comedi comedi3: c6xdigio: I/O port conflict (0x1006,3) ------------[ cut here ]------------ Unexpected driver unregister! WARNING: drivers/base/driver.c:273 at 0x0, CPU#3: syz.5.3969/19478 Modules linked in: CPU: 3 UID: 0 PID: 19478 Comm: syz.5.3969 Tainted: G L syzkaller #0 PREEMPT(full) Tainted: [L]=SOFTLOCKUP Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:driver_unregister drivers/base/driver.c:273 [inline] RIP: 0010:driver_unregister+0x89/0xb0 drivers/base/driver.c:270 Code: 00 75 3a 48 8b 73 68 48 89 ef e8 72 be 87 fc 48 89 df e8 1a 94 ff ff 5b 5d e9 b3 b4 dc fb e8 ae b4 dc fb 48 8d 3d 57 3a b0 0a <67> 48 0f b9 3a 5b 5d e9 9b b4 dc fb e8 e6 be 45 fc eb 9a e8 df be RSP: 0018:ffffc90003af79a0 EFLAGS: 00010283 RAX: 00000000000012cd RBX: ffffffff8ff4fa40 RCX: ffffc90027db2000 RDX: 0000000000080000 RSI: ffffffff85e17192 RDI: ffffffff9091abf0 RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000000 R11: 000000005facc7fc R12: ffffffff8ff4f980 R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888107087000 FS: 00007fe5932816c0(0000) GS:ffff8880d6c60000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000110c265f73 CR3: 000000004ec83000 CR4: 0000000000352ef0 Call Trace: comedi_device_detach_locked+0x12f/0xa50 drivers/comedi/drivers.c:207 comedi_device_detach+0x67/0xb0 drivers/comedi/drivers.c:215 comedi_device_attach+0x43d/0x900 drivers/comedi/drivers.c:1011 do_devconfig_ioctl+0x1b1/0x710 drivers/comedi/comedi_fops.c:872 comedi_unlocked_ioctl+0x165d/0x2ee0 drivers/comedi/comedi_fops.c:2178 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe59238f7c9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fe593281038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fe5925e6090 RCX: 00007fe59238f7c9 RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000008 RBP: 00007fe592413f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fe5925e6128 R14: 00007fe5925e6090 R15: 00007ffe901be1c8 ---------------- Code disassembly (best guess): 0: 00 75 3a add %dh,0x3a(%rbp) 3: 48 8b 73 68 mov 0x68(%rbx),%rsi 7: 48 89 ef mov %rbp,%rdi a: e8 72 be 87 fc call 0xfc87be81 f: 48 89 df mov %rbx,%rdi 12: e8 1a 94 ff ff call 0xffff9431 17: 5b pop %rbx 18: 5d pop %rbp 19: e9 b3 b4 dc fb jmp 0xfbdcb4d1 1e: e8 ae b4 dc fb call 0xfbdcb4d1 23: 48 8d 3d 57 3a b0 0a lea 0xab03a57(%rip),%rdi # 0xab03a81 * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: 5b pop %rbx 30: 5d pop %rbp 31: e9 9b b4 dc fb jmp 0xfbdcb4d1 36: e8 e6 be 45 fc call 0xfc45bf21 3b: eb 9a jmp 0xffffffd7 3d: e8 .byte 0xe8 3e: df .byte 0xdf 3f: be .byte 0xbe