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", 0x1000}, {&(0x7f0000003580)="593313", 0x3}, {&(0x7f00000035c0)="8e24357a05d3fd30541abac303097a0528253e69c2c4f384599bd97080abff27a49fb938197c43bc34c4a773e4f7f22b0a935af9e6967d5869b9db3ab9a9121d4907c1cd65700f5078e7c1f29c0db6629aea2ce134b0a260d1659849fdb81007544347c18cebda605799dae1aa2a0222ac47d4696f0a521a32842ea2dc609379340068b7c8f97af85c4a02e3f727d1c99b772c3082b2f0aa2d770be12f8a40dba29d543be3b32ccedcd2e8dff5bfda21682ee128739a8df1eb088fe1fd29d1065ca3359029f51c7447c0444c6886ca0e", 0xd0}, {&(0x7f00000036c0)="e55de70fabaaae2ec781a0fa2d1e1f9bc5648778e2d5db952d48547e5a77d8dee489b4f255d1be9e53f10fbff62c65d64c9dece7d5d4e40352d95a9e1acce986eacfbd093ac8f110d24f0a1c3ed6baa58f307a506094fc4236a9244c74771a78fe1838f732a00ce7c9c7c4fc3b440556b1e5a9c5f632f30ef6d4bda7290f145bac58737e30a61b852ef128acf454786d899d6396870a174b483b7e38b5c9363389caa232f32ee1cfd13cf86277ddffa5e64ee69639dd15827af3627830911c059f948a5c7441253c01d4855b138186e955bfe2f6f0f11dbcdea828e2318cba047bbc84b7e289e1f711958185", 0xec}], 0x8, &(0x7f0000003800)=[{0xbc, 0x115, 0xfffff801, "38f58bd67d0fc42dcdaf07b32270ff2cc2d36c7eb30d92f7c17b8c2b16db2d28de09f8dc6fae6cc0ba85431bfcac0a8ed3cc6c50142d69f732058a24650f387c66a2dc7b2c99973f7f8902014c20d7717cfa9399b5ef630d8720dc482a44f9d28e6a3bfa1262440c9467e850b43b5ffedde4d1178732afbe7c610da09a32a79c8077332a4ca309f59bfa8c27227d5d8d354d448f607f55a4d24a61df89376b2dd41a93e12f4e91e8ef23e387cbf43aa5"}, {0x100c, 0x107, 0x8, "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"}, {0x30, 0x109, 0x8001, "62df27d66afb0f380b4f283f11bedae4e6c70f8ad594f7529ef0a4780c781edf48"}], 0x10f8}}, {{&(0x7f0000004900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x4, 0x2, 0x2, {0xa, 0x4e24, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9c3}}}, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004980)="8b8a344ffeba672f7f8151fd9fcdfc48a64b35899cf5646972184fb1da362c77c486b6e652c62067633fcaf67cff0a5304aec415d9e4b50f212c2c1736dfb43bb175dba8e30aa0263a13346e58268a6916a513282b99438df8dcb76324a9fa99902f925ccc30f3e134a309eeece372a76b08b477bf45acf50235a2705d6e825f8cba5715889dedd9378c5da93f4fbc99c31bf72f825f7321ca718f3b9c8d1b47cc78bb68692339ac72f8144812d0ea278719b236799d98ba53", 0xb9}, {&(0x7f0000004a40)="b710c14474b48eec9a2a99717465ac4f1630beb8929ebe8e0997413ea22f75689f4aa1c4641ad7ce5b04bf1dd67918a52c719d7cc5fe91f44887e233b6550354b6cf0a3868d562ea69261ebd32719f0c4ece211a2a75312d1fe98c2cdea5e009f7662bd9e8daec670d7a23a40880a34f0589a9db9e8c4c6b837758ea3e271fcbc68d6da45a0d0792d085e2ab8536334a98c1fdf80a9c1bb5c67796228041e432561bb6f20e03938b1730013566bea5aede7dab8ce8d69ffe9c78b3a4d523b7a316bd5045d1f51b4161987b352c7c906fc002c9eaafb1cf1e2eab09d94b204a46f0b405bff327e4bb34a23c4faf", 0xed}, {&(0x7f0000004b40)="2026d34b72b7fa136b6fd209331f0404d29d4c4f64c2bb94b1de1a3435175756", 0x20}], 0x3, &(0x7f0000004bc0)=[{0xc8, 0x10a, 0x4e, "224d6769ab9c91f8ed0c69c45b7c6c2fb352a03e8ffab06f695bc07de5543b1583162acfc6ad6fd276333a03678095cc08f206ec44517d10f11b16850e9ce6a7792255e2ae9e4cfa2e3bb2020ee612f108df3c60eb36f9242de43871499c2bda5980b8ddfea98e38c7f6682f5ee7d17aa3d8723a73a05b0a9b5f6c6db7fcdb7ac661757a89823eec19702da616a3d13f830053635c3d448d2f817b99744eb56f80e50bf470139ebcf1c5bddf16e3a01933a3201054f3950af425"}], 0xc8}}], 0x2, 0xc800) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 2132.510697][T13101] 1b 90 4295139496 [ 2132.517503][T13101] ff 90 4295139496 [ 2132.517633][T12742] kworker/u17:1: attempt to access beyond end of device [ 2132.517633][T12742] loop0: rw=1, want=98, limit=87 [ 2132.522592][T13101] 12 80 4295141312 [ 2132.522615][T13101] 3 90 4295141312 [ 2132.522631][T13101] 13 80 4295141312 [ 2132.522646][T13101] 0 90 4295141312 [ 2132.558573][T13101] 1a 90 4295141312 [ 2132.566497][T13101] 0 90 4295141312 [ 2132.572037][T13101] 3 80 4295141312 [ 2132.579260][T13101] a1 90 4295141312 [ 2132.583648][T13101] 1e 90 4295141312 [ 2132.592146][T13101] 7 80 4295141312 [ 2132.597243][T13101] 1 90 4295141312 [ 2132.602392][T13101] 8 80 4295141312 [ 2132.607803][T13101] 4 80 4295141312 [ 2132.614471][T13101] 1 90 4295141312 [ 2132.629852][T13101] last result at 4295141492 [ 2132.642619][T13101] last redo_fd_request at 4295150087 [ 2132.653021][T13101] status=80 [ 2132.657248][T13101] fdc_busy=1 [ 2132.664724][T13101] floppy_work.func=floppy_work_workfn [ 2132.669208][T20441] loop0: detected capacity change from 0 to 87 [ 2132.672202][T13101] cont=ffffffff8a1f4920 [ 2132.687535][T13101] current_req=0000000000000000 [ 2132.694180][T13101] command_status=-1 [ 2132.699662][T13101] [ 2132.702802][T13101] floppy1: floppy timeout called [ 2132.709716][T17293] [ 2132.712827][T17293] floppy driver state [ 2132.719475][T17293] ------------------- [ 2132.723905][T17293] now=4295150117 last interrupt=4295141312 diff=8805 last called handler=recal_interrupt [ 2132.739073][T17293] timeout_message=lock fdc [ 2132.744786][T17293] last output bytes: 08:02:26 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) recvmsg$unix(r0, &(0x7f0000000540)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/192, 0xc0}, {&(0x7f0000000400)=""/24, 0x18}, {&(0x7f0000000440)=""/96, 0x60}], 0x3, &(0x7f0000000500)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0}}}], 0x18}, 0x101) mount$9p_rdma(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x10002, &(0x7f0000000580)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x5}}, {@timeout={'timeout', 0x3d, 0x100}}, {@sq={'sq', 0x3d, 0x10001}}, {@common=@access_user}, {@timeout={'timeout', 0x3d, 0xfffffffffffffe01}}], [{@smackfsdef={'smackfsdef', 0x3d, 'msdos\x00'}}, {@permit_directio}, {@euid_gt={'euid>', r2}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@smackfsdef={'smackfsdef', 0x3d, 'msdos\x00'}}, {@audit}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@seclabel}, {@fowner_lt={'fowner<', r3}}]}}) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2132.750467][T17293] 0 90 4295139496 [ 2132.758305][T17293] 1 90 4295139496 [ 2132.767648][T17293] 2 90 4295139496 [ 2132.772662][T17293] 24 90 4295139496 [ 2132.776994][T17293] 1b 90 4295139496 [ 2132.781851][T17293] ff 90 4295139496 [ 2132.786391][T17293] 12 80 4295141312 [ 2132.791232][T17293] 3 90 4295141312 [ 2132.795355][T17293] 13 80 4295141312 [ 2132.800509][T17293] 0 90 4295141312 [ 2132.805964][T17293] 1a 90 4295141312 [ 2132.813496][T17293] 0 90 4295141312 [ 2132.818871][T17293] 3 80 4295141312 [ 2132.824355][T17293] a1 90 4295141312 [ 2132.831790][T17293] 1e 90 4295141312 [ 2132.836983][T17293] 7 80 4295141312 [ 2132.842246][T17293] 1 90 4295141312 [ 2132.847026][T17293] 8 80 4295141312 [ 2132.852402][T17293] 4 80 4295141312 [ 2132.857194][T17293] 1 90 4295141312 [ 2132.861677][T20445] loop0: detected capacity change from 0 to 87 [ 2132.862299][T17293] last result at 4295141492 [ 2132.875860][T17293] last redo_fd_request at 4295150116 [ 2132.883179][T17293] status=80 [ 2132.888288][T17293] fdc_busy=1 [ 2132.892513][T17293] floppy_work.func=floppy_work_workfn [ 2132.899733][T17293] cont=ffffffff8a1f4920 [ 2132.904952][T17293] current_req=0000000000000000 [ 2132.912478][T17293] command_status=-1 [ 2132.914419][T20445] syz-executor.0: attempt to access beyond end of device [ 2132.914419][T20445] loop0: rw=0, want=90, limit=87 [ 2132.918123][T17293] [ 2132.918206][T17293] floppy1: floppy timeout called [ 2132.920254][T17293] [ 2132.952225][T17293] floppy driver state [ 2132.957249][T17293] ------------------- [ 2132.962814][T17293] now=4295150141 last interrupt=4295141312 diff=8829 last called handler=recal_interrupt [ 2132.980449][T20437] loop2: detected capacity change from 0 to 6 [ 2132.988892][T17293] timeout_message=lock fdc 08:02:26 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x800, 0x80) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), &(0x7f0000000200)='./bus\x00', 0x6, 0x1) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2132.994744][T17293] last output bytes: [ 2133.000964][T17293] 0 90 4295139496 [ 2133.001132][ T8110] kworker/u17:0: attempt to access beyond end of device [ 2133.001132][ T8110] loop0: rw=1, want=98, limit=87 [ 2133.005610][T17293] 1 90 4295139496 [ 2133.005631][T17293] 2 90 4295139496 [ 2133.005647][T17293] 24 90 4295139496 [ 2133.005662][T17293] 1b 90 4295139496 [ 2133.005676][T17293] ff 90 4295139496 [ 2133.005689][T17293] 12 80 4295141312 [ 2133.005703][T17293] 3 90 4295141312 [ 2133.005716][T17293] 13 80 4295141312 [ 2133.005729][T17293] 0 90 4295141312 [ 2133.005743][T17293] 1a 90 4295141312 [ 2133.005757][T17293] 0 90 4295141312 [ 2133.005771][T17293] 3 80 4295141312 [ 2133.085123][T17293] a1 90 4295141312 [ 2133.099060][T17293] 1e 90 4295141312 [ 2133.103939][T17293] 7 80 4295141312 [ 2133.110157][T17293] 1 90 4295141312 [ 2133.114908][T17293] 8 80 4295141312 [ 2133.120461][T17293] 4 80 4295141312 [ 2133.125201][T17293] 1 90 4295141312 [ 2133.130844][T17293] last result at 4295141492 [ 2133.136109][T17293] last redo_fd_request at 4295150137 [ 2133.143926][T17293] status=80 [ 2133.147587][T17293] fdc_busy=1 [ 2133.151588][T17293] floppy_work.func=floppy_work_workfn [ 2133.159254][T17293] cont=ffffffff8a1f4920 [ 2133.165321][T17293] current_req=0000000000000000 [ 2133.173042][T17293] command_status=-1 [ 2133.178712][T17293] [ 2133.181998][T17293] floppy1: floppy timeout called [ 2133.208503][T13101] [ 2133.208513][T13101] floppy driver state [ 2133.208518][T13101] ------------------- [ 2133.208523][T13101] now=4295150166 last interrupt=4295141312 diff=8854 last called handler=recal_interrupt [ 2133.242806][T13101] timeout_message=lock fdc [ 2133.249556][T13101] last output bytes: [ 2133.255181][T13101] 0 90 4295139496 [ 2133.263170][T13101] 1 90 4295139496 [ 2133.269044][T13101] 2 90 4295139496 [ 2133.276519][T13101] 24 90 4295139496 [ 2133.282320][T13101] 1b 90 4295139496 [ 2133.289422][T13101] ff 90 4295139496 [ 2133.294421][T13101] 12 80 4295141312 [ 2133.299930][T13101] 3 90 4295141312 [ 2133.304597][T13101] 13 80 4295141312 [ 2133.313810][T13101] 0 90 4295141312 [ 2133.318721][T13101] 1a 90 4295141312 [ 2133.324183][T13101] 0 90 4295141312 [ 2133.329498][T13101] 3 80 4295141312 [ 2133.334355][T13101] a1 90 4295141312 [ 2133.339946][T13101] 1e 90 4295141312 [ 2133.347585][T13101] 7 80 4295141312 [ 2133.354528][T13101] 1 90 4295141312 [ 2133.362889][T13101] 8 80 4295141312 [ 2133.371465][T13101] 4 80 4295141312 [ 2133.380054][T13101] 1 90 4295141312 [ 2133.387053][T13101] last result at 4295141492 [ 2133.396236][T13101] last redo_fd_request at 4295150166 [ 2133.404400][T13101] status=80 [ 2133.408971][T13101] fdc_busy=1 [ 2133.413337][T13101] floppy_work.func=floppy_work_workfn [ 2133.420776][T13101] cont=ffffffff8a1f4920 [ 2133.427197][T13101] current_req=0000000000000000 [ 2133.433875][T13101] command_status=-1 [ 2133.440476][T13101] [ 2133.444088][T13101] floppy1: floppy timeout called [ 2133.452691][T13101] [ 2133.455955][T13101] floppy driver state 08:02:26 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2133.462159][T13101] ------------------- 08:02:26 executing program 2: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) renameat(r0, &(0x7f0000000140)='./cgroup\x00', r0, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDDEFPRM(r0, 0x401c0243, &(0x7f0000000040)={0xc86c, 0x1, 0x400, 0x8, 0x8, 0x3, 0x44, 0x0, 0x9, &(0x7f0000000000)='\\!+%+:\x00'}) [ 2133.469141][T13101] now=4295150192 last interrupt=4295141312 diff=8880 last called handler=recal_interrupt [ 2133.481740][T13101] timeout_message=lock fdc [ 2133.486909][T13101] last output bytes: [ 2133.492222][T13101] 0 90 4295139496 [ 2133.497567][T13101] 1 90 4295139496 [ 2133.502636][T13101] 2 90 4295139496 [ 2133.507323][T13101] 24 90 4295139496 [ 2133.512885][T13101] 1b 90 4295139496 [ 2133.517172][T13101] ff 90 4295139496 [ 2133.521352][T13101] 12 80 4295141312 [ 2133.525616][T13101] 3 90 4295141312 [ 2133.530716][T13101] 13 80 4295141312 [ 2133.535219][T13101] 0 90 4295141312 [ 2133.540867][T13101] 1a 90 4295141312 [ 2133.545786][T13101] 0 90 4295141312 [ 2133.553319][T13101] 3 80 4295141312 [ 2133.559616][T13101] a1 90 4295141312 [ 2133.564757][T13101] 1e 90 4295141312 [ 2133.568978][T13101] 7 80 4295141312 [ 2133.573063][T13101] 1 90 4295141312 [ 2133.576996][T13101] 8 80 4295141312 08:02:27 executing program 3: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="20009bd5839f", @ANYBLOB="000400000000dedb2195bfb52a5d42d10ecab0df3bc6f991fd0fb2b8bf6a5a6edd2dc55605154a026cddc50a49764575274cfade5d9e7a261a8332a0c936e847e95e6000476fce11cd293e86ea3fc2b4cd6ef81e2fbbaf3479cedbd934175cdf8744146563bbf0ed822f32216728f2db7cc68d1d234e19a0529255b8009787ba346df54f59d7a3e57d1cb5e2dd44ac514712668280ed1de0"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDFMTEND(r1, 0x249) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2133.581162][T13101] 4 80 4295141312 [ 2133.585535][T13101] 1 90 4295141312 [ 2133.591537][T13101] last result at 4295141492 [ 2133.599263][T13101] last redo_fd_request at 4295150190 [ 2133.607490][T13101] status=80 [ 2133.611591][T13101] fdc_busy=1 [ 2133.616109][T13101] floppy_work.func=floppy_work_workfn [ 2133.624483][T13101] cont=ffffffff8a1f4920 [ 2133.631300][T13101] current_req=0000000000000000 [ 2133.638271][T13101] command_status=-1 [ 2133.644347][T13101] [ 2133.648587][T13101] floppy1: floppy timeout called [ 2133.657274][T13101] [ 2133.661523][T13101] floppy driver state [ 2133.668052][T13101] ------------------- [ 2133.674771][T13101] now=4295150212 last interrupt=4295141312 diff=8900 last called handler=recal_interrupt [ 2133.692305][T13101] timeout_message=lock fdc [ 2133.698968][T13101] last output bytes: [ 2133.704145][T13101] 0 90 4295139496 [ 2133.710675][T13101] 1 90 4295139496 [ 2133.721563][T13101] 2 90 4295139496 [ 2133.727386][T13101] 24 90 4295139496 [ 2133.734526][T13101] 1b 90 4295139496 [ 2133.741411][T13101] ff 90 4295139496 [ 2133.748935][T13101] 12 80 4295141312 [ 2133.753096][T13101] 3 90 4295141312 [ 2133.757405][T13101] 13 80 4295141312 [ 2133.763010][T13101] 0 90 4295141312 [ 2133.769661][T13101] 1a 90 4295141312 [ 2133.774576][T13101] 0 90 4295141312 [ 2133.780275][T13101] 3 80 4295141312 [ 2133.785031][T13101] a1 90 4295141312 [ 2133.790575][T13101] 1e 90 4295141312 [ 2133.796051][T13101] 7 80 4295141312 [ 2133.801974][T13101] 1 90 4295141312 [ 2133.806064][T13101] 8 80 4295141312 [ 2133.809985][T13101] 4 80 4295141312 [ 2133.814906][T13101] 1 90 4295141312 [ 2133.819804][T13101] last result at 4295141492 [ 2133.825644][T13101] last redo_fd_request at 4295150210 [ 2133.832760][T13101] status=80 [ 2133.836885][T13101] fdc_busy=1 [ 2133.842033][T13101] floppy_work.func=floppy_work_workfn [ 2133.849096][T13101] cont=ffffffff8a1f4920 [ 2133.854489][T13101] current_req=0000000000000000 [ 2133.860570][T13101] command_status=-1 [ 2133.866390][T13101] [ 2133.869897][T13101] floppy1: floppy timeout called [ 2134.596718][T20454] loop0: detected capacity change from 0 to 87 [ 2134.601781][T13101] [ 2134.609553][T13101] floppy driver state [ 2134.614770][T13101] ------------------- [ 2134.620526][T13101] now=4295150307 last interrupt=4295141312 diff=8995 last called handler=recal_interrupt [ 2134.635818][T13101] timeout_message=lock fdc [ 2134.638585][ T37] kauditd_printk_skb: 18 callbacks suppressed [ 2134.638603][ T37] audit: type=1804 audit(1638172948.105:682): pid=20454 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1274/file1/bus" dev="loop0" ino=1048705 res=1 errno=0 [ 2134.648091][T20454] syz-executor.0: attempt to access beyond end of device [ 2134.648091][T20454] loop0: rw=0, want=90, limit=87 [ 2134.648933][T13101] last output bytes: 08:02:28 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2134.648948][T13101] 0 90 4295139496 [ 2134.648966][T13101] 1 90 4295139496 [ 2134.648982][T13101] 2 90 4295139496 [ 2134.648998][T13101] 24 90 4295139496 [ 2134.649014][T13101] 1b 90 4295139496 [ 2134.649030][T13101] ff 90 4295139496 [ 2134.649046][T13101] 12 80 4295141312 08:02:28 executing program 3: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1ff, 0x800) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$FLOPPY_FDDEFPRM(r1, 0x401c0243, &(0x7f00000000c0)={0xffffffff, 0x8001, 0x4, 0x401, 0x6bc, 0x20, 0x7, 0x9, 0x1, &(0x7f0000000080)='/dev/fd#\x00'}) ioctl$FLOPPY_FDFMTEND(0xffffffffffffffff, 0x249) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000040)={0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2134.649062][T13101] 3 90 4295141312 [ 2134.649094][T13101] 13 80 4295141312 [ 2134.649111][T13101] 0 90 4295141312 [ 2134.649127][T13101] 1a 90 4295141312 [ 2134.649143][T13101] 0 90 4295141312 [ 2134.649159][T13101] 3 80 4295141312 [ 2134.649173][T13101] a1 90 4295141312 [ 2134.649186][T13101] 1e 90 4295141312 [ 2134.649205][T13101] 7 80 4295141312 [ 2134.649218][T13101] 1 90 4295141312 08:02:28 executing program 0: r0 = syz_open_procfs(0x0, 0x0) renameat(r0, &(0x7f0000000140)='./cgroup\x00', r0, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x3) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0xae9e, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x3245400, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000000)='./bus\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 2134.649230][T13101] 8 80 4295141312 [ 2134.649243][T13101] 4 80 4295141312 [ 2134.649256][T13101] 1 90 4295141312 [ 2134.649271][T13101] last result at 4295141492 [ 2134.649282][T13101] last redo_fd_request at 4295150232 [ 2134.649352][T13101] status=80 [ 2134.649366][T13101] fdc_busy=1 [ 2134.649375][T13101] floppy_work.func=floppy_work_workfn [ 2134.649399][T13101] cont=ffffffff8a1f4920 [ 2134.649412][T13101] current_req=0000000000000000 [ 2134.649423][T13101] command_status=-1 [ 2134.649434][T13101] [ 2134.649508][T13101] floppy1: floppy timeout called [ 2134.652942][ T37] audit: type=1800 audit(1638172948.105:683): pid=20454 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048705 res=0 errno=0 [ 2134.687985][T13101] [ 2134.688002][T13101] floppy driver state [ 2134.688010][T13101] ------------------- [ 2134.688017][T13101] now=4295150310 last interrupt=4295141312 diff=8998 last called handler=recal_interrupt [ 2134.688058][T13101] timeout_message=lock fdc [ 2134.688069][T13101] last output bytes: [ 2134.688078][T13101] 0 90 4295139496 [ 2134.688094][T13101] 1 90 4295139496 [ 2134.688108][T13101] 2 90 4295139496 [ 2134.688122][T13101] 24 90 4295139496 [ 2134.688260][T13101] 1b 90 4295139496 [ 2134.688282][T13101] ff 90 4295139496 [ 2134.688298][T13101] 12 80 4295141312 [ 2134.688313][T13101] 3 90 4295141312 [ 2134.688329][T13101] 13 80 4295141312 [ 2134.688344][T13101] 0 90 4295141312 [ 2134.688359][T13101] 1a 90 4295141312 [ 2134.688373][T13101] 0 90 4295141312 [ 2134.688387][T13101] 3 80 4295141312 [ 2134.688400][T13101] a1 90 4295141312 [ 2134.688415][T13101] 1e 90 4295141312 [ 2134.688428][T13101] 7 80 4295141312 [ 2134.688443][T13101] 1 90 4295141312 [ 2134.688477][T13101] 8 80 4295141312 [ 2134.688491][T13101] 4 80 4295141312 [ 2134.688504][T13101] 1 90 4295141312 [ 2134.688518][T13101] last result at 4295141492 [ 2134.688529][T13101] last redo_fd_request at 4295150310 [ 2134.688608][T13101] status=80 [ 2134.688621][T13101] fdc_busy=1 [ 2134.688632][T13101] floppy_work.func=floppy_work_workfn [ 2134.688766][T13101] cont=ffffffff8a1f4920 [ 2134.688780][T13101] current_req=0000000000000000 [ 2134.688791][T13101] command_status=-1 [ 2134.688802][T13101] [ 2134.688884][T13101] floppy1: floppy timeout called [ 2134.689307][T13101] [ 2134.689319][T13101] floppy driver state [ 2134.689327][T13101] ------------------- [ 2134.689335][T13101] now=4295150310 last interrupt=4295141312 diff=8998 last called handler=recal_interrupt [ 2134.689372][T13101] timeout_message=lock fdc [ 2134.689399][T13101] last output bytes: [ 2134.689407][T13101] 0 90 4295139496 [ 2134.689423][T13101] 1 90 4295139496 [ 2134.689436][T13101] 2 90 4295139496 [ 2134.689450][T13101] 24 90 4295139496 [ 2134.689464][T13101] 1b 90 4295139496 [ 2134.689478][T13101] ff 90 4295139496 [ 2134.689492][T13101] 12 80 4295141312 [ 2134.689506][T13101] 3 90 4295141312 [ 2134.689521][T13101] 13 80 4295141312 [ 2134.689534][T13101] 0 90 4295141312 [ 2134.689548][T13101] 1a 90 4295141312 [ 2134.689562][T13101] 0 90 4295141312 [ 2134.689584][T13101] 3 80 4295141312 [ 2134.689599][T13101] a1 90 4295141312 [ 2134.689614][T13101] 1e 90 4295141312 [ 2134.689628][T13101] 7 80 4295141312 [ 2134.689642][T13101] 1 90 4295141312 [ 2134.689655][T13101] 8 80 4295141312 [ 2134.689669][T13101] 4 80 4295141312 [ 2134.689684][T13101] 1 90 4295141312 [ 2134.689700][T13101] last result at 4295141492 [ 2134.689711][T13101] last redo_fd_request at 4295150310 [ 2134.689775][T13101] status=80 [ 2134.689789][T13101] fdc_busy=1 [ 2134.689799][T13101] floppy_work.func=floppy_work_workfn [ 2134.689823][T13101] cont=ffffffff8a1f4920 [ 2134.689835][T13101] current_req=0000000000000000 [ 2134.689847][T13101] command_status=-1 [ 2134.689872][T13101] [ 2134.689945][T13101] floppy1: floppy timeout called [ 2134.694251][T13101] [ 2134.694263][T13101] floppy driver state [ 2134.694272][T13101] ------------------- [ 2134.694279][T13101] now=4295150310 last interrupt=4295141312 diff=8998 last called handler=recal_interrupt [ 2134.694314][T13101] timeout_message=lock fdc [ 2134.694324][T13101] last output bytes: [ 2134.694332][T13101] 0 90 4295139496 [ 2134.694347][T13101] 1 90 4295139496 [ 2134.694361][T13101] 2 90 4295139496 [ 2134.694375][T13101] 24 90 4295139496 [ 2134.694389][T13101] 1b 90 4295139496 [ 2134.694403][T13101] ff 90 4295139496 [ 2134.694418][T13101] 12 80 4295141312 [ 2134.694431][T13101] 3 90 4295141312 [ 2134.694445][T13101] 13 80 4295141312 [ 2134.694458][T13101] 0 90 4295141312 [ 2134.694473][T13101] 1a 90 4295141312 [ 2134.694487][T13101] 0 90 4295141312 [ 2134.694502][T13101] 3 80 4295141312 [ 2134.694517][T13101] a1 90 4295141312 [ 2134.694531][T13101] 1e 90 4295141312 [ 2134.694544][T13101] 7 80 4295141312 [ 2134.694558][T13101] 1 90 4295141312 [ 2134.694582][T13101] 8 80 4295141312 [ 2134.694598][T13101] 4 80 4295141312 [ 2134.694613][T13101] 1 90 4295141312 [ 2134.694627][T13101] last result at 4295141492 [ 2134.694638][T13101] last redo_fd_request at 4295150310 [ 2134.694702][T13101] status=80 [ 2134.694715][T13101] fdc_busy=1 [ 2134.694726][T13101] floppy_work.func=floppy_work_workfn [ 2134.694750][T13101] cont=ffffffff8a1f4920 [ 2134.694762][T13101] current_req=0000000000000000 [ 2134.694773][T13101] command_status=-1 [ 2134.694784][T13101] [ 2134.694855][T13101] floppy1: floppy timeout called [ 2134.697199][T13101] [ 2134.697211][T13101] floppy driver state [ 2134.697220][T13101] ------------------- [ 2134.697228][T13101] now=4295150314 last interrupt=4295141312 diff=9002 last called handler=recal_interrupt [ 2134.697263][T13101] timeout_message=lock fdc [ 2134.697274][T13101] last output bytes: [ 2134.697282][T13101] 0 90 4295139496 [ 2134.697297][T13101] 1 90 4295139496 [ 2134.725119][T20460] syz-executor.0: attempt to access beyond end of device [ 2134.725119][T20460] loop0: rw=2049, want=98, limit=87 [ 2134.740062][T13101] 2 90 4295139496 [ 2134.745045][ T37] audit: type=1804 audit(1638172948.195:684): pid=20459 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1274/file1/bus" dev="loop0" ino=1048705 res=1 errno=0 [ 2134.750951][T13101] 24 90 4295139496 [ 2134.756087][ T37] audit: type=1800 audit(1638172948.195:685): pid=20459 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048705 res=0 errno=0 [ 2134.762161][T13101] 1b 90 4295139496 [ 2135.713687][T13101] ff 90 4295139496 [ 2135.731860][T13101] 12 80 4295141312 [ 2135.737517][T13101] 3 90 4295141312 [ 2135.743312][T13101] 13 80 4295141312 [ 2135.749298][T13101] 0 90 4295141312 [ 2135.754249][T13101] 1a 90 4295141312 [ 2135.760274][T13101] 0 90 4295141312 [ 2135.764684][T13101] 3 80 4295141312 [ 2135.771936][T13101] a1 90 4295141312 [ 2135.777329][T13101] 1e 90 4295141312 [ 2135.779289][T20475] loop0: detected capacity change from 0 to 87 [ 2135.783171][T13101] 7 80 4295141312 [ 2135.803688][T13101] 1 90 4295141312 [ 2135.814703][T13101] 8 80 4295141312 [ 2135.821764][T13101] 4 80 4295141312 [ 2135.831722][T13101] 1 90 4295141312 [ 2135.837019][T13101] last result at 4295141492 [ 2135.853577][T13101] last redo_fd_request at 4295150310 [ 2135.881046][T13101] status=80 [ 2135.885852][T13101] fdc_busy=1 [ 2135.888154][ T37] audit: type=1804 audit(1638172949.365:686): pid=20475 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1275/bus/bus" dev="sda1" ino=1198 res=1 errno=0 [ 2135.893755][T13101] floppy_work.func=floppy_work_workfn [ 2135.923107][ T37] audit: type=1800 audit(1638172949.385:687): pid=20475 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1198 res=0 errno=0 [ 2135.950333][T13101] cont=ffffffff8a1f4920 [ 2135.959619][T13101] current_req=0000000000000000 [ 2135.965311][T13101] command_status=-1 [ 2135.970344][T13101] [ 2135.973396][T13101] floppy1: floppy timeout called [ 2135.981760][ T3758] [ 2135.984757][ T3758] floppy driver state [ 2135.993675][ T3758] ------------------- [ 2135.999719][ T3758] now=4295150445 last interrupt=4295141312 diff=9133 last called handler=recal_interrupt [ 2136.012796][ T3758] timeout_message=lock fdc [ 2136.020286][ T3758] last output bytes: [ 2136.029641][ T3758] 0 90 4295139496 [ 2136.036237][ T3758] 1 90 4295139496 [ 2136.042222][ T3758] 2 90 4295139496 [ 2136.048703][ T3758] 24 90 4295139496 [ 2136.054064][ T3758] 1b 90 4295139496 [ 2136.062104][ T3758] ff 90 4295139496 [ 2136.067154][ T3758] 12 80 4295141312 [ 2136.074428][ T3758] 3 90 4295141312 [ 2136.079561][ T3758] 13 80 4295141312 [ 2136.084435][ T3758] 0 90 4295141312 [ 2136.089360][ T3758] 1a 90 4295141312 [ 2136.094204][ T3758] 0 90 4295141312 [ 2136.101978][ T3758] 3 80 4295141312 [ 2136.111665][ T3758] a1 90 4295141312 [ 2136.119391][ T3758] 1e 90 4295141312 [ 2136.127152][ T3758] 7 80 4295141312 [ 2136.133380][ T3758] 1 90 4295141312 [ 2136.139612][ T3758] 8 80 4295141312 [ 2136.149718][ T3758] 4 80 4295141312 [ 2136.155988][ T3758] 1 90 4295141312 [ 2136.163133][ T3758] last result at 4295141492 [ 2136.170147][ T3758] last redo_fd_request at 4295150443 [ 2136.176917][ T3758] status=80 [ 2136.183104][ T3758] fdc_busy=1 [ 2136.187722][ T3758] floppy_work.func=floppy_work_workfn [ 2136.198451][ T3758] cont=ffffffff8a1f4920 [ 2136.211383][ T3758] current_req=0000000000000000 [ 2136.218484][ T3758] command_status=-1 [ 2136.224322][ T3758] [ 2136.227636][ T3758] floppy1: floppy timeout called [ 2136.286310][ T3758] [ 2136.292539][ T3758] floppy driver state [ 2136.303700][ T3758] ------------------- [ 2136.309172][ T3758] now=4295150476 last interrupt=4295141312 diff=9164 last called handler=recal_interrupt [ 2136.329100][ T3758] timeout_message=lock fdc [ 2136.334291][ T3758] last output bytes: [ 2136.341304][ T3758] 0 90 4295139496 [ 2136.365929][ T3758] 1 90 4295139496 [ 2136.372268][ T3758] 2 90 4295139496 [ 2136.382485][ T3758] 24 90 4295139496 [ 2136.389335][ T3758] 1b 90 4295139496 [ 2136.395449][ T3758] ff 90 4295139496 [ 2136.400959][ T3758] 12 80 4295141312 [ 2136.407527][ T3758] 3 90 4295141312 [ 2136.413599][ T3758] 13 80 4295141312 [ 2136.423034][ T3758] 0 90 4295141312 [ 2136.433355][ T3758] 1a 90 4295141312 [ 2136.442380][ T3758] 0 90 4295141312 [ 2136.450767][ T3758] 3 80 4295141312 [ 2136.463461][ T3758] a1 90 4295141312 [ 2136.473509][ T3758] 1e 90 4295141312 [ 2136.505468][ T3758] 7 80 4295141312 08:02:29 executing program 3: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FLOPPY_FDFMTEND(0xffffffffffffffff, 0x249) r1 = openat$mice(0xffffff9c, &(0x7f0000000000), 0x8900) ioctl$FLOPPY_FDDEFPRM(r1, 0x401c0243, &(0x7f00000000c0)={0x9, 0x8000, 0x5, 0x7fffffff, 0xfff, 0x6, 0x8, 0xde, 0xd9, &(0x7f0000000080)='}&)I,%},++*\x00'}) 08:02:29 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:29 executing program 2: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) renameat(r0, &(0x7f0000000140)='./cgroup\x00', r0, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000040fcec1ec12195bfb52a5d42d1"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDDEFPRM(r0, 0x401c0243, &(0x7f0000000040)={0x6, 0x0, 0x3, 0xfff, 0x40, 0x7, 0x9, 0x1f, 0x0, &(0x7f0000000000)='\x00'}) [ 2136.511900][ T3758] 1 90 4295141312 [ 2136.519041][ T3758] 8 80 4295141312 [ 2136.524149][ T3758] 4 80 4295141312 [ 2136.533769][ T3758] 1 90 4295141312 [ 2136.539525][ T3758] last result at 4295141492 [ 2136.548546][ T3758] last redo_fd_request at 4295150472 [ 2136.558530][ T3758] status=80 [ 2136.564897][ T3758] fdc_busy=1 [ 2136.570690][ T3758] floppy_work.func=floppy_work_workfn [ 2136.580514][ T3758] cont=ffffffff8a1f4920 [ 2136.590434][ T3758] current_req=0000000000000000 [ 2136.597442][ T3758] command_status=-1 [ 2136.602268][ T3758] [ 2136.605111][ T3758] floppy1: floppy timeout called [ 2136.605831][T20486] loop0: detected capacity change from 0 to 87 [ 2136.612844][ T3758] [ 2136.623400][ T3758] floppy driver state [ 2136.630776][ T3758] ------------------- [ 2136.647757][ T3758] now=4295150509 last interrupt=4295141312 diff=9197 last called handler=recal_interrupt [ 2136.672430][ T3758] timeout_message=lock fdc [ 2136.684378][ T3758] last output bytes: [ 2136.695031][ T3758] 0 90 4295139496 [ 2136.706750][ T3758] 1 90 4295139496 [ 2136.715470][ T3758] 2 90 4295139496 [ 2136.740373][ T3758] 24 90 4295139496 [ 2136.754188][ T3758] 1b 90 4295139496 [ 2136.777947][ T3758] ff 90 4295139496 [ 2136.783055][ T3758] 12 80 4295141312 [ 2136.796327][ T3758] 3 90 4295141312 [ 2136.835132][ T3758] 13 80 4295141312 [ 2136.841723][ T3758] 0 90 4295141312 [ 2136.848747][ T3758] 1a 90 4295141312 [ 2136.854054][ T3758] 0 90 4295141312 [ 2136.865877][ T3758] 3 80 4295141312 [ 2136.887558][ T3758] a1 90 4295141312 [ 2136.901865][ T3758] 1e 90 4295141312 [ 2136.906472][ T3758] 7 80 4295141312 [ 2136.911588][ T3758] 1 90 4295141312 [ 2136.919229][ T3758] 8 80 4295141312 [ 2136.926708][ T3758] 4 80 4295141312 [ 2136.936256][ T3758] 1 90 4295141312 [ 2136.946692][ T3758] last result at 4295141492 [ 2136.957240][ T3758] last redo_fd_request at 4295150506 [ 2136.982163][ T3758] status=80 [ 2136.991064][ T3758] fdc_busy=1 [ 2136.996699][ T3758] floppy_work.func=floppy_work_workfn [ 2137.021469][ T3758] cont=ffffffff8a1f4920 [ 2137.030334][ T3758] current_req=0000000000000000 [ 2137.041753][ T3758] command_status=-1 [ 2137.051891][ T3758] [ 2137.061514][ T3758] floppy1: floppy timeout called [ 2137.083038][ T3758] [ 2137.086834][ T3758] floppy driver state [ 2137.107040][ T3758] ------------------- [ 2137.115991][ T3758] now=4295150556 last interrupt=4295141312 diff=9244 last called handler=recal_interrupt [ 2137.144079][ T3758] timeout_message=lock fdc [ 2137.159433][ T3758] last output bytes: [ 2137.176950][ T3758] 0 90 4295139496 [ 2137.185087][ T3758] 1 90 4295139496 [ 2137.197421][ T3758] 2 90 4295139496 [ 2137.205646][ T3758] 24 90 4295139496 [ 2137.220665][ T3758] 1b 90 4295139496 [ 2137.268818][ T3758] ff 90 4295139496 [ 2137.276282][ T3758] 12 80 4295141312 [ 2137.284616][ T3758] 3 90 4295141312 [ 2137.293721][ T3758] 13 80 4295141312 [ 2137.314426][ T3758] 0 90 4295141312 [ 2137.322439][ T3758] 1a 90 4295141312 [ 2137.327592][ T3758] 0 90 4295141312 [ 2137.333673][ T3758] 3 80 4295141312 [ 2137.340038][ T3758] a1 90 4295141312 [ 2137.345927][ T3758] 1e 90 4295141312 [ 2137.353681][ T3758] 7 80 4295141312 [ 2137.360566][ T3758] 1 90 4295141312 [ 2137.371281][ T3758] 8 80 4295141312 [ 2137.382101][ T3758] 4 80 4295141312 [ 2137.397999][ T3758] 1 90 4295141312 [ 2137.408317][ T3758] last result at 4295141492 [ 2137.424870][ T3758] last redo_fd_request at 4295150552 [ 2137.433968][ T3758] status=80 [ 2137.444949][ T3758] fdc_busy=1 [ 2137.451311][ T3758] floppy_work.func=floppy_work_workfn [ 2137.460163][ T3758] cont=ffffffff8a1f4920 [ 2137.466955][ T3758] current_req=0000000000000000 [ 2137.481131][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 2137.492758][ T3758] command_status=-1 [ 2137.511424][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 2137.566384][ T3758] [ 2137.571086][ T3758] floppy1: floppy timeout called [ 2137.604983][ T3758] [ 2137.612420][ T3758] floppy driver state [ 2137.621784][ T3758] ------------------- [ 2137.626589][ T3758] now=4295150607 last interrupt=4295141312 diff=9295 last called handler=recal_interrupt [ 2137.646331][ T3758] timeout_message=lock fdc [ 2137.654890][ T3758] last output bytes: [ 2137.663780][ T3758] 0 90 4295139496 [ 2137.673368][ T3758] 1 90 4295139496 [ 2137.685756][ T3758] 2 90 4295139496 [ 2137.694006][ T3758] 24 90 4295139496 [ 2137.707642][ T3758] 1b 90 4295139496 [ 2137.717204][ T3758] ff 90 4295139496 [ 2137.726337][ T3758] 12 80 4295141312 08:02:31 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2137.743010][ T3758] 3 90 4295141312 [ 2137.751784][ T3758] 13 80 4295141312 [ 2137.760362][ T3758] 0 90 4295141312 [ 2137.767567][ T3758] 1a 90 4295141312 [ 2137.774117][ T3758] 0 90 4295141312 [ 2137.780796][ T3758] 3 80 4295141312 [ 2137.786675][ T3758] a1 90 4295141312 [ 2137.794605][ T3758] 1e 90 4295141312 [ 2137.801052][ T3758] 7 80 4295141312 [ 2137.815609][ T3758] 1 90 4295141312 [ 2137.820340][ T3758] 8 80 4295141312 [ 2137.824338][ T3758] 4 80 4295141312 [ 2137.831010][ T3758] 1 90 4295141312 [ 2137.840742][ T3758] last result at 4295141492 [ 2137.848472][ T3758] last redo_fd_request at 4295150605 [ 2137.859824][ T3758] status=80 [ 2137.865614][ T3758] fdc_busy=1 [ 2137.878634][ T3758] floppy_work.func=floppy_work_workfn [ 2137.888669][ T3758] cont=ffffffff8a1f4920 [ 2137.896055][ T3758] current_req=0000000000000000 [ 2137.906097][ T3758] command_status=-1 [ 2137.913533][ T3758] [ 2137.924142][ T3758] floppy1: floppy timeout called [ 2137.942781][T20496] loop0: detected capacity change from 0 to 87 08:02:31 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x80000001, 0x9, &(0x7f0000001640)=[{&(0x7f0000000340)="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", 0x1000, 0x5}, {&(0x7f00000001c0)="5ce14164ea2b1d4276a2664cbad362405ec4b61fc447eb41a3", 0x19, 0x1}, {&(0x7f0000000200)="047809727433d7cf099f35a990aa639cc749ef4c03db51e6e8dadc52d00824c48646bedf23", 0x25, 0x8000}, {&(0x7f0000000240)="5d294e593dd54f0cd1d09fa6bffa2fefb1d17cfab565282a187e8db19ef7c8403c4f2b0f87f5e0380fd982fdeed52c7a8b063f659e9e75989f78d67bdf6449e64e80b3614da2873caeb28427bd3acc693f2dfd0ff40e589a39f86c98f5b045ad9170fc0df7ec9956f3839df4976be1b9ec255c9e5e1e06a7", 0x78, 0x7f}, {&(0x7f0000001340)="8354d86bd68cd80eb8e8ff87c58f4556a2113cd87bd55453399c75a60c5c508ff84cb0bd72c100850cfdf325090a00e922c67774154cec101d5fb9ff2a546991ad8859bea14e5d47a77c2cf7a59722d0c80604bea67a1859b7e06e1eb6241a3c0dd6427ffad6b54ea86f55743a66c8156995281cf57769f54559db00507e9cad58b7bb7cf21da31a364ceba76dd0e513b5ee", 0x92, 0x7}, {&(0x7f0000001400)="db11671b3240614136478084be62aea6d2332ac50eefb858c3de518095181e31c88bc6c7a359e3d071b882fd4e4e9ae03f42fb0b9e3cdee5b6637a6b70e8bc554aa510b793e9a6f17bb3621cad07a2d9ea324b47987488813541676c9392fced6d727721e91eb775f7f6102ccce8f940c52b4a4762723e5c7d4efed845f855a94188d873b836d7af487a7864b6fa75d03f5208b7cf7eb26a61f1c2debb4b7c4455ac10ada5c87ac380d461a73f275af1ad14c39c53dbb73f2f8ce922db41", 0xbe, 0x3}, {&(0x7f00000002c0)="6cc7ddeeed8a7e3e41c7f1cfe90b6aac3253", 0x12, 0x8}, {&(0x7f00000014c0)="e618bea47f553d207a71c9a9d03d8c036a15234039ea62cbb60939f81f661d3be691d9b238614033267179a5e705900f68604b03ae80cea46566b93fb9f4b79632b74608ddba70728b80a1b22b555ce6fe060ba5dd96d0c71e6a163097a52e4ad153f32223a284fb662c3ff438c97841b85cfc09a040a745ba23eb30198a46c586308a8829", 0x85, 0xfffff900}, {&(0x7f0000001580)="6b7eea5c47a39c7525f7db959585c46c60cfbba490942db0f3f1bdcbf18515f3abdad1fec3a5ddf763d5bf3c89d1fef0f3e16934034e6461eeaf7859dd5b34afcf1a39ec18f26692eed762dff2684f2b401b45964084d0e55f0c189b6275fbeaf9862f178538aa680fd81ac76960d2917a646776f567ba3b2aa007a27181091f91e30ce3ad8a55274340e83dbf1c299d20cacf236a8d54f3783f63f89a6ec464e263", 0xa2, 0x9}], 0x10410, &(0x7f00000016c0)={[{@fragment_all}, {@barrier}, {@clear_cache}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}, {@measure}, {@subj_role={'subj_role', 0x3d, '!'}}, {@appraise}]}) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000001740)={{0x1, 0x77f}, 0x100, './bus\x00'}) lseek(r0, 0x0, 0x2) r2 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) 08:02:31 executing program 2: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/current\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000040)) r3 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x4000) ioctl$FLOPPY_FDFMTEND(r3, 0x249) ioctl$FLOPPY_FDTWADDLE(r3, 0x259) [ 2137.966616][ T3758] [ 2137.976229][ T3758] floppy driver state [ 2138.026085][ T3758] ------------------- [ 2138.071662][ T37] audit: type=1804 audit(1638172951.545:688): pid=20498 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1276/file1/bus" dev="sda1" ino=1180 res=1 errno=0 [ 2138.096585][ T3758] now=4295150652 last interrupt=4295141312 diff=9340 last called handler=recal_interrupt [ 2138.128085][ T3758] timeout_message=lock fdc [ 2138.134813][ T3758] last output bytes: [ 2138.143523][ T37] audit: type=1800 audit(1638172951.605:689): pid=20498 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1180 res=0 errno=0 [ 2138.158092][ T3758] 0 90 4295139496 [ 2138.186805][ T3758] 1 90 4295139496 [ 2138.187474][ T37] audit: type=1800 audit(1638172951.655:690): pid=20498 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1180 res=0 errno=0 [ 2138.193264][ T3758] 2 90 4295139496 [ 2138.227317][ T3758] 24 90 4295139496 [ 2138.241701][ T3758] 1b 90 4295139496 [ 2138.247176][ T3758] ff 90 4295139496 [ 2138.254317][ T3758] 12 80 4295141312 [ 2138.269553][ T3758] 3 90 4295141312 [ 2138.274741][ T3758] 13 80 4295141312 [ 2138.284449][ T3758] 0 90 4295141312 [ 2138.298066][ T3758] 1a 90 4295141312 [ 2138.304508][ T3758] 0 90 4295141312 [ 2138.312842][ T3758] 3 80 4295141312 [ 2138.322085][ T3758] a1 90 4295141312 [ 2138.328193][ T3758] 1e 90 4295141312 [ 2138.333773][ T3758] 7 80 4295141312 [ 2138.342651][ T3758] 1 90 4295141312 [ 2138.350114][ T3758] 8 80 4295141312 [ 2138.356178][ T3758] 4 80 4295141312 [ 2138.360900][ T3758] 1 90 4295141312 [ 2138.367269][ T3758] last result at 4295141492 [ 2138.376183][ T3758] last redo_fd_request at 4295150641 [ 2138.383274][ T3758] status=80 [ 2138.387020][ T3758] fdc_busy=1 [ 2138.393396][ T3758] floppy_work.func=floppy_work_workfn [ 2138.406402][ T3758] cont=ffffffff8a1f4920 [ 2138.422061][ T3758] current_req=0000000000000000 [ 2138.443616][ T3758] command_status=-1 [ 2138.454566][ T3758] [ 2138.462093][ T3758] floppy1: floppy timeout called 08:02:31 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0x6, 0x0) 08:02:31 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x50000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:31 executing program 3: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDGETDRVPRM(r1, 0x80580211, &(0x7f0000000080)) 08:02:31 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x0, &(0x7f0000000140)=[{&(0x7f0000000640)="0400050900000000666174000404090faa47ef2a3cee1db2dff80c1c0200027400f801", 0x23}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x0, 0x2, &(0x7f0000000340)=[{&(0x7f00000001c0)="810886f16a6cb5d7edf56c5964b44e38033f2d8793e23dcb5fc2d4340ab124eafc7f4596af5d92e3d45f4da012b7af2fd10b96a9553837616ed149f57fe2b6578e84e8df88215936d9a0c9dd14b57b9bc2ede223f0dfc570ee309c3c8cb00e02101e07e5cd720bbf50486c06478fdea3f60f42dc5a1674a86e50943a0f088b3d6f82175753922b1f5a4862bab66f2dc4e56da68c91c9802ccd8563e6901c915353d0eac3154ae5fe44848ecddf92c0be680b33a8cb4c1a75af6395722266366a3b4befea1a01b68aa3e5db9632dad36605ee", 0xd2, 0x200}, {&(0x7f00000002c0)="fc458d108064fef7a5ca78fb34a629674f981af65727e98759ce45f83ff0", 0x1e, 0x7}], 0x2080000, &(0x7f0000000380)={[{'msdos\x00'}, {'-\'#*\x1f^.'}, {'msdos\x00'}, {}, {'^)-['}, {'msdos\x00'}, {'-'}, {'msdos\x00'}, {}], [{@dont_appraise}]}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) futimesat(r0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000440)={{r1, r2/1000+10000}}) chdir(&(0x7f0000000000)='./file1\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) quotactl(0x8, &(0x7f0000000480)='./file1\x00', 0xffffffffffffffff, &(0x7f00000004c0)="8799d453aa773615e27a62f8d02cb11828aad7240b53e901ffa84c9c899b1a2a6538d2ae6934d257d794dc6429104d29cbeeb9bd9225d41c1ee56f25b5db9c9f9dd3a80ef8e642a74da208b3342a859fd364201691a4c7174c432ec21560a8e9c48aa89fe0d24b2409b18361891c1e49430d28428ea22f8e6939acea4af2a7742ae0f31866a7a73fdfe38a9525d2c7f4367303a84a4ba029ea5268b4bca4d393972b284680e123da7f63463ea2b833") ftruncate(r3, 0x800) mount$9p_virtio(&(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', &(0x7f0000000600), 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="cdc43f0d46cc2f79522b7472616e733d76697274696f2c6163636573733d616e792c6f626a5f726f6c653d25217b2c61707072616973655f747970653d696d617369672c736d61636b66737472616e736d7574653df2ab73002c00ba9ca923f2a466223a1340c57899"]) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) 08:02:31 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0x90, 0x40000) [ 2138.482113][T20507] loop0: detected capacity change from 0 to 87 [ 2138.488291][T17293] [ 2138.491759][T17293] floppy driver state [ 2138.496077][T17293] ------------------- [ 2138.508449][T17293] now=4295150696 last interrupt=4295141312 diff=9384 last called handler=recal_interrupt [ 2138.513401][T20507] FAT-fs (loop0): bogus number of reserved sectors [ 2138.528891][T20507] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2138.532445][T17293] timeout_message=lock fdc [ 2138.545079][T17293] last output bytes: [ 2138.558481][T17293] 0 90 4295139496 [ 2138.566766][T17293] 1 90 4295139496 [ 2138.585860][T17293] 2 90 4295139496 [ 2138.591558][T17293] 24 90 4295139496 [ 2138.594730][T20513] loop0: detected capacity change from 0 to 2 [ 2138.597390][T17293] 1b 90 4295139496 [ 2138.597412][T17293] ff 90 4295139496 [ 2138.597428][T17293] 12 80 4295141312 [ 2138.597443][T17293] 3 90 4295141312 [ 2138.597458][T17293] 13 80 4295141312 [ 2138.597474][T17293] 0 90 4295141312 [ 2138.639561][T17293] 1a 90 4295141312 [ 2138.644752][T17293] 0 90 4295141312 [ 2138.651042][T17293] 3 80 4295141312 [ 2138.663116][T17293] a1 90 4295141312 [ 2138.670208][T17293] 1e 90 4295141312 [ 2138.675515][T17293] 7 80 4295141312 [ 2138.688189][T17293] 1 90 4295141312 [ 2138.694181][T17293] 8 80 4295141312 [ 2138.701145][T17293] 4 80 4295141312 [ 2138.714731][ T37] audit: type=1804 audit(1638172952.185:691): pid=20507 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1277/file1/bus" dev="sda1" ino=1193 res=1 errno=0 [ 2138.754495][T17293] 1 90 4295141312 [ 2138.763506][T17293] last result at 4295141492 [ 2138.770578][T17293] last redo_fd_request at 4295150692 [ 2138.792208][T17293] status=80 [ 2138.796527][T17293] fdc_busy=1 08:02:32 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000040), 0x1, 0x200) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f0000000240)={0x1, &(0x7f0000000100)="565a4839c187db2e5d0c6baa3fe4bce8", &(0x7f0000000180)=0x4, 0x0, 0x10, 0x0, 0x0, 0x1f, 0x0, "2e3f77ecbe3c38eed62f959d861c0415", 0x0, '\x00', 0x3e}) ioctl$FLOPPY_FDCLRPRM(r0, 0x241) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2006f2266df013fc788b194abb3a5d5a8739db1d48283f372e1c4a4f5ca39eae24b1b3e8db356de117232f33184f24bd034606c78cbdef9a24f547784d6d70001b79bdfe9b47fd5d74027fc9cfce24307ee50caf10b1f2eb9ed3249c3b687485d7114e54c5e7b66db539fe43f92d0dde4c78246a8a2a1d59bf1af521e7b86b8b", @ANYBLOB="000400080000000000000004a79b7b6100000000000000125d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDFMTEND(r1, 0x249) r3 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$FLOPPY_FDFMTEND(r3, 0x249) r4 = openat$dlm_control(0xffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$FLOPPY_FDFMTEND(r4, 0x249) [ 2138.805582][T17293] floppy_work.func=floppy_work_workfn [ 2138.818000][T17293] cont=ffffffff8a1f4920 [ 2138.824638][T17293] current_req=0000000000000000 [ 2138.831192][T17293] command_status=-1 [ 2138.843257][T17293] [ 2138.846940][T17293] floppy1: floppy timeout called [ 2138.866150][T17293] [ 2138.870274][T17293] floppy driver state [ 2138.876595][T17293] ------------------- [ 2138.885392][T17293] now=4295150733 last interrupt=4295141312 diff=9421 last called handler=recal_interrupt [ 2138.903582][T17293] timeout_message=lock fdc [ 2138.912136][T17293] last output bytes: [ 2138.919625][T17293] 0 90 4295139496 [ 2138.925631][T17293] 1 90 4295139496 [ 2138.931960][T17293] 2 90 4295139496 [ 2138.945418][T17293] 24 90 4295139496 [ 2138.953483][T17293] 1b 90 4295139496 [ 2138.964826][T17293] ff 90 4295139496 [ 2138.971289][T17293] 12 80 4295141312 [ 2138.976488][T17293] 3 90 4295141312 [ 2138.982098][T17293] 13 80 4295141312 [ 2138.987290][T17293] 0 90 4295141312 [ 2138.992354][T17293] 1a 90 4295141312 [ 2138.998367][T17293] 0 90 4295141312 [ 2139.003866][T17293] 3 80 4295141312 [ 2139.027183][T17293] a1 90 4295141312 [ 2139.034267][T17293] 1e 90 4295141312 [ 2139.039945][T17293] 7 80 4295141312 [ 2139.044780][T17293] 1 90 4295141312 [ 2139.049085][T17293] 8 80 4295141312 [ 2139.054457][T17293] 4 80 4295141312 [ 2139.061078][T17293] 1 90 4295141312 [ 2139.069570][T17293] last result at 4295141492 [ 2139.080303][T17293] last redo_fd_request at 4295150731 [ 2139.088110][T17293] status=80 [ 2139.092072][T17293] fdc_busy=1 [ 2139.095806][T17293] floppy_work.func=floppy_work_workfn [ 2139.103890][T17293] cont=ffffffff8a1f4920 [ 2139.111259][T17293] current_req=0000000000000000 [ 2139.115938][T17293] command_status=-1 [ 2139.120901][T17293] [ 2139.125295][T17293] floppy1: floppy timeout called [ 2139.136644][T17293] [ 2139.140840][T17293] floppy driver state [ 2139.146580][T17293] ------------------- [ 2139.153425][T17293] now=4295150760 last interrupt=4295141312 diff=9448 last called handler=recal_interrupt [ 2139.169495][T17293] timeout_message=lock fdc [ 2139.179681][T17293] last output bytes: [ 2139.185281][T17293] 0 90 4295139496 [ 2139.194210][T17293] 1 90 4295139496 [ 2139.200605][T17293] 2 90 4295139496 [ 2139.208345][T17293] 24 90 4295139496 [ 2139.214491][T17293] 1b 90 4295139496 [ 2139.221498][T17293] ff 90 4295139496 [ 2139.232096][T17293] 12 80 4295141312 [ 2139.243291][T17293] 3 90 4295141312 [ 2139.251216][T17293] 13 80 4295141312 [ 2139.258139][T17293] 0 90 4295141312 [ 2139.263584][T17293] 1a 90 4295141312 [ 2139.268931][T17293] 0 90 4295141312 [ 2139.276820][T17293] 3 80 4295141312 [ 2139.285339][T17293] a1 90 4295141312 [ 2139.294521][T17293] 1e 90 4295141312 [ 2139.300211][T17293] 7 80 4295141312 [ 2139.306242][T17293] 1 90 4295141312 [ 2139.317742][T17293] 8 80 4295141312 [ 2139.324610][T17293] 4 80 4295141312 [ 2139.335224][T20513] loop0: detected capacity change from 0 to 87 [ 2139.347923][T17293] 1 90 4295141312 [ 2139.353944][T17293] last result at 4295141492 [ 2139.363586][T17293] last redo_fd_request at 4295150758 [ 2139.373936][T17293] status=80 [ 2139.376738][T20513] FAT-fs (loop0): bogus number of reserved sectors [ 2139.380491][T17293] fdc_busy=1 [ 2139.390458][T20513] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2139.392232][T17293] floppy_work.func=floppy_work_workfn [ 2139.405448][T17293] cont=ffffffff8a1f4920 [ 2139.412197][T17293] current_req=0000000000000000 [ 2139.425554][T17293] command_status=-1 [ 2139.433233][T17293] [ 2139.436851][T17293] floppy1: floppy timeout called [ 2139.458624][T17293] [ 2139.462092][T17293] floppy driver state [ 2139.484223][T17293] ------------------- [ 2139.490712][T17293] now=4295150794 last interrupt=4295141312 diff=9482 last called handler=recal_interrupt [ 2139.515372][T17293] timeout_message=lock fdc [ 2139.526472][T17293] last output bytes: [ 2139.533195][T17293] 0 90 4295139496 [ 2139.560611][T17293] 1 90 4295139496 [ 2139.584432][T17293] 2 90 4295139496 [ 2139.615853][T17293] 24 90 4295139496 [ 2139.638008][T17293] 1b 90 4295139496 08:02:33 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:33 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2139.657467][T17293] ff 90 4295139496 [ 2139.666504][T20526] loop0: detected capacity change from 0 to 87 [ 2139.669576][T17293] 12 80 4295141312 [ 2139.691396][T17293] 3 90 4295141312 [ 2139.698371][T17293] 13 80 4295141312 [ 2139.705218][T17293] 0 90 4295141312 [ 2139.712713][T17293] 1a 90 4295141312 [ 2139.727008][T17293] 0 90 4295141312 [ 2139.732812][T17293] 3 80 4295141312 [ 2139.738378][T17293] a1 90 4295141312 [ 2139.743358][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 2139.743378][ T37] audit: type=1804 audit(1638172953.215:696): pid=20526 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1278/file1/bus" dev="loop0" ino=1048706 res=1 errno=0 [ 2139.744263][T17293] 1e 90 4295141312 [ 2139.768057][ T37] audit: type=1800 audit(1638172953.215:697): pid=20526 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048706 res=0 errno=0 [ 2139.808324][T17293] 7 80 4295141312 [ 2139.838025][ T37] audit: type=1804 audit(1638172953.235:698): pid=20528 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1278/file1/bus" dev="loop0" ino=1048706 res=1 errno=0 [ 2139.839554][T17293] 1 90 4295141312 [ 2139.879034][T17293] 8 80 4295141312 [ 2139.879463][ T37] audit: type=1800 audit(1638172953.235:699): pid=20528 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048706 res=0 errno=0 [ 2139.886120][T17293] 4 80 4295141312 [ 2139.927195][T17293] 1 90 4295141312 [ 2139.933267][T17293] last result at 4295141492 [ 2139.940624][T17293] last redo_fd_request at 4295150791 [ 2139.948882][T17293] status=80 [ 2139.954042][T17293] fdc_busy=1 [ 2139.961570][T17293] floppy_work.func=floppy_work_workfn [ 2139.969884][T17293] cont=ffffffff8a1f4920 [ 2139.977796][T17293] current_req=0000000000000000 [ 2139.985865][T17293] command_status=-1 [ 2139.991798][T17293] [ 2139.995818][T17293] floppy1: floppy timeout called [ 2140.029536][T17293] [ 2140.035154][T17293] floppy driver state [ 2140.060581][T17293] ------------------- [ 2140.073479][T17293] now=4295150852 last interrupt=4295141312 diff=9540 last called handler=recal_interrupt [ 2140.091735][T17293] timeout_message=lock fdc [ 2140.098482][T17293] last output bytes: [ 2140.104703][T17293] 0 90 4295139496 [ 2140.111803][T17293] 1 90 4295139496 [ 2140.117751][T17293] 2 90 4295139496 [ 2140.127116][T17293] 24 90 4295139496 [ 2140.134744][T17293] 1b 90 4295139496 [ 2140.142038][T17293] ff 90 4295139496 [ 2140.149859][T17293] 12 80 4295141312 [ 2140.155523][T17293] 3 90 4295141312 [ 2140.160814][T17293] 13 80 4295141312 [ 2140.167798][T17293] 0 90 4295141312 [ 2140.177261][T17293] 1a 90 4295141312 [ 2140.188221][T17293] 0 90 4295141312 [ 2140.197988][T17293] 3 80 4295141312 [ 2140.207738][T17293] a1 90 4295141312 [ 2140.218141][T17293] 1e 90 4295141312 [ 2140.227369][T17293] 7 80 4295141312 [ 2140.234848][T17293] 1 90 4295141312 [ 2140.241738][T17293] 8 80 4295141312 [ 2140.249945][T17293] 4 80 4295141312 [ 2140.256156][T17293] 1 90 4295141312 [ 2140.272553][T17293] last result at 4295141492 [ 2140.280440][T17293] last redo_fd_request at 4295150848 [ 2140.309581][T17293] status=80 08:02:33 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0xfcffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:33 executing program 3: renameat(0xffffffffffffffff, &(0x7f0000000140)='./cgroup\x00', 0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x11d) ioctl$FLOPPY_FDDEFPRM(0xffffffffffffffff, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:33 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x301500, 0x1) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) sendfile(r2, r1, 0x0, 0x8400fffffffa) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x10d) creat(&(0x7f0000000180)='\x00', 0x48) [ 2140.314511][T17293] fdc_busy=1 [ 2140.321514][T20537] loop0: detected capacity change from 0 to 87 08:02:33 executing program 2: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x80000) r0 = syz_open_procfs(0x0, 0x0) renameat(r0, &(0x7f0000000140)='./cgroup\x00', r0, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDFMTEND(r0, 0x249) [ 2140.338139][T17293] floppy_work.func=floppy_work_workfn [ 2140.353679][T17293] cont=ffffffff8a1f4920 [ 2140.368072][T17293] current_req=0000000000000000 [ 2140.395761][ T37] audit: type=1804 audit(1638172953.865:700): pid=20537 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1279/file1/bus" dev="loop0" ino=1048707 res=1 errno=0 [ 2140.419023][T17293] command_status=-1 [ 2140.449981][T17293] [ 2140.459237][T17293] floppy1: floppy timeout called [ 2140.467915][ T37] audit: type=1800 audit(1638172953.865:701): pid=20537 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048707 res=0 errno=0 [ 2140.497992][ T3758] [ 2140.500640][ T3758] floppy driver state [ 2140.506893][ T3758] ------------------- [ 2140.510479][ T37] audit: type=1804 audit(1638172953.875:702): pid=20537 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1279/file1/bus" dev="loop0" ino=1048707 res=1 errno=0 [ 2140.515136][ T3758] now=4295150896 last interrupt=4295141312 diff=9584 last called handler=recal_interrupt [ 2140.554940][ T37] audit: type=1804 audit(1638172953.875:703): pid=20537 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1279/file1/bus" dev="loop0" ino=1048707 res=1 errno=0 [ 2140.565392][ T3758] timeout_message=lock fdc [ 2140.565405][ T3758] last output bytes: [ 2140.565410][ T3758] 0 90 4295139496 [ 2140.591994][ T37] audit: type=1800 audit(1638172953.875:704): pid=20537 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048707 res=0 errno=0 [ 2140.597241][ T3758] 1 90 4295139496 [ 2140.603169][ T37] audit: type=1804 audit(1638172953.875:705): pid=20537 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1279/file1/bus" dev="loop0" ino=1048707 res=1 errno=0 [ 2140.607211][ T3758] 2 90 4295139496 [ 2140.607233][ T3758] 24 90 4295139496 [ 2140.607248][ T3758] 1b 90 4295139496 [ 2140.695869][ T3758] ff 90 4295139496 [ 2140.702347][ T3758] 12 80 4295141312 [ 2140.707482][ T3758] 3 90 4295141312 [ 2140.713734][ T3758] 13 80 4295141312 [ 2140.722663][ T3758] 0 90 4295141312 [ 2140.732122][ T3758] 1a 90 4295141312 [ 2140.737213][ T3758] 0 90 4295141312 [ 2140.743657][ T3758] 3 80 4295141312 [ 2140.749321][ T3758] a1 90 4295141312 [ 2140.757178][ T3758] 1e 90 4295141312 [ 2140.762881][ T3758] 7 80 4295141312 [ 2140.766997][ T3758] 1 90 4295141312 [ 2140.778302][ T3758] 8 80 4295141312 08:02:34 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000003, 0x2010, r2, 0x676a0000) ioctl$CDROMREADMODE2(r1, 0x530c, &(0x7f0000000340)={0xff, 0x5, 0x20, 0x8, 0xe1, 0x52}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "05a6f83867d9bbdba0"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendfile(r0, r1, 0x0, 0x8400fffffffa) 08:02:34 executing program 3: ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) r0 = syz_open_procfs(0x0, 0x0) renameat(r0, &(0x7f0000000140)='./cgroup\x00', r0, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) r1 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r1, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2140.788492][ T3758] 4 80 4295141312 [ 2140.795096][ T3758] 1 90 4295141312 [ 2140.807318][ T3758] last result at 4295141492 [ 2140.814934][T20545] loop0: detected capacity change from 0 to 87 [ 2140.823640][ T3758] last redo_fd_request at 4295150894 [ 2140.832348][ T3758] status=80 [ 2140.836131][ T3758] fdc_busy=1 [ 2140.839917][ T3758] floppy_work.func=floppy_work_workfn [ 2140.845320][ T3758] cont=ffffffff8a1f4920 [ 2140.856279][ T3758] current_req=0000000000000000 [ 2140.864829][ T3758] command_status=-1 [ 2140.869594][ T3758] [ 2140.872892][ T3758] floppy1: floppy timeout called [ 2140.880575][T17293] [ 2140.884031][T17293] floppy driver state [ 2140.890097][T17293] ------------------- [ 2140.895970][T17293] now=4295150934 last interrupt=4295141312 diff=9622 last called handler=recal_interrupt [ 2140.911667][T17293] timeout_message=lock fdc [ 2140.925370][T17293] last output bytes: [ 2140.931803][T17293] 0 90 4295139496 [ 2140.945650][T17293] 1 90 4295139496 [ 2140.954009][T17293] 2 90 4295139496 [ 2140.963274][T17293] 24 90 4295139496 [ 2140.969222][T17293] 1b 90 4295139496 [ 2140.975463][T17293] ff 90 4295139496 [ 2140.986387][T17293] 12 80 4295141312 [ 2140.993217][T17293] 3 90 4295141312 [ 2141.008079][T17293] 13 80 4295141312 [ 2141.014392][T17293] 0 90 4295141312 [ 2141.023321][T17293] 1a 90 4295141312 [ 2141.029778][T17293] 0 90 4295141312 [ 2141.037095][T17293] 3 80 4295141312 [ 2141.050349][T17293] a1 90 4295141312 [ 2141.058345][T17293] 1e 90 4295141312 [ 2141.064491][T17293] 7 80 4295141312 [ 2141.071032][T17293] 1 90 4295141312 [ 2141.081255][T17293] 8 80 4295141312 [ 2141.095142][T17293] 4 80 4295141312 [ 2141.102085][T17293] 1 90 4295141312 [ 2141.108768][T17293] last result at 4295141492 [ 2141.117524][T17293] last redo_fd_request at 4295150933 [ 2141.125382][T17293] status=80 [ 2141.131349][T17293] fdc_busy=1 [ 2141.136487][T17293] floppy_work.func=floppy_work_workfn [ 2141.146297][T17293] cont=ffffffff8a1f4920 [ 2141.153636][T17293] current_req=0000000000000000 [ 2141.161578][T17293] command_status=-1 [ 2141.168076][T17293] [ 2141.172245][T17293] floppy1: floppy timeout called [ 2141.183314][T17293] [ 2141.189593][T17293] floppy driver state [ 2141.196229][T17293] ------------------- [ 2141.202381][T17293] now=4295150965 last interrupt=4295141312 diff=9653 last called handler=recal_interrupt [ 2141.222420][T17293] timeout_message=lock fdc [ 2141.232401][T17293] last output bytes: [ 2141.239017][T17293] 0 90 4295139496 [ 2141.246768][T17293] 1 90 4295139496 [ 2141.255473][T17293] 2 90 4295139496 [ 2141.261999][T17293] 24 90 4295139496 [ 2141.275079][T17293] 1b 90 4295139496 [ 2141.281444][T17293] ff 90 4295139496 [ 2141.291272][T17293] 12 80 4295141312 [ 2141.300499][T17293] 3 90 4295141312 [ 2141.312723][T17293] 13 80 4295141312 [ 2141.323499][T17293] 0 90 4295141312 [ 2141.333157][T17293] 1a 90 4295141312 [ 2141.339325][T17293] 0 90 4295141312 [ 2141.346178][T17293] 3 80 4295141312 [ 2141.355084][T17293] a1 90 4295141312 [ 2141.363467][T17293] 1e 90 4295141312 [ 2141.371804][T17293] 7 80 4295141312 [ 2141.379851][T17293] 1 90 4295141312 [ 2141.388281][T17293] 8 80 4295141312 [ 2141.394652][T17293] 4 80 4295141312 [ 2141.404275][T17293] 1 90 4295141312 [ 2141.411341][T17293] last result at 4295141492 [ 2141.421394][T17293] last redo_fd_request at 4295150963 [ 2141.430682][T17293] status=80 [ 2141.441734][T17293] fdc_busy=1 [ 2141.446589][T17293] floppy_work.func=floppy_work_workfn [ 2141.456072][T17293] cont=ffffffff8a1f4920 [ 2141.461916][T17293] current_req=0000000000000000 [ 2141.470252][T17293] command_status=-1 [ 2141.475739][T17293] [ 2141.479109][T17293] floppy1: floppy timeout called [ 2141.544005][T17293] [ 2141.547539][T17293] floppy driver state [ 2141.566401][T17293] ------------------- [ 2141.572503][T17293] now=4295151002 last interrupt=4295141312 diff=9690 last called handler=recal_interrupt [ 2141.585991][T17293] timeout_message=lock fdc [ 2141.591663][T17293] last output bytes: [ 2141.596793][T17293] 0 90 4295139496 [ 2141.607259][T17293] 1 90 4295139496 [ 2141.613754][T17293] 2 90 4295139496 [ 2141.619879][T17293] 24 90 4295139496 [ 2141.625180][T17293] 1b 90 4295139496 [ 2141.630485][T17293] ff 90 4295139496 [ 2141.642131][T17293] 12 80 4295141312 [ 2141.656403][T17293] 3 90 4295141312 [ 2141.667267][T17293] 13 80 4295141312 [ 2141.674417][T17293] 0 90 4295141312 [ 2141.680078][T17293] 1a 90 4295141312 08:02:35 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:35 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000040), 0x1, 0x0) ioctl$FLOPPY_FDCLRPRM(r0, 0x241) ioctl$FLOPPY_FDCLRPRM(r0, 0x241) 08:02:35 executing program 3: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x20, 0x3) fgetxattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000080)=""/178, 0xb2) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2141.707567][T17293] 0 90 4295141312 [ 2141.727942][T17293] 3 80 4295141312 [ 2141.732721][T17293] a1 90 4295141312 [ 2141.737582][T17293] 1e 90 4295141312 [ 2141.754358][T17293] 7 80 4295141312 [ 2141.761483][T17293] 1 90 4295141312 [ 2141.768747][T17293] 8 80 4295141312 [ 2141.774430][T17293] 4 80 4295141312 [ 2141.780044][T17293] 1 90 4295141312 [ 2141.785486][T17293] last result at 4295141492 [ 2141.791589][T17293] last redo_fd_request at 4295150998 [ 2141.800043][T17293] status=80 [ 2141.807770][T17293] fdc_busy=1 [ 2141.815186][T17293] floppy_work.func=floppy_work_workfn [ 2141.823953][T17293] cont=ffffffff8a1f4920 [ 2141.833151][T17293] current_req=0000000000000000 [ 2141.841143][T17293] command_status=-1 [ 2141.847631][T17293] [ 2141.854087][T17293] floppy1: floppy timeout called [ 2141.861389][T17293] [ 2141.867079][T17293] floppy driver state [ 2141.873040][T17293] ------------------- [ 2141.882584][T17293] now=4295151033 last interrupt=4295141312 diff=9721 last called handler=recal_interrupt [ 2141.895696][T17293] timeout_message=lock fdc [ 2141.902018][T17293] last output bytes: [ 2141.910023][T17293] 0 90 4295139496 [ 2141.920513][T17293] 1 90 4295139496 [ 2141.940189][T17293] 2 90 4295139496 [ 2141.945544][T17293] 24 90 4295139496 [ 2141.958127][T17293] 1b 90 4295139496 [ 2141.967806][T17293] ff 90 4295139496 [ 2141.977474][T17293] 12 80 4295141312 [ 2141.992907][T17293] 3 90 4295141312 [ 2142.001189][T17293] 13 80 4295141312 [ 2142.007567][T17293] 0 90 4295141312 08:02:35 executing program 3: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1577f59604d64f75ff40cbbcc84c3dbba135caa85ee381548d85e7f375bb8a5fa19c3fd38e0834b74024990252df42ebc8d609d340808a201e6f22092b92ae8457bb2404bced97efd66dace72701231f80da44ccc31752c6af65a480227ee405fa2601254807", @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) poll(&(0x7f0000000000)=[{r1, 0x4040}], 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:35 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x10, r0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x14, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x3}, 0x5) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x104) ftruncate(r0, 0x800) lseek(r0, 0x100, 0x1) lseek(r0, 0x0, 0x2) r4 = open(&(0x7f0000000080)='./file1\x00', 0x4000, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffa) r5 = syz_open_procfs(0x0, 0x0) renameat(r5, &(0x7f0000000140)='./cgroup\x00', r5, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) sendfile(r3, r5, &(0x7f0000000180)=0x3, 0x0) [ 2142.022136][T17293] 1a 90 4295141312 [ 2142.026909][T20564] loop0: detected capacity change from 0 to 87 [ 2142.031319][T17293] 0 90 4295141312 [ 2142.040263][T17293] 3 80 4295141312 [ 2142.045886][T17293] a1 90 4295141312 [ 2142.051757][T17293] 1e 90 4295141312 [ 2142.059508][T17293] 7 80 4295141312 [ 2142.065749][T17293] 1 90 4295141312 [ 2142.077717][T17293] 8 80 4295141312 [ 2142.083238][T17293] 4 80 4295141312 [ 2142.088744][T17293] 1 90 4295141312 [ 2142.093655][T17293] last result at 4295141492 [ 2142.099724][T17293] last redo_fd_request at 4295151031 [ 2142.107575][T17293] status=80 [ 2142.112120][T17293] fdc_busy=1 [ 2142.116281][T17293] floppy_work.func=floppy_work_workfn [ 2142.125993][T17293] cont=ffffffff8a1f4920 [ 2142.133575][T17293] current_req=0000000000000000 [ 2142.143007][T17293] command_status=-1 [ 2142.156477][T17293] [ 2142.159187][T17293] floppy1: floppy timeout called [ 2142.170291][T13101] [ 2142.174344][T13101] floppy driver state [ 2142.180885][T13101] ------------------- [ 2142.186467][T13101] now=4295151063 last interrupt=4295141312 diff=9751 last called handler=recal_interrupt [ 2142.200909][T13101] timeout_message=lock fdc [ 2142.206617][T13101] last output bytes: [ 2142.211265][T13101] 0 90 4295139496 [ 2142.218481][T13101] 1 90 4295139496 [ 2142.230459][T13101] 2 90 4295139496 [ 2142.239863][T13101] 24 90 4295139496 [ 2142.256002][T13101] 1b 90 4295139496 [ 2142.261581][T13101] ff 90 4295139496 [ 2142.267189][T13101] 12 80 4295141312 [ 2142.273235][T13101] 3 90 4295141312 [ 2142.279301][T13101] 13 80 4295141312 [ 2142.284803][T13101] 0 90 4295141312 [ 2142.290044][T13101] 1a 90 4295141312 [ 2142.295841][T13101] 0 90 4295141312 [ 2142.301618][T13101] 3 80 4295141312 [ 2142.307641][T13101] a1 90 4295141312 [ 2142.315083][T13101] 1e 90 4295141312 [ 2142.327534][T13101] 7 80 4295141312 [ 2142.336475][T13101] 1 90 4295141312 [ 2142.343160][T13101] 8 80 4295141312 [ 2142.349200][T13101] 4 80 4295141312 [ 2142.355335][T13101] 1 90 4295141312 [ 2142.361660][T13101] last result at 4295141492 [ 2142.366816][T13101] last redo_fd_request at 4295151062 [ 2142.373718][T13101] status=80 [ 2142.377594][T13101] fdc_busy=1 [ 2142.381943][T13101] floppy_work.func=floppy_work_workfn [ 2142.394589][T13101] cont=ffffffff8a1f4920 [ 2142.400315][T13101] current_req=0000000000000000 08:02:35 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2142.407101][T13101] command_status=-1 [ 2142.413683][T13101] [ 2142.417140][T13101] floppy1: floppy timeout called [ 2142.457211][T13101] [ 2142.460757][T13101] floppy driver state [ 2142.484078][T13101] ------------------- [ 2142.498030][T13101] now=4295151095 last interrupt=4295141312 diff=9783 last called handler=recal_interrupt [ 2142.540266][T13101] timeout_message=lock fdc 08:02:35 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000180)={@id={0x2, 0x0, @a}, 0x9, 0x0, '\x00', @auto=[0x3a, 0x24, 0x1f, 0x2a, 0x1c, 0x20, 0x12, 0x1b, 0x10]}) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x1, 0x8, 0x200}) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 2142.557679][T20574] loop0: detected capacity change from 0 to 87 [ 2142.572867][T13101] last output bytes: 08:02:36 executing program 3: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r0, &(0x7f00000000c0)=""/1, 0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x3, 0x448800) sendto$inet6(r1, &(0x7f0000000340)="642eb62d60cef1196c3eea5c9f998dd64bfce52663abf7adb227c472d78094f4b2b3e97ef39eec9222c40b5df58b2e4298b9a0099ea74d8cd77a3017cb455f2b92e38adc07934e97ab80c9bf044a14a5fe77fad8997e0ac89bd970672da4cb150a6526fc27cd47d2ff26bb15eaea608cf3b583890057637986", 0x79, 0x40000, 0x0, 0x0) r2 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDRAWCMD(r2, 0x258, &(0x7f0000000100)={0x80, &(0x7f0000000080)="c5c1bd31593326ea6ea521f9017eb81c12a673c8802bce231253440d3145796bfb89e055a7932bf0bfd002675021ecf0664299d3b25725b30debd61720b07d842d777cec538d6866a13ccbb4272fd2bcf379ded5c6c7a88c0194a6ac083b2186cf578b4005f6a01b89446dcfdcd8772d5c", &(0x7f0000000000)=0x2, 0x0, 0x71, 0x0, 0x0, 0x3f, 0x9, "3a93426ffc54007c43dd7eba2aae335c", 0x0, '\x00', 0x2}) ioctl$FLOPPY_FDRAWCMD(r2, 0x258, &(0x7f0000000280)={0x400, &(0x7f0000000200)="1c5497920b7a490319df5cca4f187296a0f4c59465e6306b04fa954484864a418b7c0b9e28fda20de2a8ee27d0e025e04029702dd26cdc1de6f2ef45d748bf5cb7f7107bb5b94c2f8d49d4853d7361b680f492698c9c3d41156c6a49283c0b8671f52edf2e26d6db9036a07283928003eeb0f4a769eb1aeb9248", &(0x7f0000000040)=0x9, 0x0, 0x7a, 0x0, 0x0, 0xfa, 0x7, "23b2813b5744a5896897167a7577bdb6", 0x0, '\x00', 0x4}) ioctl$FLOPPY_FDDEFPRM(r2, 0x301, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0}) [ 2142.614245][T13101] 0 90 4295139496 [ 2142.642507][T20574] syz-executor.0: attempt to access beyond end of device [ 2142.642507][T20574] loop0: rw=0, want=90, limit=87 [ 2142.651158][T13101] 1 90 4295139496 [ 2142.663904][T13101] 2 90 4295139496 [ 2142.672739][T13101] 24 90 4295139496 [ 2142.679798][T13101] 1b 90 4295139496 [ 2142.697969][T13101] ff 90 4295139496 [ 2142.703143][T13101] 12 80 4295141312 [ 2142.709699][T13101] 3 90 4295141312 [ 2142.713752][T13101] 13 80 4295141312 [ 2142.720593][T13101] 0 90 4295141312 [ 2142.737586][T12742] kworker/u17:1: attempt to access beyond end of device [ 2142.737586][T12742] loop0: rw=1, want=98, limit=87 [ 2142.774838][T13101] 1a 90 4295141312 [ 2142.797149][T13101] 0 90 4295141312 [ 2142.803428][T13101] 3 80 4295141312 [ 2142.809473][T13101] a1 90 4295141312 [ 2142.814651][T13101] 1e 90 4295141312 [ 2142.839523][T13101] 7 80 4295141312 [ 2142.852517][T13101] 1 90 4295141312 [ 2142.869523][T13101] 8 80 4295141312 [ 2142.876038][T13101] 4 80 4295141312 [ 2142.881801][T13101] 1 90 4295141312 [ 2142.887019][T13101] last result at 4295141492 [ 2142.905142][T13101] last redo_fd_request at 4295151090 [ 2142.914412][T13101] status=80 [ 2142.923327][T13101] fdc_busy=1 [ 2142.927638][T13101] floppy_work.func=floppy_work_workfn [ 2142.946146][T13101] cont=ffffffff8a1f4920 [ 2142.965037][T13101] current_req=0000000000000000 [ 2142.972350][T13101] command_status=-1 [ 2142.987046][T13101] [ 2142.996994][T13101] floppy1: floppy timeout called [ 2143.020810][ T3758] [ 2143.026615][ T3758] floppy driver state [ 2143.032574][ T3758] ------------------- [ 2143.038857][ T3758] now=4295151149 last interrupt=4295141312 diff=9837 last called handler=recal_interrupt [ 2143.055325][ T3758] timeout_message=lock fdc [ 2143.065652][ T3758] last output bytes: [ 2143.075541][ T3758] 0 90 4295139496 [ 2143.083467][ T3758] 1 90 4295139496 [ 2143.090474][ T3758] 2 90 4295139496 [ 2143.096483][ T3758] 24 90 4295139496 [ 2143.103166][ T3758] 1b 90 4295139496 [ 2143.108981][ T3758] ff 90 4295139496 [ 2143.114104][ T3758] 12 80 4295141312 [ 2143.119475][ T3758] 3 90 4295141312 [ 2143.126681][ T3758] 13 80 4295141312 [ 2143.139264][ T3758] 0 90 4295141312 [ 2143.147084][ T3758] 1a 90 4295141312 [ 2143.153754][ T3758] 0 90 4295141312 [ 2143.167320][ T3758] 3 80 4295141312 [ 2143.173326][ T3758] a1 90 4295141312 [ 2143.178899][ T3758] 1e 90 4295141312 [ 2143.183796][ T3758] 7 80 4295141312 [ 2143.187998][ T3758] 1 90 4295141312 [ 2143.192596][ T3758] 8 80 4295141312 [ 2143.197486][ T3758] 4 80 4295141312 [ 2143.203193][ T3758] 1 90 4295141312 [ 2143.212385][ T3758] last result at 4295141492 08:02:36 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:36 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) openat(r1, &(0x7f0000000080)='./bus\x00', 0x0, 0xa) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r2 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) syz_mount_image$cramfs(&(0x7f0000000180), &(0x7f0000000240)='./bus\x00', 0x3, 0x1, &(0x7f0000000280)=[{&(0x7f0000000340)="59f1d4fcfcf3a1d3f32ef38cffbcbeb6edf7ceaeeecc4236215db3b3138701e6e23c051b57bcd10926075bd089679a13891430e77ea70c14a021376c462fd3f8459386d3c98be92f702db51d25450190de022e39580567352cf8a18518b77637bb4e2ed7ac976c3c2ae902bd0f3ac840da7d3f3439bb8e6b03c8d49b8a16994999688f56f385186ad048fa7a", 0x8c, 0x8000}], 0x2004000, &(0x7f00000002c0)={[{'msdos\x00'}, {'msdos\x00'}, {'msdos\x00'}], [{@uid_lt={'uid<', 0xffffffffffffffff}}]}) [ 2143.220234][ T3758] last redo_fd_request at 4295151146 [ 2143.231095][ T3758] status=80 [ 2143.236077][ T3758] fdc_busy=1 [ 2143.242385][ T3758] floppy_work.func=floppy_work_workfn [ 2143.251416][ T3758] cont=ffffffff8a1f4920 [ 2143.258234][ T3758] current_req=0000000000000000 [ 2143.284250][T20583] loop0: detected capacity change from 0 to 87 [ 2143.286853][ T3758] command_status=-1 [ 2143.305740][ T3758] [ 2143.310325][ T3758] floppy1: floppy timeout called [ 2143.340349][T13101] [ 2143.340872][T20583] syz-executor.0: attempt to access beyond end of device [ 2143.340872][T20583] loop0: rw=0, want=90, limit=87 [ 2143.343037][T13101] floppy driver state [ 2143.343051][T13101] ------------------- [ 2143.376310][T13101] now=4295151182 last interrupt=4295141312 diff=9870 last called handler=recal_interrupt [ 2143.416649][T12742] kworker/u17:1: attempt to access beyond end of device [ 2143.416649][T12742] loop0: rw=1, want=98, limit=87 [ 2143.418293][T13101] timeout_message=lock fdc [ 2143.451170][T13101] last output bytes: [ 2143.460568][T13101] 0 90 4295139496 [ 2143.470001][T13101] 1 90 4295139496 [ 2143.477520][T13101] 2 90 4295139496 [ 2143.483769][T13101] 24 90 4295139496 [ 2143.489744][T13101] 1b 90 4295139496 [ 2143.496006][T13101] ff 90 4295139496 [ 2143.502897][T13101] 12 80 4295141312 [ 2143.509855][T13101] 3 90 4295141312 [ 2143.517029][T13101] 13 80 4295141312 [ 2143.526430][T13101] 0 90 4295141312 [ 2143.543117][T13101] 1a 90 4295141312 [ 2143.552177][T13101] 0 90 4295141312 [ 2143.559382][T13101] 3 80 4295141312 [ 2143.568235][T13101] a1 90 4295141312 [ 2143.576131][T13101] 1e 90 4295141312 [ 2143.584032][T13101] 7 80 4295141312 [ 2143.596658][T13101] 1 90 4295141312 08:02:36 executing program 2: r0 = syz_mount_image$v7(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x0, &(0x7f0000000080), 0x100020, &(0x7f00000000c0)={[{'/dev/fd#\x00'}, {'/dev/fd#\x00'}, {'M%\\-'}, {'/dev/fd#\x00'}], [{@subj_type={'subj_type', 0x3d, '/dev/fd#\x00'}}, {@measure}, {@obj_type={'obj_type', 0x3d, '/dev/fd#\x00'}}, {@fsname={'fsname', 0x3d, '/dev/fd#\x00'}}, {@dont_hash}, {@subj_type}]}) r1 = openat$incfs(r0, &(0x7f0000000140)='.log\x00', 0x20400, 0x8) r2 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) ioctl$FLOPPY_FDCLRPRM(r2, 0x241) r3 = syz_open_procfs(0x0, 0x0) renameat(r3, &(0x7f0000000140)='./cgroup\x00', r3, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r4 = syz_open_procfs(0x0, 0x0) renameat(r4, &(0x7f0000000140)='./cgroup\x00', r4, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca0f4ce1481659218fc3f15ee2e24bcb40fd1ef0004f3c746d24de5b4244c50e0e3bbd45f908153c4d83f60ab62c96"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r5 = syz_open_procfs(0x0, 0x0) renameat(r5, &(0x7f0000000140)='./cgroup\x00', r5, &(0x7f0000000040)='./cgroup\x00') r6 = syz_mount_image$qnx6(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f00000003c0)="e1262a97f29f6f65bcb2e5b41e397e6f8993f16d69db28dfba7d25ccf4d650c703e86a", 0x23, 0x5f}], 0x8, &(0x7f0000000440)={[{'fsname'}, {'measure'}, {'v7\x00'}, {'^s)%-\\'}, {}, {'obj_type'}, {'obj_type'}, {'\xd8'}], [{@dont_measure}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, ','}}, {@pcr={'pcr', 0x3d, 0x39}}]}) faccessat(r6, &(0x7f00000004c0)='./file0\x00', 0x24) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xc) setregid(0x0, r8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x0, r8}}, './cgroup\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000200)={0x5, 0x1, 0x5, 0x0, 0x0, [{{r4}, 0x7}, {{r0}, 0x1}, {{r1}, 0x1}, {{r5}, 0x6}, {{r0}, 0x80000000}]}) [ 2143.609009][T13101] 8 80 4295141312 [ 2143.616749][T13101] 4 80 4295141312 [ 2143.622534][T13101] 1 90 4295141312 [ 2143.627015][T13101] last result at 4295141492 [ 2143.635101][T13101] last redo_fd_request at 4295151176 [ 2143.653485][T13101] status=80 [ 2143.660255][T13101] fdc_busy=1 [ 2143.681967][T13101] floppy_work.func=floppy_work_workfn 08:02:37 executing program 3: ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x4) r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000000)={0x0, 0x0, 0x600000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2143.702276][T13101] cont=ffffffff8a1f4920 08:02:37 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) setxattr$security_capability(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x10001, 0x7ff}, {0x8000, 0xb9cb}]}, 0x14, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_to_team\x00', &(0x7f0000000080)=@ethtool_stats={0x1d, 0x4, [0x10000000, 0x10000, 0x2, 0x8]}}) lseek(r0, 0x0, 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) [ 2143.713790][T13101] current_req=0000000000000000 [ 2143.720083][T13101] command_status=-1 [ 2143.722165][T20592] loop0: detected capacity change from 0 to 87 [ 2143.725253][T13101] [ 2143.734560][T13101] floppy1: floppy timeout called [ 2143.744590][T13101] [ 2143.748133][T13101] floppy driver state [ 2143.756227][T13101] ------------------- [ 2143.761574][T13101] now=4295151220 last interrupt=4295141312 diff=9908 last called handler=recal_interrupt [ 2143.792116][T13101] timeout_message=lock fdc [ 2143.813773][T13101] last output bytes: [ 2143.819335][T13101] 0 90 4295139496 [ 2143.833962][T20595] qnx6: invalid mount options. [ 2143.843361][T13101] 1 90 4295139496 [ 2143.849519][T13101] 2 90 4295139496 [ 2143.854626][T13101] 24 90 4295139496 [ 2143.859240][T13101] 1b 90 4295139496 [ 2143.867175][T13101] ff 90 4295139496 [ 2143.875005][T13101] 12 80 4295141312 [ 2143.879137][T13101] 3 90 4295141312 [ 2143.884076][T13101] 13 80 4295141312 [ 2143.908346][T13101] 0 90 4295141312 [ 2143.915528][T13101] 1a 90 4295141312 [ 2143.930072][T13101] 0 90 4295141312 [ 2143.937597][T13101] 3 80 4295141312 [ 2143.943093][T13101] a1 90 4295141312 [ 2143.957568][T13101] 1e 90 4295141312 [ 2143.963085][T13101] 7 80 4295141312 [ 2143.975969][T13101] 1 90 4295141312 [ 2143.982267][T13101] 8 80 4295141312 [ 2143.988663][T13101] 4 80 4295141312 [ 2143.994817][T13101] 1 90 4295141312 [ 2144.002014][T13101] last result at 4295141492 [ 2144.010560][T13101] last redo_fd_request at 4295151219 [ 2144.019004][T13101] status=80 [ 2144.023608][T13101] fdc_busy=1 [ 2144.029840][T13101] floppy_work.func=floppy_work_workfn [ 2144.039159][T13101] cont=ffffffff8a1f4920 [ 2144.047415][T13101] current_req=0000000000000000 [ 2144.058245][T13101] command_status=-1 [ 2144.064674][T13101] [ 2144.068570][T13101] floppy1: floppy timeout called [ 2144.085121][ T3758] [ 2144.089174][ T3758] floppy driver state [ 2144.094768][ T3758] ------------------- [ 2144.102000][ T3758] now=4295151255 last interrupt=4295141312 diff=9943 last called handler=recal_interrupt [ 2144.123492][ T3758] timeout_message=lock fdc [ 2144.131003][ T3758] last output bytes: [ 2144.135975][ T3758] 0 90 4295139496 [ 2144.148845][ T3758] 1 90 4295139496 [ 2144.153993][ T3758] 2 90 4295139496 [ 2144.158393][ T3758] 24 90 4295139496 [ 2144.165126][ T3758] 1b 90 4295139496 [ 2144.171019][ T3758] ff 90 4295139496 [ 2144.179048][ T3758] 12 80 4295141312 [ 2144.183677][ T3758] 3 90 4295141312 [ 2144.202459][ T3758] 13 80 4295141312 [ 2144.210402][ T3758] 0 90 4295141312 [ 2144.220176][ T3758] 1a 90 4295141312 [ 2144.224335][ T3758] 0 90 4295141312 [ 2144.228384][ T3758] 3 80 4295141312 [ 2144.234549][ T3758] a1 90 4295141312 [ 2144.258284][ T3758] 1e 90 4295141312 [ 2144.265764][ T3758] 7 80 4295141312 [ 2144.272151][ T3758] 1 90 4295141312 [ 2144.278727][ T3758] 8 80 4295141312 [ 2144.285257][ T3758] 4 80 4295141312 [ 2144.294897][ T3758] 1 90 4295141312 [ 2144.305568][ T3758] last result at 