Extracting prog: 2m1.025530819s
Minimizing prog: 32m37.582328816s
Simplifying prog options: 0s
Extracting C: 31.376814266s
Simplifying C: 9m0.339764117s


extracting reproducer from 71 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_FIOGETOWN-syz_open_procfs$userns-openat$comedi-ioctl$COMEDI_DEVCONFIG-socket$inet6_tcp-socketpair$tipc-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-prctl$PR_SCHED_CORE-write$vhost_msg_v2-write$vhost_msg_v2-write$vhost_msg_v2-setsockopt$TIPC_SRC_DROPPABLE-sendmmsg$inet-close_range-syz_mount_image$ext4
detailed listing:
executing program 0:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
syz_open_procfs$userns(r0, &(0x7f0000000100))
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi1\x00', 0x40, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000740)={'c6xdigio\x00', [0x6, 0x7, 0x6a, 0x8, 0x5, 0x1, 0x55bf, 0x6, 0x10, 0x9, 0x6, 0x6, 0x7f, 0x4de, 0x3ff, 0x83b9, 0x9, 0x6, 0x7, 0x23, 0x0, 0xffff0001, 0x3ff, 0x33f1, 0x649, 0x0, 0xfffffffa, 0x7, 0x0, 0x5, 0xffffffff]})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, 0x0, 0x0)
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f0000000000), 0xfc, 0x575, &(0x7f0000000180)="$eJzs3e9rJGcdAPDvbHbz4y6aqH1RhdbDFu6KXnLp2TaI9E4Q3xWU6usz5PZCuE32yG7aSyiSwz9AENGCb/SVbwT/AEHuTyhCwb4XK8qhVwWLaEfmR+6SdKfZpNldm3w+8GSenXlmvt9ndzM7O/MkE8CZdSEirkfEWEQ8FxEz5fxaWWKnKFm79x6+sZyVJNL01b8lkZTzsmZJWTLny9Umi8l+U8Wks7V9e6nVam6Us+e7a3fmO1vbl1fXllaaK831q1cXXlx8afGFxSsn0s+sXy9/888//dGvvvXy777y+h9v/PXSD7J8p8vlu/04acVz0siei0fqEbExiGAjMFb2599poaLZxJDTAgCgQnaM/9mI+FJ+/D8TY/nRXLXxPfVk4NkBAAAAJyG9Nh3/SSLSI2oceQ0AAABgVGr5GNikNleOBZiOWm1urhjD+0Scq7Xane6Xb7U3128WY2Vno1G7tdpqXsnH1E5ERCPJHi88OqNQPH4+b5uVZN8Y4J/MTOXL55bbrZujOOEBAAAAZ9D5A9///zlTfP8HAAAATpnZcnpuxHkAAAAAgzM76gQAAACAgTvG9//xQeQBAAAADMS3X3klK+nu/a9vvra1ebv92uWbzc7tubXN5bnl9saduZV2e6WVTkSsHba9Vrt956uxvnl3vtvsdOc7W9s31tqb690bq/tugQ0AAAAM0We+eP+dJCJ2vjaVl9i9tj9WsYK/FYBTo9ZnuzT78e5gcwGGq+pjHjj96h+92DBfOMUaxSQZdR7A6By2A5isavHWscI5rgAAgBG4+Pn776TJh6//1x+fGwBOqX6v/wOnT8X1/3Rm2IkAQ1d5/f+QgQHAJ1/DCEA48w6//l/hrXzR9cMjpOmh2wIAAAZqOi9Jba68FjgdtffTQsxGI7m12mpeiYhPR8QfZhoT2eOFfM3EHw0AAAAAAAAAAAAAAAAAAAAAAAAAQJ/SNIn0GOrHWgsAAAAYhYjaX5LyPsAXZ56dPnh+YDx5P78V8Adpmr7+81d/dnep291YyOb/PZ8/HhHdN7P546M4fQEAAADssXuX//z7+/ONEWcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGn13sM3lnfLMOM++EZEzPaKX4/JfDoZjYg4948k6nvWSyJi7ATi79yLiCd7xU+ytGK2zOJg/FpETOVZDDz+U2ma9ox//mNHh7Ptfrb/ud7r968WF/Jp79//elGufdz41fu/2qP939jB+PVi//epPmN84e3fzO95+L3H1Ylieb33/mc3flKx/32mV7D6h2d9/7vb21W5pb+MuNjz8yfZF2u+u3ZnvrO1fXl1bWmludJcv3p14cXFlxZfWLwyf2u11Sx/9ozx46d++0FV/AcXIs6V8cd3cyo/WGaLydeTR6mM78vp2azSqNryY/99++7DzxXVva3zrT64F3Hpmd6v/5P5tOfz/4t/pbn8cyBbfrH8TEh2inpE+faNiKd//funK/t/b7KsHf31v3R413PPfeeHf+qzKQAwBJ2t7dtLrVZzY+CVN9M07a9xdlTa/5aTiJ2Di7IDuBPuxVREVCzaH2uqfFaj3y0/UZnqu1MRQ3p1jlq5dpTG6cSR3mzJzv9BB89wZTx/Q456zwQAAJy0x0f/o84EAAAAAAAAAAAAAAAAAAAAzq5h/F+xgzF3RtNVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICP9L8AAAD//6zP1vE=")

