comedi comedi3: c6xdigio: I/O port conflict (0x1006,3) ------------[ cut here ]------------ Unexpected driver unregister! WARNING: drivers/base/driver.c:273 at 0x0, CPU#3: syz.8.4102/19720 Modules linked in: CPU: 3 UID: 0 PID: 19720 Comm: syz.8.4102 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:driver_unregister drivers/base/driver.c:273 [inline] RIP: 0010:driver_unregister+0x89/0xb0 drivers/base/driver.c:270 Code: 00 75 3a 48 8b 73 68 48 89 ef e8 e2 bc 8b fc 48 89 df e8 1a 94 ff ff 5b 5d e9 83 3c e1 fb e8 7e 3c e1 fb 48 8d 3d 57 a9 b3 0a <67> 48 0f b9 3a 5b 5d e9 6b 3c e1 fb e8 66 bf 49 fc eb 9a e8 5f bf RSP: 0018:ffffc900060e79a0 EFLAGS: 00010287 RAX: 00000000000012be RBX: ffffffff8ff3a960 RCX: ffffc900277f2000 RDX: 0000000000080000 RSI: ffffffff85dc7292 RDI: ffffffff90901bf0 RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 R10: 0000000000000000 R11: 00000000076317c9 R12: ffffffff8ff3a8a0 R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888102fa8000 FS: 00007f70c79ee6c0(0000) GS:ffff8880d6ca3000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000110c242548 CR3: 000000004d4a9000 CR4: 0000000000352ef0 Call Trace: comedi_device_detach_locked+0x12f/0xa50 drivers/comedi/drivers.c:207 comedi_device_detach+0x67/0xb0 drivers/comedi/drivers.c:215 comedi_device_attach+0x43d/0x900 drivers/comedi/drivers.c:1011 do_devconfig_ioctl+0x1b1/0x710 drivers/comedi/comedi_fops.c:872 comedi_unlocked_ioctl+0x165d/0x2ee0 drivers/comedi/comedi_fops.c:2178 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f70c978f7c9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f70c79ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f70c99e5fa0 RCX: 00007f70c978f7c9 RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000004 RBP: 00007f70c9813f91 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f70c99e6038 R14: 00007f70c99e5fa0 R15: 00007ffdb5cc55f8 ---------------- Code disassembly (best guess): 0: 00 75 3a add %dh,0x3a(%rbp) 3: 48 8b 73 68 mov 0x68(%rbx),%rsi 7: 48 89 ef mov %rbp,%rdi a: e8 e2 bc 8b fc call 0xfc8bbcf1 f: 48 89 df mov %rbx,%rdi 12: e8 1a 94 ff ff call 0xffff9431 17: 5b pop %rbx 18: 5d pop %rbp 19: e9 83 3c e1 fb jmp 0xfbe13ca1 1e: e8 7e 3c e1 fb call 0xfbe13ca1 23: 48 8d 3d 57 a9 b3 0a lea 0xab3a957(%rip),%rdi # 0xab3a981 * 2a: 67 48 0f b9 3a ud1 (%edx),%rdi <-- trapping instruction 2f: 5b pop %rbx 30: 5d pop %rbp 31: e9 6b 3c e1 fb jmp 0xfbe13ca1 36: e8 66 bf 49 fc call 0xfc49bfa1 3b: eb 9a jmp 0xffffffd7 3d: e8 .byte 0xe8 3e: 5f pop %rdi 3f: bf .byte 0xbf