4295141492 [ 2144.314701][ T3758] last redo_fd_request at 4295151253 [ 2144.321794][ T3758] status=80 [ 2144.325624][ T3758] fdc_busy=1 [ 2144.330960][ T3758] floppy_work.func=floppy_work_workfn [ 2144.340741][ T3758] cont=ffffffff8a1f4920 [ 2144.346401][ T3758] current_req=0000000000000000 [ 2144.352960][ T3758] command_status=-1 [ 2144.358176][ T3758] [ 2144.361139][ T3758] floppy1: floppy timeout called [ 2144.372437][T13101] [ 2144.401029][T13101] floppy driver state [ 2144.409653][T13101] ------------------- [ 2144.425538][T13101] now=4295151287 last interrupt=4295141312 diff=9975 last called handler=recal_interrupt [ 2144.445987][T13101] timeout_message=lock fdc [ 2144.466805][T13101] last output bytes: [ 2144.472414][T13101] 0 90 4295139496 [ 2144.476398][T20596] qnx6: invalid mount options. [ 2144.477298][T13101] 1 90 4295139496 [ 2144.497042][T13101] 2 90 4295139496 [ 2144.503532][T13101] 24 90 4295139496 [ 2144.509384][T13101] 1b 90 4295139496 [ 2144.516421][T13101] ff 90 4295139496 [ 2144.526014][T13101] 12 80 4295141312 [ 2144.534166][T13101] 3 90 4295141312 [ 2144.544542][T13101] 13 80 4295141312 [ 2144.552425][T13101] 0 90 4295141312 [ 2144.560383][T13101] 1a 90 4295141312 [ 2144.566651][T13101] 0 90 4295141312 [ 2144.575982][T13101] 3 80 4295141312 [ 2144.588448][T13101] a1 90 4295141312 [ 2144.594594][T13101] 1e 90 4295141312 [ 2144.602623][T13101] 7 80 4295141312 [ 2144.614665][T13101] 1 90 4295141312 [ 2144.620754][T13101] 8 80 4295141312 [ 2144.627589][T13101] 4 80 4295141312 [ 2144.635777][T13101] 1 90 4295141312 [ 2144.647335][T13101] last result at 4295141492 [ 2144.655276][T13101] last redo_fd_request at 4295151282 [ 2144.664814][T13101] status=80 [ 2144.680014][T13101] fdc_busy=1 [ 2144.685702][T13101] floppy_work.func=floppy_work_workfn [ 2144.699116][T13101] cont=ffffffff8a1f4920 [ 2144.707143][T13101] current_req=0000000000000000 [ 2144.716128][T13101] command_status=-1 [ 2144.721676][T13101] [ 2144.725402][T13101] floppy1: floppy timeout called [ 2144.756272][ T3758] [ 2144.760807][ T3758] floppy driver state [ 2144.789717][ T3758] ------------------- [ 2144.797754][ T3758] now=4295151324 last interrupt=4295141312 diff=10012 last called handler=recal_interrupt [ 2144.824800][ T3758] timeout_message=lock fdc 08:02:38 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) creat(&(0x7f0000000080)='./bus\x00', 0x14) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2144.849736][ T3758] last output bytes: 08:02:38 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:38 executing program 3: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x80}) r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2144.887977][ T3758] 0 90 4295139496 [ 2144.893147][ T3758] 1 90 4295139496 [ 2144.903262][T20602] loop0: detected capacity change from 0 to 87 [ 2144.906604][ T3758] 2 90 4295139496 [ 2144.916800][ T3758] 24 90 4295139496 [ 2144.921433][ T3758] 1b 90 4295139496 [ 2144.933275][ T3758] ff 90 4295139496 [ 2144.938970][ T3758] 12 80 4295141312 [ 2144.944515][ T3758] 3 90 4295141312 [ 2144.961515][ T3758] 13 80 4295141312 [ 2144.965557][ T3758] 0 90 4295141312 [ 2144.974207][ T3758] 1a 90 4295141312 [ 2144.979541][ T3758] 0 90 4295141312 [ 2144.997205][ T3758] 3 80 4295141312 [ 2145.007647][ T3758] a1 90 4295141312 [ 2145.014505][ T3758] 1e 90 4295141312 [ 2145.020285][ T3758] 7 80 4295141312 [ 2145.026114][ T3758] 1 90 4295141312 [ 2145.026290][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 2145.026303][ T37] audit: type=1804 audit(1638172958.495:719): pid=20602 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1285/file1/bus" dev="loop0" ino=1048712 res=1 errno=0 [ 2145.032645][ T3758] 8 80 4295141312 [ 2145.042285][ T37] audit: type=1800 audit(1638172958.495:720): pid=20602 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048712 res=0 errno=0 [ 2145.088133][ T3758] 4 80 4295141312 [ 2145.088159][ T3758] 1 90 4295141312 [ 2145.160162][ T3758] last result at 4295141492 [ 2145.167507][ T3758] last redo_fd_request at 4295151320 [ 2145.167752][ T37] audit: type=1804 audit(1638172958.635:721): pid=20607 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1285/file1/bus" dev="loop0" ino=1048712 res=1 errno=0 [ 2145.178789][ T3758] status=80 [ 2145.228086][ T37] audit: type=1800 audit(1638172958.635:722): pid=20607 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048712 res=0 errno=0 [ 2145.260905][ T3758] fdc_busy=1 [ 2145.293325][ T3758] floppy_work.func=floppy_work_workfn [ 2145.308436][ T3758] cont=ffffffff8a1f4920 [ 2145.315059][ T3758] current_req=0000000000000000 [ 2145.324473][ T3758] command_status=-1 [ 2145.330495][ T3758] [ 2145.336025][ T3758] floppy1: floppy timeout called [ 2145.349659][ T3758] [ 2145.353220][ T3758] floppy driver state [ 2145.364785][ T3758] ------------------- [ 2145.371346][ T3758] now=4295151382 last interrupt=4295141312 diff=10070 last called handler=recal_interrupt [ 2145.396930][ T3758] timeout_message=lock fdc [ 2145.405413][ T3758] last output bytes: [ 2145.413613][ T3758] 0 90 4295139496 [ 2145.427267][ T3758] 1 90 4295139496 [ 2145.437360][ T3758] 2 90 4295139496 [ 2145.445380][ T3758] 24 90 4295139496 [ 2145.450975][ T3758] 1b 90 4295139496 [ 2145.456716][ T3758] ff 90 4295139496 [ 2145.464898][ T3758] 12 80 4295141312 [ 2145.472075][ T3758] 3 90 4295141312 [ 2145.480278][ T3758] 13 80 4295141312 [ 2145.486357][ T3758] 0 90 4295141312 [ 2145.498167][ T3758] 1a 90 4295141312 [ 2145.503474][ T3758] 0 90 4295141312 [ 2145.509534][ T3758] 3 80 4295141312 [ 2145.516513][ T3758] a1 90 4295141312 [ 2145.522814][ T3758] 1e 90 4295141312 [ 2145.530065][ T3758] 7 80 4295141312 [ 2145.535980][ T3758] 1 90 4295141312 [ 2145.541788][ T3758] 8 80 4295141312 [ 2145.547760][ T3758] 4 80 4295141312 [ 2145.556929][ T3758] 1 90 4295141312 [ 2145.563044][ T3758] last result at 4295141492 [ 2145.572490][ T3758] last redo_fd_request at 4295151380 [ 2145.581735][ T3758] status=80 [ 2145.586791][ T3758] fdc_busy=1 [ 2145.594092][ T3758] floppy_work.func=floppy_work_workfn [ 2145.603504][ T3758] cont=ffffffff8a1f4920 [ 2145.611895][ T3758] current_req=0000000000000000 [ 2145.620884][ T3758] command_status=-1 [ 2145.629320][ T3758] [ 2145.633490][ T3758] floppy1: floppy timeout called [ 2145.671854][T17293] [ 2145.675064][T17293] floppy driver state [ 2145.682058][T17293] ------------------- [ 2145.699724][T17293] now=4295151415 last interrupt=4295141312 diff=10103 last called handler=recal_interrupt [ 2145.716573][T17293] timeout_message=lock fdc [ 2145.725932][T17293] last output bytes: [ 2145.734784][T17293] 0 90 4295139496 [ 2145.740751][T17293] 1 90 4295139496 [ 2145.746910][T17293] 2 90 4295139496 [ 2145.752794][T17293] 24 90 4295139496 [ 2145.757382][T17293] 1b 90 4295139496 [ 2145.763163][T17293] ff 90 4295139496 [ 2145.769334][T17293] 12 80 4295141312 [ 2145.778517][T17293] 3 90 4295141312 [ 2145.783738][T17293] 13 80 4295141312 [ 2145.800026][T17293] 0 90 4295141312 [ 2145.812502][T17293] 1a 90 4295141312 [ 2145.820529][T17293] 0 90 4295141312 [ 2145.826696][T17293] 3 80 4295141312 [ 2145.840889][T17293] a1 90 4295141312 08:02:39 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2145.854961][T17293] 1e 90 4295141312 [ 2145.861748][T17293] 7 80 4295141312 08:02:39 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000280)=r2) r3 = syz_open_procfs(0x0, 0x0) renameat(r3, &(0x7f0000000140)='./cgroup\x00', r3, &(0x7f0000000040)='./cgroup\x00') r4 = syz_open_procfs(0x0, 0x0) renameat(r4, &(0x7f0000000140)='./cgroup\x00', r4, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) syz_mount_image$vxfs(&(0x7f00000002c0), &(0x7f0000000540)='./bus\x00', 0x0, 0x3, &(0x7f0000001600)=[{&(0x7f0000000580)="3eff7ba369370d46aeed7f2a90adaff0e5f31a79065ce21299c605638f8f6ac6f30e7b84ba7d4f2605c6af22", 0x2c, 0x1000}, {&(0x7f00000005c0)="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", 0x1000, 0x74}, {&(0x7f00000015c0)="440d2d7de4922318eaab5e1eea648d196bb7af465e32407919282b7dad58956e28ceb86b04414a933a6f02c17cff45a8", 0x30, 0x3}], 0x800000, &(0x7f0000001640)={[{'msdos\x00'}, {'msdos\x00'}, {'msdos\x00'}, {'msdos\x00'}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fowner_eq}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="20ba4cf03021b4adc4b459917ca1e500", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000080)=0x800, 0x4) 08:02:39 executing program 3: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) [ 2145.870048][T17293] 1 90 4295141312 ioctl$FLOPPY_FDRAWCMD(r1, 0x258, &(0x7f00000015c0)={0x20000, &(0x7f00000005c0)="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", &(0x7f0000000180)=0x7, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x1f, "f8936a6f73b5d6a35364ac762fc8ee89", 0x0, '\x00', 0xdd}) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/125, 0x7d}, {&(0x7f0000000100)=""/88, 0x58}, {&(0x7f0000000200)=""/241, 0xf1}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000380)=""/149, 0x95}, {&(0x7f0000000440)=""/121, 0x79}, {&(0x7f00000004c0)=""/206, 0xce}], 0x7, 0x1ff, 0x3f) [ 2145.879678][T17293] 8 80 4295141312 08:02:39 executing program 2: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDCLRPRM(r2, 0x241) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0xfffffcea, &(0x7f0000000140)={&(0x7f0000001480)=ANY=[@ANYRESDEC=r1, @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x4040040}, 0x48880) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) ioctl$FLOPPY_FDCLRPRM(r1, 0x241) syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000080)='./cgroup\x00', 0x8, 0x4, &(0x7f0000000180)=[{&(0x7f00000000c0)="736de8832beb7e93b0790cec11f2299c32b8658caf2b8de3a45ea29de6656010fe14160e31d8bbc0fcde94a292d27627f30877d583c5caf90be9652516fc4680424cc739ce8b2bdc47f4b4eba2e706edd370eb58b8ee03aced5fe909", 0x5c, 0x1}, {&(0x7f0000000240)="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", 0x1000, 0x1f}, {&(0x7f0000001240)="1af993d270c3f0274710ff911bc7e7a9f566f852662f0d1a96b58e5d1dc618dc7bde431b0f86a1eee54dc9536b494160e187dab8348499dd2a5c9244ff2f619fbcfde5fe24e58d873e9cf57ff1a6ccf6961342900a18d0d5d8ad8cf43cd081d440456d904f", 0x65, 0x540}, {&(0x7f00000012c0)="1caeaa0198ea18ff99d80096755b9f441b09dccbf1487b23bdabbe523f463ec3941254c9f4bb28d3925a65afe46b5322082a43adeb26aba5ce02de6df219ab5a494405c96c3b67c3dc6793a22bf60fa5507c281810a3fe7fee1527f11e795dc7ed16ea3bc17793a107532559efb9a3ddd653b1390a4c42ce4250bcb55b126a692c64a1d16545b24b7174c1", 0x8b, 0x7}], 0x18400, &(0x7f0000001380)={[{'[!))@'}, {'/dev/fd#\x00'}, {'/dev/fd#\x00'}, {'/dev/fd#\x00'}], [{@measure}]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000a2ffff00000000000067727a757010"]) ioctl$FLOPPY_FDFMTEND(r3, 0x249) ioctl$FLOPPY_FDFMTEND(r0, 0x249) setxattr$trusted_overlay_origin(&(0x7f00000013c0)='./cgroup\x00', &(0x7f0000001400), &(0x7f0000001440), 0x2, 0x2) [ 2145.890444][T17293] 4 80 4295141312 [ 2145.898249][T17293] 1 90 4295141312 [ 2145.902199][T20614] loop0: detected capacity change from 0 to 87 [ 2145.902275][T17293] last result at 4295141492 [ 2145.915648][T17293] last redo_fd_request at 4295151409 [ 2145.921783][T17293] status=80 [ 2145.924766][T17293] fdc_busy=1 [ 2145.927784][T17293] floppy_work.func=floppy_work_workfn [ 2145.933808][T17293] cont=ffffffff8a1f4920 [ 2145.937937][ T37] audit: type=1804 audit(1638172959.405:723): pid=20614 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1286/file1/bus" dev="loop0" ino=1048713 res=1 errno=0 [ 2145.938603][T17293] current_req=0000000000000000 [ 2145.953083][T20617] loop2: detected capacity change from 0 to 8 [ 2145.954363][T20617] romfs: Unknown parameter '[!))@' [ 2145.956771][T20614] syz-executor.0: attempt to access beyond end of device [ 2145.956771][T20614] loop0: rw=0, want=90, limit=87 [ 2145.973215][ T37] audit: type=1800 audit(1638172959.415:724): pid=20614 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048713 res=0 errno=0 [ 2145.979062][T17293] command_status=-1 [ 2145.991033][ T37] audit: type=1804 audit(1638172959.465:725): pid=20619 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1286/file1/bus" dev="loop0" ino=1048713 res=1 errno=0 [ 2146.007733][T20620] syz-executor.0: attempt to access beyond end of device [ 2146.007733][T20620] loop0: rw=2049, want=98, limit=87 [ 2146.031514][ T37] audit: type=1800 audit(1638172959.465:726): pid=20619 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048713 res=0 errno=0 [ 2146.035066][T17293] [ 2146.110782][T17293] floppy1: floppy timeout called [ 2146.125678][T13101] [ 2146.128460][T13101] floppy driver state [ 2146.132611][T13101] ------------------- [ 2146.137274][T13101] now=4295151458 last interrupt=4295141312 diff=10146 last called handler=recal_interrupt [ 2146.154059][T13101] timeout_message=lock fdc [ 2146.159385][T13101] last output bytes: [ 2146.164209][T13101] 0 90 4295139496 [ 2146.170007][T13101] 1 90 4295139496 [ 2146.175746][T13101] 2 90 4295139496 [ 2146.181446][T13101] 24 90 4295139496 [ 2146.187522][T13101] 1b 90 4295139496 [ 2146.192586][T13101] ff 90 4295139496 [ 2146.196905][T13101] 12 80 4295141312 [ 2146.202349][T13101] 3 90 4295141312 [ 2146.210156][T13101] 13 80 4295141312 [ 2146.214514][T13101] 0 90 4295141312 [ 2146.243159][T13101] 1a 90 4295141312 [ 2146.247565][T13101] 0 90 4295141312 [ 2146.257712][T13101] 3 80 4295141312 [ 2146.265850][T13101] a1 90 4295141312 [ 2146.274209][T13101] 1e 90 4295141312 [ 2146.280211][T13101] 7 80 4295141312 [ 2146.285857][T13101] 1 90 4295141312 [ 2146.296664][T13101] 8 80 4295141312 [ 2146.303656][T13101] 4 80 4295141312 [ 2146.310617][T13101] 1 90 4295141312 [ 2146.320963][T13101] last result at 4295141492 [ 2146.328831][T13101] last redo_fd_request at 4295151456 [ 2146.340883][T13101] status=80 [ 2146.344259][T13101] fdc_busy=1 [ 2146.349186][T13101] floppy_work.func=floppy_work_workfn [ 2146.357654][T13101] cont=ffffffff8a1f4920 [ 2146.364153][T13101] current_req=0000000000000000 [ 2146.373173][T13101] command_status=-1 [ 2146.379456][T13101] [ 2146.383696][T13101] floppy1: floppy timeout called [ 2146.392066][T13101] [ 2146.395914][T13101] floppy driver state [ 2146.401833][T13101] ------------------- [ 2146.407406][T13101] now=4295151485 last interrupt=4295141312 diff=10173 last called handler=recal_interrupt [ 2146.424095][T13101] timeout_message=lock fdc [ 2146.430953][T13101] last output bytes: [ 2146.439754][T13101] 0 90 4295139496 [ 2146.445899][T13101] 1 90 4295139496 [ 2146.452338][T13101] 2 90 4295139496 [ 2146.459626][T13101] 24 90 4295139496 [ 2146.468407][T13101] 1b 90 4295139496 [ 2146.476165][T13101] ff 90 4295139496 [ 2146.485126][T13101] 12 80 4295141312 [ 2146.493192][T13101] 3 90 4295141312 [ 2146.499860][T13101] 13 80 4295141312 [ 2146.505767][T13101] 0 90 4295141312 [ 2146.512596][T13101] 1a 90 4295141312 [ 2146.523188][T13101] 0 90 4295141312 [ 2146.530442][T13101] 3 80 4295141312 [ 2146.537067][T13101] a1 90 4295141312 [ 2146.547566][T13101] 1e 90 4295141312 [ 2146.555884][T13101] 7 80 4295141312 [ 2146.567397][T13101] 1 90 4295141312 [ 2146.576190][T13101] 8 80 4295141312 [ 2146.588274][T13101] 4 80 4295141312 [ 2146.595637][T13101] 1 90 4295141312 [ 2146.604507][T13101] last result at 4295141492 [ 2146.617568][T13101] last redo_fd_request at 4295151484 [ 2146.629930][T13101] status=80 [ 2146.635081][T13101] fdc_busy=1 [ 2146.641638][T13101] floppy_work.func=floppy_work_workfn [ 2146.663168][T13101] cont=ffffffff8a1f4920 [ 2146.670328][T13101] current_req=0000000000000000 [ 2146.680110][T13101] command_status=-1 [ 2146.684969][T13101] [ 2146.692471][T13101] floppy1: floppy timeout called [ 2146.702673][T13101] [ 2146.714569][T13101] floppy driver state [ 2146.723491][T13101] ------------------- [ 2146.736532][T13101] now=4295151518 last interrupt=4295141312 diff=10206 last called handler=recal_interrupt [ 2146.737792][T20626] loop0: detected capacity change from 0 to 87 [ 2146.748947][T13101] timeout_message=lock fdc [ 2146.776598][T20629] loop2: detected capacity change from 0 to 8 [ 2146.784952][T13101] last output bytes: [ 2146.806246][T13101] 0 90 4295139496 [ 2146.808930][T20629] romfs: Unknown parameter '[!))@' [ 2146.829463][T13101] 1 90 4295139496 08:02:40 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:40 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r0 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) [ 2146.835531][T13101] 2 90 4295139496 [ 2146.846654][T13101] 24 90 4295139496 [ 2146.852262][T13101] 1b 90 4295139496 [ 2146.857148][T13101] ff 90 4295139496 [ 2146.888766][T13101] 12 80 4295141312 [ 2146.894263][T13101] 3 90 4295141312 [ 2146.917103][T13101] 13 80 4295141312 [ 2146.923106][T13101] 0 90 4295141312 [ 2146.927626][T13101] 1a 90 4295141312 [ 2146.936434][T13101] 0 90 4295141312 [ 2146.941402][T13101] 3 80 4295141312 [ 2146.947494][T13101] a1 90 4295141312 [ 2146.956524][T13101] 1e 90 4295141312 [ 2146.962586][T13101] 7 80 4295141312 [ 2146.967187][T13101] 1 90 4295141312 [ 2146.971957][T13101] 8 80 4295141312 [ 2146.975789][T13101] 4 80 4295141312 [ 2146.979798][T13101] 1 90 4295141312 [ 2146.983457][T13101] last result at 4295141492 [ 2147.000819][T13101] last redo_fd_request at 4295151515 [ 2147.010083][T13101] status=80 [ 2147.016378][T13101] fdc_busy=1 [ 2147.022099][T13101] floppy_work.func=floppy_work_workfn [ 2147.029748][T13101] cont=ffffffff8a1f4920 [ 2147.037196][T13101] current_req=0000000000000000 [ 2147.049130][T13101] command_status=-1 [ 2147.063757][T13101] [ 2147.068245][T13101] floppy1: floppy timeout called [ 2147.088278][T13101] [ 2147.091341][T13101] floppy driver state [ 2147.102459][T13101] ------------------- [ 2147.112237][T13101] now=4295151556 last interrupt=4295141312 diff=10244 last called handler=recal_interrupt [ 2147.188110][T13101] timeout_message=lock fdc [ 2147.195014][T13101] last output bytes: [ 2147.213943][T13101] 0 90 4295139496 [ 2147.225193][T13101] 1 90 4295139496 [ 2147.235065][T13101] 2 90 4295139496 [ 2147.240777][T13101] 24 90 4295139496 [ 2147.248410][T13101] 1b 90 4295139496 [ 2147.253813][T13101] ff 90 4295139496 [ 2147.269926][T13101] 12 80 4295141312 [ 2147.279447][T13101] 3 90 4295141312 [ 2147.296191][T13101] 13 80 4295141312 08:02:40 executing program 2: r0 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000), 0x400400, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0x3}) 08:02:40 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:40 executing program 0: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x80000) r0 = syz_open_procfs(0x0, 0x0) renameat(r0, &(0x7f0000000140)='./cgroup\x00', r0, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDFMTEND(r0, 0x249) 08:02:40 executing program 3: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c, 0x800) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x7, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7b56}, 0x1c) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) r1 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r1, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2147.314695][T13101] 0 90 4295141312 [ 2147.319489][T13101] 1a 90 4295141312 [ 2147.324082][T13101] 0 90 4295141312 [ 2147.328917][T13101] 3 80 4295141312 [ 2147.333395][T13101] a1 90 4295141312 [ 2147.348893][T13101] 1e 90 4295141312 [ 2147.358601][T13101] 7 80 4295141312 [ 2147.378525][T13101] 1 90 4295141312 [ 2147.398911][T13101] 8 80 4295141312 [ 2147.404867][T13101] 4 80 4295141312 [ 2147.428400][T13101] 1 90 4295141312 [ 2147.434284][T13101] last result at 4295141492 [ 2147.458352][T13101] last redo_fd_request at 4295151554 [ 2147.474009][T13101] status=80 [ 2147.483465][T13101] fdc_busy=1 [ 2147.493280][T13101] floppy_work.func=floppy_work_workfn [ 2147.514257][T13101] cont=ffffffff8a1f4920 [ 2147.519451][T13101] current_req=0000000000000000 [ 2147.531485][T13101] command_status=-1 [ 2147.536147][T13101] [ 2147.541015][T13101] floppy1: floppy timeout called [ 2147.553520][T13101] [ 2147.558686][T13101] floppy driver state [ 2147.567773][T13101] ------------------- [ 2147.574166][T13101] now=4295151602 last interrupt=4295141312 diff=10290 last called handler=recal_interrupt [ 2147.589839][T13101] timeout_message=lock fdc [ 2147.596612][T13101] last output bytes: [ 2147.602115][T13101] 0 90 4295139496 [ 2147.608678][T13101] 1 90 4295139496 [ 2147.614144][T13101] 2 90 4295139496 [ 2147.621978][T13101] 24 90 4295139496 [ 2147.629128][T13101] 1b 90 4295139496 [ 2147.635790][T13101] ff 90 4295139496 [ 2147.644877][T13101] 12 80 4295141312 [ 2147.655391][T13101] 3 90 4295141312 [ 2147.664987][T13101] 13 80 4295141312 08:02:41 executing program 2: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) [ 2147.673953][T13101] 0 90 4295141312 [ 2147.680175][T13101] 1a 90 4295141312 [ 2147.685782][T13101] 0 90 4295141312 [ 2147.691750][T13101] 3 80 4295141312 [ 2147.697389][T13101] a1 90 4295141312 [ 2147.703600][T13101] 1e 90 4295141312 [ 2147.725130][T13101] 7 80 4295141312 [ 2147.741086][T13101] 1 90 4295141312 [ 2147.745655][T13101] 8 80 4295141312 [ 2147.750458][T13101] 4 80 4295141312 [ 2147.754938][T13101] 1 90 4295141312 [ 2147.760359][T13101] last result at 4295141492 [ 2147.766730][T13101] last redo_fd_request at 4295151600 [ 2147.774601][T13101] status=80 [ 2147.779126][T13101] fdc_busy=1 [ 2147.783404][T13101] floppy_work.func=floppy_work_workfn [ 2147.790686][T13101] cont=ffffffff8a1f4920 [ 2147.796603][T13101] current_req=0000000000000000 [ 2147.802043][T13101] command_status=-1 [ 2147.806510][T13101] [ 2147.809276][T13101] floppy1: floppy timeout called [ 2147.819601][T17293] [ 2147.821960][T17293] floppy driver state [ 2147.825915][T17293] ------------------- [ 2147.843447][T17293] now=4295151629 last interrupt=4295141312 diff=10317 last called handler=recal_interrupt [ 2147.881399][T17293] timeout_message=lock fdc [ 2147.898530][T17293] last output bytes: [ 2147.907210][T17293] 0 90 4295139496 [ 2147.916692][T17293] 1 90 4295139496 [ 2147.925541][T17293] 2 90 4295139496 [ 2147.929837][T17293] 24 90 4295139496 [ 2147.933839][T17293] 1b 90 4295139496 [ 2147.937504][T17293] ff 90 4295139496 [ 2147.947669][T17293] 12 80 4295141312 [ 2147.954735][T17293] 3 90 4295141312 [ 2147.961020][T17293] 13 80 4295141312 [ 2147.973757][T17293] 0 90 4295141312 [ 2147.979764][T17293] 1a 90 4295141312 [ 2147.986143][T17293] 0 90 4295141312 08:02:41 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2147.993945][T17293] 3 80 4295141312 [ 2148.000055][T17293] a1 90 4295141312 08:02:41 executing program 0: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/current\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000040)) r3 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x4000) ioctl$FLOPPY_FDFMTEND(r3, 0x249) ioctl$FLOPPY_FDTWADDLE(r3, 0x259) [ 2148.005142][T17293] 1e 90 4295141312 [ 2148.012256][T17293] 7 80 4295141312 [ 2148.016876][T17293] 1 90 4295141312 [ 2148.023150][T17293] 8 80 4295141312 [ 2148.030485][T17293] 4 80 4295141312 [ 2148.036051][T17293] 1 90 4295141312 [ 2148.048608][T17293] last result at 4295141492 [ 2148.055341][T17293] last redo_fd_request at 4295151626 [ 2148.064945][T17293] status=80 [ 2148.069627][T17293] fdc_busy=1 [ 2148.074151][T17293] floppy_work.func=floppy_work_workfn [ 2148.083859][T17293] cont=ffffffff8a1f4920 [ 2148.090409][T17293] current_req=0000000000000000 [ 2148.096595][T17293] command_status=-1 [ 2148.102149][T17293] [ 2148.105435][T17293] floppy1: floppy timeout called [ 2148.119525][T13101] [ 2148.122086][T13101] floppy driver state [ 2148.127157][T13101] ------------------- [ 2148.132549][T13101] now=4295151658 last interrupt=4295141312 diff=10346 last called handler=recal_interrupt [ 2148.159738][T13101] timeout_message=lock fdc [ 2148.169004][T13101] last output bytes: [ 2148.198301][T13101] 0 90 4295139496 [ 2148.208483][T13101] 1 90 4295139496 [ 2148.214065][T13101] 2 90 4295139496 [ 2148.219167][T13101] 24 90 4295139496 [ 2148.224159][T13101] 1b 90 4295139496 [ 2148.229542][T13101] ff 90 4295139496 [ 2148.234416][T13101] 12 80 4295141312 [ 2148.240112][T13101] 3 90 4295141312 [ 2148.251562][T13101] 13 80 4295141312 [ 2148.263575][T13101] 0 90 4295141312 [ 2148.276956][T13101] 1a 90 4295141312 [ 2148.282508][T13101] 0 90 4295141312 [ 2148.288780][T13101] 3 80 4295141312 [ 2148.294508][T13101] a1 90 4295141312 [ 2148.300564][T13101] 1e 90 4295141312 [ 2148.306394][T13101] 7 80 4295141312 [ 2148.312509][T13101] 1 90 4295141312 [ 2148.318565][T13101] 8 80 4295141312 [ 2148.325519][T13101] 4 80 4295141312 [ 2148.329768][T13101] 1 90 4295141312 [ 2148.350787][T13101] last result at 4295141492 [ 2148.356827][T13101] last redo_fd_request at 4295151657 [ 2148.363630][T13101] status=80 [ 2148.372980][T13101] fdc_busy=1 [ 2148.383929][T13101] floppy_work.func=floppy_work_workfn [ 2148.400562][T13101] cont=ffffffff8a1f4920 [ 2148.416818][T13101] current_req=0000000000000000 [ 2148.432625][T13101] command_status=-1 [ 2148.444447][T13101] [ 2148.448058][T13101] floppy1: floppy timeout called [ 2148.478054][T17293] [ 2148.480647][T17293] floppy driver state [ 2148.485564][T17293] ------------------- [ 2148.497309][T17293] now=4295151694 last interrupt=4295141312 diff=10382 last called handler=recal_interrupt [ 2148.535399][T17293] timeout_message=lock fdc [ 2148.541980][T17293] last output bytes: [ 2148.551501][T17293] 0 90 4295139496 [ 2148.556755][T17293] 1 90 4295139496 [ 2148.569703][T17293] 2 90 4295139496 [ 2148.573864][T17293] 24 90 4295139496 [ 2148.581741][T17293] 1b 90 4295139496 [ 2148.593052][T17293] ff 90 4295139496 [ 2148.607488][T17293] 12 80 4295141312 [ 2148.613873][T17293] 3 90 4295141312 [ 2148.621534][T17293] 13 80 4295141312 [ 2148.627631][T17293] 0 90 4295141312 [ 2148.638131][T17293] 1a 90 4295141312 [ 2148.650215][T17293] 0 90 4295141312 [ 2148.657267][T17293] 3 80 4295141312 08:02:42 executing program 2: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) 08:02:42 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:42 executing program 3: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDRAWCMD(r1, 