program crashed: WARNING in driver_unregister
single: successfully extracted reproducer
found reproducer with 18 syscalls
minimizing guilty program
testing program (duration=45.97864848s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_FIOGETOWN-syz_open_procfs$userns-openat$comedi-ioctl$COMEDI_DEVCONFIG-socket$inet6_tcp-socketpair$tipc-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-prctl$PR_SCHED_CORE-write$vhost_msg_v2-write$vhost_msg_v2-write$vhost_msg_v2-setsockopt$TIPC_SRC_DROPPABLE-sendmmsg$inet-close_range
detailed listing:
executing program 0:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
syz_open_procfs$userns(r0, &(0x7f0000000100))
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi1\x00', 0x40, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000740)={'c6xdigio\x00', [0x6, 0x7, 0x6a, 0x8, 0x5, 0x1, 0x55bf, 0x6, 0x10, 0x9, 0x6, 0x6, 0x7f, 0x4de, 0x3ff, 0x83b9, 0x9, 0x6, 0x7, 0x23, 0x0, 0xffff0001, 0x3ff, 0x33f1, 0x649, 0x0, 0xfffffffa, 0x7, 0x0, 0x5, 0xffffffff]})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, 0x0, 0x0)
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

program crashed: WARNING in driver_unregister
testing program (duration=45.97864848s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_FIOGETOWN-syz_open_procfs$userns-openat$comedi-ioctl$COMEDI_DEVCONFIG-socket$inet6_tcp-socketpair$tipc-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-prctl$PR_SCHED_CORE-write$vhost_msg_v2-write$vhost_msg_v2-write$vhost_msg_v2-setsockopt$TIPC_SRC_DROPPABLE-sendmmsg$inet
detailed listing:
executing program 0:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
syz_open_procfs$userns(r0, &(0x7f0000000100))
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi1\x00', 0x40, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000740)={'c6xdigio\x00', [0x6, 0x7, 0x6a, 0x8, 0x5, 0x1, 0x55bf, 0x6, 0x10, 0x9, 0x6, 0x6, 0x7f, 0x4de, 0x3ff, 0x83b9, 0x9, 0x6, 0x7, 0x23, 0x0, 0xffff0001, 0x3ff, 0x33f1, 0x649, 0x0, 0xfffffffa, 0x7, 0x0, 0x5, 0xffffffff]})
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, 0x0, 0x0)
sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)

program crashed: WARNING in driver_unregister
testing program (duration=45.97864848s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_FIOGETOWN-syz_open_procfs$userns-openat$comedi-ioctl$COMEDI_DEVCONFIG-socket$inet6_tcp-socketpair$tipc-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-prctl$PR_SCHED_CORE-write$vhost_msg_v2-write$vhost_msg_v2-write$vhost_msg_v2-setsockopt$TIPC_SRC_DROPPABLE
detailed listing:
executing program 0:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
syz_open_procfs$userns(r0, &(0x7f0000000100))
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi1\x00', 0x40, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000740)={'c6xdigio\x00', [0x6, 0x7, 0x6a, 0x8, 0x5, 0x1, 0x55bf, 0x6, 0x10, 0x9, 0x6, 0x6, 0x7f, 0x4de, 0x3ff, 0x83b9, 0x9, 0x6, 0x7, 0x23, 0x0, 0xffff0001, 0x3ff, 0x33f1, 0x649, 0x0, 0xfffffffa, 0x7, 0x0, 0x5, 0xffffffff]})
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, 0x0, 0x0)

