program:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x40100)
ioctl$FIONCLEX(r0, 0x5450)
r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4c800)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)={0x1c, 0x2c, 0x107, 0x0, 0x25dfdbfd, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="1716c2e9"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x0, 0x80008000, 0x1, 0xa, 0x4, 0x0, 0x1, 0xf, 0x11000, 0x1, 0x8, 0x1, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x9, 0xfffffffd, 0x1, 0x3fc, 0xff, 0x800, 0xe2df, 0x9, 0x1001, 0x4, 0x3, 0x7, 0x5, 0x5]})
[ 76.035357][ T5313] Bluetooth: hci0: command tx timeout
[ 76.115576][ T5335] comedi comedi3: c6xdigio: a I/O base address must be specified
[ 76.121442][ T5335] ------------[ cut here ]------------
[ 76.124536][ T5335] Unexpected driver unregister!
[ 76.127744][ T5335] WARNING: drivers/base/driver.c:273 at 0x0, CPU#0: syz.0.0/5335
[ 76.131347][ T5335] Modules linked in:
[ 76.133030][ T5335] CPU: 0 UID: 0 PID: 5335 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 76.137025][ T5335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 76.141726][ T5335] RIP: 0010:driver_unregister+0x8d/0xa0
[ 76.144273][ T5335] Code: 73 68 4c 89 f7 e8 83 f6 97 fc 48 89 df 5b 41 5e 41 5f e9 e6 55 ff ff e8 d1 64 f3 fb eb 05 e8 ca 64 f3 fb 48 8d 3d 43 06 bf 09 <67> 48 0f b9 3a 5b 41 5e 41 5f c3 cc cc cc cc cc cc cc cc 90 90 90
[ 76.153557][ T5335] RSP: 0018:ffffc9000d477a20 EFLAGS: 00010283
[ 76.156480][ T5335] RAX: ffffffff85cdf656 RBX: ffffffff8f1d8180 RCX: 0000000000100000
[ 76.160056][ T5335] RDX: ffffc9000f6f2000 RSI: 000000000000087b RDI: ffffffff8f8cfca0
[ 76.163623][ T5335] RBP: 0000000000000001 R08: ffff88803e7d612f R09: 1ffff11007cfac25
[ 76.166999][ T5335] R10: dffffc0000000000 R11: ffffffff88bed5c0 R12: ffff88803e7d6038
[ 76.170580][ T5335] R13: ffffffff8f1d80d0 R14: 0000000000000000 R15: dffffc0000000000
[ 76.174143][ T5335] FS: 00007f81bf05e6c0(0000) GS:ffff88808d683000(0000) knlGS:0000000000000000
[ 76.178604][ T5335] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 76.181812][ T5335] CR2: 00007f81be3d3e08 CR3: 0000000019ed4000 CR4: 0000000000352ef0
[ 76.185387][ T5335] Call Trace:
[ 76.186860][ T5335]
[ 76.188272][ T5335] comedi_device_detach_locked+0x178/0x750
[ 76.190974][ T5335] comedi_device_attach+0x5d4/0x720
[ 76.193346][ T5335] comedi_unlocked_ioctl+0x5ff/0x1020
[ 76.195658][ T5335] ? kasan_quarantine_put+0xdd/0x220
[ 76.198123][ T5335] ? lockdep_hardirqs_on+0x98/0x140
[ 76.200690][ T5335] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 76.203723][ T5335] ? do_futex+0x395/0x420
[ 76.205597][ T5335] ? __fget_files+0x2a/0x420
[ 76.208212][ T5335] ? __fget_files+0x2a/0x420
[ 76.210279][ T5335] ? __fget_files+0x3a0/0x420
[ 76.212635][ T5335] ? __fget_files+0x2a/0x420
[ 76.214686][ T5335] ? bpf_lsm_file_ioctl+0x9/0x20
[ 76.216765][ T5335] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 76.219575][ T5335] __se_sys_ioctl+0xfc/0x170
[ 76.221933][ T5335] do_syscall_64+0xfa/0xf80
[ 76.223906][ T5335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.226765][ T5335] ? clear_bhb_loop+0x60/0xb0
[ 76.229139][ T5335] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.232066][ T5335] RIP: 0033:0x7f81be18f7c9
[ 76.234521][ T5335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 76.243549][ T5335] RSP: 002b:00007f81bf05e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 76.247323][ T5335] RAX: ffffffffffffffda RBX: 00007f81be3e5fa0 RCX: 00007f81be18f7c9
[ 76.250769][ T5335] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003
[ 76.254235][ T5335] RBP: 00007f81be213f91 R08: 0000000000000000 R09: 0000000000000000
[ 76.257797][ T5335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 76.261227][ T5335] R13: 00007f81be3e6038 R14: 00007f81be3e5fa0 R15: 00007ffe59fd60f8
[ 76.264642][ T5335]
