program:
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x40}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x31)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="f7", 0x1}], 0x1}], 0x1, 0x40800)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x98, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x74d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2ce}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x448}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x3c, 0x0, 0x1, 0x0, 0x0, {0x36}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
r4 = syz_open_dev$loop(&(0x7f0000005180), 0x0, 0x2000)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, 0x0)
mprotect(&(0x7f000005d000/0x3000)=nil, 0x3000, 0x3000008)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0xfffffffb, 0x0, 0x2, 0x7, 0x88d6, 0x8f, 0xfffffffd, 0x100010, 0x101, 0xffffffbf, 0x200, 0x4, 0x8, 0x1, 0x8, 0x7, 0x3, 0x3, 0x3, 0x101, 0x100, 0x3, 0x80, 0x5, 0xb, 0x1, 0x5721, 0x7db, 0x0, 0x4]})
openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x40}}, 0x0) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}}, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x31) (async)
accept4(r1, 0x0, 0x0, 0x800) (async)
sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="f7", 0x1}], 0x1}], 0x1, 0x40800) (async)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x98, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x74d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2ce}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x448}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) (async)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x3c, 0x0, 0x1, 0x0, 0x0, {0x36}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async)
syz_open_dev$loop(&(0x7f0000005180), 0x0, 0x2000) (async)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, 0x0) (async)
mprotect(&(0x7f000005d000/0x3000)=nil, 0x3000, 0x3000008) (async)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0xfffffffb, 0x0, 0x2, 0x7, 0x88d6, 0x8f, 0xfffffffd, 0x100010, 0x101, 0xffffffbf, 0x200, 0x4, 0x8, 0x1, 0x8, 0x7, 0x3, 0x3, 0x3, 0x101, 0x100, 0x3, 0x80, 0x5, 0xb, 0x1, 0x5721, 0x7db, 0x0, 0x4]}) (async)
[ 74.320319][ T47] Bluetooth: hci0: command tx timeout
[ 74.372277][ T5334] comedi comedi3: c6xdigio: I/O port conflict (0xfffffffffffffffb,3)
[ 74.375258][ T5334] ------------[ cut here ]------------
[ 74.377764][ T5334] Unexpected driver unregister!
[ 74.380480][ T5334] WARNING: drivers/base/driver.c:273 at 0x0, CPU#0: syz.0.0/5334
[ 74.383665][ T5334] Modules linked in:
[ 74.385536][ T5334] CPU: 0 UID: 0 PID: 5334 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 74.389562][ T5334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 74.393838][ T5334] RIP: 0010:driver_unregister+0x8d/0xa0
[ 74.396609][ T5334] Code: 73 68 4c 89 f7 e8 93 92 95 fc 48 89 df 5b 41 5e 41 5f e9 76 52 ff ff e8 81 15 f0 fb eb 05 e8 7a 15 f0 fb 48 8d 3d 13 91 db 09 <67> 48 0f b9 3a 5b 41 5e 41 5f c3 cc cc cc cc cc cc cc cc 90 90 90
[ 74.404820][ T5334] RSP: 0018:ffffc9000e61fa20 EFLAGS: 00010293
[ 74.407159][ T5334] RAX: ffffffff85d1ab16 RBX: ffffffff8f3db980 RCX: ffff88801f8824c0
[ 74.410801][ T5334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8fad3c30
[ 74.414428][ T5334] RBP: 0000000000000001 R08: ffff88803f6bf92f R09: 1ffff11007ed7f25
[ 74.417649][ T5334] R10: dffffc0000000000 R11: ffffffff88c8c880 R12: ffff88803f6bf838
[ 74.421106][ T5334] R13: ffffffff8f3db8d0 R14: 0000000000000000 R15: dffffc0000000000
[ 74.424430][ T5334] FS: 00007f3d63f0f6c0(0000) GS:ffff88808d23e000(0000) knlGS:0000000000000000
[ 74.428102][ T5334] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 74.430880][ T5334] CR2: 0000000000000000 CR3: 00000000119e9000 CR4: 0000000000352ef0
[ 74.434050][ T5334] Call Trace:
[ 74.435446][ T5334]
[ 74.436660][ T5334] comedi_device_detach_locked+0x178/0x750
[ 74.438777][ T5334] comedi_device_attach+0x5d4/0x720
[ 74.440917][ T5334] comedi_unlocked_ioctl+0x673/0x10b0
[ 74.443214][ T5334] ? kasan_quarantine_put+0xdd/0x220
[ 74.445246][ T5334] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 74.447779][ T5334] ? do_mprotect_pkey+0x232/0xcd0
[ 74.450104][ T5334] ? do_futex+0x395/0x420
[ 74.452052][ T5334] ? __fget_files+0x2a/0x420
[ 74.454103][ T5334] ? __fget_files+0x3a0/0x420
[ 74.456338][ T5334] ? __fget_files+0x2a/0x420
[ 74.458313][ T5334] ? bpf_lsm_file_ioctl+0x9/0x20
[ 74.460534][ T5334] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 74.462937][ T5334] __se_sys_ioctl+0xfc/0x170
[ 74.464764][ T5334] do_syscall_64+0xfa/0xf80
[ 74.466844][ T5334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.469178][ T5334] ? clear_bhb_loop+0x60/0xb0