program crashed: WARNING in driver_unregister
testing program (duration=45.97864848s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_FIOGETOWN-syz_open_procfs$userns-openat$comedi-ioctl$COMEDI_DEVCONFIG-socket$inet6_tcp-socketpair$tipc-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-prctl$PR_SCHED_CORE-write$vhost_msg_v2-write$vhost_msg_v2-write$vhost_msg_v2
detailed listing:
executing program 0:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
syz_open_procfs$userns(r0, &(0x7f0000000100))
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi1\x00', 0x40, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000740)={'c6xdigio\x00', [0x6, 0x7, 0x6a, 0x8, 0x5, 0x1, 0x55bf, 0x6, 0x10, 0x9, 0x6, 0x6, 0x7f, 0x4de, 0x3ff, 0x83b9, 0x9, 0x6, 0x7, 0x23, 0x0, 0xffff0001, 0x3ff, 0x33f1, 0x649, 0x0, 0xfffffffa, 0x7, 0x0, 0x5, 0xffffffff]})
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)

program crashed: WARNING in driver_unregister
testing program (duration=45.97864848s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_FIOGETOWN-syz_open_procfs$userns-openat$comedi-ioctl$COMEDI_DEVCONFIG-socket$inet6_tcp-socketpair$tipc-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-prctl$PR_SCHED_CORE-write$vhost_msg_v2-write$vhost_msg_v2
detailed listing:
executing program 0:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
syz_open_procfs$userns(r0, &(0x7f0000000100))
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi1\x00', 0x40, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000740)={'c6xdigio\x00', [0x6, 0x7, 0x6a, 0x8, 0x5, 0x1, 0x55bf, 0x6, 0x10, 0x9, 0x6, 0x6, 0x7f, 0x4de, 0x3ff, 0x83b9, 0x9, 0x6, 0x7, 0x23, 0x0, 0xffff0001, 0x3ff, 0x33f1, 0x649, 0x0, 0xfffffffa, 0x7, 0x0, 0x5, 0xffffffff]})
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)

program crashed: WARNING in driver_unregister
testing program (duration=45.97864848s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_FIOGETOWN-syz_open_procfs$userns-openat$comedi-ioctl$COMEDI_DEVCONFIG-socket$inet6_tcp-socketpair$tipc-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-prctl$PR_SCHED_CORE-write$vhost_msg_v2
detailed listing:
executing program 0:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
syz_open_procfs$userns(r0, &(0x7f0000000100))
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi1\x00', 0x40, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000740)={'c6xdigio\x00', [0x6, 0x7, 0x6a, 0x8, 0x5, 0x1, 0x55bf, 0x6, 0x10, 0x9, 0x6, 0x6, 0x7f, 0x4de, 0x3ff, 0x83b9, 0x9, 0x6, 0x7, 0x23, 0x0, 0xffff0001, 0x3ff, 0x33f1, 0x649, 0x0, 0xfffffffa, 0x7, 0x0, 0x5, 0xffffffff]})
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)

program crashed: WARNING in driver_unregister
testing program (duration=45.97864848s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_FIOGETOWN-syz_open_procfs$userns-openat$comedi-ioctl$COMEDI_DEVCONFIG-socket$inet6_tcp-socketpair$tipc-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg-prctl$PR_SCHED_CORE
detailed listing:
executing program 0:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
syz_open_procfs$userns(r0, &(0x7f0000000100))
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi1\x00', 0x40, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000740)={'c6xdigio\x00', [0x6, 0x7, 0x6a, 0x8, 0x5, 0x1, 0x55bf, 0x6, 0x10, 0x9, 0x6, 0x6, 0x7f, 0x4de, 0x3ff, 0x83b9, 0x9, 0x6, 0x7, 0x23, 0x0, 0xffff0001, 0x3ff, 0x33f1, 0x649, 0x0, 0xfffffffa, 0x7, 0x0, 0x5, 0xffffffff]})
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0)