[ 76.266042][ T5335] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 76.269212][ T5335] CPU: 0 UID: 0 PID: 5335 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 76.273170][ T5335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 76.277796][ T5335] Call Trace:
[ 76.279331][ T5335]
[ 76.280824][ T5335] dump_stack_lvl+0x99/0x250
[ 76.283227][ T5335] ? __asan_memcpy+0x40/0x70
[ 76.285482][ T5335] ? __pfx_dump_stack_lvl+0x10/0x10
[ 76.287847][ T5335] ? __pfx__printk+0x10/0x10
[ 76.289883][ T5335] vpanic+0x237/0x6d0
[ 76.291677][ T5335] ? __pfx_vpanic+0x10/0x10
[ 76.293706][ T5335] ? is_bpf_text_address+0x292/0x2b0
[ 76.296243][ T5335] ? is_bpf_text_address+0x26/0x2b0
[ 76.298783][ T5335] panic+0xb9/0xc0
[ 76.300748][ T5335] ? __pfx_panic+0x10/0x10
[ 76.302957][ T5335] __warn+0x317/0x4b0
[ 76.304847][ T5335] __report_bug+0x288/0x500
[ 76.306912][ T5335] ? check_path+0x21/0x40
[ 76.308802][ T5335] ? __pfx___report_bug+0x10/0x10
[ 76.311094][ T5335] ? lockdep_unlock+0x89/0x120
[ 76.313391][ T5335] ? __pfx_dev_printk_emit+0x10/0x10
[ 76.315799][ T5335] report_bug_entry+0x16a/0x220
[ 76.317893][ T5335] ? driver_unregister+0x8d/0xa0
[ 76.320136][ T5335] ? driver_unregister+0x92/0xa0
[ 76.322326][ T5335] handle_bug+0xca/0x200
[ 76.324193][ T5335] exc_invalid_op+0x1a/0x50
[ 76.326219][ T5335] asm_exc_invalid_op+0x1a/0x20
[ 76.328307][ T5335] RIP: 0010:driver_unregister+0x8d/0xa0
[ 76.330765][ T5335] Code: 73 68 4c 89 f7 e8 83 f6 97 fc 48 89 df 5b 41 5e 41 5f e9 e6 55 ff ff e8 d1 64 f3 fb eb 05 e8 ca 64 f3 fb 48 8d 3d 43 06 bf 09 <67> 48 0f b9 3a 5b 41 5e 41 5f c3 cc cc cc cc cc cc cc cc 90 90 90
[ 76.339262][ T5335] RSP: 0018:ffffc9000d477a20 EFLAGS: 00010283
[ 76.342253][ T5335] RAX: ffffffff85cdf656 RBX: ffffffff8f1d8180 RCX: 0000000000100000
[ 76.346295][ T5335] RDX: ffffc9000f6f2000 RSI: 000000000000087b RDI: ffffffff8f8cfca0
[ 76.349765][ T5335] RBP: 0000000000000001 R08: ffff88803e7d612f R09: 1ffff11007cfac25
[ 76.353247][ T5335] R10: dffffc0000000000 R11: ffffffff88bed5c0 R12: ffff88803e7d6038
[ 76.356745][ T5335] R13: ffffffff8f1d80d0 R14: 0000000000000000 R15: dffffc0000000000
[ 76.360270][ T5335] ? __pfx_c6xdigio_detach+0x10/0x10
[ 76.362632][ T5335] ? driver_unregister+0x86/0xa0
[ 76.365222][ T5335] comedi_device_detach_locked+0x178/0x750
[ 76.367912][ T5335] comedi_device_attach+0x5d4/0x720
[ 76.370236][ T5335] comedi_unlocked_ioctl+0x5ff/0x1020
[ 76.372509][ T5335] ? kasan_quarantine_put+0xdd/0x220
[ 76.375115][ T5335] ? lockdep_hardirqs_on+0x98/0x140
[ 76.377960][ T5335] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 76.380754][ T5335] ? do_futex+0x395/0x420
[ 76.382790][ T5335] ? __fget_files+0x2a/0x420
[ 76.384785][ T5335] ? __fget_files+0x2a/0x420
[ 76.386668][ T5335] ? __fget_files+0x3a0/0x420
[ 76.388583][ T5335] ? __fget_files+0x2a/0x420
[ 76.390656][ T5335] ? bpf_lsm_file_ioctl+0x9/0x20
[ 76.392756][ T5335] ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 76.395295][ T5335] __se_sys_ioctl+0xfc/0x170
[ 76.397336][ T5335] do_syscall_64+0xfa/0xf80
[ 76.399252][ T5335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.401874][ T5335] ? clear_bhb_loop+0x60/0xb0
[ 76.404220][ T5335] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.406976][ T5335] RIP: 0033:0x7f81be18f7c9
[ 76.409077][ T5335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 76.417734][ T5335] RSP: 002b:00007f81bf05e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 76.421183][ T5335] RAX: ffffffffffffffda RBX: 00007f81be3e5fa0 RCX: 00007f81be18f7c9
[ 76.424502][ T5335] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003
[ 76.427999][ T5335] RBP: 00007f81be213f91 R08: 0000000000000000 R09: 0000000000000000
[ 76.431387][ T5335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 76.434926][ T5335] R13: 00007f81be3e6038 R14: 00007f81be3e5fa0 R15: 00007ffe59fd60f8
[ 76.438615][ T5335]
[ 76.440339][ T5335] Kernel Offset: disabled
[ 76.442188][ T5335] Rebooting in 86400 seconds..