program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f0000000140)='\x00\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f0000000180)="0100", 0x2, 0xe)
pwrite64(r1, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4, 0x20)
pwrite64(r1, &(0x7f0000000200)='\x00\x00', 0x2, 0x5a)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r2, &(0x7f0000000280)='snd_hda_intel\x00', 0xe)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/drivers/snd_hda_intel/bind\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300)='0000:00:03.0\x00', 0xd)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)

[   77.277006][ T5284] Bluetooth: hci0: command tx timeout
[   77.282285][ T1331] ieee802154 phy0 wpan0: encryption failed: -22
[   77.285093][ T1331] ieee802154 phy1 wpan1: encryption failed: -22
[   77.444017][ T5308] BUG: unable to handle page fault for address: 000000000001c0a0
[   77.446792][ T5308] #PF: supervisor read access in kernel mode
[   77.449310][ T5308] #PF: error_code(0x0000) - not-present page
[   77.451786][ T5308] PGD 0 P4D 0 
[   77.453093][ T5308] Oops: Oops: 0000 [#1] SMP KASAN NOPTI
[   77.455228][ T5308] CPU: 0 UID: 0 PID: 5308 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) 
[   77.459591][ T5308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   77.464066][ T5308] Workqueue: events azx_probe_work
[   77.466485][ T5308] RIP: 0010:azx_probe_work+0x969/0x2860
[   77.468910][ T5308] Code: 8b 7c 24 38 0f 85 01 1b 00 00 66 45 89 27 48 8b 7c 24 48 e8 e9 f8 84 fb 42 80 3c 2b 00 74 08 4c 89 f7 e8 ea 4b 9f f8 49 8b 06 <66> 8b 00 89 44 24 30 0f 1f 44 00 00 e8 36 19 30 f8 48 8b 9c 24 88
[   77.476623][ T5308] RSP: 0018:ffffc9000e50f940 EFLAGS: 00010246
[   77.479161][ T5308] RAX: 000000000001c0a0 RBX: 1ffff110066df40b RCX: 0000000000000000
[   77.482347][ T5308] RDX: 0000000000000006 RSI: ffffffff8e231ffb RDI: 00000000ffffffff
[   77.485359][ T5308] RBP: ffffc9000e50faf0 R08: ffffffff9057c237 R09: 1ffffffff20af846
[   77.488320][ T5308] R10: dffffc0000000000 R11: fffffbfff20af847 R12: 000000000000002a
[   77.491222][ T5308] R13: dffffc0000000000 R14: ffff8880336fa058 R15: ffff8880336fa890
[   77.494141][ T5308] FS:  0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[   77.497312][ T5308] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   77.499850][ T5308] CR2: 000000000001c0a0 CR3: 000000001f71f000 CR4: 0000000000352ef0
[   77.502810][ T5308] Call Trace:
[   77.504126][ T5308]  <TASK>
[   77.505264][ T5308]  ? __pfx_azx_probe_work+0x10/0x10
[   77.507290][ T5308]  ? rcu_is_watching+0x15/0xb0
[   77.509502][ T5308]  ? process_scheduled_works+0xa20/0x14e0
[   77.511870][ T5308]  process_scheduled_works+0xa8e/0x14e0
[   77.513758][ T5308]  ? __pfx_process_scheduled_works+0x10/0x10
[   77.515902][ T5308]  ? assign_work+0x3cf/0x5d0
[   77.517612][ T5308]  worker_thread+0xa47/0xfb0
[   77.519370][ T5308]  ? __kthread_parkme+0x71/0x1f0
[   77.521244][ T5308]  kthread+0x388/0x470
[   77.522784][ T5308]  ? __pfx_worker_thread+0x10/0x10
[   77.524652][ T5308]  ? __pfx_kthread+0x10/0x10
[   77.526355][ T5308]  ret_from_fork+0x514/0xb70
[   77.528018][ T5308]  ? __pfx_ret_from_fork+0x10/0x10
[   77.529830][ T5308]  ? __switch_to+0xc89/0x1420
[   77.531590][ T5308]  ? __pfx_kthread+0x10/0x10
[   77.533353][ T5308]  ret_from_fork_asm+0x1a/0x30
[   77.535227][ T5308]  </TASK>
[   77.536420][ T5308] Modules linked in:
[   77.538018][ T5308] CR2: 000000000001c0a0
[   77.539653][ T5308] ---[ end trace 0000000000000000 ]---
[   77.541790][ T5308] RIP: 0010:azx_probe_work+0x969/0x2860
[   77.543983][ T5308] Code: 8b 7c 24 38 0f 85 01 1b 00 00 66 45 89 27 48 8b 7c 24 48 e8 e9 f8 84 fb 42 80 3c 2b 00 74 08 4c 89 f7 e8 ea 4b 9f f8 49 8b 06 <66> 8b 00 89 44 24 30 0f 1f 44 00 00 e8 36 19 30 f8 48 8b 9c 24 88
[   77.551901][ T5308] RSP: 0018:ffffc9000e50f940 EFLAGS: 00010246
[   77.554434][ T5308] RAX: 000000000001c0a0 RBX: 1ffff110066df40b RCX: 0000000000000000
[   77.557634][ T5308] RDX: 0000000000000006 RSI: ffffffff8e231ffb RDI: 00000000ffffffff
[   77.560904][ T5308] RBP: ffffc9000e50faf0 R08: ffffffff9057c237 R09: 1ffffffff20af846
[   77.564104][ T5308] R10: dffffc0000000000 R11: fffffbfff20af847 R12: 000000000000002a
[   77.567400][ T5308] R13: dffffc0000000000 R14: ffff8880336fa058 R15: ffff8880336fa890
[   77.570655][ T5308] FS:  0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[   77.574300][ T5308] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   77.576889][ T5308] CR2: 000000000001c0a0 CR3: 000000001f71f000 CR4: 0000000000352ef0
[   77.580165][ T5308] Kernel panic - not syncing: Fatal exception
[   77.583756][ T5308] Kernel Offset: disabled
[   77.585447][ T5308] Rebooting in 86400 seconds..