program crashed: WARNING in driver_unregister
testing program (duration=45.97864848s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_FIOGETOWN-syz_open_procfs$userns-openat$comedi-ioctl$COMEDI_DEVCONFIG-socket$inet6_tcp-socketpair$tipc-socketpair$unix-connect$unix-sendmmsg$unix-recvmmsg
detailed listing:
executing program 0:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
syz_open_procfs$userns(r0, &(0x7f0000000100))
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi1\x00', 0x40, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000740)={'c6xdigio\x00', [0x6, 0x7, 0x6a, 0x8, 0x5, 0x1, 0x55bf, 0x6, 0x10, 0x9, 0x6, 0x6, 0x7f, 0x4de, 0x3ff, 0x83b9, 0x9, 0x6, 0x7, 0x23, 0x0, 0xffff0001, 0x3ff, 0x33f1, 0x649, 0x0, 0xfffffffa, 0x7, 0x0, 0x5, 0xffffffff]})
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

program crashed: WARNING in driver_unregister
testing program (duration=45.97864848s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_FIOGETOWN-syz_open_procfs$userns-openat$comedi-ioctl$COMEDI_DEVCONFIG-socket$inet6_tcp-socketpair$tipc-socketpair$unix-connect$unix-sendmmsg$unix
detailed listing:
executing program 0:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
syz_open_procfs$userns(r0, &(0x7f0000000100))
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi1\x00', 0x40, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000740)={'c6xdigio\x00', [0x6, 0x7, 0x6a, 0x8, 0x5, 0x1, 0x55bf, 0x6, 0x10, 0x9, 0x6, 0x6, 0x7f, 0x4de, 0x3ff, 0x83b9, 0x9, 0x6, 0x7, 0x23, 0x0, 0xffff0001, 0x3ff, 0x33f1, 0x649, 0x0, 0xfffffffa, 0x7, 0x0, 0x5, 0xffffffff]})
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)

program crashed: WARNING in driver_unregister
testing program (duration=45.97864848s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_FIOGETOWN-syz_open_procfs$userns-openat$comedi-ioctl$COMEDI_DEVCONFIG-socket$inet6_tcp-socketpair$tipc-socketpair$unix-connect$unix
detailed listing:
executing program 0:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
syz_open_procfs$userns(r0, &(0x7f0000000100))
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi1\x00', 0x40, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000740)={'c6xdigio\x00', [0x6, 0x7, 0x6a, 0x8, 0x5, 0x1, 0x55bf, 0x6, 0x10, 0x9, 0x6, 0x6, 0x7f, 0x4de, 0x3ff, 0x83b9, 0x9, 0x6, 0x7, 0x23, 0x0, 0xffff0001, 0x3ff, 0x33f1, 0x649, 0x0, 0xfffffffa, 0x7, 0x0, 0x5, 0xffffffff]})
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)

program crashed: WARNING in driver_unregister
testing program (duration=45.97864848s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_FIOGETOWN-syz_open_procfs$userns-openat$comedi-ioctl$COMEDI_DEVCONFIG-socket$inet6_tcp-socketpair$tipc-socketpair$unix
detailed listing:
executing program 0:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
syz_open_procfs$userns(r0, &(0x7f0000000100))
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi1\x00', 0x40, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000740)={'c6xdigio\x00', [0x6, 0x7, 0x6a, 0x8, 0x5, 0x1, 0x55bf, 0x6, 0x10, 0x9, 0x6, 0x6, 0x7f, 0x4de, 0x3ff, 0x83b9, 0x9, 0x6, 0x7, 0x23, 0x0, 0xffff0001, 0x3ff, 0x33f1, 0x649, 0x0, 0xfffffffa, 0x7, 0x0, 0x5, 0xffffffff]})
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))

program crashed: WARNING in driver_unregister
testing program (duration=45.97864848s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_FIOGETOWN-syz_open_procfs$userns-openat$comedi-ioctl$COMEDI_DEVCONFIG-socket$inet6_tcp-socketpair$tipc
detailed listing:
executing program 0:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
syz_open_procfs$userns(r0, &(0x7f0000000100))
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi1\x00', 0x40, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000740)={'c6xdigio\x00', [0x6, 0x7, 0x6a, 0x8, 0x5, 0x1, 0x55bf, 0x6, 0x10, 0x9, 0x6, 0x6, 0x7f, 0x4de, 0x3ff, 0x83b9, 0x9, 0x6, 0x7, 0x23, 0x0, 0xffff0001, 0x3ff, 0x33f1, 0x649, 0x0, 0xfffffffa, 0x7, 0x0, 0x5, 0xffffffff]})
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))

