program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000250)='0000:00:02.0\x00', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000150)='i915\x00', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/i915/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000250)='0000:00:02.0\x00', 0xd) close(r2) [ 85.485571][ T5309] e1000e 0000:00:02.0 eth1: removed PHC [ 85.709150][ T5309] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 85.865508][ T4638] Bluetooth: hci0: command tx timeout [ 85.925811][ T5310] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN NOPTI [ 85.930895][ T5310] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 85.934117][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.937788][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.941895][ T5310] RIP: 0010:i915_pci_probe+0x58/0x470 [ 85.944286][ T5310] Code: 7b 18 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 ba eb 96 fc 4d 8b 3f 49 8d 5f 1c 4d 8d 6f 23 49 89 dc 49 c1 ec 03 <43> 0f b6 04 34 84 c0 0f 85 be 02 00 00 4c 89 e8 48 c1 e8 03 42 0f [ 85.952171][ T5310] RSP: 0018:ffffc9000e11f970 EFLAGS: 00010207 [ 85.955253][ T5310] RAX: 1ffffffff189cdeb RBX: 000000000000001c RCX: 0000000000100000 [ 85.959029][ T5310] RDX: ffffc9000f5a1000 RSI: 0000000000000bf7 RDI: 0000000000000bf8 [ 85.963118][ T5310] RBP: ffff88801d262000 R08: ffffffff9057b437 R09: 1ffffffff20af686 [ 85.967200][ T5310] R10: dffffc0000000000 R11: ffffffff859f5bb0 R12: 0000000000000003 [ 85.971293][ T5310] R13: 0000000000000023 R14: dffffc0000000000 R15: 0000000000000000 [ 85.974447][ T5310] FS: 00007fe61960e6c0(0000) GS:ffff88808c53e000(0000) knlGS:0000000000000000 [ 85.978428][ T5310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.981781][ T5310] CR2: 00007f644b7a7000 CR3: 000000004386c000 CR4: 0000000000352ef0 [ 85.985981][ T5310] Call Trace: [ 85.987697][ T5310] [ 85.989038][ T5310] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 85.991857][ T5310] pci_device_probe+0x431/0xc90 [ 85.994238][ T5310] ? up_write+0x19f/0x4a0 [ 85.996465][ T5310] ? __pfx_pci_device_probe+0x10/0x10 [ 85.999325][ T5310] ? kernfs_put+0x7b9/0x820 [ 86.001857][ T5310] ? kernfs_create_link+0x187/0x200 [ 86.004658][ T5310] ? sysfs_do_create_link_sd+0xe0/0x110 [ 86.007535][ T5310] ? driver_sysfs_add+0x1fe/0x210 [ 86.010180][ T5310] ? __pfx_pci_device_probe+0x10/0x10 [ 86.012190][ T5310] really_probe+0x254/0xae0 [ 86.013802][ T5310] __driver_probe_device+0x1e8/0x360 [ 86.015606][ T5310] device_driver_attach+0xe0/0x1d0 [ 86.017384][ T5310] bind_store+0x1d0/0x220 [ 86.018884][ T5310] ? __pfx_sysfs_kf_write+0x10/0x10 [ 86.020916][ T5310] kernfs_fop_write_iter+0x3a4/0x540 [ 86.023035][ T5310] vfs_write+0x612/0xba0 [ 86.024807][ T5310] ? __pfx_vfs_write+0x10/0x10 [ 86.026596][ T5310] ? __fget_files+0x2a/0x420 [ 86.028493][ T5310] ksys_write+0x150/0x270 [ 86.030293][ T5310] ? __pfx_ksys_write+0x10/0x10 [ 86.032272][ T5310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.034748][ T5310] do_syscall_64+0x174/0x580 [ 86.037417][ T5310] ? trace_irq_disable+0x3b/0x140 [ 86.039665][ T5310] ? clear_bhb_loop+0x70/0xc0 [ 86.041700][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.044226][ T5310] RIP: 0033:0x7fe61879e0d9 [ 86.046211][ T5310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.054059][ T5310] RSP: 002b:00007fe61960dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.057069][ T5310] RAX: ffffffffffffffda RBX: 00007fe618a26090 RCX: 00007fe61879e0d9 [ 86.059746][ T5310] RDX: 000000000000000d RSI: 0000200000000250 RDI: 0000000000000003 [ 86.062319][ T5310] RBP: 00007fe618835024 R08: 0000000000000000 R09: 0000000000000000 [ 86.065114][ T5310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.067830][ T5310] R13: 00007fe618a26128 R14: 00007fe618a26090 R15: 00007ffca1517ba8 [ 86.070364][ T5310] [ 86.071375][ T5310] Modules linked in: [ 86.074053][ T5310] ---[ end trace 0000000000000000 ]--- [ 86.178808][ T5310] RIP: 0010:i915_pci_probe+0x58/0x470 [ 86.191215][ T5310] Code: 7b 18 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 ba eb 96 fc 4d 8b 3f 49 8d 5f 1c 4d 8d 6f 23 49 89 dc 49 c1 ec 03 <43> 0f b6 04 34 84 c0 0f 85 be 02 00 00 4c 89 e8 48 c1 e8 03 42 0f [ 86.226013][ T5310] RSP: 0018:ffffc9000e11f970 EFLAGS: 00010207 [ 86.235297][ T5310] RAX: 1ffffffff189cdeb RBX: 000000000000001c RCX: 0000000000100000 [ 86.245921][ T5310] RDX: ffffc9000f5a1000 RSI: 0000000000000bf7 RDI: 0000000000000bf8 [ 86.254868][ T5310] RBP: ffff88801d262000 R08: ffffffff9057b437 R09: 1ffffffff20af686 [ 86.259010][ T5310] R10: dffffc0000000000 R11: ffffffff859f5bb0 R12: 0000000000000003 [ 86.266092][ T5310] R13: 0000000000000023 R14: dffffc0000000000 R15: 0000000000000000 [ 86.276144][ T5310] FS: 00007fe61960e6c0(0000) GS:ffff88808c53e000(0000) knlGS:0000000000000000 [ 86.282271][ T5310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.295737][ T5310] CR2: 00007eff45cd9e9c CR3: 000000004386c000 CR4: 0000000000352ef0 [ 86.298866][ T5310] Kernel panic - not syncing: Fatal exception [ 86.301584][ T5310] Kernel Offset: disabled [ 86.303290][ T5310] Rebooting in 86400 seconds..