pci (null): [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint pci (null): BAR 0 [io 0x1000-0x101f] pci (null): BAR 1 [mem 0x10110080-0x101100bf] ------------[ cut here ]------------ WARNING: drivers/pci/probe.c:2768 at pci_device_add+0x1058/0x1334 drivers/pci/probe.c:2768, CPU#0: syz.0.17/4920 Modules linked in: CPU: 0 UID: 0 PID: 4920 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : pci_device_add+0x1058/0x1334 drivers/pci/probe.c:2768 lr : pci_device_add+0x1058/0x1334 drivers/pci/probe.c:2768 sp : ffff800095257640 x29: ffff800095257700 x28: 1fffe0001b75cc0d x27: dfff800000000000 x26: ffff700012a4aecc x25: ffff0000dbae64b0 x24: ffff0000dbae6098 x23: 1fffe0001856a406 x22: 1fffe0001b75cc93 x21: ffff0000dbae6498 x20: ffff0000c007d000 x19: 00000000ffffffea x18: 00000000ffffffff x17: ffff80008a791000 x16: 0000000000000005 x15: ffff800080c9cd90 x14: ffff800080c9cc18 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: ffff60001b75cc22 x9 : 0000000000000000 x8 : 0000000000000000 x7 : 0000000000000000 x6 : ffff8000801682ac x5 : ffff0000d08d5f48 x4 : 0000000000000008 x3 : ffff800081ca7ca4 x2 : 00000000ffffffea x1 : ffff0000d2ce1d40 x0 : 0000000000000000 Call trace: pci_device_add+0x1058/0x1334 drivers/pci/probe.c:2768 (P) pci_scan_single_device+0x1d8/0x234 drivers/pci/probe.c:2792 pci_scan_slot+0x194/0x4b4 drivers/pci/probe.c:2875 pci_scan_child_bus_extend+0x70/0x704 drivers/pci/probe.c:3094 pci_scan_child_bus drivers/pci/probe.c:3207 [inline] pci_rescan_bus+0x24/0x4c drivers/pci/probe.c:3498 rescan_store+0xd0/0x158 drivers/pci/pci-sysfs.c:473 bus_attr_store+0x80/0xa4 drivers/base/bus.c:172 sysfs_kf_write+0xe0/0x108 fs/sysfs/file.c:145 kernfs_fop_write_iter+0x260/0x3b8 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x51c/0xa0c fs/read_write.c:687 ksys_write+0x12c/0x228 fs/read_write.c:739 __do_sys_write fs/read_write.c:750 [inline] __se_sys_write fs/read_write.c:747 [inline] __arm64_sys_write+0x7c/0x90 fs/read_write.c:747 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:736 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:755 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 irq event stamp: 3504 hardirqs last enabled at (3503): [] kasan_quarantine_put+0xb4/0x1c4 mm/kasan/quarantine.c:234 hardirqs last disabled at (3504): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:425 softirqs last enabled at (3208): [] softirq_handle_end kernel/softirq.c:468 [inline] softirqs last enabled at (3208): [] handle_softirqs+0xc28/0xd98 kernel/softirq.c:650 softirqs last disabled at (3191): [] __do_softirq+0x14/0x20 kernel/softirq.c:656 ---[ end trace 0000000000000000 ]--- pc pci (null): BAR 1 [mem 0x10110080-0x101100bf]: assigned pci (null): BAR 0 [io 0x1000-0x101f]: assigned Unable to handle kernel paging request at virtual address dfff800000000021 KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] Mem abort info: ESR = 0x0000000096000005 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x05: level 1 translation fault Data abort info: ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 CM = 0, WnR = 0, TnD = 0, TagAccess = 0 GCS = 0, Overlay = 0, DirtyBit = 0 [dfff800000000021] address between user and kernel address ranges Internal error: Oops: 0000000096000005 [#1] SMP Modules linked in: CPU: 0 UID: 0 PID: 4920 Comm: syz.0.17 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : __device_attach+0xac/0x390 drivers/base/dd.c:1074 lr : device_lock include/linux/device.h:1102 [inline] lr : __device_attach+0x88/0x390 drivers/base/dd.c:1073 sp : ffff800095257800 x29: ffff800095257860 x28: ffff800095257b68 x27: 1fffe00019d31d80 x26: 0000000000000000 x25: 1fffe00019d31d80 x24: dfff800000000000 x23: ffff700012a4af00 x22: 0000000000000108 x21: 0000000000000001 x20: ffff800095257800 x19: ffff0000dbae60d0 x18: 00000000ffffffff x17: ffff80008a791000 x16: 0000000000000005 x15: ffff80008a31ada0 x14: ffff80008a590e28 x13: 0000000000000001 x12: 0000000000000000 x11: 0000000000000000 x10: 0000000000000001 x9 : aa4aa15b2e4f5300 x8 : 0000000000000021 x7 : ffff8000824f7920 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000804579e8 x2 : 0000000000000001 x1 : ffff0000d2ce1d40 x0 : 0000000000000000 Call trace: __device_attach+0xac/0x390 drivers/base/dd.c:1074 (P) device_initial_probe+0x90/0xc8 drivers/base/dd.c:1153 pci_bus_add_device+0xbc/0x12c drivers/pci/bus.c:373 pci_bus_add_devices+0x84/0x190 drivers/pci/bus.c:394 pci_rescan_bus+0x38/0x4c drivers/pci/probe.c:3500 rescan_store+0xd0/0x158 drivers/pci/pci-sysfs.c:473 bus_attr_store+0x80/0xa4 drivers/base/bus.c:172 sysfs_kf_write+0xe0/0x108 fs/sysfs/file.c:145 kernfs_fop_write_iter+0x260/0x3b8 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x51c/0xa0c fs/read_write.c:687 ksys_write+0x12c/0x228 fs/read_write.c:739 __do_sys_write fs/read_write.c:750 [inline] __se_sys_write fs/read_write.c:747 [inline] __arm64_sys_write+0x7c/0x90 fs/read_write.c:747 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:736 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:755 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594 Code: 979a931d f94002da 91042356 d343fec8 (38f86908) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: 979a931d bl 0xfffffffffe6a4c74 4: f94002da ldr x26, [x22] 8: 91042356 add x22, x26, #0x108 c: d343fec8 lsr x8, x22, #3 * 10: 38f86908 ldrsb w8, [x8, x24] <-- trapping instruction