program crashed: WARNING in driver_unregister
testing program (duration=45.97864848s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_FIOGETOWN-syz_open_procfs$userns-openat$comedi-ioctl$COMEDI_DEVCONFIG-socket$inet6_tcp
detailed listing:
executing program 0:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
syz_open_procfs$userns(r0, &(0x7f0000000100))
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi1\x00', 0x40, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000740)={'c6xdigio\x00', [0x6, 0x7, 0x6a, 0x8, 0x5, 0x1, 0x55bf, 0x6, 0x10, 0x9, 0x6, 0x6, 0x7f, 0x4de, 0x3ff, 0x83b9, 0x9, 0x6, 0x7, 0x23, 0x0, 0xffff0001, 0x3ff, 0x33f1, 0x649, 0x0, 0xfffffffa, 0x7, 0x0, 0x5, 0xffffffff]})
socket$inet6_tcp(0xa, 0x1, 0x0)

program crashed: WARNING in driver_unregister
testing program (duration=45.97864848s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_FIOGETOWN-syz_open_procfs$userns-openat$comedi-ioctl$COMEDI_DEVCONFIG
detailed listing:
executing program 0:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
syz_open_procfs$userns(r0, &(0x7f0000000100))
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi1\x00', 0x40, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000740)={'c6xdigio\x00', [0x6, 0x7, 0x6a, 0x8, 0x5, 0x1, 0x55bf, 0x6, 0x10, 0x9, 0x6, 0x6, 0x7f, 0x4de, 0x3ff, 0x83b9, 0x9, 0x6, 0x7, 0x23, 0x0, 0xffff0001, 0x3ff, 0x33f1, 0x649, 0x0, 0xfffffffa, 0x7, 0x0, 0x5, 0xffffffff]})

program crashed: WARNING in driver_unregister
testing program (duration=45.97864848s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_FIOGETOWN-syz_open_procfs$userns-openat$comedi
detailed listing:
executing program 0:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
syz_open_procfs$userns(r0, &(0x7f0000000100))
openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi1\x00', 0x40, 0x0)

program did not crash
testing program (duration=45.97864848s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_FIOGETOWN-syz_open_procfs$userns-ioctl$COMEDI_DEVCONFIG
detailed listing:
executing program 0:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=<r0=>0x0)
syz_open_procfs$userns(r0, &(0x7f0000000100))
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000740)={'c6xdigio\x00', [0x6, 0x7, 0x6a, 0x8, 0x5, 0x1, 0x55bf, 0x6, 0x10, 0x9, 0x6, 0x6, 0x7f, 0x4de, 0x3ff, 0x83b9, 0x9, 0x6, 0x7, 0x23, 0x0, 0xffff0001, 0x3ff, 0x33f1, 0x649, 0x0, 0xfffffffa, 0x7, 0x0, 0x5, 0xffffffff]})

program did not crash
testing program (duration=45.97864848s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$sock_FIOGETOWN-openat$comedi-ioctl$COMEDI_DEVCONFIG
detailed listing:
executing program 0:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0))
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi1\x00', 0x40, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000740)={'c6xdigio\x00', [0x6, 0x7, 0x6a, 0x8, 0x5, 0x1, 0x55bf, 0x6, 0x10, 0x9, 0x6, 0x6, 0x7f, 0x4de, 0x3ff, 0x83b9, 0x9, 0x6, 0x7, 0x23, 0x0, 0xffff0001, 0x3ff, 0x33f1, 0x649, 0x0, 0xfffffffa, 0x7, 0x0, 0x5, 0xffffffff]})

program crashed: WARNING in driver_unregister
testing program (duration=45.97864848s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$comedi-ioctl$COMEDI_DEVCONFIG
detailed listing:
executing program 0:
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi1\x00', 0x40, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000740)={'c6xdigio\x00', [0x6, 0x7, 0x6a, 0x8, 0x5, 0x1, 0x55bf, 0x6, 0x10, 0x9, 0x6, 0x6, 0x7f, 0x4de, 0x3ff, 0x83b9, 0x9, 0x6, 0x7, 0x23, 0x0, 0xffff0001, 0x3ff, 0x33f1, 0x649, 0x0, 0xfffffffa, 0x7, 0x0, 0x5, 0xffffffff]})

