pci (null): [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint pci (null): BAR 0 [io 0x1000-0x101f] pci (null): BAR 1 [mem 0x10110080-0x101100bf] ------------[ cut here ]------------ WARNING: drivers/pci/probe.c:2768 at pci_device_add+0x1058/0x1334 drivers/pci/probe.c:2768, CPU#0: syz.0.1304/10172 Modules linked in: CPU: 0 UID: 0 PID: 10172 Comm: syz.0.1304 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : pci_device_add+0x1058/0x1334 drivers/pci/probe.c:2768 lr : pci_device_add+0x1058/0x1334 drivers/pci/probe.c:2768 sp : ffff8000924e7640 x29: ffff8000924e7700 x28: 1fffe0001b43400d x27: dfff800000000000 x26: ffff70001249cecc x25: ffff0000da1a04b0 x24: ffff0000da1a0098 x23: 1fffe00018561e06 x22: 1fffe0001b434093 x21: ffff0000da1a0498 x20: ffff0000c007d000 x19: 00000000ffffffea x18: 1fffe00034bb7428 x17: 0000000000000003 x16: ffff800088b27000 x15: ffff800080c9db3c x14: ffff800080c9d9bc x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: ffff60001b434022 x9 : 0000000000000000 x8 : 0000000000000000 x7 : 0000000000000000 x6 : ffff800080168534 x5 : ffff0000f1388d98 x4 : 0000000000000008 x3 : ffff800081ca9b6c x2 : 00000000ffffffea x1 : ffff0000d1498000 x0 : 0000000000000000 Call trace: pci_device_add+0x1058/0x1334 drivers/pci/probe.c:2768 (P) pci_scan_single_device+0x1d8/0x234 drivers/pci/probe.c:2792 pci_scan_slot+0x194/0x4b4 drivers/pci/probe.c:2875 pci_scan_child_bus_extend+0x70/0x704 drivers/pci/probe.c:3094 pci_scan_child_bus drivers/pci/probe.c:3207 [inline] pci_rescan_bus+0x24/0x4c drivers/pci/probe.c:3498 rescan_store+0xd0/0x158 drivers/pci/pci-sysfs.c:473 bus_attr_store+0x80/0xa4 drivers/base/bus.c:172 sysfs_kf_write+0xe0/0x108 fs/sysfs/file.c:145 kernfs_fop_write_iter+0x260/0x3b8 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x51c/0xa0c fs/read_write.c:687 ksys_write+0x12c/0x228 fs/read_write.c:739 __do_sys_write fs/read_write.c:750 [inline] __se_sys_write fs/read_write.c:747 [inline] __arm64_sys_write+0x84/0x98 fs/read_write.c:747 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:738 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:757 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590 irq event stamp: 2032 hardirqs last enabled at (2031): [] kasan_quarantine_put+0xb4/0x1c4 mm/kasan/quarantine.c:234 hardirqs last disabled at (2032): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:425 softirqs last enabled at (1832): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (1832): [] handle_softirqs+0xc28/0xd98 kernel/softirq.c:650 softirqs last disabled at (1819): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]--- pci (null): BAR 1 [mem 0x10110080-0x101100bf]: assigned pci (null): BAR 0 [io 0x1000-0x101f]: assigned Unable to handle kernel paging request at virtual address dfff800000000021 KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] Mem abort info: ESR = 0x0000000096000005 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x05: level 1 translation fault Data abort info: ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 CM = 0, WnR = 0, TnD = 0, TagAccess = 0 GCS = 0, Overlay = 0, DirtyBit = 0 [dfff800000000021] address between user and kernel address ranges Internal error: Oops: 0000000096000005 [#1] SMP Modules linked in: CPU: 1 UID: 0 PID: 10172 Comm: syz.0.1304 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : __device_attach+0xac/0x390 drivers/base/dd.c:1074 lr : device_lock include/linux/device.h:1102 [inline] lr : __device_attach+0x88/0x390 drivers/base/dd.c:1073 sp : ffff8000924e7800 x29: ffff8000924e7860 x28: ffff8000924e7b68 x27: 1fffe0001b12ed00 x26: 0000000000000000 x25: 1fffe0001b12ed00 x24: dfff800000000000 x23: ffff70001249cf00 x22: 0000000000000108 x21: 0000000000000001 x20: ffff8000924e7800 x19: ffff0000da1a00d0 x18: 1fffe00034bbbe28 x17: 0000000000000003 x16: ffff800088b27000 x15: ffff800088bdd260 x14: 00000000ffff8000 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: 0000000000000001 x9 : 2d3459e958ae2700 x8 : 0000000000000021 x7 : ffff8000824fada4 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff80008045844c x2 : 0000000000000001 x1 : ffff0000d1498000 x0 : 0000000000000000 Call trace: __device_attach+0xac/0x390 drivers/base/dd.c:1074 (P) device_initial_probe+0x90/0xc8 drivers/base/dd.c:1153 pci_bus_add_device+0xbc/0x12c drivers/pci/bus.c:373 pci_bus_add_devices+0x84/0x190 drivers/pci/bus.c:394 pci_rescan_bus+0x38/0x4c drivers/pci/probe.c:3500 rescan_store+0xd0/0x158 drivers/pci/pci-sysfs.c:473 bus_attr_store+0x80/0xa4 drivers/base/bus.c:172 sysfs_kf_write+0xe0/0x108 fs/sysfs/file.c:145 kernfs_fop_write_iter+0x260/0x3b8 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x51c/0xa0c fs/read_write.c:687 ksys_write+0x12c/0x228 fs/read_write.c:739 __do_sys_write fs/read_write.c:750 [inline] __se_sys_write fs/read_write.c:747 [inline] __arm64_sys_write+0x84/0x98 fs/read_write.c:747 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:738 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:757 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590 Code: 979a8963 f94002da 91042356 d343fec8 (38f86908) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: 979a8963 bl 0xfffffffffe6a258c 4: f94002da ldr x26, [x22] 8: 91042356 add x22, x26, #0x108 c: d343fec8 lsr x8, x22, #3 * 10: 38f86908 ldrsb w8, [x8, x24] <-- trapping instruction