.901259][ T5314] RSP: 0018:ffffc9000f3977e0 EFLAGS: 00010202 [ 88.903647][ T5314] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000100000 [ 88.906815][ T5314] RDX: ffffc9000f729000 RSI: 0000000000015c33 RDI: 0000000000015c34 [ 88.910008][ T5314] RBP: ffffc9000f3979b0 R08: ffff88801ae1ca80 R09: 0000000000000003 [ 88.913277][ T5314] R10: 0000000000004b7e R11: 0000000000000002 R12: 0000000000000008 [ 88.916178][ T5314] R13: ffff8880124af010 R14: dffffc0000000000 R15: 0000000000000000 [ 88.919184][ T5314] FS: 00007f00cc19b6c0(0000) GS:ffff88808c53e000(0000) knlGS:0000000000000000 [ 88.922546][ T5314] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.925189][ T5314] CR2: 00007f0ca930b000 CR3: 0000000012518000 CR4: 0000000000352ef0 [ 88.928250][ T5314] Call Trace: [ 88.929611][ T5314] [ 88.930708][ T5314] device_add_software_node+0x1a0/0x300 [ 88.932739][ T5314] dwc3_pci_probe+0x542/0xad0 [ 88.934427][ T5314] ? __pfx_dwc3_pci_probe+0x10/0x10 [ 88.936322][ T5314] ? do_raw_spin_lock+0x12b/0x2f0 [ 88.939003][ T5314] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 88.941336][ T5314] ? lockdep_hardirqs_on+0x7a/0x110 [ 88.943196][ T5314] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 88.945368][ T5314] pci_device_probe+0x431/0xc90 [ 88.947283][ T5314] ? up_write+0x19f/0x4a0 [ 88.948901][ T5314] ? __pfx_pci_device_probe+0x10/0x10 [ 88.950876][ T5314] ? kernfs_put+0x7b9/0x820 [ 88.952428][ T5314] ? kernfs_create_link+0x187/0x200 [ 88.954260][ T5314] ? sysfs_do_create_link_sd+0xe0/0x110 [ 88.956274][ T5314] ? driver_sysfs_add+0x1fe/0x210 [ 88.958160][ T5314] ? __pfx_pci_device_probe+0x10/0x10 [ 88.960069][ T5314] really_probe+0x254/0xae0 [ 88.962119][ T5314] __driver_probe_device+0x1e8/0x360 [ 88.964177][ T5314] device_driver_attach+0xe0/0x1d0 [ 88.966166][ T5314] bind_store+0x1d0/0x220 [ 88.967975][ T5314] ? __pfx_sysfs_kf_write+0x10/0x10 [ 88.970159][ T5314] kernfs_fop_write_iter+0x3a4/0x540 [ 88.972356][ T5314] vfs_write+0x612/0xba0 [ 88.974198][ T5314] ? __pfx_vfs_write+0x10/0x10 [ 88.976179][ T5314] ? __fget_files+0x2a/0x420 [ 88.978095][ T5314] ksys_write+0x150/0x270 [ 88.979897][ T5314] ? __pfx_ksys_write+0x10/0x10 [ 88.981971][ T5314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.984581][ T5314] do_syscall_64+0x174/0x580 [ 88.986978][ T5314] ? trace_irq_disable+0x3b/0x140 [ 88.988804][ T5314] ? clear_bhb_loop+0x70/0xc0 [ 88.990502][ T5314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.992759][ T5314] RIP: 0033:0x7f00cb39e0d9 [ 88.994580][ T5314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.002425][ T5314] RSP: 002b:00007f00cc19afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 89.005859][ T5314] RAX: ffffffffffffffda RBX: 00007f00cb626090 RCX: 00007f00cb39e0d9 [ 89.009282][ T5314] RDX: 000000000000000c RSI: 0000200000000800 RDI: 0000000000000003 [ 89.012462][ T5314] RBP: 00007f00cb435024 R08: 0000000000000000 R09: 0000000000000000 [ 89.015632][ T5314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.018893][ T5314] R13: 00007f00cb626128 R14: 00007f00cb626090 R15: 00007fff10a1bb58 [ 89.022053][ T5314] [ 89.023356][ T5314] Modules linked in: [ 89.026449][ T5314] ---[ end trace 0000000000000000 ]--- [ 89.113237][ T5314] RIP: 0010:software_node_register+0x30/0x1f0 [ 89.117770][ T5314] Code: 57 41 56 41 55 41 54 53 50 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 df 8c 9d fb 4c 8d 63 08 4c 89 e0 48 c1 e8 03 48 89 04 24 <42> 80 3c 30 00 74 08 4c 89 e7 e8 91 c2 0c fc 49 8b 2c 24 48 85 ed [ 89.136301][ T5314] RSP: 0018:ffffc9000f3977e0 EFLAGS: 00010202 [ 89.145415][ T5314] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000100000 [ 89.148650][ T5314] RDX: ffffc9000f729000 RSI: 0000000000015c33 RDI: 0000000000015c34 [ 89.199538][ T5314] RBP: ffffc9000f3979b0 R08: ffff88801ae1ca80 R09: 0000000000000003 [ 89.210459][ T5314] R10: 0000000000004b7e R11: 0000000000000002 R12: 0000000000000008 [ 89.214080][ T5314] R13: ffff8880124af010 R14: dffffc0000000000 R15: 0000000000000000 [ 89.217330][ T5314] FS: 00007f00cc19b6c0(0000) GS:ffff88808c53e000(0000) knlGS:0000000000000000 [ 89.227636][ T5314] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.237812][ T5314] CR2: 00007ff5b2cc4f10 CR3: 0000000012518000 CR4: 0000000000352ef0 [ 89.247491][ T5314] Kernel panic - not syncing: Fatal exception [ 89.250100][ T5314] Kernel Offset: disabled [ 89.251584][ T5314] Rebooting in 86400 seconds..