program crashed: WARNING in driver_unregister
testing program (duration=45.97864848s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$comedi-ioctl$COMEDI_DEVCONFIG
detailed listing:
executing program 0:
r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x40, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000740)={'c6xdigio\x00', [0x6, 0x7, 0x6a, 0x8, 0x5, 0x1, 0x55bf, 0x6, 0x10, 0x9, 0x6, 0x6, 0x7f, 0x4de, 0x3ff, 0x83b9, 0x9, 0x6, 0x7, 0x23, 0x0, 0xffff0001, 0x3ff, 0x33f1, 0x649, 0x0, 0xfffffffa, 0x7, 0x0, 0x5, 0xffffffff]})

program did not crash
testing program (duration=45.97864848s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$comedi-ioctl$COMEDI_DEVCONFIG
detailed listing:
executing program 0:
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi1\x00', 0x40, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=45.97864848s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$comedi-ioctl$COMEDI_DEVCONFIG
program crashed: WARNING in driver_unregister
simplifying C reproducer
testing compiled C program (duration=45.97864848s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$comedi-ioctl$COMEDI_DEVCONFIG
program crashed: WARNING in driver_unregister
testing compiled C program (duration=45.97864848s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$comedi-ioctl$COMEDI_DEVCONFIG
program crashed: WARNING in driver_unregister
testing compiled C program (duration=45.97864848s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$comedi-ioctl$COMEDI_DEVCONFIG
program crashed: WARNING in driver_unregister
testing compiled C program (duration=45.97864848s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$comedi-ioctl$COMEDI_DEVCONFIG
program crashed: WARNING in driver_unregister
testing compiled C program (duration=45.97864848s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$comedi-ioctl$COMEDI_DEVCONFIG
program crashed: WARNING in driver_unregister
testing compiled C program (duration=45.97864848s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$comedi-ioctl$COMEDI_DEVCONFIG
program crashed: WARNING in driver_unregister
testing compiled C program (duration=45.97864848s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$comedi-ioctl$COMEDI_DEVCONFIG
program crashed: WARNING in driver_unregister
testing program (duration=45.97864848s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$comedi-ioctl$COMEDI_DEVCONFIG
detailed listing:
executing program 0:
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi1\x00', 0x40, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000740)={'c6xdigio\x00', [0x6, 0x7, 0x6a, 0x8, 0x5, 0x1, 0x55bf, 0x6, 0x10, 0x9, 0x6, 0x6, 0x7f, 0x4de, 0x3ff, 0x83b9, 0x9, 0x6, 0x7, 0x23, 0x0, 0xffff0001, 0x3ff, 0x33f1, 0x649, 0x0, 0xfffffffa, 0x7, 0x0, 0x5, 0xffffffff]})

program crashed: WARNING in driver_unregister
validation run: crashed=true
testing program (duration=45.97864848s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$comedi-ioctl$COMEDI_DEVCONFIG
detailed listing:
executing program 0:
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi1\x00', 0x40, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000740)={'c6xdigio\x00', [0x6, 0x7, 0x6a, 0x8, 0x5, 0x1, 0x55bf, 0x6, 0x10, 0x9, 0x6, 0x6, 0x7f, 0x4de, 0x3ff, 0x83b9, 0x9, 0x6, 0x7, 0x23, 0x0, 0xffff0001, 0x3ff, 0x33f1, 0x649, 0x0, 0xfffffffa, 0x7, 0x0, 0x5, 0xffffffff]})

program crashed: WARNING in driver_unregister
validation run: crashed=true
testing program (duration=45.97864848s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$comedi-ioctl$COMEDI_DEVCONFIG
detailed listing:
executing program 0:
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000700)='/dev/comedi1\x00', 0x40, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000740)={'c6xdigio\x00', [0x6, 0x7, 0x6a, 0x8, 0x5, 0x1, 0x55bf, 0x6, 0x10, 0x9, 0x6, 0x6, 0x7f, 0x4de, 0x3ff, 0x83b9, 0x9, 0x6, 0x7, 0x23, 0x0, 0xffff0001, 0x3ff, 0x33f1, 0x649, 0x0, 0xfffffffa, 0x7, 0x0, 0x5, 0xffffffff]})

