comedi comedi3: c6xdigio: I/O port conflict (0xffffffffffffffff,3) ------------[ cut here ]------------ Unexpected driver unregister! WARNING: drivers/base/driver.c:273 at 0x0, CPU#1: syz.3.35/6142 Modules linked in: CPU: 1 UID: 0 PID: 6142 Comm: syz.3.35 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:driver_unregister drivers/base/driver.c:273 [inline] RIP: 0010:driver_unregister+0x89/0xb0 drivers/base/driver.c:270 Code: 00 75 3a 48 8b 73 68 48 89 ef e8 12 ab 8b fc 48 89 df e8 1a 94 ff ff 5b 5d e9 83 16 e1 fb e8 7e 16 e1 fb 48 8d 3d 07 8d b3 0a <67> 48 0f b9 3a 5b 5d e9 6b 16 e1 fb e8 76 ab 49 fc eb 9a e8 6f ab RSP: 0018:ffffc900043af9a0 EFLAGS: 00010283 RAX: 00000000000013cd RBX: ffffffff8ff3d4e0 RCX: ffffc90007b13000 RDX: 0000000000080000 RSI: ffffffff85dcc9b2 RDI: ffffffff909056c0 RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8ff3d420 R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802d60b800 FS: 00007f8fab8cb6c0(0000) GS:ffff8880d6a9c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000110c3e2149 CR3: 0000000052ba9000 CR4: 0000000000352ef0 Call Trace: comedi_device_detach_locked+0x12f/0xa50 drivers/comedi/drivers.c:207 comedi_device_detach+0x67/0xb0 drivers/comedi/drivers.c:215 comedi_device_attach+0x43d/0x900 drivers/comedi/drivers.c:1011 do_devconfig_ioctl+0x1b1/0x710 drivers/comedi/comedi_fops.c:872 comedi_unlocked_ioctl+0x165d/0x2ee0 drivers/comedi/comedi_fops.c:2178 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8faa98f7c9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f8fab8cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f8faabe5fa0 RCX: 00007f8faa98f7c9 RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000009 RBP: 00007f8faaa13f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f8faabe6038 R14: 00007f8faabe5fa0 R15: 00007fff47c14438 ---------------- Code disassembly (best guess): 0: 00 75 3a add %dh,0x3a(%rbp) 3: 48 8b 73 68 mov 0x68(%rbx),%rsi 7: 48 89 ef mov %rbp,%rdi a: e8 12 ab 8b fc call 0xfc8bab21 f: 48 89 df mov %rbx,%rdi 12: e8 1a 94 ff ff call 0xffff9431 17: 5b pop %rbx 18: 5d pop %rbp 19: e9 83 16 e1 fb jmp 0xfbe116a1 1e: e8 7e 16 e1 fb call 0xfbe116a1 23: 48 8d 3d 07 8d b3 0a lea 0xab38d07(%rip),%rdi # 0xab38d31 * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: 5b pop %rbx 30: 5d pop %rbp 31: e9 6b 16 e1 fb jmp 0xfbe116a1 36: e8 76 ab 49 fc call 0xfc49abb1 3b: eb 9a jmp 0xffffffd7 3d: e8 .byte 0xe8 3e: 6f outsl %ds:(%rsi),(%dx) 3f: ab stos %eax,%es:(%rdi)