[ 74.471371][ T5334] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.473970][ T5334] RIP: 0033:0x7f3d62f8f7c9
[ 74.475944][ T5334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 74.483740][ T5334] RSP: 002b:00007f3d63f0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 74.487674][ T5334] RAX: ffffffffffffffda RBX: 00007f3d631e5fa0 RCX: 00007f3d62f8f7c9
[ 74.491184][ T5334] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003
[ 74.494604][ T5334] RBP: 00007f3d63013f91 R08: 0000000000000000 R09: 0000000000000000
[ 74.497961][ T5334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 74.501286][ T5334] R13: 00007f3d631e6038 R14: 00007f3d631e5fa0 R15: 00007fff1e1163d8
[ 74.503830][ T5334]
[ 74.504998][ T5334] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 74.507964][ T5334] CPU: 0 UID: 0 PID: 5334 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 74.511519][ T5334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 74.515822][ T5334] Call Trace:
[ 74.517310][ T5334]
[ 74.518658][ T5334] dump_stack_lvl+0x99/0x250
[ 74.520776][ T5334] ? __asan_memcpy+0x40/0x70
[ 74.522812][ T5334] ? __pfx_dump_stack_lvl+0x10/0x10
[ 74.525146][ T5334] ? __pfx__printk+0x10/0x10
[ 74.527291][ T5334] vpanic+0x237/0x6d0
[ 74.529118][ T5334] ? __pfx_vpanic+0x10/0x10
[ 74.531157][ T5334] ? is_bpf_text_address+0x292/0x2b0
[ 74.533544][ T5334] ? is_bpf_text_address+0x26/0x2b0
[ 74.535848][ T5334] panic+0xb9/0xc0
[ 74.537537][ T5334] ? __pfx_panic+0x10/0x10
[ 74.539566][ T5334] __warn+0x317/0x4b0
[ 74.541392][ T5334] __report_bug+0x288/0x500
[ 74.543463][ T5334] ? check_path+0x21/0x40
[ 74.545452][ T5334] ? __pfx___report_bug+0x10/0x10
[ 74.548012][ T5334] ? lockdep_unlock+0x89/0x120
[ 74.550217][ T5334] ? __pfx_dev_printk_emit+0x10/0x10
[ 74.552452][ T5334] report_bug_entry+0x16a/0x220
[ 74.554431][ T5334] ? driver_unregister+0x8d/0xa0
[ 74.556500][ T5334] ? driver_unregister+0x92/0xa0
[ 74.558508][ T5334] handle_bug+0xca/0x200
[ 74.560337][ T5334] exc_invalid_op+0x1a/0x50
[ 74.562329][ T5334] asm_exc_invalid_op+0x1a/0x20
[ 74.564470][ T5334] RIP: 0010:driver_unregister+0x8d/0xa0
[ 74.566905][ T5334] Code: 73 68 4c 89 f7 e8 93 92 95 fc 48 89 df 5b 41 5e 41 5f e9 76 52 ff ff e8 81 15 f0 fb eb 05 e8 7a 15 f0 fb 48 8d 3d 13 91 db 09 <67> 48 0f b9 3a 5b 41 5e 41 5f c3 cc cc cc cc cc cc cc cc 90 90 90
[ 74.575133][ T5334] RSP: 0018:ffffc9000e61fa20 EFLAGS: 00010293
[ 74.577816][ T5334] RAX: ffffffff85d1ab16 RBX: ffffffff8f3db980 RCX: ffff88801f8824c0
[ 74.581255][ T5334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8fad3c30
[ 74.584743][ T5334] RBP: 0000000000000001 R08: ffff88803f6bf92f R09: 1ffff11007ed7f25
[ 74.588206][ T5334] R10: dffffc0000000000 R11: ffffffff88c8c880 R12: ffff88803f6bf838
[ 74.591617][ T5334] R13: ffffffff8f3db8d0 R14: 0000000000000000 R15: dffffc0000000000
[ 74.595149][ T5334] ? __pfx_c6xdigio_detach+0x10/0x10
[ 74.597508][ T5334] ? driver_unregister+0x86/0xa0
[ 74.599679][ T5334] comedi_device_detach_locked+0x178/0x750
[ 74.602239][ T5334] comedi_device_attach+0x5d4/0x720
[ 74.604507][ T5334] comedi_unlocked_ioctl+0x673/0x10b0
[ 74.606850][ T5334] ? kasan_quarantine_put+0xdd/0x220
[ 74.609201][ T5334] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 74.611789][ T5334] ? do_mprotect_pkey+0x232/0xcd0
[ 74.613999][ T5334] ? do_futex+0x395/0x420
[ 74.615958][ T5334] ? __fget_files+0x2a/0x420
[ 74.617928][ T5334] ? __fget_files+0x3a0/0x420
[ 74.619957][ T5334] ? __fget_files+0x2a/0x420
[ 74.622013][ T5334] ? bpf_lsm_file_ioctl+0x9/0x20
[ 74.624147][ T5334] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 74.626637][ T5334] __se_sys_ioctl+0xfc/0x170
[ 74.628616][ T5334] do_syscall_64+0xfa/0xf80
[ 74.630624][ T5334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.633298][ T5334] ? clear_bhb_loop+0x60/0xb0
[ 74.635321][ T5334] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 74.637913][ T5334] RIP: 0033:0x7f3d62f8f7c9
[ 74.639894][ T5334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 74.648161][ T5334] RSP: 002b:00007f3d63f0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 74.651639][ T5334] RAX: ffffffffffffffda RBX: 00007f3d631e5fa0 RCX: 00007f3d62f8f7c9
[ 74.655086][ T5334] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003
[ 74.658474][ T5334] RBP: 00007f3d63013f91 R08: 0000000000000000 R09: 0000000000000000
[ 74.661760][ T5334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 74.665038][ T5334] R13: 00007f3d631e6038 R14: 00007f3d631e5fa0 R15: 00007fff1e1163d8
[ 74.668532][ T5334]
[ 74.670221][ T5334] Kernel Offset: disabled
[ 74.672014][ T5334] Rebooting in 86400 seconds..