0x258, &(0x7f00000000c0)={0x0, &(0x7f0000000000)="3757efa9033fa02a42f9699dfb64b5d202886bdb668aa1a3327bee71d21522088cd65b52ef2ed80844f83d", &(0x7f0000000080)=0x6, 0x0, 0x2b, 0x0, 0x0, 0xc3, 0x6c, "a1768357ebba0e09747df9892a2df3a6", 0x0, '\x00', 0x271}) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:42 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) recvmsg$unix(r0, &(0x7f0000000540)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/192, 0xc0}, {&(0x7f0000000400)=""/24, 0x18}, {&(0x7f0000000440)=""/96, 0x60}], 0x3, &(0x7f0000000500)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0}}}], 0x18}, 0x101) mount$9p_rdma(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x10002, &(0x7f0000000580)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x5}}, {@timeout={'timeout', 0x3d, 0x100}}, {@sq={'sq', 0x3d, 0x10001}}, {@common=@access_user}, {@timeout={'timeout', 0x3d, 0xfffffffffffffe01}}], [{@smackfsdef={'smackfsdef', 0x3d, 'msdos\x00'}}, {@permit_directio}, {@euid_gt={'euid>', r2}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@smackfsdef={'smackfsdef', 0x3d, 'msdos\x00'}}, {@audit}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@seclabel}, {@fowner_lt={'fowner<', r3}}]}}) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2148.665661][T17293] a1 90 4295141312 [ 2148.672389][T17293] 1e 90 4295141312 [ 2148.678112][T17293] 7 80 4295141312 [ 2148.682373][T17293] 1 90 4295141312 [ 2148.682412][T20658] loop0: detected capacity change from 0 to 87 [ 2148.687436][T17293] 8 80 4295141312 [ 2148.703220][T17293] 4 80 4295141312 [ 2148.707783][T17293] 1 90 4295141312 [ 2148.714142][T17293] last result at 4295141492 [ 2148.721211][T17293] last redo_fd_request at 4295151690 [ 2148.729174][T17293] status=80 [ 2148.732984][T17293] fdc_busy=1 [ 2148.736987][T17293] floppy_work.func=floppy_work_workfn [ 2148.744180][T17293] cont=ffffffff8a1f4920 [ 2148.750541][T17293] current_req=0000000000000000 [ 2148.756404][T17293] command_status=-1 [ 2148.789303][T17293] [ 2148.793612][ T37] audit: type=1804 audit(1638172962.265:727): pid=20658 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1290/file1/bus" dev="loop0" ino=1048714 res=1 errno=0 [ 2148.793868][ T37] audit: type=1800 audit(1638172962.265:728): pid=20658 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048714 res=0 errno=0 [ 2148.877249][T17293] floppy1: floppy timeout called [ 2148.889547][ T3758] [ 2148.892722][ T3758] floppy driver state [ 2148.897041][ T3758] ------------------- [ 2148.904233][T20658] syz-executor.0: attempt to access beyond end of device [ 2148.904233][T20658] loop0: rw=0, want=90, limit=87 [ 2148.949184][ T3758] now=4295151740 last interrupt=4295141312 diff=10428 last called handler=recal_interrupt [ 2148.983645][ T3758] timeout_message=lock fdc [ 2148.991271][ T3758] last output bytes: [ 2149.017013][ T3758] 0 90 4295139496 [ 2149.024458][ T3758] 1 90 4295139496 [ 2149.030920][ T3758] 2 90 4295139496 [ 2149.037497][ T3758] 24 90 4295139496 [ 2149.043990][ T3758] 1b 90 4295139496 [ 2149.048307][ T3758] ff 90 4295139496 [ 2149.065425][ T3758] 12 80 4295141312 [ 2149.070051][ T3758] 3 90 4295141312 [ 2149.075917][ T3758] 13 80 4295141312 [ 2149.088144][ T3758] 0 90 4295141312 [ 2149.093377][ T3758] 1a 90 4295141312 [ 2149.098891][ T3758] 0 90 4295141312 [ 2149.103958][ T3758] 3 80 4295141312 [ 2149.110744][ T3758] a1 90 4295141312 [ 2149.117585][ T3758] 1e 90 4295141312 [ 2149.138379][ T3758] 7 80 4295141312 [ 2149.145224][ T3758] 1 90 4295141312 [ 2149.153345][ T3758] 8 80 4295141312 [ 2149.162381][ T3758] 4 80 4295141312 [ 2149.169858][ T3758] 1 90 4295141312 [ 2149.174846][ T3758] last result at 4295141492 [ 2149.184218][ T3758] last redo_fd_request at 4295151733 [ 2149.193481][ T3758] status=80 [ 2149.199140][ T3758] fdc_busy=1 [ 2149.204296][ T3758] floppy_work.func=floppy_work_workfn [ 2149.215011][ T3758] cont=ffffffff8a1f4920 [ 2149.221437][ T3758] current_req=0000000000000000 [ 2149.228496][ T3758] command_status=-1 [ 2149.233545][ T3758] [ 2149.236863][ T3758] floppy1: floppy timeout called 08:02:42 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:42 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) syz_io_uring_setup(0x2d0d, &(0x7f0000000200)={0x0, 0xd870, 0x20, 0x0, 0x324}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0xec, 0x3, &(0x7f0000000440)="f672638ff8f72f0bb10d5c0f1a62aee204a02bb0963abc34f8493ef200244f7b4e377ae874016cf579d3cd8e80fe3a870a15fdda8d0dc19747f5a7d284e437104de14b5cb2f479e671a96a3114774a4b6561fddc5a5fd44078cfa9ae9b08661e8fbec2856984e26e5f8b75f1275400ed1dc96a169f9a05d895587deb20040eb5c41dc200b257abee8db0254258381cac0ba5d99d3e6ea59422e433760f28005978d97c9d7d0fa0c024ea96c5eed9e6cf6b82fe712f5bd5c5c2b226406014b494a6a2acf5a9e5a1add935345613517db4ee6596c971fccbc2e76d", 0x3, 0x0, 0x1, {0x3}}, 0xde31) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb78e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r3, 0x0, 0x6}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0xc97996ee0b7aaf3a, 0x0, @fd_index=0x1, 0x1569, 0x0, 0x1, 0x2}, 0x84b3) chdir(&(0x7f0000000000)='./file1\x00') socket(0x1d, 0x0, 0x8) r4 = syz_open_procfs(0x0, 0x0) renameat(r4, &(0x7f0000000140)='./cgroup\x00', r4, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb21d10eca0000000000e1200dc697ae561ee0f3942c25a939e09846d30078549e77b215ecf21a1b99b4193a115b169bbfb66a6ffd26da802450a75d9f0188ac9bedc3663afbbda68e170704beada83d151685db0d4b4c2137a7b9ebd42ab043e29b2c447508762bd93555b465df2ec6f6183842522bf60b6f0d8337e81c4942620c14b5f9ea1edcad469a64dd8ed825e7a7ac28250de9f6eff17f1eccd6d104c1f5ca2280ba088b1b58a78722081b91c9437436335f0d0500000000000000c6ddce9c0bedf1bc7ba42201cabf"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ftruncate(r4, 0x4b4) r5 = openat$full(0xffffff9c, &(0x7f0000000080), 0x8080, 0x0) lseek(r5, 0x3, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) [ 2149.282962][T20665] loop0: detected capacity change from 0 to 87 [ 2149.299147][ T3758] [ 2149.302049][ T3758] floppy driver state [ 2149.307426][ T3758] ------------------- 08:02:42 executing program 3: pselect6(0x40, &(0x7f0000000000)={0x7, 0x2, 0x8418, 0x7, 0x0, 0x10000, 0x424caff400000, 0x952}, &(0x7f0000000080)={0x8000, 0x5, 0x0, 0x20, 0x2, 0x6, 0x5, 0x80}, &(0x7f00000000c0)={0xff, 0x101, 0x0, 0xac5, 0x5, 0x5f568eab, 0x3ff, 0x4}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0xfffffffa, 0x3f]}, 0x8}) r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0x2, 0x8}, 0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './cgroup\x00'}) ioctl$FLOPPY_FDCLRPRM(r0, 0x241) r3 = syz_open_procfs(0x0, 0x0) renameat(r3, &(0x7f0000000140)='./cgroup\x00', r3, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) pread64(r3, &(0x7f0000000200)=""/56, 0x38, 0x4) [ 2149.315103][ T3758] now=4295151776 last interrupt=4295141312 diff=10464 last called handler=recal_interrupt [ 2149.341221][ T3758] timeout_message=lock fdc [ 2149.346981][ T3758] last output bytes: [ 2149.353051][ T3758] 0 90 4295139496 [ 2149.359504][ T3758] 1 90 4295139496 08:02:42 executing program 2: r0 = syz_mount_image$adfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000640)="78adc7202910b84ad537f7bbbd558a4338c09692a9924d51597d26a6a232ed6a04377126f528f3ba2da976e8f6278051e62d776a5f6d153546b7f7dd320b8b442b2f8203b9ae02de5cbfe1f2648c1cd327f0b11313995914c3a0a1464211c9d1c7e175a0c3b09eee895ee4fc234302c54f2dc34754cab8692f82c5e48400294042aa9c0c510093fd82d2e00167d1938368c155facb77811f8fe5a731341dd2f32e83f765bb645f3f14987cef50e3d7590165f88ab350c72c0506ac09ed7ae49487f92011ee9e05804bc1be5b2dbe248a04c84f26de2b82c3fdba374eec2071c9710f2d4357b02ef4168054af988f68d9b6bd110f74b4f52415a5abd35082e8285d88f1fdadfcdd6c19264c", 0x10b, 0x7}, {&(0x7f00000001c0)="26d8ddd18f309f425916e47309a37c49ec1385552fbe4b56cc63d026a9ff075316aba30504a8622bc7d87d66e5117f7ab2d922f8768f6849befe34ca69c2c1532c05a5d27a75242b7bcafb9bcb02abd2775c6856b92ed17661e1daeb90b2f62d49ecbbdf05ce25aabcfb3bf71dbe24d36cd4f6a942872a", 0x77, 0x8}, {&(0x7f0000000240)="f8f94896529361a7cc87a0677e439ce5e38146340e6e523702773adec935c3b6598886821498ec91fa2a42abce2d528203867257648b9739f4d638043e9db9a2ffc6e0d38e60a399494af11ffdc286ecafdf99e637b97819a951db6dff45a6f76535fa3910251a0fd6be5988930eb62397448c4e27b751160570bc71b7715098444c0eaa44545d27e86c385e50544e788ed4bc897f2f1cabf524aa6c4fd865e38a0774a8fb4189c34e3deda120c289f4cefbbe694c6af87cd5e6572ed3f5b600"/202, 0xca, 0x80000001}, {&(0x7f0000000340)="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", 0xff, 0x7f}, {&(0x7f0000000440)="9cec414794b75470dd65cdf3e35ae736010dbcb0138d9c8778f69cdfede6322c0245df64361c8a3862f983b1928a1225cdc5133ae29da96f1b5a7379ccb8ef9fc28539c7530b2476097a7dddedd3da8e606e3e0c339a8cc2ed569c3f1e2558c5448afa98ff18f0f75878213cd15aed97ad7dda5624", 0x75}], 0x1002, &(0x7f0000000500)={[{'\xa4\x81&\x85}\xf4_\xae\xfc'}, {'/dev/fd#\x00'}], [{@hash}, {@measure}, {@dont_appraise}, {@permit_directio}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@dont_hash}, {@fscontext={'fscontext', 0x3d, 'root'}}]}) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f00000005c0)) r1 = openat$incfs(r0, &(0x7f0000000600)='.log\x00', 0x200000, 0x4) pidfd_getfd(r1, r0, 0x0) syz_open_dev$floppy(&(0x7f0000000000), 0x1, 0x1) [ 2149.365033][ T3758] 2 90 4295139496 [ 2149.371140][ T3758] 24 90 4295139496 [ 2149.381988][ T3758] 1b 90 4295139496 [ 2149.383531][T20670] loop2: detected capacity change from 0 to 264192 [ 2149.386744][ T3758] ff 90 4295139496 [ 2149.386795][ T3758] 12 80 4295141312 [ 2149.409440][ T3758] 3 90 4295141312 [ 2149.413935][ T3758] 13 80 4295141312 [ 2149.419595][ T3758] 0 90 4295141312 [ 2149.424786][ T3758] 1a 90 4295141312 [ 2149.430227][ T3758] 0 90 4295141312 [ 2149.435331][ T3758] 3 80 4295141312 [ 2149.440629][ T3758] a1 90 4295141312 [ 2149.444990][ T3758] 1e 90 4295141312 [ 2149.449693][ T3758] 7 80 4295141312 [ 2149.454143][ T3758] 1 90 4295141312 [ 2149.460000][ T3758] 8 80 4295141312 [ 2149.465246][ T3758] 4 80 4295141312 [ 2149.471375][ T3758] 1 90 4295141312 [ 2149.475684][ T3758] last result at 4295141492 [ 2149.482420][ T3758] last redo_fd_request at 4295151770 [ 2149.488887][ T3758] status=80 [ 2149.492908][ T3758] fdc_busy=1 [ 2149.500354][ T3758] floppy_work.func=floppy_work_workfn [ 2149.509937][ T3758] cont=ffffffff8a1f4920 [ 2149.516995][ T3758] current_req=0000000000000000 [ 2149.525097][ T3758] command_status=-1 [ 2149.533208][ T3758] [ 2149.536978][ T3758] floppy1: floppy timeout called [ 2149.551067][ T3758] [ 2149.553388][ T3758] floppy driver state [ 2149.557486][ T3758] ------------------- [ 2149.562226][ T3758] now=4295151801 last interrupt=4295141312 diff=10489 last called handler=recal_interrupt [ 2149.582881][ T3758] timeout_message=lock fdc [ 2149.589563][ T3758] last output bytes: [ 2149.594821][ T3758] 0 90 4295139496 [ 2149.605467][ T3758] 1 90 4295139496 [ 2149.611817][ T3758] 2 90 4295139496 [ 2149.617417][ T3758] 24 90 4295139496 [ 2149.629595][ T3758] 1b 90 4295139496 [ 2149.635445][ T3758] ff 90 4295139496 [ 2149.643456][ T3758] 12 80 4295141312 08:02:43 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) syz_io_uring_setup(0x2d0d, &(0x7f0000000200)={0x0, 0xd870, 0x20, 0x0, 0x324}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0xec, 0x3, &(0x7f0000000440)="f672638ff8f72f0bb10d5c0f1a62aee204a02bb0963abc34f8493ef200244f7b4e377ae874016cf579d3cd8e80fe3a870a15fdda8d0dc19747f5a7d284e437104de14b5cb2f479e671a96a3114774a4b6561fddc5a5fd44078cfa9ae9b08661e8fbec2856984e26e5f8b75f1275400ed1dc96a169f9a05d895587deb20040eb5c41dc200b257abee8db0254258381cac0ba5d99d3e6ea59422e433760f28005978d97c9d7d0fa0c024ea96c5eed9e6cf6b82fe712f5bd5c5c2b226406014b494a6a2acf5a9e5a1add935345613517db4ee6596c971fccbc2e76d", 0x3, 0x0, 0x1, {0x3}}, 0xde31) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb78e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r3, 0x0, 0x6}, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0xc97996ee0b7aaf3a, 0x0, @fd_index=0x1, 0x1569, 0x0, 0x1, 0x2}, 0x84b3) chdir(&(0x7f0000000000)='./file1\x00') socket(0x1d, 0x0, 0x8) r4 = syz_open_procfs(0x0, 0x0) renameat(r4, &(0x7f0000000140)='./cgroup\x00', r4, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb21d10eca0000000000e1200dc697ae561ee0f3942c25a939e09846d30078549e77b215ecf21a1b99b4193a115b169bbfb66a6ffd26da802450a75d9f0188ac9bedc3663afbbda68e170704beada83d151685db0d4b4c2137a7b9ebd42ab043e29b2c447508762bd93555b465df2ec6f6183842522bf60b6f0d8337e81c4942620c14b5f9ea1edcad469a64dd8ed825e7a7ac28250de9f6eff17f1eccd6d104c1f5ca2280ba088b1b58a78722081b91c9437436335f0d0500000000000000c6ddce9c0bedf1bc7ba42201cabf"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ftruncate(r4, 0x4b4) r5 = openat$full(0xffffff9c, &(0x7f0000000080), 0x8080, 0x0) lseek(r5, 0x3, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) [ 2149.650287][ T3758] 3 90 4295141312 [ 2149.654979][ T3758] 13 80 4295141312 [ 2149.660119][ T3758] 0 90 4295141312 [ 2149.662308][T20673] loop0: detected capacity change from 0 to 87 [ 2149.664806][ T3758] 1a 90 4295141312 [ 2149.679043][ T3758] 0 90 4295141312 [ 2149.684313][ T3758] 3 80 4295141312 [ 2149.689281][ T3758] a1 90 4295141312 [ 2149.694339][ T3758] 1e 90 4295141312 [ 2149.699099][ T3758] 7 80 4295141312 [ 2149.704529][ T3758] 1 90 4295141312 [ 2149.710579][ T3758] 8 80 4295141312 [ 2149.716243][ T3758] 4 80 4295141312 [ 2149.722235][ T3758] 1 90 4295141312 [ 2149.729742][ T3758] last result at 4295141492 [ 2149.739535][ T3758] last redo_fd_request at 4295151800 [ 2149.758151][ T3758] status=80 [ 2149.762201][ T3758] fdc_busy=1 [ 2149.766137][ T3758] floppy_work.func=floppy_work_workfn [ 2149.773651][ T3758] cont=ffffffff8a1f4920 [ 2149.779780][ T3758] current_req=0000000000000000 [ 2149.786052][ T3758] command_status=-1 [ 2149.791773][ T3758] [ 2149.795112][ T3758] floppy1: floppy timeout called [ 2149.804900][ T3758] [ 2149.808686][T20670] loop2: detected capacity change from 0 to 264192 [ 2149.825220][ T3758] floppy driver state [ 2149.831641][ T3758] ------------------- 08:02:43 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2149.839002][ T3758] now=4295151829 last interrupt=4295141312 diff=10517 last called handler=recal_interrupt [ 2149.861023][ T3758] timeout_message=lock fdc [ 2149.872651][ T3758] last output bytes: [ 2149.880394][ T3758] 0 90 4295139496 08:02:43 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0xf8e3, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, &(0x7f0000000440)={{&(0x7f00000003c0)={'Accelerator0\x00', {}, {&(0x7f0000000340)={'Accelerator\x00', {&(0x7f0000000240)=@adf_hex={@normal='NumberDcInstances\x00', {0x8050}, {&(0x7f0000000180)=@adf_str={@normal='NumberCyInstances\x00', {"69255d8e790ae4cdcbd3c480666d69829e22cb783ba156116ae5b20428aceb2debb7497b2bae60c6141a2354456941b8d682824be06f9eb29e08a870e0fcbefc"}}}}}}}}}, 0x40}) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2149.886451][ T3758] 1 90 4295139496 [ 2149.891821][ T3758] 2 90 4295139496 [ 2149.896917][ T3758] 24 90 4295139496 [ 2149.909438][ T3758] 1b 90 4295139496 [ 2149.914885][ T3758] ff 90 4295139496 [ 2149.923159][ T3758] 12 80 4295141312 [ 2149.928079][ T3758] 3 90 4295141312 [ 2149.933514][ T3758] 13 80 4295141312 [ 2149.939129][ T3758] 0 90 4295141312 [ 2149.944349][ T3758] 1a 90 4295141312 [ 2149.961408][ T3758] 0 90 4295141312 [ 2149.968508][ T3758] 3 80 4295141312 [ 2149.973975][ T3758] a1 90 4295141312 [ 2149.978798][T20682] loop0: detected capacity change from 0 to 87 [ 2149.979702][ T3758] 1e 90 4295141312 [ 2149.999011][ T3758] 7 80 4295141312 [ 2150.004699][ T3758] 1 90 4295141312 [ 2150.010007][ T3758] 8 80 4295141312 [ 2150.015370][ T3758] 4 80 4295141312 [ 2150.020727][ T3758] 1 90 4295141312 [ 2150.026344][ T3758] last result at 4295141492 [ 2150.034998][ T3758] last redo_fd_request at 4295151825 [ 2150.042502][ T3758] status=80 [ 2150.046949][ T3758] fdc_busy=1 [ 2150.051564][ T3758] floppy_work.func=floppy_work_workfn [ 2150.059213][ T37] audit: type=1804 audit(1638172963.525:729): pid=20682 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1293/file1/bus" dev="loop0" ino=1048715 res=1 errno=0 [ 2150.063881][ T3758] cont=ffffffff8a1f4920 [ 2150.072466][T20682] syz-executor.0: attempt to access beyond end of device [ 2150.072466][T20682] loop0: rw=0, want=90, limit=87 [ 2150.095417][ T37] audit: type=1800 audit(1638172963.525:730): pid=20682 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048715 res=0 errno=0 [ 2150.106962][ T3758] current_req=0000000000000000 [ 2150.155262][ T3758] command_status=-1 [ 2150.163421][ T3758] [ 2150.167563][ T3758] floppy1: floppy timeout called [ 2150.174940][ T3758] [ 2150.178517][ T3758] floppy driver state [ 2150.184168][ T3758] ------------------- [ 2150.191053][ T3758] now=4295151864 last interrupt=4295141312 diff=10552 last called handler=recal_interrupt [ 2150.205024][ T3758] timeout_message=lock fdc [ 2150.211006][ T3758] last output bytes: [ 2150.216513][ T3758] 0 90 4295139496 [ 2150.224830][ T3758] 1 90 4295139496 [ 2150.232528][ T3758] 2 90 4295139496 [ 2150.240345][ T3758] 24 90 4295139496 [ 2150.247233][ T3758] 1b 90 4295139496 [ 2150.263817][ T3758] ff 90 4295139496 [ 2150.269782][ T3758] 12 80 4295141312 [ 2150.277106][ T3758] 3 90 4295141312 [ 2150.283473][ T3758] 13 80 4295141312 [ 2150.296703][ T3758] 0 90 4295141312 [ 2150.303231][ T3758] 1a 90 4295141312 [ 2150.311235][ T3758] 0 90 4295141312 [ 2150.318837][ T3758] 3 80 4295141312 [ 2150.323736][ T3758] a1 90 4295141312 [ 2150.330101][ T3758] 1e 90 4295141312 [ 2150.336363][ T3758] 7 80 4295141312 [ 2150.343230][ T3758] 1 90 4295141312 [ 2150.353002][ T3758] 8 80 4295141312 [ 2150.366836][ T3758] 4 80 4295141312 [ 2150.376236][ T3758] 1 90 4295141312 [ 2150.381072][ T3758] last result at 4295141492 [ 2150.387297][ T3758] last redo_fd_request at 4295151862 [ 2150.394367][ T3758] status=80 [ 2150.398782][ T3758] fdc_busy=1 [ 2150.404435][ T3758] floppy_work.func=floppy_work_workfn [ 2150.421323][ T3758] cont=ffffffff8a1f4920 [ 2150.427023][ T3758] current_req=0000000000000000 [ 2150.433358][ T3758] command_status=-1 [ 2150.440758][ T3758] [ 2150.449345][ T3758] floppy1: floppy timeout called [ 2150.466769][ T3758] [ 2150.470255][ T3758] floppy driver state [ 2150.477430][ T3758] ------------------- [ 2150.495021][ T3758] now=4295151894 last interrupt=4295141312 diff=10582 last called handler=recal_interrupt [ 2150.517376][ T3758] timeout_message=lock fdc [ 2150.526151][ T3758] last output bytes: [ 2150.552238][ T3758] 0 90 4295139496 [ 2150.559890][ T3758] 1 90 4295139496 [ 2150.566331][ T3758] 2 90 4295139496 [ 2150.573316][ T3758] 24 90 4295139496 [ 2150.579934][ T3758] 1b 90 4295139496 [ 2150.585683][ T3758] ff 90 4295139496 [ 2150.592208][ T3758] 12 80 4295141312 [ 2150.599131][ T3758] 3 90 4295141312 [ 2150.605218][ T3758] 13 80 4295141312 [ 2150.611348][ T3758] 0 90 4295141312 [ 2150.629144][ T3758] 1a 90 4295141312 [ 2150.634568][ T3758] 0 90 4295141312 [ 2150.645975][ T3758] 3 80 4295141312 [ 2150.668929][ T3758] a1 90 4295141312 [ 2150.674863][ T3758] 1e 90 4295141312 [ 2150.686573][ T3758] 7 80 4295141312 [ 2150.704206][ T3758] 1 90 4295141312 08:02:44 executing program 3: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000040)={0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:44 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 08:02:44 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2150.713884][ T3758] 8 80 4295141312 [ 2150.718561][T20686] loop0: detected capacity change from 0 to 87 [ 2150.721161][ T3758] 4 80 4295141312 [ 2150.741764][ T3758] 1 90 4295141312 08:02:44 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0x0, 0x0) renameat(r4, &(0x7f0000000140)='./cgroup\x00', r4, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) pidfd_getfd(r4, r4, 0x0) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000640)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, r2, 0x711, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) write$binfmt_misc(r6, &(0x7f00000002c0)={'syz1', "b673fa2bf483e788174cbf2cad2d7270bb407e2b4346fb1257838925ede987be20a8ff76a9dee8261bbf69191fd40af81c96497b250b2b53f37a95d0de5a27e336caad9713332a29fce4e29abb2d0584a648ef6d71d85eb8fdaf701e32a3faffc063c05e374bc394399438639882c2004c83cbeec0d5a9a2949da42e4d956d7a4c7d0bfed1829a0d9e4fbf2be8d1070640089049d5ea44280d2e58fd643ffb867610cfe30688146f719e2f7e646acafa08337346481fd0882d"}, 0xbd) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="24000000394f00ce088295583ecba0736c68fa6ad763b6df6d2ce55959a507bb8dfddcd6fdb5e15d7c4d7b7789707bba1be1cf0576eee986bbed3d873427f14d5bf3bb97d14e2e6ef79b3b86b38f2d3374d4126018ae2e23614d95564577b64573b90a3af0a5ad7e8074da4e3daa47f8f15a38517e", @ANYRES16=0x0, @ANYBLOB="000227bd7000fddbdf250000000008000100", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x49) syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) [ 2150.746669][ T3758] last result at 4295141492 [ 2150.787193][ T3758] last redo_fd_request at 4295151891 [ 2150.794477][ T3758] status=80 [ 2150.799825][ T3758] fdc_busy=1 [ 2150.804301][ T3758] floppy_work.func=floppy_work_workfn [ 2150.819849][ T3758] cont=ffffffff8a1f4920 [ 2150.823282][ T37] audit: type=1804 audit(1638172964.295:731): pid=20686 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1294/file1/bus" dev="loop0" ino=1048716 res=1 errno=0 [ 2150.825584][ T3758] current_req=0000000000000000 [ 2150.825601][ T3758] command_status=-1 [ 2150.825612][ T3758] [ 2150.825689][ T3758] floppy1: floppy timeout called [ 2150.882663][ T37] audit: type=1800 audit(1638172964.345:732): pid=20686 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048716 res=0 errno=0 [ 2150.891144][T17293] [ 2150.892540][T20686] syz-executor.0: attempt to access beyond end of device [ 2150.892540][T20686] loop0: rw=0, want=90, limit=87 [ 2150.931370][T17293] floppy driver state [ 2150.939377][T17293] ------------------- [ 2150.948174][T17293] now=4295151940 last interrupt=4295141312 diff=10628 last called handler=recal_interrupt [ 2150.961603][T17293] timeout_message=lock fdc [ 2150.968819][T17293] last output bytes: [ 2150.975507][T17293] 0 90 4295139496 [ 2150.981375][T17293] 1 90 4295139496 [ 2150.987035][T17293] 2 90 4295139496 [ 2150.993310][T17293] 24 90 4295139496 [ 2151.005837][T17293] 1b 90 4295139496 [ 2151.013378][T17293] ff 90 4295139496 [ 2151.024058][T17293] 12 80 4295141312 [ 2151.031679][T17293] 3 90 4295141312 [ 2151.058688][T17293] 13 80 4295141312 [ 2151.063872][T17293] 0 90 4295141312 [ 2151.070315][T17293] 1a 90 4295141312 [ 2151.076927][T17293] 0 90 4295141312 [ 2151.087980][T17293] 3 80 4295141312 [ 2151.096078][T17293] a1 90 4295141312 [ 2151.110263][T17293] 1e 90 4295141312 [ 2151.123895][T17293] 7 80 4295141312 [ 2151.129691][T17293] 1 90 4295141312 [ 2151.135722][T17293] 8 80 4295141312 [ 2151.140958][T17293] 4 80 4295141312 [ 2151.146029][T17293] 1 90 4295141312 [ 2151.161088][T17293] last result at 4295141492 [ 2151.167485][T17293] last redo_fd_request at 4295151933 [ 2151.177623][T17293] status=80 [ 2151.181369][T17293] fdc_busy=1 [ 2151.185713][T17293] floppy_work.func=floppy_work_workfn [ 2151.194664][T17293] cont=ffffffff8a1f4920 [ 2151.201011][T17293] current_req=0000000000000000 [ 2151.210711][T17293] command_status=-1 [ 2151.217587][T17293] [ 2151.236911][T17293] floppy1: floppy timeout called [ 2151.260427][T17293] [ 2151.263722][T17293] floppy driver state [ 2151.268821][T17293] ------------------- 08:02:44 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb78e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r2, 0x0, 0x6}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x6, 0x5, 0x0, 0x5, 0x0, 0xd9016e21854c3ce2}, 0x48e) r3 = syz_open_procfs(0x0, 0x0) renameat(r3, &(0x7f0000000140)='./cgroup\x00', r3, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001880)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001800), 0x0, 0x40000000, 0x1, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x6000, @fd=r3, 0x1f, 0x1ff, 0x5a, 0x14, 0x0, {0x3, r4}}, 0x9) lseek(r0, 0x0, 0x2) r5 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r5, 0x0, 0x8400fffffffa) [ 2151.277029][T17293] now=4295151972 last interrupt=4295141312 diff=10660 last called handler=recal_interrupt [ 2151.292548][T17293] timeout_message=lock fdc [ 2151.299243][T17293] last output bytes: [ 2151.304943][T17293] 0 90 4295139496 [ 2151.312100][T20695] loop0: detected capacity change from 0 to 87 [ 2151.327802][T17293] 1 90 4295139496 [ 2151.333045][T17293] 2 90 4295139496 [ 2151.338843][T17293] 24 90 4295139496 [ 2151.343791][T17293] 1b 90 4295139496 [ 2151.348983][T17293] ff 90 4295139496 [ 2151.353522][T17293] 12 80 4295141312 [ 2151.357802][T17293] 3 90 4295141312 [ 2151.365764][T17293] 13 80 4295141312 [ 2151.379222][T17293] 0 90 4295141312 [ 2151.384015][T17293] 1a 90 4295141312 [ 2151.388497][T17293] 0 90 4295141312 [ 2151.393206][T17293] 3 80 4295141312 [ 2151.409274][T17293] a1 90 4295141312 [ 2151.416583][T17293] 1e 90 4295141312 [ 2151.434911][T17293] 7 80 4295141312 [ 2151.444093][T17293] 1 90 4295141312 [ 2151.453824][T17293] 8 80 4295141312 [ 2151.470139][T17293] 4 80 4295141312 [ 2151.474843][T17293] 1 90 4295141312 [ 2151.480221][T17293] last result at 4295141492 [ 2151.485488][T17293] last redo_fd_request at 4295151970 [ 2151.493622][ T37] audit: type=1804 audit(1638172964.955:733): pid=20695 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1295/file1/bus" dev="sda1" ino=1198 res=1 errno=0 [ 2151.544799][T17293] status=80 [ 2151.547125][ T37] audit: type=1800 audit(1638172964.955:734): pid=20695 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1198 res=0 errno=0 [ 2151.585534][T17293] fdc_busy=1 [ 2151.605469][T17293] floppy_work.func=floppy_work_workfn [ 2151.619784][T17293] cont=ffffffff8a1f4920 [ 2151.627671][T17293] current_req=0000000000000000 [ 2151.647014][T17293] command_status=-1 [ 2151.653370][T17293] [ 2151.658132][T17293] floppy1: floppy timeout called [ 2151.691037][T11777] [ 2151.734269][T11777] floppy driver state [ 2151.756422][T11777] ------------------- [ 2151.763596][T11777] now=4295152021 last interrupt=4295141312 diff=10709 last called handler=recal_interrupt [ 2151.781306][T11777] timeout_message=lock fdc [ 2151.788105][T11777] last output bytes: [ 2151.805363][T11777] 0 90 4295139496 [ 2151.816123][T11777] 1 90 4295139496 [ 2151.828322][T11777] 2 90 4295139496 [ 2151.834470][T11777] 24 90 4295139496 [ 2151.842077][T11777] 1b 90 4295139496 [ 2151.849634][T11777] ff 90 4295139496 [ 2151.857045][T11777] 12 80 4295141312 [ 2151.865096][T11777] 3 90 4295141312 [ 2151.880930][T11777] 13 80 4295141312 [ 2151.889167][T11777] 0 90 4295141312 [ 2151.894743][T11777] 1a 90 4295141312 [ 2151.904737][T11777] 0 90 4295141312 [ 2151.911356][T11777] 3 80 4295141312 [ 2151.917385][T11777] a1 90 4295141312 [ 2151.923972][T11777] 1e 90 4295141312 [ 2151.932193][T11777] 7 80 4295141312 [ 2151.938489][T11777] 1 90 4295141312 [ 2151.944634][T11777] 8 80 4295141312 [ 2151.951651][T11777] 4 80 4295141312 [ 2151.960587][T11777] 1 90 4295141312 [ 2151.965962][T11777] last result at 4295141492 [ 2151.974249][T11777] last redo_fd_request at 4295152014 [ 2151.991516][T11777] status=80 [ 2151.995958][T11777] fdc_busy=1 [ 2152.001886][T11777] floppy_work.func=floppy_work_workfn [ 2152.012975][T11777] cont=ffffffff8a1f4920 [ 2152.020329][T11777] current_req=0000000000000000 [ 2152.047045][T11777] command_status=-1 [ 2152.056392][T11777] [ 2152.077251][T11777] floppy1: floppy timeout called [ 2152.143085][T11777] [ 2152.159786][T11777] floppy driver state [ 2152.165287][T11777] ------------------- [ 2152.208210][T11777] now=4295152066 last interrupt=4295141312 diff=10754 last called handler=recal_interrupt [ 2152.225709][T11777] timeout_message=lock fdc 08:02:45 executing program 3: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:45 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2152.236688][T11777] last output bytes: [ 2152.258223][T11777] 0 90 4295139496 [ 2152.265246][T11777] 1 90 4295139496 [ 2152.271483][T11777] 2 90 4295139496 [ 2152.277678][T11777] 24 90 4295139496 [ 2152.283554][T11777] 1b 90 4295139496 [ 2152.290316][T11777] ff 90 4295139496 [ 2152.319877][T11777] 12 80 4295141312 [ 2152.330760][T11777] 3 90 4295141312 [ 2152.347488][T11777] 13 80 4295141312 [ 2152.354554][T11777] 0 90 4295141312 [ 2152.362366][T11777] 1a 90 4295141312 [ 2152.370234][T11777] 0 90 4295141312 [ 2152.377127][T11777] 3 80 4295141312 [ 2152.389589][T11777] a1 90 4295141312 [ 2152.415390][T11777] 1e 90 4295141312 [ 2152.427055][T11777] 7 80 4295141312 [ 2152.433184][T11777] 1 90 4295141312 [ 2152.460470][T11777] 8 80 4295141312 08:02:45 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb78e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r2, 0x0, 0x6}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x6, 0x5, 0x0, 0x5, 0x0, 0xd9016e21854c3ce2}, 0x48e) r3 = syz_open_procfs(0x0, 0x0) renameat(r3, &(0x7f0000000140)='./cgroup\x00', r3, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001880)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001800), 0x0, 0x40000000, 0x1, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x6000, @fd=r3, 0x1f, 0x1ff, 0x5a, 0x14, 0x0, {0x3, r4}}, 0x9) lseek(r0, 0x0, 0x2) r5 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r5, 0x0, 0x8400fffffffa) 08:02:45 executing program 2: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r3 = syz_open_procfs(0x0, 0x0) renameat(r3, &(0x7f0000000140)='./cgroup\x00', r3, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) copy_file_range(r2, &(0x7f0000000240)=0x3, r3, &(0x7f0000000280)=0x1, 0x1, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000340)=ANY=[@ANYBLOB="0300550054df5f4bdec791f2396687f887e2054cf076e0d3f0bda0181f9fac412a0488d362d91a328f0bf92236331f6aea536056cef04e13066920f8df7d48279a808a6def60d2a9f3e185e1d88fbcf00ae56fbb52d361e3d4a80d09c2ff8b3c6ddec116a1a6575e45f42c337f16b3920600000000000000d26aa75049c269d05ee345bb4f6891aaeaab45f1"]) ioctl$FLOPPY_FDDEFPRM(r1, 0x401c0243, &(0x7f0000000040)={0x80000001, 0x2, 0xffffffff, 0x7ff, 0x3e, 0x5, 0x81, 0x64, 0x20, &(0x7f0000000000)='\x00'}) r4 = openat$dlm_control(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) truncate(&(0x7f0000000080)='./cgroup\x00', 0x80) rename(&(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000300)='./cgroup/file0\x00') write$P9_RLOPEN(r4, &(0x7f0000000180)={0x18, 0xd, 0x1, {{0x2, 0x3, 0x1}}}, 0x18) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f00000000c0)=0x2) [ 2152.472042][T20706] loop0: detected capacity change from 0 to 87 [ 2152.478074][T11777] 4 80 4295141312 [ 2152.494092][T11777] 1 90 4295141312 [ 2152.499815][T11777] last result at 4295141492 [ 2152.506537][T11777] last redo_fd_request at 4295152055 [ 2152.514837][T11777] status=80 [ 2152.520750][T11777] fdc_busy=1 [ 2152.525264][T11777] floppy_work.func=floppy_work_workfn [ 2152.534149][T11777] cont=ffffffff8a1f4920 [ 2152.540723][T11777] current_req=0000000000000000 [ 2152.548428][T11777] command_status=-1 [ 2152.553672][T11777] [ 2152.557203][T11777] floppy1: floppy timeout called [ 2152.572342][ T3758] [ 2152.576678][ T3758] floppy driver state [ 2152.589647][ T3758] ------------------- [ 2152.595116][ T3758] now=4295152104 last interrupt=4295141312 diff=10792 last called handler=recal_interrupt [ 2152.607935][ T3758] timeout_message=lock fdc [ 2152.614770][ T3758] last output bytes: [ 2152.620448][ T3758] 0 90 4295139496 [ 2152.621451][ T37] audit: type=1804 audit(1638172966.085:735): pid=20706 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1296/file1/bus" dev="loop0" ino=1048717 res=1 errno=0 [ 2152.627533][ T3758] 1 90 4295139496 [ 2152.661901][ T3758] 2 90 4295139496 [ 2152.667973][ T3758] 24 90 4295139496 [ 2152.673092][ T3758] 1b 90 4295139496 [ 2152.677000][ T37] audit: type=1800 audit(1638172966.135:736): pid=20706 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048717 res=0 errno=0 [ 2152.678268][ T3758] ff 90 4295139496 [ 2152.725333][ T3758] 12 80 4295141312 [ 2152.730736][ T3758] 3 90 4295141312 [ 2152.735632][ T3758] 13 80 4295141312 [ 2152.740528][ T3758] 0 90 4295141312 [ 2152.745062][ T3758] 1a 90 4295141312 [ 2152.752810][ T3758] 0 90 4295141312 [ 2152.765445][ T3758] 3 80 4295141312 [ 2152.770515][ T3758] a1 90 4295141312 [ 2152.785208][ T3758] 1e 90 4295141312 [ 2152.804582][ T3758] 7 80 4295141312 [ 2152.821346][ T3758] 1 90 4295141312 [ 2152.846866][ T3758] 8 80 4295141312 [ 2152.851784][ T3758] 4 80 4295141312 [ 2152.861193][ T3758] 1 90 4295141312 [ 2152.879863][ T3758] last result at 4295141492 [ 2152.891379][ T3758] last redo_fd_request at 4295152101 [ 2152.916573][ T3758] status=80 [ 2152.929787][ T3758] fdc_busy=1 [ 2152.935582][ T3758] floppy_work.func=floppy_work_workfn [ 2152.945814][ T3758] cont=ffffffff8a1f4920 [ 2152.951681][ T3758] current_req=0000000000000000 [ 2152.957559][ T3758] command_status=-1 [ 2152.962330][ T3758] [ 2152.976412][ T3758] floppy1: floppy timeout called [ 2152.988455][ T3758] [ 2152.991427][ T3758] floppy driver state [ 2152.997247][ T3758] ------------------- [ 2153.003780][ T3758] now=4295152145 last interrupt=4295141312 diff=10833 last called handler=recal_interrupt [ 2153.024512][ T3758] timeout_message=lock fdc [ 2153.034495][ T3758] last output bytes: [ 2153.042335][ T3758] 0 90 4295139496 [ 2153.048726][ T3758] 1 90 4295139496 [ 2153.053830][ T3758] 2 90 4295139496 [ 2153.060653][ T3758] 24 90 4295139496 [ 2153.067478][ T3758] 1b 90 4295139496 [ 2153.074364][ T3758] ff 90 4295139496 [ 2153.079475][ T3758] 12 80 4295141312 [ 2153.086649][ T3758] 3 90 4295141312 [ 2153.092460][ T3758] 13 80 4295141312 [ 2153.098308][ T3758] 0 90 4295141312 [ 2153.104230][ T3758] 1a 90 4295141312 [ 2153.110123][ T3758] 0 90 4295141312 [ 2153.113986][ T3758] 3 80 4295141312 [ 2153.118728][ T3758] a1 90 4295141312 [ 2153.123499][ T3758] 1e 90 4295141312 [ 2153.128574][ T3758] 7 80 4295141312 [ 2153.136389][ T3758] 1 90 4295141312 [ 2153.145266][ T3758] 8 80 4295141312 [ 2153.151906][ T3758] 4 80 4295141312 [ 2153.158118][ T3758] 1 90 4295141312 [ 2153.163987][ T3758] last result at 4295141492 [ 2153.172064][ T3758] last redo_fd_request at 4295152144 [ 2153.179247][ T3758] status=80 [ 2153.183911][ T3758] fdc_busy=1 [ 2153.189817][ T3758] floppy_work.func=floppy_work_workfn [ 2153.201279][ T3758] cont=ffffffff8a1f4920 [ 2153.208684][ T3758] current_req=0000000000000000 [ 2153.217658][ T3758] command_status=-1 [ 2153.227523][ T3758] [ 2153.235089][ T3758] floppy1: floppy timeout called [ 2153.248572][T13101] [ 2153.254014][T13101] floppy driver state [ 2153.274481][T13101] ------------------- [ 2153.292932][T13101] now=4295152174 last interrupt=4295141312 diff=10862 last called handler=recal_interrupt [ 2153.316806][T13101] timeout_message=lock fdc [ 2153.330203][T13101] last output bytes: [ 2153.335611][T13101] 0 90 4295139496 [ 2153.343867][T13101] 1 90 4295139496 [ 2153.352582][T13101] 2 90 4295139496 [ 2153.360519][T13101] 24 90 4295139496 [ 2153.366680][T13101] 1b 90 4295139496 [ 2153.378082][T13101] ff 90 4295139496 [ 2153.383486][T13101] 12 80 4295141312 [ 2153.391128][T13101] 3 90 4295141312 [ 2153.396158][T13101] 13 80 4295141312 [ 2153.403848][T13101] 0 90 4295141312 [ 2153.410317][T13101] 1a 90 4295141312 [ 2153.415983][T13101] 0 90 4295141312 [ 2153.423286][T13101] 3 80 4295141312 [ 2153.432014][T13101] a1 90 4295141312 [ 2153.440694][T13101] 1e 90 4295141312 [ 2153.449101][T13101] 7 80 4295141312 [ 2153.456066][T13101] 1 90 4295141312 [ 2153.463024][T13101] 8 80 4295141312 [ 2153.468349][T13101] 4 80 4295141312 [ 2153.473894][T13101] 1 90 4295141312 [ 2153.480449][T13101] last result at 4295141492 [ 2153.487518][T13101] last redo_fd_request at 4295152169 [ 2153.494920][T13101] status=80 [ 2153.499919][T13101] fdc_busy=1 [ 2153.513234][T13101] floppy_work.func=floppy_work_workfn [ 2153.535167][T13101] cont=ffffffff8a1f4920 [ 2153.547250][T13101] current_req=0000000000000000 [ 2153.557591][T13101] command_status=-1 [ 2153.564110][T13101] [ 2153.577187][T13101] floppy1: floppy timeout called [ 2153.619643][T11777] [ 2153.622818][T11777] floppy driver state [ 2153.627375][T11777] ------------------- [ 2153.647934][T11777] now=4295152209 last interrupt=4295141312 diff=10897 last called handler=recal_interrupt [ 2153.668301][T11777] timeout_message=lock fdc [ 2153.698072][T11777] last output bytes: [ 2153.703871][T11777] 0 90 4295139496 [ 2153.731669][T20715] loop0: detected capacity change from 0 to 87 [ 2153.741321][T11777] 1 90 4295139496 [ 2153.745960][T11777] 2 90 4295139496 08:02:47 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:47 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x5, 0x2]}, 0x8, 0x80800) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f0000000100)={0xa00000, 0x4, 0x7, r1, 0x0, &(0x7f00000000c0)={0x980929, 0x8, '\x00', @p_u32=&(0x7f0000000080)=0x2}}) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FS_IOC_GETVERSION(r2, 0x80047601, &(0x7f0000000140)) r3 = syz_open_dev$floppy(&(0x7f00000001c0), 0x207ffe, 0x3) ioctl$FLOPPY_FDCLRPRM(r3, 0x241) 08:02:47 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb78e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r2, 0x0, 0x6}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x6, 0x5, 0x0, 0x5, 0x0, 0xd9016e21854c3ce2}, 0x48e) r3 = syz_open_procfs(0x0, 0x0) renameat(r3, &(0x7f0000000140)='./cgroup\x00', r3, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001880)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001800), 0x0, 0x40000000, 0x1, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x6000, @fd=r3, 0x1f, 0x1ff, 0x5a, 0x14, 0x0, {0x3, r4}}, 0x9) lseek(r0, 0x0, 0x2) r5 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r5, 0x0, 0x8400fffffffa) 08:02:47 executing program 3: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDFMTEND(r0, 0x249) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2153.761750][T11777] 24 90 4295139496 [ 2153.766644][T11777] 1b 90 4295139496 [ 2153.803821][T11777] ff 90 4295139496 [ 2153.808627][T11777] 12 80 4295141312 [ 2153.813584][T11777] 3 90 4295141312 [ 2153.874242][T11777] 13 80 4295141312 [ 2153.887408][ T37] audit: type=1804 audit(1638172967.355:737): pid=20715 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1297/file1/bus" dev="loop0" ino=1048718 res=1 errno=0 [ 2153.898075][T11777] 0 90 4295141312 08:02:47 executing program 2: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) ioctl$FLOPPY_FDDEFPRM(r0, 0x401c0243, &(0x7f0000000040)={0x2, 0x5, 0x7, 0x1, 0x81f5, 0x5, 0x1, 0x8, 0x9, &(0x7f0000000000)='/dev/fd#\x00'}) [ 2153.967924][T11777] 1a 90 4295141312 [ 2153.972221][T11777] 0 90 4295141312 [ 2153.976855][T11777] 3 80 4295141312 [ 2153.980581][ T37] audit: type=1800 audit(1638172967.355:738): pid=20715 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048718 res=0 errno=0 [ 2153.982528][T11777] a1 90 4295141312 [ 2154.021226][T11777] 1e 90 4295141312 [ 2154.026704][T11777] 7 80 4295141312 [ 2154.032857][T11777] 1 90 4295141312 [ 2154.038736][T11777] 8 80 4295141312 [ 2154.044312][T11777] 4 80 4295141312 [ 2154.050288][T11777] 1 90 4295141312 [ 2154.055820][T11777] last result at 4295141492 [ 2154.062550][T11777] last redo_fd_request at 4295152204 [ 2154.071283][T11777] status=80 [ 2154.075754][T11777] fdc_busy=1 [ 2154.080263][T11777] floppy_work.func=floppy_work_workfn [ 2154.089303][T11777] cont=ffffffff8a1f4920 [ 2154.095449][T11777] current_req=0000000000000000 [ 2154.103780][T11777] command_status=-1 [ 2154.111397][T11777] [ 2154.112657][T20715] syz-executor.0: attempt to access beyond end of device [ 2154.112657][T20715] loop0: rw=0, want=90, limit=87 [ 2154.115659][T11777] floppy1: floppy timeout called [ 2154.146172][ T3758] [ 2154.149849][ T3758] floppy driver state [ 2154.158987][ T3758] ------------------- [ 2154.170852][ T3758] now=4295152262 last interrupt=4295141312 diff=10950 last called handler=recal_interrupt [ 2154.190630][ T3758] timeout_message=lock fdc [ 2154.197069][ T3758] last output bytes: [ 2154.206800][ T3758] 0 90 4295139496 [ 2154.216531][ T3758] 1 90 4295139496 [ 2154.225487][ T3758] 2 90 4295139496 [ 2154.234946][ T3758] 24 90 4295139496 [ 2154.245968][ T3758] 1b 90 4295139496 [ 2154.268429][ T3758] ff 90 4295139496 [ 2154.286382][ T3758] 12 80 4295141312 [ 2154.297731][ T3758] 3 90 4295141312 [ 2154.306645][ T3758] 13 80 4295141312 [ 2154.318995][ T3758] 0 90 4295141312 [ 2154.323601][ T3758] 1a 90 4295141312 [ 2154.329733][ T3758] 0 90 4295141312 [ 2154.335918][ T3758] 3 80 4295141312 [ 2154.342840][ T3758] a1 90 4295141312 [ 2154.357269][ T3758] 1e 90 4295141312 [ 2154.363116][ T3758] 7 80 4295141312 [ 2154.368858][ T3758] 1 90 4295141312 [ 2154.374804][ T3758] 8 80 4295141312 [ 2154.380500][ T3758] 4 80 4295141312 [ 2154.386252][ T3758] 1 90 4295141312 [ 2154.392230][ T3758] last result at 4295141492 [ 2154.397310][ T3758] last redo_fd_request at 4295152259 [ 2154.403601][ T3758] status=80 [ 2154.418844][ T3758] fdc_busy=1 [ 2154.423407][ T3758] floppy_work.func=floppy_work_workfn [ 2154.432701][ T3758] cont=ffffffff8a1f4920 [ 2154.451967][ T3758] current_req=0000000000000000 [ 2154.459983][ T3758] command_status=-1 [ 2154.464222][ T3758] [ 2154.466694][ T3758] floppy1: floppy timeout called 08:02:47 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb78e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r2, 0x0, 0x6}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x6, 0x5, 0x0, 0x5, 0x0, 0xd9016e21854c3ce2}, 0x48e) r3 = syz_open_procfs(0x0, 0x0) renameat(r3, &(0x7f0000000140)='./cgroup\x00', r3, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001880)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001800), 0x0, 0x40000000, 0x1, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x6000, @fd=r3, 0x1f, 0x1ff, 0x5a, 0x14, 0x0, {0x3, r4}}, 0x9) lseek(r0, 0x0, 0x2) r5 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r5, 0x0, 0x8400fffffffa) [ 2154.489221][ T3758] [ 2154.492328][ T3758] floppy driver state [ 2154.500016][ T3758] ------------------- [ 2154.515426][ T3758] now=4295152296 last interrupt=4295141312 diff=10984 last called handler=recal_interrupt [ 2154.570937][ T3758] timeout_message=lock fdc [ 2154.576704][ T3758] last output bytes: [ 2154.597583][ T3758] 0 90 4295139496 [ 2154.607371][ T3758] 1 90 4295139496 [ 2154.645620][ T3758] 2 90 4295139496 [ 2154.650438][T20729] loop0: detected capacity change from 0 to 87 [ 2154.656353][ T3758] 24 90 4295139496 [ 2154.666767][ T3758] 1b 90 4295139496 [ 2154.675696][ T3758] ff 90 4295139496 [ 2154.684380][ T3758] 12 80 4295141312 [ 2154.693316][ T3758] 3 90 4295141312 [ 2154.707620][ T3758] 13 80 4295141312 [ 2154.719389][ T3758] 0 90 4295141312 [ 2154.724241][ T3758] 1a 90 4295141312 [ 2154.734148][ T3758] 0 90 4295141312 [ 2154.763565][ T3758] 3 80 4295141312 [ 2154.780017][ T3758] a1 90 4295141312 [ 2154.828643][ T3758] 1e 90 4295141312 [ 2154.833422][ T3758] 7 80 4295141312 [ 2154.840764][ T3758] 1 90 4295141312 [ 2154.847003][ T3758] 8 80 4295141312 [ 2154.851526][ T3758] 4 80 4295141312 [ 2154.857400][ T3758] 1 90 4295141312 [ 2154.863256][ T3758] last result at 4295141492 [ 2154.869807][ T3758] last redo_fd_request at 4295152294 [ 2154.877448][ T3758] status=80 [ 2154.884057][ T3758] fdc_busy=1 [ 2154.889867][ T3758] floppy_work.func=floppy_work_workfn [ 2154.909237][ T3758] cont=ffffffff8a1f4920 [ 2154.917746][ T3758] current_req=0000000000000000 [ 2154.930871][ T3758] command_status=-1 [ 2154.951097][ T3758] [ 2154.959499][ T3758] floppy1: floppy timeout called [ 2154.992981][ T3758] [ 2154.995634][ T3758] floppy driver state [ 2155.001055][ T3758] ------------------- [ 2155.016582][ T3758] now=4295152346 last interrupt=4295141312 diff=11034 last called handler=recal_interrupt [ 2155.031677][ T3758] timeout_message=lock fdc [ 2155.038530][ T3758] last output bytes: [ 2155.043327][ T3758] 0 90 4295139496 [ 2155.048924][ T3758] 1 90 4295139496 [ 2155.053301][ T3758] 2 90 4295139496 [ 2155.057513][ T3758] 24 90 4295139496 [ 2155.062145][ T3758] 1b 90 4295139496 [ 2155.067028][ T3758] ff 90 4295139496 [ 2155.074658][ T3758] 12 80 4295141312 [ 2155.079509][ T3758] 3 90 4295141312 [ 2155.084629][ T3758] 13 80 4295141312 [ 2155.089935][ T3758] 0 90 4295141312 [ 2155.101072][ T3758] 1a 90 4295141312 [ 2155.106549][ T3758] 0 90 4295141312 [ 2155.115028][ T3758] 3 80 4295141312 [ 2155.123142][ T3758] a1 90 4295141312 [ 2155.131306][ T3758] 1e 90 4295141312 [ 2155.136507][ T3758] 7 80 4295141312 [ 2155.145467][ T3758] 1 90 4295141312 [ 2155.159973][ T3758] 8 80 4295141312 [ 2155.167013][ T3758] 4 80 4295141312 [ 2155.198438][ T3758] 1 90 4295141312 [ 2155.203563][ T3758] last result at 4295141492 [ 2155.218066][ T3758] last redo_fd_request at 4295152344 [ 2155.225808][ T3758] status=80 [ 2155.235510][ T3758] fdc_busy=1 [ 2155.240459][ T3758] floppy_work.func=floppy_work_workfn [ 2155.247270][ T3758] cont=ffffffff8a1f4920 [ 2155.253788][ T3758] current_req=0000000000000000 [ 2155.260459][ T3758] command_status=-1 [ 2155.266258][ T3758] [ 2155.270254][ T3758] floppy1: floppy timeout called [ 2155.308309][T11777] [ 2155.312207][T11777] floppy driver state [ 2155.317571][T11777] ------------------- [ 2155.341849][T11777] now=4295152379 last interrupt=4295141312 diff=11067 last called handler=recal_interrupt [ 2155.376338][T11777] timeout_message=lock fdc [ 2155.407941][T11777] last output bytes: [ 2155.420407][T11777] 0 90 4295139496 [ 2155.447924][T11777] 1 90 4295139496 [ 2155.453766][T11777] 2 90 4295139496 [ 2155.486900][T11777] 24 90 4295139496 [ 2155.501385][T11777] 1b 90 4295139496 [ 2155.512649][T11777] ff 90 4295139496 [ 2155.524577][T11777] 12 80 4295141312 [ 2155.552982][T11777] 3 90 4295141312 [ 2155.566813][T11777] 13 80 4295141312 08:02:49 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:49 executing program 2: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$FLOPPY_FDDEFPRM(r0, 0x401c0243, &(0x7f0000000080)={0xec7, 0xdd5, 0x0, 0x1, 0x2, 0x80, 0x81, 0x81, 0x0, &(0x7f0000000040)='*/:+---\\[\x00'}) ioctl$FLOPPY_FDGETDRVPRM(r0, 0x80580211, &(0x7f0000000100)) finit_module(r0, &(0x7f00000000c0)='*/:+---\\[\x00', 0x3) 08:02:49 executing program 3: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) r0 = syz_open_procfs(0x0, 0x0) renameat(r0, &(0x7f0000000140)='./cgroup\x00', r0, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000040)={0x0, 0x80007fff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0}) 08:02:49 executing program 0: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDDEFPRM(r1, 0x401c0243, &(0x7f0000000140)={0xab, 0x0, 0x3, 0x7, 0x29, 0x5, 0x4, 0x8c, 0x20, &(0x7f0000000180)='/dev/fd#\x00\xb06\xef+\xabP3\xa6\x92\xf2v8\xd3\xe5\xf0\x1bMOS\x87i\x033E\x94;\xc6@S\xc09\x1e\xca7\x10\xb0\xc4\x11\x7f\xe1y\x02\\/\'2\x06>3\xb9\xad'}) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f0000000080)={0x2, &(0x7f0000000000)="099021d1796041cf03e2ada25cae7d9bea44b43e19866990e8c1504a8676c81a46", &(0x7f0000000040)=0x8, 0x0, 0x21, 0x0, 0x0, 0x2, 0xff, "a7e647d1efdaa821fa387056816558a0", 0x0, '\x00', 0x2}) [ 2155.597913][T11777] 0 90 4295141312 [ 2155.602666][T11777] 1a 90 4295141312 [ 2155.607693][T11777] 0 90 4295141312 [ 2155.618529][T11777] 3 80 4295141312 [ 2155.623304][T11777] a1 90 4295141312 [ 2155.632637][T11777] 1e 90 4295141312 [ 2155.657948][T11777] 7 80 4295141312 [ 2155.663620][T11777] 1 90 4295141312 [ 2155.671309][T11777] 8 80 4295141312 [ 2155.676863][T11777] 4 80 4295141312 [ 2155.688978][T11777] 1 90 4295141312 [ 2155.693907][T11777] last result at 4295141492 [ 2155.699863][T11777] last redo_fd_request at 4295152376 [ 2155.706972][T11777] status=80 [ 2155.714128][T11777] fdc_busy=1 [ 2155.719456][T11777] floppy_work.func=floppy_work_workfn [ 2155.727770][T11777] cont=ffffffff8a1f4920 [ 2155.734963][T11777] current_req=0000000000000000 [ 2155.752271][T11777] command_status=-1 [ 2155.758543][T11777] [ 2155.761824][T11777] floppy1: floppy timeout called [ 2155.772650][T11777] [ 2155.776415][T11777] floppy driver state [ 2155.780834][T11777] ------------------- [ 2155.785059][T11777] now=4295152423 last interrupt=4295141312 diff=11111 last called handler=recal_interrupt [ 2155.796461][T11777] timeout_message=lock fdc [ 2155.801089][T11777] last output bytes: [ 2155.805127][T11777] 0 90 4295139496 [ 2155.809092][T11777] 1 90 4295139496 [ 2155.813138][T11777] 2 90 4295139496 [ 2155.816895][T11777] 24 90 4295139496 [ 2155.821220][T11777] 1b 90 4295139496 [ 2155.825932][T11777] ff 90 4295139496 [ 2155.831498][T11777] 12 80 4295141312 [ 2155.836476][T11777] 3 90 4295141312 [ 2155.842256][T11777] 13 80 4295141312 [ 2155.847633][T11777] 0 90 4295141312 [ 2155.853314][T11777] 1a 90 4295141312 [ 2155.858697][T11777] 0 90 4295141312 [ 2155.864328][T11777] 3 80 4295141312 [ 2155.870578][T11777] a1 90 4295141312 [ 2155.876066][T11777] 1e 90 4295141312 [ 2155.881401][T11777] 7 80 4295141312 [ 2155.886210][T11777] 1 90 4295141312 [ 2155.891466][T11777] 8 80 4295141312 [ 2155.896136][T11777] 4 80 4295141312 [ 2155.901368][T11777] 1 90 4295141312 [ 2155.906239][T11777] last result at 4295141492 [ 2155.912737][T11777] last redo_fd_request at 4295152421 [ 2155.920131][T11777] status=80 [ 2155.924317][T11777] fdc_busy=1 [ 2155.928941][T11777] floppy_work.func=floppy_work_workfn [ 2155.936346][T11777] cont=ffffffff8a1f4920 [ 2155.942216][T11777] current_req=0000000000000000 [ 2155.948897][T11777] command_status=-1 [ 2155.954205][T11777] [ 2155.957445][T11777] floppy1: floppy timeout called [ 2155.966612][T11777] [ 2155.969876][T11777] floppy driver state [ 2155.975046][T11777] ------------------- [ 2155.980458][T11777] now=4295152443 last interrupt=4295141312 diff=11131 last called handler=recal_interrupt [ 2155.993930][T11777] timeout_message=lock fdc [ 2156.000400][T11777] last output bytes: [ 2156.006448][T11777] 0 90 4295139496 [ 2156.013007][T11777] 1 90 4295139496 [ 2156.030278][T11777] 2 90 4295139496 [ 2156.040680][T11777] 24 90 4295139496 [ 2156.045847][T11777] 1b 90 4295139496 [ 2156.051249][T11777] ff 90 4295139496 [ 2156.056808][T11777] 12 80 4295141312 [ 2156.062023][T11777] 3 90 4295141312 [ 2156.067338][T11777] 13 80 4295141312 [ 2156.073846][T11777] 0 90 4295141312 [ 2156.078647][T11777] 1a 90 4295141312 [ 2156.083402][T11777] 0 90 4295141312 [ 2156.089403][T11777] 3 80 4295141312 [ 2156.094878][T11777] a1 90 4295141312 [ 2156.099946][T11777] 1e 90 4295141312 [ 2156.104792][T11777] 7 80 4295141312 [ 2156.110671][T11777] 1 90 4295141312 [ 2156.115789][T11777] 8 80 4295141312 [ 2156.121269][T11777] 4 80 4295141312 08:02:49 executing program 0: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDDEFPRM(r1, 0x401c0243, &(0x7f0000000140)={0xab, 0x0, 0x3, 0x7, 0x29, 0x5, 0x4, 0x8c, 0x20, &(0x7f0000000180)='/dev/fd#\x00\xb06\xef+\xabP3\xa6\x92\xf2v8\xd3\xe5\xf0\x1bMOS\x87i\x033E\x94;\xc6@S\xc09\x1e\xca7\x10\xb0\xc4\x11\x7f\xe1y\x02\\/\'2\x06>3\xb9\xad'}) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f0000000080)={0x2, &(0x7f0000000000)="099021d1796041cf03e2ada25cae7d9bea44b43e19866990e8c1504a8676c81a46", &(0x7f0000000040)=0x8, 0x0, 0x21, 0x0, 0x0, 0x2, 0xff, "a7e647d1efdaa821fa387056816558a0", 0x0, '\x00', 0x2}) [ 2156.126590][T11777] 1 90 4295141312 [ 2156.136946][T11777] last result at 4295141492 [ 2156.143674][T11777] last redo_fd_request at 4295152441 [ 2156.150515][T11777] status=80 [ 2156.154257][T11777] fdc_busy=1 [ 2156.158650][T11777] floppy_work.func=floppy_work_workfn [ 2156.165390][T11777] cont=ffffffff8a1f4920 [ 2156.171861][T11777] current_req=0000000000000000 [ 2156.178715][T11777] command_status=-1 [ 2156.183905][T11777] [ 2156.186908][T11777] floppy1: floppy timeout called [ 2156.193962][T11777] [ 2156.197098][T11777] floppy driver state [ 2156.203680][T11777] ------------------- [ 2156.210186][T11777] now=4295152466 last interrupt=4295141312 diff=11154 last called handler=recal_interrupt [ 2156.222624][T11777] timeout_message=lock fdc [ 2156.229521][T11777] last output bytes: [ 2156.234046][T11777] 0 90 4295139496 [ 2156.239374][T11777] 1 90 4295139496 [ 2156.243877][T11777] 2 90 4295139496 [ 2156.251800][T11777] 24 90 4295139496 [ 2156.256546][T11777] 1b 90 4295139496 [ 2156.261099][T11777] ff 90 4295139496 [ 2156.266278][T11777] 12 80 4295141312 [ 2156.271016][T11777] 3 90 4295141312 [ 2156.275536][T11777] 13 80 4295141312 [ 2156.280240][T11777] 0 90 4295141312 [ 2156.284828][T11777] 1a 90 4295141312 [ 2156.289499][T11777] 0 90 4295141312 [ 2156.294139][T11777] 3 80 4295141312 [ 2156.299421][T11777] a1 90 4295141312 [ 2156.304665][T11777] 1e 90 4295141312 [ 2156.309527][T11777] 7 80 4295141312 [ 2156.314350][T11777] 1 90 4295141312 [ 2156.319450][T11777] 8 80 4295141312 [ 2156.324618][T11777] 4 80 4295141312 [ 2156.330137][T11777] 1 90 4295141312 [ 2156.335184][T11777] last result at 4295141492 [ 2156.341544][T11777] last redo_fd_request at 4295152464 [ 2156.349800][T11777] status=80 [ 2156.354670][T11777] fdc_busy=1 [ 2156.359215][T11777] floppy_work.func=floppy_work_workfn [ 2156.366228][T11777] cont=ffffffff8a1f4920 [ 2156.379690][T11777] current_req=0000000000000000 [ 2156.384814][T11777] command_status=-1 [ 2156.390416][T11777] [ 2156.393401][T11777] floppy1: floppy timeout called [ 2156.420075][T13101] [ 2156.423347][T13101] floppy driver state [ 2156.429103][T13101] ------------------- 08:02:49 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:49 executing program 2: syz_open_dev$floppy(&(0x7f00000001c0), 0x3, 0x0) [ 2156.436304][T13101] now=4295152488 last interrupt=4295141312 diff=11176 last called handler=recal_interrupt [ 2156.455539][T13101] timeout_message=lock fdc [ 2156.465722][T13101] last output bytes: [ 2156.474670][T13101] 0 90 4295139496 [ 2156.479249][T13101] 1 90 4295139496 08:02:49 executing program 3: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FLOPPY_FDGETDRVPRM(r0, 0x80580211, &(0x7f0000000080)) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) [ 2156.483140][T13101] 2 90 4295139496 08:02:49 executing program 0: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDDEFPRM(r1, 0x401c0243, &(0x7f0000000140)={0xab, 0x0, 0x3, 0x7, 0x29, 0x5, 0x4, 0x8c, 0x20, &(0x7f0000000180)='/dev/fd#\x00\xb06\xef+\xabP3\xa6\x92\xf2v8\xd3\xe5\xf0\x1bMOS\x87i\x033E\x94;\xc6@S\xc09\x1e\xca7\x10\xb0\xc4\x11\x7f\xe1y\x02\\/\'2\x06>3\xb9\xad'}) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f0000000080)={0x2, &(0x7f0000000000)="099021d1796041cf03e2ada25cae7d9bea44b43e19866990e8c1504a8676c81a46", &(0x7f0000000040)=0x8, 0x0, 0x21, 0x0, 0x0, 0x2, 0xff, "a7e647d1efdaa821fa387056816558a0", 0x0, '\x00', 0x2}) [ 2156.489867][T13101] 24 90 4295139496 [ 2156.495987][T13101] 1b 90 4295139496 [ 2156.508458][T13101] ff 90 4295139496 [ 2156.512425][T13101] 12 80 4295141312 [ 2156.516506][T13101] 3 90 4295141312 [ 2156.521914][T13101] 13 80 4295141312 [ 2156.526981][T13101] 0 90 4295141312 [ 2156.532139][T13101] 1a 90 4295141312 [ 2156.537652][T13101] 0 90 4295141312 [ 2156.542860][T13101] 3 80 4295141312 [ 2156.548465][T13101] a1 90 4295141312 [ 2156.554072][T13101] 1e 90 4295141312 [ 2156.561197][T13101] 7 80 4295141312 [ 2156.578014][T13101] 1 90 4295141312 [ 2156.585834][T13101] 8 80 4295141312 [ 2156.594902][T13101] 4 80 4295141312 [ 2156.602042][T13101] 1 90 4295141312 [ 2156.608045][T13101] last result at 4295141492 [ 2156.615074][T13101] last redo_fd_request at 4295152485 [ 2156.623063][T13101] status=80 [ 2156.627642][T13101] fdc_busy=1 [ 2156.633347][T13101] floppy_work.func=floppy_work_workfn [ 2156.643111][T13101] cont=ffffffff8a1f4920 [ 2156.652334][T13101] current_req=0000000000000000 [ 2156.658978][T13101] command_status=-1 [ 2156.666585][T13101] [ 2156.672563][T13101] floppy1: floppy timeout called [ 2156.696301][T13101] [ 2156.700650][T13101] floppy driver state [ 2156.706277][T13101] ------------------- [ 2156.711758][T13101] now=4295152515 last interrupt=4295141312 diff=11203 last called handler=recal_interrupt [ 2156.725517][T13101] timeout_message=lock fdc [ 2156.737516][T13101] last output bytes: [ 2156.763054][T13101] 0 90 4295139496 [ 2156.775941][T13101] 1 90 4295139496 [ 2156.785577][T13101] 2 90 4295139496 [ 2156.798188][T13101] 24 90 4295139496 [ 2156.805744][T13101] 1b 90 4295139496 [ 2156.816994][T13101] ff 90 4295139496 [ 2156.823367][T13101] 12 80 4295141312 [ 2156.839446][T13101] 3 90 4295141312 [ 2156.850621][T13101] 13 80 4295141312 [ 2156.856521][T13101] 0 90 4295141312 [ 2156.871717][T13101] 1a 90 4295141312 [ 2156.900331][T13101] 0 90 4295141312 [ 2156.906353][T13101] 3 80 4295141312 08:02:50 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:50 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000480)="f1", 0x1}, {&(0x7f00000007c0)="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", 0x1000}], 0x2) close(r2) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r3 = syz_open_procfs(0x0, 0x0) renameat(r3, &(0x7f0000000140)='./cgroup\x00', r3, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000ac44d577187967a2501e9a162d26466fa08f1c9e72c1525f3173253d859b99301a50c199770dee69793ad19084434cd7be7a83694b82c38efc7a589bfa77505a405a38da402792f7e67abe0b5ccb97fdae2da994d88abb0e73890e21fe820d828deb8d9b768a64bf1f2be9c544567dd671ff6b6d9b29093cd9b806dff42035166ade9a675d4128a55b655dbc12202fbb7677c1fc9bfbd3ec6baf15cf529e321e70ff06f02a5c21b7750c8bb3d32acd9860636f475a413898234b16794f053a9f9131a88a999b0597030aa8c3e5da4d963d", @ANYRESOCT=r3, @ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000080)="682f69fd880241b12ddec25875774d3baf4d28496fc8658b1485a316f942f42ae41d2383c4e915a99b24b8762f5312ba90167285f5d70d6b2570fef4e03d76524ea24ce8ce2e6b138a15c1cb36e3b6580e09b52e7fdb361431eaff0e02fc34b9e86c98ed04a9bf59dc2c14477bf34bc244da55b7b71e4af3484a39db382ac443281ea2bccb701cb4089e5a5a02b8d0496f68300550a279d4bb68adbeac", 0x9d}, {&(0x7f0000000140)="8bbeee4000e40add3c14479d2f8432c86b8bb0d47d84e40ba64d22b78b795844695427d3c7c57f011ea42b5c7a95ea9db36f99858685ae4251f245029be0b1fde1aaed7896849f61e68ed1b005d285aa", 0x50}, {&(0x7f00000001c0)="9d1b976b585225e698d08ce3e6d5f75fcf3841991258b1cf3ccf1db58958854c548bbcf4f9d00e53061a78d4c9e3001448959530402cc958e6cc5ba4f3dd8c9980f96bff4fcac8bcc1ff11c74192c000002d050a1a052081050924f76dd8bca2fe69ff4868dd8674cb5b5f3b471717e9aabbf519", 0x74}, {&(0x7f0000000280)="4e34ef2697a2d5a7fd65648df7eb7cf75d399dbe07fd9f97a85cca61127ce486095036c133f81e00e6a684ad311f41968c99016ee1ad64973335a90dd987179d5d56b4b8cd0d2275fcd3f91afe9049e67a84a867f56025d17e5ce17bab3f4f36a38c5ac29600cb5e0b3d51d6f085bd9c3bc639e36a9669de0944debb6e4de953a1b26054de743f367533bcfe8428d7514cdb64f45cfcb88c3825b6d3e3c925bef067dd807b06f26ab9d2a6d22fd6dc065d7a1a76aba58ec55977d61c978a25befe67d7384f85bd74", 0xc8}], 0x4) r4 = syz_open_procfs(0x0, 0x0) renameat(r4, &(0x7f0000000140)='./cgroup\x00', r4, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) splice(r0, 0x0, r2, 0x0, 0xc0003, 0x4) syz_open_dev$floppy(&(0x7f0000000000), 0x1, 0x2) 08:02:50 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/260, 0x104}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f00002e6000/0x1000)=nil, 0x1000, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f000005b000/0x400000)=nil, 0x400000, 0x14) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca247cef17ec867b4491"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x2, 0x6, 0x1, 0xfffc}, 'syz1\x00', 0x45}) r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x16200, 0x0) ioctl$FLOPPY_FDDEFPRM(r2, 0x301, &(0x7f0000000040)={0x0, 0x401, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2156.921481][T13101] a1 90 4295141312 [ 2156.927447][T13101] 1e 90 4295141312 [ 2156.941660][T13101] 7 80 4295141312 [ 2156.947455][T13101] 1 90 4295141312 [ 2156.963364][T13101] 8 80 4295141312 [ 2156.977285][T13101] 4 80 4295141312 [ 2156.992293][T13101] 1 90 4295141312 [ 2156.997439][T13101] last result at 4295141492 [ 2157.007096][T13101] last redo_fd_request at 4295152513 [ 2157.034509][T13101] status=80 [ 2157.044687][T13101] fdc_busy=1 [ 2157.050305][T13101] floppy_work.func=floppy_work_workfn [ 2157.068803][T13101] cont=ffffffff8a1f4920 [ 2157.078424][T13101] current_req=0000000000000000 [ 2157.084707][T13101] command_status=-1 [ 2157.092542][T13101] [ 2157.095378][T13101] floppy1: floppy timeout called [ 2157.118550][ T3758] [ 2157.121979][ T3758] floppy driver state [ 2157.128196][ T3758] ------------------- [ 2157.134410][ T3758] now=4295152558 last interrupt=4295141312 diff=11246 last called handler=recal_interrupt [ 2157.149638][ T3758] timeout_message=lock fdc [ 2157.156984][ T3758] last output bytes: [ 2157.163488][ T3758] 0 90 4295139496 [ 2157.171493][ T3758] 1 90 4295139496 [ 2157.184412][ T3758] 2 90 4295139496 [ 2157.192601][ T3758] 24 90 4295139496 [ 2157.207581][ T3758] 1b 90 4295139496 [ 2157.212582][ T3758] ff 90 4295139496 [ 2157.243175][ T3758] 12 80 4295141312 [ 2157.247774][ T3758] 3 90 4295141312 [ 2157.253113][ T3758] 13 80 4295141312 [ 2157.257112][ T3758] 0 90 4295141312 [ 2157.262539][ T3758] 1a 90 4295141312 [ 2157.268690][ T3758] 0 90 4295141312 [ 2157.273321][ T3758] 3 80 4295141312 [ 2157.280696][ T3758] a1 90 4295141312 [ 2157.292033][ T3758] 1e 90 4295141312 [ 2157.299660][ T3758] 7 80 4295141312 [ 2157.312743][ T3758] 1 90 4295141312 [ 2157.318700][ T3758] 8 80 4295141312 [ 2157.324687][ T3758] 4 80 4295141312 [ 2157.330641][ T3758] 1 90 4295141312 [ 2157.336774][ T3758] last result at 4295141492 [ 2157.344500][ T3758] last redo_fd_request at 4295152557 [ 2157.353112][ T3758] status=80 [ 2157.359121][ T3758] fdc_busy=1 [ 2157.364225][ T3758] floppy_work.func=floppy_work_workfn [ 2157.375527][ T3758] cont=ffffffff8a1f4920 [ 2157.383140][ T3758] current_req=0000000000000000 [ 2157.396056][ T3758] command_status=-1 08:02:50 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/260, 0x104}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f00002e6000/0x1000)=nil, 0x1000, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f000005b000/0x400000)=nil, 0x400000, 0x14) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca247cef17ec867b4491"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x2, 0x6, 0x1, 0xfffc}, 'syz1\x00', 0x45}) r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x16200, 0x0) ioctl$FLOPPY_FDDEFPRM(r2, 0x301, &(0x7f0000000040)={0x0, 0x401, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2157.406758][ T3758] [ 2157.411610][ T3758] floppy1: floppy timeout called [ 2157.437121][ T3758] [ 2157.442066][ T3758] floppy driver state [ 2157.471095][ T3758] ------------------- [ 2157.482615][ T3758] now=4295152593 last interrupt=4295141312 diff=11281 last called handler=recal_interrupt [ 2157.502771][ T3758] timeout_message=lock fdc [ 2157.532319][ T3758] last output bytes: [ 2157.537600][ T3758] 0 90 4295139496 08:02:51 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:51 executing program 3: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000040)={0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40, 0x0}) 08:02:51 executing program 0: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r0 = getpgid(0x0) ioprio_get$pid(0x2, r0) r1 = syz_open_procfs(r0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDDEFPRM(r1, 0x401c0243, &(0x7f0000000040)={0x1, 0xffff, 0x4, 0x4, 0x1000, 0x6, 0x7, 0xfa, 0x1, &(0x7f0000000000)='@\x00'}) 08:02:51 executing program 2: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) renameat(r0, &(0x7f0000000140)='./cgroup\x00', r0, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='\x00*\xe7\xd5`\xf6\x9a\xa7\x1d3{\v\xbd&\x9av\x05\xf7a\xf4\x80\x8b\xb0\xceD{\xcf\xe9\xa6U\x8b6\xa6\x9b\xd8/\xa3\x12\te\xdc\xed\r\xbe\xaf\x12$\xd8t\xeb\xaa5\xddP\x00'/65}) [ 2157.577397][ T3758] 1 90 4295139496 [ 2157.582196][ T3758] 2 90 4295139496 [ 2157.587147][ T3758] 24 90 4295139496 [ 2157.600047][ T3758] 1b 90 4295139496 [ 2157.605330][ T3758] ff 90 4295139496 [ 2157.612426][ T3758] 12 80 4295141312 [ 2157.618331][ T3758] 3 90 4295141312 [ 2157.624931][ T3758] 13 80 4295141312 [ 2157.630791][ T3758] 0 90 4295141312 [ 2157.635990][ T3758] 1a 90 4295141312 [ 2157.648708][ T3758] 0 90 4295141312 [ 2157.656805][ T3758] 3 80 4295141312 [ 2157.662358][ T3758] a1 90 4295141312 [ 2157.667252][ T3758] 1e 90 4295141312 [ 2157.675333][ T3758] 7 80 4295141312 [ 2157.680645][ T3758] 1 90 4295141312 [ 2157.685799][ T3758] 8 80 4295141312 [ 2157.691091][ T3758] 4 80 4295141312 [ 2157.696307][ T3758] 1 90 4295141312 [ 2157.701439][ T3758] last result at 4295141492 [ 2157.707583][ T3758] last redo_fd_request at 4295152587 [ 2157.715729][ T3758] status=80 [ 2157.720670][ T3758] fdc_busy=1 [ 2157.725160][ T3758] floppy_work.func=floppy_work_workfn [ 2157.732779][ T3758] cont=ffffffff8a1f4920 [ 2157.738419][ T3758] current_req=0000000000000000 [ 2157.744983][ T3758] command_status=-1 [ 2157.755071][ T3758] [ 2157.759071][ T3758] floppy1: floppy timeout called [ 2157.767037][T11777] [ 2157.771206][T11777] floppy driver state [ 2157.776416][T11777] ------------------- [ 2157.782060][T11777] now=4295152623 last interrupt=4295141312 diff=11311 last called handler=recal_interrupt [ 2157.795098][T11777] timeout_message=lock fdc [ 2157.803002][T11777] last output bytes: [ 2157.807743][T11777] 0 90 4295139496 [ 2157.812944][T11777] 1 90 4295139496 [ 2157.819748][T11777] 2 90 4295139496 [ 2157.826050][T11777] 24 90 4295139496 [ 2157.830474][T11777] 1b 90 4295139496 [ 2157.834078][T11777] ff 90 4295139496 [ 2157.839564][T11777] 12 80 4295141312 [ 2157.844918][T11777] 3 90 4295141312 [ 2157.851376][T11777] 13 80 4295141312 [ 2157.857299][T11777] 0 90 4295141312 [ 2157.863217][T11777] 1a 90 4295141312 [ 2157.873698][T11777] 0 90 4295141312 [ 2157.879635][T11777] 3 80 4295141312 [ 2157.885140][T11777] a1 90 4295141312 [ 2157.897203][T11777] 1e 90 4295141312 [ 2157.903416][T11777] 7 80 4295141312 [ 2157.909301][T11777] 1 90 4295141312 [ 2157.915024][T11777] 8 80 4295141312 [ 2157.924277][T11777] 4 80 4295141312 [ 2157.933173][T11777] 1 90 4295141312 [ 2157.942788][T11777] last result at 4295141492 [ 2157.949924][T11777] last redo_fd_request at 4295152621 [ 2157.959855][T11777] status=80 [ 2157.966762][T11777] fdc_busy=1 [ 2157.972507][T11777] floppy_work.func=floppy_work_workfn [ 2157.994962][T11777] cont=ffffffff8a1f4920 [ 2158.020104][T11777] current_req=0000000000000000 [ 2158.026981][T11777] command_status=-1 [ 2158.036879][T11777] [ 2158.042880][T11777] floppy1: floppy timeout called [ 2158.053723][T11777] [ 2158.058204][T11777] floppy driver state [ 2158.090628][T11777] ------------------- [ 2158.100383][T11777] now=4295152655 last interrupt=4295141312 diff=11343 last called handler=recal_interrupt [ 2158.119492][T11777] timeout_message=lock fdc [ 2158.127286][T11777] last output bytes: [ 2158.133699][T11777] 0 90 4295139496 [ 2158.138281][T11777] 1 90 4295139496 [ 2158.142887][T11777] 2 90 4295139496 [ 2158.151441][T11777] 24 90 4295139496 [ 2158.160206][T11777] 1b 90 4295139496 [ 2158.167690][T11777] ff 90 4295139496 [ 2158.173239][T11777] 12 80 4295141312 [ 2158.180088][T11777] 3 90 4295141312 [ 2158.186163][T11777] 13 80 4295141312 [ 2158.192085][T11777] 0 90 4295141312 [ 2158.199369][T11777] 1a 90 4295141312 [ 2158.205085][T11777] 0 90 4295141312 [ 2158.215256][T11777] 3 80 4295141312 [ 2158.225571][T11777] a1 90 4295141312 [ 2158.240006][T11777] 1e 90 4295141312 [ 2158.246094][T11777] 7 80 4295141312 [ 2158.252023][T11777] 1 90 4295141312 [ 2158.256189][T11777] 8 80 4295141312 [ 2158.268163][T11777] 4 80 4295141312 [ 2158.278367][T11777] 1 90 4295141312 [ 2158.283516][T11777] last result at 4295141492 [ 2158.291260][T11777] last redo_fd_request at 4295152650 [ 2158.299749][T11777] status=80 [ 2158.303986][T11777] fdc_busy=1 [ 2158.308421][T11777] floppy_work.func=floppy_work_workfn [ 2158.331872][T11777] cont=ffffffff8a1f4920 [ 2158.340302][T11777] current_req=0000000000000000 [ 2158.349488][T11777] command_status=-1 [ 2158.356544][T11777] [ 2158.362628][T11777] floppy1: floppy timeout called [ 2158.402691][ T3758] [ 2158.405649][ T3758] floppy driver state [ 2158.410794][ T3758] ------------------- [ 2158.415714][ T3758] now=4295152685 last interrupt=4295141312 diff=11373 last called handler=recal_interrupt [ 2158.437481][ T3758] timeout_message=lock fdc [ 2158.445473][ T3758] last output bytes: [ 2158.466326][ T3758] 0 90 4295139496 [ 2158.479806][ T3758] 1 90 4295139496 [ 2158.486119][ T3758] 2 90 4295139496 [ 2158.494321][ T3758] 24 90 4295139496 [ 2158.501479][ T3758] 1b 90 4295139496 [ 2158.509186][ T3758] ff 90 4295139496 [ 2158.522525][ T3758] 12 80 4295141312 [ 2158.527689][ T3758] 3 90 4295141312 [ 2158.532393][ T3758] 13 80 4295141312 [ 2158.537374][ T3758] 0 90 4295141312 [ 2158.543775][ T3758] 1a 90 4295141312 [ 2158.553262][ T3758] 0 90 4295141312 [ 2158.558100][ T3758] 3 80 4295141312 [ 2158.563952][ T3758] a1 90 4295141312 [ 2158.568971][ T3758] 1e 90 4295141312 [ 2158.577455][ T3758] 7 80 4295141312 [ 2158.582683][ T3758] 1 90 4295141312 [ 2158.593155][ T3758] 8 80 4295141312 [ 2158.599167][ T3758] 4 80 4295141312 [ 2158.604642][ T3758] 1 90 4295141312 [ 2158.609810][ T3758] last result at 4295141492 [ 2158.624264][ T3758] last redo_fd_request at 4295152682 [ 2158.644191][ T3758] status=80 [ 2158.657639][ T3758] fdc_busy=1 [ 2158.662286][ T3758] floppy_work.func=floppy_work_workfn [ 2158.671072][ T3758] cont=ffffffff8a1f4920 [ 2158.678192][ T3758] current_req=0000000000000000 [ 2158.684394][ T3758] command_status=-1 [ 2158.689673][ T3758] [ 2158.693993][ T3758] floppy1: floppy timeout called [ 2158.719084][T11777] [ 2158.734488][T11777] floppy driver state [ 2158.740631][T11777] ------------------- [ 2158.766071][T11777] now=4295152721 last interrupt=4295141312 diff=11409 last called handler=recal_interrupt [ 2158.787374][T11777] timeout_message=lock fdc [ 2158.793845][T11777] last output bytes: [ 2158.799255][T11777] 0 90 4295139496 [ 2158.806678][T11777] 1 90 4295139496 [ 2158.813179][T11777] 2 90 4295139496 [ 2158.819103][T11777] 24 90 4295139496 [ 2158.824943][T11777] 1b 90 4295139496 [ 2158.834394][T11777] ff 90 4295139496 [ 2158.846004][T11777] 12 80 4295141312 [ 2158.861476][T11777] 3 90 4295141312 [ 2158.868105][T11777] 13 80 4295141312 [ 2158.872984][T11777] 0 90 4295141312 [ 2158.879610][T11777] 1a 90 4295141312 [ 2158.897310][T11777] 0 90 4295141312 [ 2158.909921][T11777] 3 80 4295141312 [ 2158.914443][T11777] a1 90 4295141312 [ 2158.923769][T11777] 1e 90 4295141312 [ 2158.928611][T11777] 7 80 4295141312 [ 2158.933594][T11777] 1 90 4295141312 [ 2158.938616][T11777] 8 80 4295141312 [ 2158.943878][T11777] 4 80 4295141312 [ 2158.948882][T11777] 1 90 4295141312 [ 2158.955739][T11777] last result at 4295141492 [ 2158.967626][T11777] last redo_fd_request at 4295152715 [ 2158.975856][T11777] status=80 [ 2158.981306][T11777] fdc_busy=1 [ 2158.987483][T11777] floppy_work.func=floppy_work_workfn [ 2158.995203][T11777] cont=ffffffff8a1f4920 [ 2159.001147][T11777] current_req=0000000000000000 [ 2159.009178][T11777] command_status=-1 [ 2159.018941][T11777] [ 2159.023830][T11777] floppy1: floppy timeout called [ 2159.050588][T11777] [ 2159.084768][T11777] floppy driver state [ 2159.091000][T11777] ------------------- [ 2159.102743][T11777] now=4295152755 last interrupt=4295141312 diff=11443 last called handler=recal_interrupt [ 2159.141041][T11777] timeout_message=lock fdc [ 2159.173084][T11777] last output bytes: [ 2159.192072][T11777] 0 90 4295139496 08:02:52 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x18, 0x14, 0x10, 0x70bd2a, 0x25dfdbfc, {0x2, 0x80, 0x44}}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x810) syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x200) 08:02:52 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:52 executing program 0: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r0 = getpgid(0x0) ioprio_get$pid(0x2, r0) r1 = syz_open_procfs(r0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDDEFPRM(r1, 0x401c0243, &(0x7f0000000040)={0x1, 0xffff, 0x4, 0x4, 0x1000, 0x6, 0x7, 0xfa, 0x1, &(0x7f0000000000)='@\x00'}) [ 2159.225205][T11777] 1 90 4295139496 08:02:52 executing program 3: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$null(0xffffff9c, &(0x7f0000000000), 0x2cc100, 0x0) ioctl$FLOPPY_FDDEFPRM(0xffffffffffffffff, 0x401c0243, &(0x7f0000000140)={0x3, 0x8, 0xf4, 0x80, 0x2, 0x8, 0x4, 0x1f, 0x1, &(0x7f0000000100)='/dev/fd#\x00'}) ioctl$FLOPPY_FDSETDRVPRM(r1, 0x40580290, &(0x7f0000000080)={0xef, 0x4, 0x0, 0xf667, 0x8, 0x3, 0x4, 0x6, 0x5, 0x2, 0x7f, 0x15, 0x0, {0x80000001, 0x100, 0x20, 0x7, 0x7}, 0x80, 0x3, [0x7, 0xbbf2, 0x1aaa, 0x4, 0xb599, 0x1f, 0x0, 0x2], 0x3}) [ 2159.234033][T11777] 2 90 4295139496 [ 2159.240614][T11777] 24 90 4295139496 [ 2159.245386][T11777] 1b 90 4295139496 [ 2159.252945][T11777] ff 90 4295139496 [ 2159.258109][T11777] 12 80 4295141312 [ 2159.262408][T11777] 3 90 4295141312 [ 2159.268212][T11777] 13 80 4295141312 [ 2159.273325][T11777] 0 90 4295141312 [ 2159.279413][T11777] 1a 90 4295141312 [ 2159.284502][T11777] 0 90 4295141312 [ 2159.289484][T11777] 3 80 4295141312 [ 2159.294966][T11777] a1 90 4295141312 [ 2159.302767][T11777] 1e 90 4295141312 [ 2159.309407][T11777] 7 80 4295141312 [ 2159.315420][T11777] 1 90 4295141312 [ 2159.320473][T11777] 8 80 4295141312 [ 2159.332195][T11777] 4 80 4295141312 [ 2159.337484][T11777] 1 90 4295141312 [ 2159.342405][T11777] last result at 4295141492 [ 2159.347537][T11777] last redo_fd_request at 4295152748 [ 2159.356403][T11777] status=80 [ 2159.362123][T11777] fdc_busy=1 [ 2159.367282][T11777] floppy_work.func=floppy_work_workfn [ 2159.376374][T11777] cont=ffffffff8a1f4920 [ 2159.381477][T11777] current_req=0000000000000000 [ 2159.402999][T11777] command_status=-1 [ 2159.408688][T11777] [ 2159.417179][T11777] floppy1: floppy timeout called [ 2159.424691][ T3758] [ 2159.427699][ T3758] floppy driver state [ 2159.434782][ T3758] ------------------- [ 2159.445300][ T3758] now=4295152789 last interrupt=4295141312 diff=11477 last called handler=recal_interrupt [ 2159.465741][ T3758] timeout_message=lock fdc [ 2159.473629][ T3758] last output bytes: [ 2159.486814][ T3758] 0 90 4295139496 [ 2159.492941][ T3758] 1 90 4295139496 [ 2159.504120][ T3758] 2 90 4295139496 [ 2159.509733][ T3758] 24 90 4295139496 [ 2159.516498][ T3758] 1b 90 4295139496 [ 2159.532913][ T3758] ff 90 4295139496 [ 2159.540857][ T3758] 12 80 4295141312 [ 2159.553214][ T3758] 3 90 4295141312 [ 2159.560346][ T3758] 13 80 4295141312 [ 2159.565598][ T3758] 0 90 4295141312 [ 2159.575102][ T3758] 1a 90 4295141312 [ 2159.600522][ T3758] 0 90 4295141312 [ 2159.605604][ T3758] 3 80 4295141312 [ 2159.614733][ T3758] a1 90 4295141312 [ 2159.622528][ T3758] 1e 90 4295141312 [ 2159.633257][ T3758] 7 80 4295141312 [ 2159.639892][ T3758] 1 90 4295141312 [ 2159.647675][ T3758] 8 80 4295141312 [ 2159.652562][ T3758] 4 80 4295141312 [ 2159.657195][ T3758] 1 90 4295141312 [ 2159.663306][ T3758] last result at 4295141492 [ 2159.671811][ T3758] last redo_fd_request at 4295152787 [ 2159.683597][ T3758] status=80 [ 2159.698486][ T3758] fdc_busy=1 [ 2159.702569][ T3758] floppy_work.func=floppy_work_workfn [ 2159.714721][ T3758] cont=ffffffff8a1f4920 [ 2159.724849][ T3758] current_req=0000000000000000 [ 2159.741266][ T3758] command_status=-1 [ 2159.745623][ T3758] [ 2159.750097][ T3758] floppy1: floppy timeout called [ 2159.775759][ T3758] [ 2159.792237][ T3758] floppy driver state [ 2159.797345][ T3758] ------------------- [ 2159.805501][ T3758] now=4295152825 last interrupt=4295141312 diff=11513 last called handler=recal_interrupt [ 2159.828838][ T3758] timeout_message=lock fdc [ 2159.834610][ T3758] last output bytes: [ 2159.847093][ T3758] 0 90 4295139496 [ 2159.859827][ T3758] 1 90 4295139496 [ 2159.864629][ T3758] 2 90 4295139496 [ 2159.870188][ T3758] 24 90 4295139496 [ 2159.875202][ T3758] 1b 90 4295139496 [ 2159.881587][ T3758] ff 90 4295139496 [ 2159.887958][ T3758] 12 80 4295141312 [ 2159.893475][ T3758] 3 90 4295141312 [ 2159.900435][ T3758] 13 80 4295141312 [ 2159.905638][ T3758] 0 90 4295141312 [ 2159.911648][ T3758] 1a 90 4295141312 [ 2159.916044][ T3758] 0 90 4295141312 [ 2159.920638][ T3758] 3 80 4295141312 [ 2159.925210][ T3758] a1 90 4295141312 [ 2159.929629][ T3758] 1e 90 4295141312 [ 2159.934109][ T3758] 7 80 4295141312 [ 2159.938201][ T3758] 1 90 4295141312 [ 2159.942341][ T3758] 8 80 4295141312 [ 2159.946874][ T3758] 4 80 4295141312 [ 2159.956897][ T3758] 1 90 4295141312 [ 2159.961250][ T3758] last result at 4295141492 [ 2159.987425][ T3758] last redo_fd_request at 4295152822 [ 2160.007626][ T3758] status=80 [ 2160.015192][ T3758] fdc_busy=1 [ 2160.019925][ T3758] floppy_work.func=floppy_work_workfn [ 2160.035552][ T3758] cont=ffffffff8a1f4920 [ 2160.042223][ T3758] current_req=0000000000000000 [ 2160.050644][ T3758] command_status=-1 [ 2160.068177][ T3758] [ 2160.076660][ T3758] floppy1: floppy timeout called [ 2160.119647][T13101] [ 2160.123308][T13101] floppy driver state [ 2160.140197][T13101] ------------------- [ 2160.147279][T13101] now=4295152859 last interrupt=4295141312 diff=11547 last called handler=recal_interrupt [ 2160.217922][T13101] timeout_message=lock fdc [ 2160.226813][T13101] last output bytes: [ 2160.238006][T13101] 0 90 4295139496 [ 2160.247158][T13101] 1 90 4295139496 [ 2160.276367][T13101] 2 90 4295139496 [ 2160.283530][T13101] 24 90 4295139496 [ 2160.295526][T13101] 1b 90 4295139496 [ 2160.303377][T13101] ff 90 4295139496 [ 2160.312304][T13101] 12 80 4295141312 [ 2160.321583][T13101] 3 90 4295141312 [ 2160.340114][T13101] 13 80 4295141312 [ 2160.356107][T13101] 0 90 4295141312 [ 2160.364801][T13101] 1a 90 4295141312 [ 2160.374909][T13101] 0 90 4295141312 [ 2160.382025][T13101] 3 80 4295141312 [ 2160.390376][T13101] a1 90 4295141312 [ 2160.399906][T13101] 1e 90 4295141312 [ 2160.415425][T13101] 7 80 4295141312 [ 2160.422225][T13101] 1 90 4295141312 [ 2160.430567][T13101] 8 80 4295141312 [ 2160.434829][T13101] 4 80 4295141312 [ 2160.442155][T13101] 1 90 4295141312 [ 2160.449700][T13101] last result at 4295141492 [ 2160.463262][T13101] last redo_fd_request at 4295152854 [ 2160.481659][T13101] status=80 [ 2160.491042][T13101] fdc_busy=1 [ 2160.495472][T13101] floppy_work.func=floppy_work_workfn [ 2160.504291][T13101] cont=ffffffff8a1f4920 [ 2160.519361][T13101] current_req=0000000000000000 [ 2160.526349][T13101] command_status=-1 [ 