program: r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x108001, 0x2, 0x4, 0x0, 0xa, 0x5, 0x10001, 0x800004, 0xa, 0xff, 0x2, 0x1, 0x401, 0x1100004, 0x6, 0xa, 0x8, 0x1a449, 0x41, 0x40000003, 0xc, 0x2, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x8, 0x8, 0x4, 0xc]}) [ 69.028622][ T5315] Bluetooth: hci0: command tx timeout [ 69.092216][ T5336] comedi comedi3: pcl818: I/O port conflict (0x108001,16) [ 69.095331][ T5336] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN NOPTI [ 69.099866][ T5336] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 69.103381][ T5336] CPU: 0 UID: 0 PID: 5336 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 69.107038][ T5336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.111732][ T5336] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 69.114257][ T5336] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 f9 1d 70 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 d8 1d 70 f9 4d 8b 24 24 48 83 c3 [ 69.121905][ T5336] RSP: 0018:ffffc9000d5179d8 EFLAGS: 00010206 [ 69.124356][ T5336] RAX: 0000000000000005 RBX: ffff88801c0b2780 RCX: 0000000000100000 [ 69.127674][ T5336] RDX: ffffc9000f071000 RSI: 0000000000000961 RDI: 0000000000000962 [ 69.130385][ T5336] RBP: 0000000000000001 R08: ffff88803e84412f R09: 1ffff11007d08825 [ 69.133678][ T5336] R10: dffffc0000000000 R11: ffffffff88b898f0 R12: 0000000000000028 [ 69.137014][ T5336] R13: dffffc0000000000 R14: ffff88803e844000 R15: dffffc0000000000 [ 69.141028][ T5336] FS: 00007f003406f6c0(0000) GS:ffff88808d69f000(0000) knlGS:0000000000000000 [ 69.144720][ T5336] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.147438][ T5336] CR2: 00007f91e4539ad8 CR3: 00000000438f0000 CR4: 0000000000352ef0 [ 69.150615][ T5336] Call Trace: [ 69.152176][ T5336] [ 69.153497][ T5336] pcl818_detach+0x66/0xd0 [ 69.155509][ T5336] comedi_device_detach_locked+0x178/0x750 [ 69.158106][ T5336] comedi_device_attach+0x5d4/0x720 [ 69.160352][ T5336] comedi_unlocked_ioctl+0x5ff/0x1020 [ 69.162762][ T5336] ? kasan_quarantine_put+0xdd/0x220 [ 69.165000][ T5336] ? lockdep_hardirqs_on+0x98/0x140 [ 69.167311][ T5336] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 69.169905][ T5336] ? do_futex+0x333/0x420 [ 69.171718][ T5336] ? __fget_files+0x2a/0x420 [ 69.173603][ T5336] ? __fget_files+0x3a0/0x420 [ 69.175538][ T5336] ? __fget_files+0x2a/0x420 [ 69.177333][ T5336] ? bpf_lsm_file_ioctl+0x9/0x20 [ 69.179518][ T5336] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 69.181946][ T5336] __se_sys_ioctl+0xfc/0x170 [ 69.183823][ T5336] do_syscall_64+0xfa/0xf80 [ 69.185625][ T5336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.187961][ T5336] ? clear_bhb_loop+0x60/0xb0 [ 69.189894][ T5336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.192296][ T5336] RIP: 0033:0x7f003318f7c9 [ 69.194092][ T5336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.202145][ T5336] RSP: 002b:00007f003406f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.205768][ T5336] RAX: ffffffffffffffda RBX: 00007f00333e5fa0 RCX: 00007f003318f7c9 [ 69.209214][ T5336] RDX: 0000200000000180 RSI: 0000000040946400 RDI: 0000000000000003 [ 69.212709][ T5336] RBP: 00007f0033213f91 R08: 0000000000000000 R09: 0000000000000000 [ 69.216134][ T5336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.219901][ T5336] R13: 00007f00333e6038 R14: 00007f00333e5fa0 R15: 00007ffe02c2c3e8 [ 69.223370][ T5336] [ 69.224804][ T5336] Modules linked in: [ 69.227181][ T5336] ---[ end trace 0000000000000000 ]--- [ 69.246118][ T5336] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 69.249379][ T5336] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 f9 1d 70 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 d8 1d 70 f9 4d 8b 24 24 48 83 c3 [ 69.257007][ T5336] RSP: 0018:ffffc9000d5179d8 EFLAGS: 00010206 [ 69.260996][ T5336] RAX: 0000000000000005 RBX: ffff88801c0b2780 RCX: 0000000000100000 [ 69.264378][ T5336] RDX: ffffc9000f071000 RSI: 0000000000000961 RDI: 0000000000000962 [ 69.267827][ T5336] RBP: 0000000000000001 R08: ffff88803e84412f R09: 1ffff11007d08825 [ 69.271421][ T5336] R10: dffffc0000000000 R11: ffffffff88b898f0 R12: 0000000000000028 [ 69.274641][ T5336] R13: dffffc0000000000 R14: ffff88803e844000 R15: dffffc0000000000 [ 69.278062][ T5336] FS: 00007f003406f6c0(0000) GS:ffff88808d69f000(0000) knlGS:0000000000000000 [ 69.281905][ T5336] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.284624][ T5336] CR2: 00007f1f5d4cead0 CR3: 00000000438f0000 CR4: 0000000000352ef0 [ 69.288022][ T5336] Kernel panic - not syncing: Fatal exception [ 69.291026][ T5336] Kernel Offset: disabled [ 69.292903][ T5336] Rebooting in 86400 seconds..