program crashed: WARNING in driver_unregister
validation run: crashed=true
reproducing took 48m29.979537147s
repro crashed as (corrupted=false):
comedi comedi1: c6xdigio: I/O port conflict (0x6,3)
------------[ cut here ]------------
Unexpected driver unregister!
WARNING: drivers/base/driver.c:273 at driver_unregister+0x94/0xb0 drivers/base/driver.c:273, CPU#0: syz.0.17/6036
Modules linked in:
CPU: 0 UID: 0 PID: 6036 Comm: syz.0.17 Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
RIP: 0010:driver_unregister+0x94/0xb0 drivers/base/driver.c:273
Code: b5 5b fc 48 89 df 5b 41 5e 41 5f e9 56 55 ff ff e8 b1 b3 bc fb eb 05 e8 aa b3 bc fb 90 48 c7 c7 80 17 0a 8c e8 cd 57 80 fb 90 <0f> 0b 90 90 5b 41 5e 41 5f c3 cc cc cc cc cc cc cc cc cc cc cc cc
RSP: 0018:ffffc90003e3fa40 EFLAGS: 00010246
RAX: c96dc1bfe317cb00 RBX: ffffffff8f3f8840 RCX: ffff88802fe90000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88802eec6038
R13: ffffffff8f3f8790 R14: 0000000000000000 R15: dffffc0000000000
FS:  000055559115e500(0000) GS:ffff888125c0f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055559115e808 CR3: 000000007446a000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 comedi_device_detach_locked+0x178/0x750 drivers/comedi/drivers.c:207
 comedi_device_detach drivers/comedi/drivers.c:215 [inline]
 comedi_device_attach+0x5d4/0x720 drivers/comedi/drivers.c:1010
 do_devconfig_ioctl drivers/comedi/comedi_fops.c:872 [inline]
 comedi_unlocked_ioctl+0x5ff/0x1020 drivers/comedi/comedi_fops.c:2173
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:598 [inline]
 __se_sys_ioctl+0xf9/0x170 fs/ioctl.c:584
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f1ac938ebe9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff20f81778 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f1ac95b5fa0 RCX: 00007f1ac938ebe9
RDX: 0000200000000740 RSI: 0000000040946400 RDI: 0000000000000003
RBP: 00007f1ac9411e19 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f1ac95b5fa0 R14: 00007f1ac95b5fa0 R15: 0000000000000003
 </TASK>

final repro crashed as (corrupted=false):
comedi comedi1: c6xdigio: I/O port conflict (0x6,3)
------------[ cut here ]------------
Unexpected driver unregister!
WARNING: drivers/base/driver.c:273 at driver_unregister+0x94/0xb0 drivers/base/driver.c:273, CPU#0: syz.0.17/6036
Modules linked in:
CPU: 0 UID: 0 PID: 6036 Comm: syz.0.17 Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
RIP: 0010:driver_unregister+0x94/0xb0 drivers/base/driver.c:273
Code: b5 5b fc 48 89 df 5b 41 5e 41 5f e9 56 55 ff ff e8 b1 b3 bc fb eb 05 e8 aa b3 bc fb 90 48 c7 c7 80 17 0a 8c e8 cd 57 80 fb 90 <0f> 0b 90 90 5b 41 5e 41 5f c3 cc cc cc cc cc cc cc cc cc cc cc cc
RSP: 0018:ffffc90003e3fa40 EFLAGS: 00010246
RAX: c96dc1bfe317cb00 RBX: ffffffff8f3f8840 RCX: ffff88802fe90000
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88802eec6038
R13: ffffffff8f3f8790 R14: 0000000000000000 R15: dffffc0000000000
FS:  000055559115e500(0000) GS:ffff888125c0f000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055559115e808 CR3: 000000007446a000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 comedi_device_detach_locked+0x178/0x750 drivers/comedi/drivers.c:207
 comedi_device_detach drivers/comedi/drivers.c:215 [inline]
 comedi_device_attach+0x5d4/0x720 drivers/comedi/drivers.c:1010
 do_devconfig_ioctl drivers/comedi/comedi_fops.c:872 [inline]
 comedi_unlocked_ioctl+0x5ff/0x1020 drivers/comedi/comedi_fops.c:2173
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:598 [inline]
 __se_sys_ioctl+0xf9/0x170 fs/ioctl.c:584
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f1ac938ebe9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff20f81778 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f1ac95b5fa0 RCX: 00007f1ac938ebe9
RDX: 0000200000000740 RSI: 0000000040946400 RDI: 0000000000000003
RBP: 00007f1ac9411e19 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f1ac95b5fa0 R14: 00007f1ac95b5fa0 R15: 0000000000000003
 </TASK>