program: r0 = openat$comedi(0xffffffffffffff9c, &(0x7f000000b200)='/dev/comedi1\x00', 0x8040, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000100)={'c6xdigio\x00', [0x0, 0xf, 0x6, 0x8, 0xfffffffb, 0xfffffff1, 0x4d7, 0x2, 0x4, 0x4, 0x0, 0x401, 0x3, 0x47, 0x9, 0x7ff, 0xa, 0x0, 0x1f29, 0x5, 0x8000, 0x28c, 0x8, 0x6, 0x54, 0x10001, 0x101, 0x5, 0x10001, 0x8, 0x1]}) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) (async) ioctl$COMEDI_BUFINFO(r1, 0xc02c640e, &(0x7f0000000000)={0x0, 0xecae, 0xfffffff0, 0x5, 0x10000, 0x7ff, 0x8}) [ 74.814420][ T5314] Bluetooth: hci0: command tx timeout [ 74.853245][ T5335] comedi comedi1: c6xdigio: a I/O base address must be specified [ 74.879505][ T5335] ------------[ cut here ]------------ [ 74.881879][ T5335] Unexpected driver unregister! [ 74.883573][ T5335] WARNING: drivers/base/driver.c:273 at 0x0, CPU#0: syz.0.0/5335 [ 74.886911][ T5335] Modules linked in: [ 74.888691][ T5335] CPU: 0 UID: 0 PID: 5335 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 74.892858][ T5335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.897649][ T5335] RIP: 0010:driver_unregister+0x8d/0xa0 [ 74.900242][ T5335] Code: 73 68 4c 89 f7 e8 93 e4 97 fc 48 89 df 5b 41 5e 41 5f e9 96 52 ff ff e8 e1 81 f2 fb eb 05 e8 da 81 f2 fb 48 8d 3d 53 39 be 09 <67> 48 0f b9 3a 5b 41 5e 41 5f c3 cc cc cc cc cc cc cc cc 90 90 90 [ 74.908463][ T5335] RSP: 0018:ffffc9000d50fa20 EFLAGS: 00010293 [ 74.910849][ T5335] RAX: ffffffff85ceedd6 RBX: ffffffff8f1da080 RCX: ffff888038abc980 [ 74.914340][ T5335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8f8d2730 [ 74.918368][ T5335] RBP: 0000000000000001 R08: ffff88803e9bd12f R09: 1ffff11007d37a25 [ 74.921961][ T5335] R10: dffffc0000000000 R11: ffffffff88c01520 R12: ffff88803e9bd038 [ 74.926129][ T5335] R13: ffffffff8f1d9fd0 R14: 0000000000000000 R15: dffffc0000000000 [ 74.929710][ T5335] FS: 00007fa1b7f3f6c0(0000) GS:ffff88808d679000(0000) knlGS:0000000000000000 [ 74.933398][ T5335] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.936301][ T5335] CR2: 0000562cfbc67168 CR3: 0000000011369000 CR4: 0000000000352ef0 [ 74.939741][ T5335] Call Trace: [ 74.941117][ T5335] [ 74.942483][ T5335] comedi_device_detach_locked+0x178/0x750 [ 74.944924][ T5335] comedi_device_attach+0x5d4/0x720 [ 74.947003][ T5335] comedi_unlocked_ioctl+0x5ff/0x1020 [ 74.949195][ T5335] ? kasan_quarantine_put+0xdd/0x220 [ 74.951241][ T5335] ? lockdep_hardirqs_on+0x98/0x140 [ 74.953196][ T5335] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 74.958154][ T5335] ? do_futex+0x333/0x420 [ 74.959806][ T5335] ? __fget_files+0x2a/0x420 [ 74.961442][ T5335] ? __fget_files+0x3a0/0x420 [ 74.963089][ T5335] ? __fget_files+0x2a/0x420 [ 74.965113][ T5335] ? bpf_lsm_file_ioctl+0x9/0x20 [ 74.967386][ T5335] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 74.970124][ T5335] __se_sys_ioctl+0xfc/0x170 [ 74.972207][ T5335] do_syscall_64+0xfa/0xf80 [ 74.974555][ T5335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.977201][ T5335] ? clear_bhb_loop+0x60/0xb0 [ 74.979035][ T5335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.981371][ T5335] RIP: 0033:0x7fa1b718f7c9 [ 74.984142][ T5335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.991931][ T5335] RSP: 002b:00007fa1b7f3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.995409][ T5335] RAX: ffffffffffffffda RBX: 00007fa1b73e5fa0 RCX: 00007fa1b718f7c9 [ 74.999020][ T5335] RDX: 0000200000000100 RSI: 0000000040946400 RDI: 0000000000000003 [ 75.002515][ T5335] RBP: 00007fa1b7213f91 R08: 0000000000000000 R09: 0000000000000000 [ 75.005905][ T5335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.009244][ T5335] R13: 00007fa1b73e6038 R14: 00007fa1b73e5fa0 R15: 00007ffc9a016308 [ 75.012483][ T5335] [ 75.013703][ T5335] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.016684][ T5335] CPU: 0 UID: 0 PID: 5335 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.020495][ T5335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.025338][ T5335] Call Trace: [ 75.027072][ T5335] [ 75.028638][ T5335] dump_stack_lvl+0x99/0x250 [ 75.031011][ T5335] ? __asan_memcpy+0x40/0x70 [ 75.033292][ T5335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.035785][ T5335] ? __pfx__printk+0x10/0x10 [ 75.038044][ T5335] vpanic+0x237/0x6d0 [ 75.040009][ T5335] ? __pfx_vpanic+0x10/0x10 [ 75.042018][ T5335] ? is_bpf_text_address+0x292/0x2b0 [ 75.044075][ T5335] ? is_bpf_text_address+0x26/0x2b0 [ 75.046186][ T5335] panic+0xb9/0xc0 [ 75.047944][ T5335] ? __pfx_panic+0x10/0x10 [ 75.050356][ T5335] __warn+0x317/0x4b0 [ 75.052512][ T5335] __report_bug+0x288/0x500 [ 75.054572][ T5335] ? check_path+0x21/0x40 [ 75.056529][ T5335] ? __pfx___report_bug+0x10/0x10 [ 75.058820][ T5335] ? lockdep_unlock+0x89/0x120 [ 75.060968][ T5335] ? __pfx_dev_printk_emit+0x10/0x10 [ 75.063372][ T5335] report_bug_entry+0x16a/0x220 [ 75.065970][ T5335] ? driver_unregister+0x8d/0xa0 [ 75.068107][ T5335] ? driver_unregister+0x92/0xa0 [ 75.070259][ T5335] handle_bug+0xca/0x200 [ 75.072186][ T5335] exc_invalid_op+0x1a/0x50 [ 75.074025][ T5335] asm_exc_invalid_op+0x1a/0x20 [ 75.075721][ T5335] RIP: 0010:driver_unregister+0x8d/0xa0 [ 75.077737][ T5335] Code: 73 68 4c 89 f7 e8 93 e4 97 fc 48 89 df 5b 41 5e 41 5f e9 96 52 ff ff e8 e1 81 f2 fb eb 05 e8 da 81 f2 fb 48 8d 3d 53 39 be 09 <67> 48 0f b9 3a 5b 41 5e 41 5f c3 cc cc cc cc cc cc cc cc 90 90 90 [ 75.085990][ T5335] RSP: 0018:ffffc9000d50fa20 EFLAGS: 00010293 [ 75.088724][ T5335] RAX: ffffffff85ceedd6 RBX: ffffffff8f1da080 RCX: ffff888038abc980 [ 75.092236][ T5335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8f8d2730 [ 75.095727][ T5335] RBP: 0000000000000001 R08: ffff88803e9bd12f R09: 1ffff11007d37a25 [ 75.099485][ T5335] R10: dffffc0000000000 R11: ffffffff88c01520 R12: ffff88803e9bd038 [ 75.102901][ T5335] R13: ffffffff8f1d9fd0 R14: 0000000000000000 R15: dffffc0000000000 [ 75.106818][ T5335] ? __pfx_c6xdigio_detach+0x10/0x10 [ 75.109197][ T5335] ? driver_unregister+0x86/0xa0 [ 75.111452][ T5335] comedi_device_detach_locked+0x178/0x750 [ 75.114085][ T5335] comedi_device_attach+0x5d4/0x720 [ 75.116485][ T5335] comedi_unlocked_ioctl+0x5ff/0x1020 [ 75.118845][ T5335] ? kasan_quarantine_put+0xdd/0x220 [ 75.121059][ T5335] ? lockdep_hardirqs_on+0x98/0x140 [ 75.123172][ T5335] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 75.125357][ T5335] ? do_futex+0x333/0x420 [ 75.127017][ T5335] ? __fget_files+0x2a/0x420 [ 75.128870][ T5335] ? __fget_files+0x3a0/0x420 [ 75.130686][ T5335] ? __fget_files+0x2a/0x420 [ 75.132484][ T5335] ? bpf_lsm_file_ioctl+0x9/0x20 [ 75.134443][ T5335] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 75.136634][ T5335] __se_sys_ioctl+0xfc/0x170 [ 75.138637][ T5335] do_syscall_64+0xfa/0xf80 [ 75.140869][ T5335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.143370][ T5335] ? clear_bhb_loop+0x60/0xb0 [ 75.145193][ T5335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.147327][ T5335] RIP: 0033:0x7fa1b718f7c9 [ 75.149107][ T5335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.156914][ T5335] RSP: 002b:00007fa1b7f3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.160045][ T5335] RAX: ffffffffffffffda RBX: 00007fa1b73e5fa0 RCX: 00007fa1b718f7c9 [ 75.163384][ T5335] RDX: 0000200000000100 RSI: 0000000040946400 RDI: 0000000000000003 [ 75.166738][ T5335] RBP: 00007fa1b7213f91 R08: 0000000000000000 R09: 0000000000000000 [ 75.169911][ T5335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.172849][ T5335] R13: 00007fa1b73e6038 R14: 00007fa1b73e5fa0 R15: 00007ffc9a016308 [ 75.175874][ T5335] [ 75.177314][ T5335] Kernel Offset: disabled [ 75.178850][ T5335] Rebooting in 86400 seconds..