2160.533804][T13101] [ 2160.537640][T13101] floppy1: floppy timeout called [ 2160.546864][T13101] [ 2160.560749][T13101] floppy driver state [ 2160.568464][T13101] ------------------- [ 2160.591030][T13101] now=4295152904 last interrupt=4295141312 diff=11592 last called handler=recal_interrupt 08:02:54 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:54 executing program 0: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r0 = getpgid(0x0) ioprio_get$pid(0x2, r0) r1 = syz_open_procfs(r0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDDEFPRM(r1, 0x401c0243, &(0x7f0000000040)={0x1, 0xffff, 0x4, 0x4, 0x1000, 0x6, 0x7, 0xfa, 0x1, &(0x7f0000000000)='@\x00'}) 08:02:54 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0x5, 0x44001) [ 2160.637945][T13101] timeout_message=lock fdc [ 2160.658046][T13101] last output bytes: 08:02:54 executing program 3: write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000080)='1', 0x1) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4994}, 0x54) r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDFMTEND(r0, 0x249) socket$netlink(0x10, 0x3, 0x4) ioctl$FLOPPY_FDFMTEND(r0, 0x249) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000005}, 0x800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x4bfd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xd, 0x0, 0x7}, 0x10, 0xffffffffffffffff, r1}, 0x74) preadv(r2, &(0x7f0000001680)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/125, 0x7d}, {&(0x7f0000001440)=""/146, 0x92}, {&(0x7f0000001500)=""/214, 0xd6}, {&(0x7f0000001600)=""/105, 0x69}], 0x5, 0x1, 0xd9) ioctl$FIOCLEX(r1, 0x5451) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000040)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0}) [ 2160.663018][T13101] 0 90 4295139496 [ 2160.674568][T13101] 1 90 4295139496 [ 2160.691662][T13101] 2 90 4295139496 [ 2160.700355][T13101] 24 90 4295139496 [ 2160.706348][T13101] 1b 90 4295139496 [ 2160.711691][T13101] ff 90 4295139496 [ 2160.717429][T13101] 12 80 4295141312 [ 2160.726456][T13101] 3 90 4295141312 08:02:54 executing program 2: r0 = syz_open_procfs(0x0, 0x0) renameat(r0, &(0x7f0000000140)='./cgroup\x00', r0, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) setxattr$incfs_metadata(&(0x7f0000000580)='./cgroup\x00', &(0x7f00000005c0), &(0x7f0000000600)="28366e54c8e067c6450afed13d86872999556b11cc5569afc6122dbd87e7c7a2bde39d984200afb69f987c7961ea919fca9db73ee601749df7b37acdd14fad506d7ead981401fd047aa08b25c459ba1cf85782444956bae5fbb6e77dc329e17d0dd195158e0f92ed40efc84325fd9b8657536080de3d57676825", 0x7a, 0x1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040081}, 0x48000) syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000240)='./cgroup\x00', 0x2, 0x3, &(0x7f0000000400)=[{&(0x7f0000000280)="fa22cc1ff810b23bfe231d234e3b5b14cdc1fa007be798b026f7b509f6c0fe598753353d3114c8e5256268b3d50126970764d7db6b7383120426d40a060299d4c0365d0e8d17334059ecba4335ca9f9a2cc654efa45dcc66fb0a8e93c9f84d28e4c035fa007a6db8a2646a53c13517f379426ff8b46e0d322e55343ae09c9c8ca675abf42f9b194960b74c26da1e0e447d95de5cac2948b3ddb1963bc740465316a5cc35daa0ab2f2571ba615d7372ed6fe075a7108e4ff1c73ff910", 0xbc, 0x8001}, {&(0x7f0000000340)="012b07daa10574ee71c357634c64831a8f", 0x11, 0x800}, {&(0x7f0000000380)="b643da1965930324963f6f0eb45ba9763164acdd60d974716863fbbc69614f36b37eea6b89e0193288cca15ea3d53a3e2a178278c4085cd4690986c6647cb992a1d78eef65b56b81303e5aa45543024d7b5809593c97a15dcb878ca5ed36a768ae", 0x61, 0xfffffff8}], 0x8000, &(0x7f0000000500)={[{'%*&+/^)({{'}, {'/dev/fd#\x00'}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@subj_role={'subj_role', 0x3d, '*+(-'}}, {@fowner_gt={'fowner>', r1}}]}) [ 2160.736217][T13101] 13 80 4295141312 [ 2160.743983][T13101] 0 90 4295141312 [ 2160.751992][T13101] 1a 90 4295141312 [ 2160.758105][T13101] 0 90 4295141312 [ 2160.763549][T13101] 3 80 4295141312 [ 2160.768636][T13101] a1 90 4295141312 [ 2160.773669][T13101] 1e 90 4295141312 [ 2160.781135][T13101] 7 80 4295141312 [ 2160.786192][T13101] 1 90 4295141312 [ 2160.791810][T13101] 8 80 4295141312 [ 2160.806273][T13101] 4 80 4295141312 [ 2160.810906][T13101] 1 90 4295141312 [ 2160.816917][T13101] last result at 4295141492 [ 2160.824709][T13101] last redo_fd_request at 4295152899 [ 2160.831288][T13101] status=80 [ 2160.833978][T20810] loop2: detected capacity change from 0 to 264192 [ 2160.838109][T13101] fdc_busy=1 [ 2160.854826][T13101] floppy_work.func=floppy_work_workfn [ 2160.863313][T13101] cont=ffffffff8a1f4920 [ 2160.870862][T13101] current_req=0000000000000000 [ 2160.878336][T13101] command_status=-1 [ 2160.882962][T13101] [ 2160.886096][T13101] floppy1: floppy timeout called [ 2160.899936][T13101] [ 2160.903452][T13101] floppy driver state [ 2160.911167][T13101] ------------------- [ 2160.918108][T13101] now=4295152937 last interrupt=4295141312 diff=11625 last called handler=recal_interrupt [ 2160.931350][T13101] timeout_message=lock fdc [ 2160.936868][T13101] last output bytes: [ 2160.943336][T13101] 0 90 4295139496 [ 2160.950544][T13101] 1 90 4295139496 [ 2160.957599][T13101] 2 90 4295139496 [ 2160.962852][T13101] 24 90 4295139496 [ 2160.968756][T13101] 1b 90 4295139496 [ 2160.986825][T13101] ff 90 4295139496 [ 2161.004304][T13101] 12 80 4295141312 [ 2161.010839][T13101] 3 90 4295141312 [ 2161.019350][T13101] 13 80 4295141312 [ 2161.026467][T13101] 0 90 4295141312 [ 2161.047150][T13101] 1a 90 4295141312 [ 2161.053381][T13101] 0 90 4295141312 [ 2161.068771][T13101] 3 80 4295141312 [ 2161.073561][T13101] a1 90 4295141312 [ 2161.078348][T13101] 1e 90 4295141312 [ 2161.082032][T13101] 7 80 4295141312 [ 2161.086699][T13101] 1 90 4295141312 [ 2161.093017][T13101] 8 80 4295141312 [ 2161.097309][T13101] 4 80 4295141312 [ 2161.103158][T13101] 1 90 4295141312 [ 2161.107616][T13101] last result at 4295141492 [ 2161.114992][T13101] last redo_fd_request at 4295152935 [ 2161.123284][T13101] status=80 [ 2161.129521][T13101] fdc_busy=1 [ 2161.133091][T13101] floppy_work.func=floppy_work_workfn [ 2161.140045][T13101] cont=ffffffff8a1f4920 [ 2161.145322][T13101] current_req=0000000000000000 [ 2161.154698][T13101] command_status=-1 [ 2161.163311][T13101] [ 2161.166915][T13101] floppy1: floppy timeout called [ 2161.179510][T13101] [ 2161.183788][T13101] floppy driver state [ 2161.190095][T13101] ------------------- [ 2161.195305][T13101] now=4295152964 last interrupt=4295141312 diff=11652 last called handler=recal_interrupt [ 2161.210228][T13101] timeout_message=lock fdc [ 2161.215142][T13101] last output bytes: [ 2161.219189][T13101] 0 90 4295139496 [ 2161.223248][T13101] 1 90 4295139496 [ 2161.228201][T13101] 2 90 4295139496 [ 2161.233730][T13101] 24 90 4295139496 [ 2161.239385][T13101] 1b 90 4295139496 [ 2161.244625][T13101] ff 90 4295139496 [ 2161.249239][T13101] 12 80 4295141312 [ 2161.254458][T13101] 3 90 4295141312 [ 2161.258792][T13101] 13 80 4295141312 [ 2161.263371][T13101] 0 90 4295141312 [ 2161.267424][T13101] 1a 90 4295141312 [ 2161.272171][T13101] 0 90 4295141312 [ 2161.276515][T13101] 3 80 4295141312 [ 2161.281959][T13101] a1 90 4295141312 [ 2161.287165][T13101] 1e 90 4295141312 [ 2161.293054][T13101] 7 80 4295141312 [ 2161.308065][T13101] 1 90 4295141312 [ 2161.313389][T13101] 8 80 4295141312 [ 2161.318394][T13101] 4 80 4295141312 [ 2161.323536][T13101] 1 90 4295141312 [ 2161.328727][T13101] last result at 4295141492 [ 2161.333996][T13101] last redo_fd_request at 4295152963 [ 2161.341314][T13101] status=80 [ 2161.345465][T13101] fdc_busy=1 [ 2161.349979][T13101] floppy_work.func=floppy_work_workfn [ 2161.356445][T13101] cont=ffffffff8a1f4920 [ 2161.362665][T13101] current_req=0000000000000000 [ 2161.369320][T13101] command_status=-1 [ 2161.374878][T13101] [ 2161.378549][T13101] floppy1: floppy timeout called [ 2161.390051][T13101] [ 2161.393295][T13101] floppy driver state [ 2161.399123][T13101] ------------------- [ 2161.404261][T13101] now=4295152985 last interrupt=4295141312 diff=11673 last called handler=recal_interrupt [ 2161.418965][T13101] timeout_message=lock fdc [ 2161.424170][T13101] last output bytes: [ 2161.429350][T13101] 0 90 4295139496 [ 2161.434639][T13101] 1 90 4295139496 [ 2161.439696][T13101] 2 90 4295139496 [ 2161.444646][T13101] 24 90 4295139496 [ 2161.450764][T13101] 1b 90 4295139496 [ 2161.455259][T13101] ff 90 4295139496 [ 2161.463790][T20810] loop2: detected capacity change from 0 to 264192 [ 2161.466669][T13101] 12 80 4295141312 [ 2161.492716][T13101] 3 90 4295141312 [ 2161.499979][T13101] 13 80 4295141312 [ 2161.504590][T13101] 0 90 4295141312 [ 2161.509994][T13101] 1a 90 4295141312 [ 2161.515411][T13101] 0 90 4295141312 [ 2161.521406][T13101] 3 80 4295141312 [ 2161.526643][T13101] a1 90 4295141312 [ 2161.532253][T13101] 1e 90 4295141312 [ 2161.538552][T13101] 7 80 4295141312 [ 2161.552473][T13101] 1 90 4295141312 [ 2161.558641][T13101] 8 80 4295141312 [ 2161.564426][T13101] 4 80 4295141312 [ 2161.572211][T13101] 1 90 4295141312 [ 2161.576769][T13101] last result at 4295141492 08:02:55 executing program 3: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(0xffffffffffffffff, 0x301, &(0x7f0000000040)={0x1, 0x40007, 0x1010000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}) 08:02:55 executing program 0: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r0 = getpgid(0x0) ioprio_get$pid(0x2, r0) r1 = syz_open_procfs(r0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) [ 2161.603553][T13101] last redo_fd_request at 4295152983 [ 2161.610354][T13101] status=80 [ 2161.614338][T13101] fdc_busy=1 [ 2161.618639][T13101] floppy_work.func=floppy_work_workfn [ 2161.624694][T13101] cont=ffffffff8a1f4960 [ 2161.630150][T13101] current_req=0000000000000000 [ 2161.635782][T13101] command_status=-1 [ 2161.640134][T13101] [ 2161.643154][T13101] floppy1: floppy timeout called [ 2161.648247][T13101] floppy.c: no request in request_done [ 2161.654568][T13101] [ 2161.657301][T13101] floppy driver state [ 2161.663249][T13101] ------------------- [ 2161.667683][T13101] now=4295153011 last interrupt=4295141312 diff=11699 last called handler=recal_interrupt [ 2161.677652][T13101] timeout_message=lock fdc [ 2161.683790][T13101] last output bytes: [ 2161.688764][T13101] 0 90 4295139496 [ 2161.693305][T13101] 1 90 4295139496 [ 2161.697596][T13101] 2 90 4295139496 [ 2161.702209][T13101] 24 90 4295139496 [ 2161.706680][T13101] 1b 90 4295139496 [ 2161.711197][T13101] ff 90 4295139496 [ 2161.715745][T13101] 12 80 4295141312 [ 2161.720492][T13101] 3 90 4295141312 [ 2161.725233][T13101] 13 80 4295141312 [ 2161.729785][T13101] 0 90 4295141312 [ 2161.734305][T13101] 1a 90 4295141312 [ 2161.739167][T13101] 0 90 4295141312 [ 2161.743772][T13101] 3 80 4295141312 [ 2161.748367][T13101] a1 90 4295141312 [ 2161.753140][T13101] 1e 90 4295141312 [ 2161.757535][T13101] 7 80 4295141312 [ 2161.762119][T13101] 1 90 4295141312 [ 2161.766047][T13101] 8 80 4295141312 [ 2161.771664][T13101] 4 80 4295141312 [ 2161.776194][T13101] 1 90 4295141312 [ 2161.780916][T13101] last result at 4295141492 [ 2161.786369][T13101] last redo_fd_request at 4295153010 [ 2161.793230][T13101] status=80 [ 2161.797117][T13101] fdc_busy=1 [ 2161.800954][T13101] floppy_work.func=floppy_work_workfn [ 2161.809580][T13101] cont=ffffffff8a1f4920 [ 2161.814450][T13101] current_req=0000000000000000 [ 2161.820461][T13101] command_status=-1 [ 2161.825180][T13101] [ 2161.828168][T13101] floppy1: floppy timeout called [ 2161.835146][T13101] [ 2161.838018][T13101] floppy driver state [ 2161.843386][T13101] ------------------- [ 2161.848614][T13101] now=4295153030 last interrupt=4295141312 diff=11718 last called handler=recal_interrupt [ 2161.860687][T13101] timeout_message=lock fdc [ 2161.865804][T13101] last output bytes: [ 2161.870558][T13101] 0 90 4295139496 [ 2161.874991][T13101] 1 90 4295139496 [ 2161.880608][T13101] 2 90 4295139496 [ 2161.885002][T13101] 24 90 4295139496 [ 2161.890102][T13101] 1b 90 4295139496 [ 2161.894401][T13101] ff 90 4295139496 [ 2161.899303][T13101] 12 80 4295141312 [ 2161.903541][T13101] 3 90 4295141312 [ 2161.908003][T13101] 13 80 4295141312 [ 2161.912812][T13101] 0 90 4295141312 [ 2161.917393][T13101] 1a 90 4295141312 [ 2161.923741][T13101] 0 90 4295141312 [ 2161.928273][T13101] 3 80 4295141312 [ 2161.932385][T13101] a1 90 4295141312 [ 2161.936215][T13101] 1e 90 4295141312 [ 2161.940198][T13101] 7 80 4295141312 [ 2161.944535][T13101] 1 90 4295141312 [ 2161.950765][T13101] 8 80 4295141312 [ 2161.954917][T13101] 4 80 4295141312 [ 2161.960494][T13101] 1 90 4295141312 [ 2161.965559][T13101] last result at 4295141492 [ 2161.971766][T13101] last redo_fd_request at 4295153028 [ 2161.978809][T13101] status=80 [ 2161.982381][T13101] fdc_busy=1 [ 2161.985890][T13101] floppy_work.func=floppy_work_workfn [ 2161.993304][T13101] cont=ffffffff8a1f4920 [ 2161.999321][T13101] current_req=0000000000000000 [ 2162.005919][T13101] command_status=-1 [ 2162.010715][T13101] [ 2162.013661][T13101] floppy1: floppy timeout called [ 2162.036960][T13101] [ 2162.039969][T13101] floppy driver state [ 2162.045203][T13101] ------------------- [ 2162.050123][T13101] now=4295153050 last interrupt=4295141312 diff=11738 last called handler=recal_interrupt [ 2162.062036][T13101] timeout_message=lock fdc [ 2162.067432][T13101] last output bytes: [ 2162.072009][T13101] 0 90 4295139496 [ 2162.075653][T13101] 1 90 4295139496 [ 2162.080254][T13101] 2 90 4295139496 [ 2162.085287][T13101] 24 90 4295139496 [ 2162.090095][T13101] 1b 90 4295139496 [ 2162.094897][T13101] ff 90 4295139496 [ 2162.100566][T13101] 12 80 4295141312 [ 2162.105169][T13101] 3 90 4295141312 [ 2162.109915][T13101] 13 80 4295141312 [ 2162.115079][T13101] 0 90 4295141312 [ 2162.120144][T13101] 1a 90 4295141312 [ 2162.124216][T13101] 0 90 4295141312 [ 2162.129480][T13101] 3 80 4295141312 [ 2162.134258][T13101] a1 90 4295141312 [ 2162.143487][T13101] 1e 90 4295141312 [ 2162.148311][T13101] 7 80 4295141312 [ 2162.152884][T13101] 1 90 4295141312 [ 2162.157668][T13101] 8 80 4295141312 [ 2162.162921][T13101] 4 80 4295141312 [ 2162.168046][T13101] 1 90 4295141312 [ 2162.172483][T13101] last result at 4295141492 [ 2162.177310][T13101] last redo_fd_request at 4295153048 [ 2162.183586][T13101] status=80 [ 2162.187489][T13101] fdc_busy=1 [ 2162.191562][T13101] floppy_work.func=floppy_work_workfn [ 2162.197740][T13101] cont=ffffffff8a1f4920 [ 2162.202951][T13101] current_req=0000000000000000 [ 2162.209188][T13101] command_status=-1 [ 2162.214023][T13101] [ 2162.216995][T13101] floppy1: floppy timeout called [ 2162.223691][T13101] [ 2162.226230][T13101] floppy driver state 08:02:55 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2162.230662][T13101] ------------------- [ 2162.236521][T13101] now=4295153068 last interrupt=4295141312 diff=11756 last called handler=recal_interrupt 08:02:55 executing program 0: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r0 = getpgid(0x0) ioprio_get$pid(0x2, r0) r1 = syz_open_procfs(r0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) [ 2162.275941][T13101] timeout_message=lock fdc [ 2162.282936][T13101] last output bytes: [ 2162.289833][T13101] 0 90 4295139496 [ 2162.310546][T13101] 1 90 4295139496 [ 2162.316912][T13101] 2 90 4295139496 [ 2162.324458][T13101] 24 90 4295139496 [ 2162.336766][T13101] 1b 90 4295139496 [ 2162.343362][T13101] ff 90 4295139496 [ 2162.350274][T13101] 12 80 4295141312 [ 2162.356408][T13101] 3 90 4295141312 08:02:55 executing program 2: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) renameat(r0, &(0x7f0000000140)='./cgroup\x00', r0, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDRAWCMD(r1, 0x258, &(0x7f0000000380)={0x800, &(0x7f0000000400)="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", &(0x7f00000000c0)=0x9d, 0x0, 0x140, 0x0, 0x0, 0x9, 0x21, "4b000000000000000097277f828c08a5", 0x0, '\x00', 0x1}) [ 2162.362185][T13101] 13 80 4295141312 [ 2162.366942][T13101] 0 90 4295141312 [ 2162.372311][T13101] 1a 90 4295141312 [ 2162.383173][T13101] 0 90 4295141312 [ 2162.389036][T13101] 3 80 4295141312 [ 2162.394250][T13101] a1 90 4295141312 [ 2162.399377][T13101] 1e 90 4295141312 [ 2162.405482][T13101] 7 80 4295141312 [ 2162.410956][T13101] 1 90 4295141312 [ 2162.415926][T13101] 8 80 4295141312 [ 2162.421488][T13101] 4 80 4295141312 [ 2162.426441][T13101] 1 90 4295141312 [ 2162.434270][T13101] last result at 4295141492 [ 2162.441331][T13101] last redo_fd_request at 4295153067 [ 2162.456421][T13101] status=80 [ 2162.461860][T13101] fdc_busy=1 [ 2162.467206][T13101] floppy_work.func=floppy_work_workfn [ 2162.476032][T13101] cont=ffffffff8a1f4960 [ 2162.491802][T13101] current_req=0000000000000000 [ 2162.501798][T13101] command_status=-1 [ 2162.506700][T13101] [ 2162.519287][T13101] floppy1: floppy timeout called [ 2162.527637][T13101] floppy.c: no request in request_done [ 2162.554035][T13101] [ 2162.557387][T13101] floppy driver state [ 2162.569193][T13101] ------------------- [ 2162.575855][T13101] now=4295153102 last interrupt=4295141312 diff=11790 last called handler=recal_interrupt [ 2162.589715][T13101] timeout_message=lock fdc [ 2162.596608][T13101] last output bytes: [ 2162.608046][T13101] 0 90 4295139496 [ 2162.613774][T13101] 1 90 4295139496 [ 2162.621970][T13101] 2 90 4295139496 [ 2162.628154][T13101] 24 90 4295139496 [ 2162.632798][T13101] 1b 90 4295139496 [ 2162.644336][T13101] ff 90 4295139496 [ 2162.650598][T13101] 12 80 4295141312 [ 2162.655767][T13101] 3 90 4295141312 [ 2162.666245][T13101] 13 80 4295141312 [ 2162.674578][T13101] 0 90 4295141312 [ 2162.681812][T13101] 1a 90 4295141312 [ 2162.691124][T13101] 0 90 4295141312 [ 2162.695474][T13101] 3 80 4295141312 [ 2162.701721][T13101] a1 90 4295141312 [ 2162.705769][T13101] 1e 90 4295141312 [ 2162.711614][T13101] 7 80 4295141312 [ 2162.716240][T13101] 1 90 4295141312 [ 2162.738886][T13101] 8 80 4295141312 [ 2162.743050][T13101] 4 80 4295141312 [ 2162.747359][T13101] 1 90 4295141312 [ 2162.755439][T13101] last result at 4295141492 [ 2162.785883][T13101] last redo_fd_request at 4295153100 [ 2162.792655][T13101] status=80 [ 2162.796750][T13101] fdc_busy=1 [ 2162.807304][T13101] floppy_work.func=floppy_work_workfn [ 2162.814547][T13101] cont=ffffffff8a1f4920 [ 2162.826344][T13101] current_req=0000000000000000 [ 2162.832026][T13101] command_status=-1 [ 2162.836334][T13101] [ 2162.844929][T13101] floppy1: floppy timeout called [ 2162.868674][T11777] [ 2162.873163][T11777] floppy driver state [ 2162.880940][T11777] ------------------- [ 2162.886586][T11777] now=4295153133 last interrupt=4295141312 diff=11821 last called handler=recal_interrupt [ 2162.899369][T11777] timeout_message=lock fdc [ 2162.904370][T11777] last output bytes: [ 2162.912299][T11777] 0 90 4295139496 [ 2162.919024][T11777] 1 90 4295139496 [ 2162.924623][T11777] 2 90 4295139496 [ 2162.928652][T11777] 24 90 4295139496 [ 2162.933424][T11777] 1b 90 4295139496 [ 2162.937362][T11777] ff 90 4295139496 [ 2162.945764][T11777] 12 80 4295141312 [ 2162.951613][T11777] 3 90 4295141312 [ 2162.957009][T11777] 13 80 4295141312 [ 2162.965821][T11777] 0 90 4295141312 [ 2162.969891][T11777] 1a 90 4295141312 [ 2162.973741][T11777] 0 90 4295141312 [ 2162.977401][T11777] 3 80 4295141312 [ 2162.984217][T11777] a1 90 4295141312 [ 2162.989573][T11777] 1e 90 4295141312 [ 2162.996533][T11777] 7 80 4295141312 [ 2163.001543][T11777] 1 90 4295141312 [ 2163.008905][T11777] 8 80 4295141312 [ 2163.012740][T11777] 4 80 4295141312 [ 2163.017674][T11777] 1 90 4295141312 [ 2163.023929][T11777] last result at 4295141492 [ 2163.030227][T11777] last redo_fd_request at 4295153130 [ 2163.038284][T11777] status=80 [ 2163.043000][T11777] fdc_busy=1 [ 2163.048961][T11777] floppy_work.func=floppy_work_workfn [ 2163.056868][T11777] cont=ffffffff8a1f4920 [ 2163.063139][T11777] current_req=0000000000000000 [ 2163.074590][T11777] command_status=-1 [ 2163.080373][T11777] [ 2163.083181][T11777] floppy1: floppy timeout called [ 2163.099176][T13101] [ 2163.102474][T13101] floppy driver state [ 2163.109214][T13101] ------------------- [ 2163.125401][T13101] now=4295153157 last interrupt=4295141312 diff=11845 last called handler=recal_interrupt [ 2163.139128][T13101] timeout_message=lock fdc [ 2163.145381][T13101] last output bytes: [ 2163.153972][T13101] 0 90 4295139496 [ 2163.160249][T13101] 1 90 4295139496 [ 2163.174886][T13101] 2 90 4295139496 [ 2163.192413][T13101] 24 90 4295139496 [ 2163.197969][T13101] 1b 90 4295139496 [ 2163.202849][T13101] ff 90 4295139496 [ 2163.209835][T13101] 12 80 4295141312 [ 2163.214657][T13101] 3 90 4295141312 [ 2163.219760][T13101] 13 80 4295141312 [ 2163.224814][T13101] 0 90 4295141312 [ 2163.232152][T13101] 1a 90 4295141312 [ 2163.237080][T13101] 0 90 4295141312 [ 2163.242007][T13101] 3 80 4295141312 [ 2163.246518][T13101] a1 90 4295141312 [ 2163.252791][T13101] 1e 90 4295141312 [ 2163.258782][T13101] 7 80 4295141312 [ 2163.265400][T13101] 1 90 4295141312 [ 2163.274443][T13101] 8 80 4295141312 [ 2163.280835][T13101] 4 80 4295141312 [ 2163.287550][T13101] 1 90 4295141312 [ 2163.292777][T13101] last result at 4295141492 [ 2163.304213][T13101] last redo_fd_request at 4295153155 [ 2163.317052][T13101] status=80 [ 2163.323782][T13101] fdc_busy=1 [ 2163.336071][T13101] floppy_work.func=floppy_work_workfn [ 2163.345875][T13101] cont=ffffffff8a1f4920 [ 2163.366452][T13101] current_req=0000000000000000 [ 2163.375031][T13101] command_status=-1 [ 2163.380969][T13101] [ 2163.392129][T13101] floppy1: floppy timeout called [ 2163.496698][T13101] [ 2163.500248][T13101] floppy driver state [ 2163.516888][T13101] ------------------- [ 2163.533284][T13101] now=4295153198 last interrupt=4295141312 diff=11886 last called handler=recal_interrupt [ 2163.588155][T13101] timeout_message=lock fdc [ 2163.604439][T13101] last output bytes: [ 2163.627687][T13101] 0 90 4295139496 [ 2163.681021][T13101] 1 90 4295139496 [ 2163.689609][T13101] 2 90 4295139496 [ 2163.747116][T13101] 24 90 4295139496 [ 2163.755035][T13101] 1b 90 4295139496 [ 2163.766555][T13101] ff 90 4295139496 [ 2163.780164][T13101] 12 80 4295141312 [ 2163.801602][T13101] 3 90 4295141312 [ 2163.817967][T13101] 13 80 4295141312 [ 2163.829626][T13101] 0 90 4295141312 [ 2163.834484][T13101] 1a 90 4295141312 [ 2163.854086][T13101] 0 90 4295141312 [ 2163.877649][T13101] 3 80 4295141312 08:02:57 executing program 0: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r0 = getpgid(0x0) ioprio_get$pid(0x2, r0) r1 = syz_open_procfs(r0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') 08:02:57 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:57 executing program 2: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r0 = getpgid(0xffffffffffffffff) r1 = syz_open_procfs(r0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00', @ANYRESOCT, @ANYRES64], 0x20}, 0x1, 0x0, 0x0, 0x24000800}, 0x800) ioctl$FLOPPY_FDCLRPRM(r1, 0x241) [ 2163.891592][T13101] a1 90 4295141312 [ 2163.898076][T13101] 1e 90 4295141312 [ 2163.903532][T13101] 7 80 4295141312 [ 2163.909731][T13101] 1 90 4295141312 [ 2163.914578][T13101] 8 80 4295141312 [ 2163.919849][T13101] 4 80 4295141312 [ 2163.940823][T13101] 1 90 4295141312 [ 2163.945785][T13101] last result at 4295141492 [ 2163.951430][T13101] last redo_fd_request at 4295153187 [ 2163.957478][T13101] status=80 08:02:57 executing program 3: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FLOPPY_FDGETDRVPRM(r0, 0x80580211, &(0x7f0000000080)) [ 2163.965709][T13101] fdc_busy=1 [ 2163.978546][T13101] floppy_work.func=floppy_work_workfn [ 2164.005430][T13101] cont=ffffffff8a1f4920 [ 2164.012873][T13101] current_req=0000000000000000 [ 2164.022779][T13101] command_status=-1 [ 2164.030626][T13101] [ 2164.034626][T13101] floppy1: floppy timeout called [ 2164.042850][T13101] [ 2164.046683][T13101] floppy driver state [ 2164.057306][T13101] ------------------- [ 2164.063604][T13101] now=4295153251 last interrupt=4295141312 diff=11939 last called handler=recal_interrupt [ 2164.078839][T13101] timeout_message=lock fdc [ 2164.085270][T13101] last output bytes: [ 2164.098102][T13101] 0 90 4295139496 [ 2164.102577][T13101] 1 90 4295139496 [ 2164.107137][T13101] 2 90 4295139496 [ 2164.116824][T13101] 24 90 4295139496 [ 2164.126784][T13101] 1b 90 4295139496 [ 2164.132577][T13101] ff 90 4295139496 [ 2164.138625][T13101] 12 80 4295141312 [ 2164.147616][T13101] 3 90 4295141312 [ 2164.152997][T13101] 13 80 4295141312 [ 2164.162802][T13101] 0 90 4295141312 [ 2164.168350][T13101] 1a 90 4295141312 [ 2164.174106][T13101] 0 90 4295141312 [ 2164.179305][T13101] 3 80 4295141312 [ 2164.190058][T13101] a1 90 4295141312 [ 2164.194832][T13101] 1e 90 4295141312 [ 2164.199616][T13101] 7 80 4295141312 [ 2164.209428][T13101] 1 90 4295141312 [ 2164.213990][T13101] 8 80 4295141312 [ 2164.218465][T13101] 4 80 4295141312 [ 2164.223197][T13101] 1 90 4295141312 [ 2164.227997][T13101] last result at 4295141492 [ 2164.234208][T13101] last redo_fd_request at 4295153249 [ 2164.241977][T13101] status=80 [ 2164.246650][T13101] fdc_busy=1 [ 2164.251564][T13101] floppy_work.func=floppy_work_workfn [ 2164.263856][T13101] cont=ffffffff8a1f4920 [ 2164.271624][T13101] current_req=0000000000000000 [ 2164.297659][T13101] command_status=-1 [ 2164.303309][T13101] [ 2164.307108][T13101] floppy1: floppy timeout called [ 2164.318414][T13101] [ 2164.322155][T13101] floppy driver state [ 2164.328783][T13101] ------------------- [ 2164.335039][T13101] now=4295153278 last interrupt=4295141312 diff=11966 last called handler=recal_interrupt [ 2164.349991][T13101] timeout_message=lock fdc [ 2164.358002][T13101] last output bytes: [ 2164.363451][T13101] 0 90 4295139496 [ 2164.372829][T13101] 1 90 4295139496 [ 2164.378536][T13101] 2 90 4295139496 [ 2164.390577][T13101] 24 90 4295139496 [ 2164.395960][T13101] 1b 90 4295139496 [ 2164.401896][T13101] ff 90 4295139496 [ 2164.408101][T13101] 12 80 4295141312 [ 2164.413152][T13101] 3 90 4295141312 [ 2164.417657][T13101] 13 80 4295141312 [ 2164.423184][T13101] 0 90 4295141312 [ 2164.429082][T13101] 1a 90 4295141312 [ 2164.434954][T13101] 0 90 4295141312 [ 2164.440630][T13101] 3 80 4295141312 [ 2164.445719][T13101] a1 90 4295141312 [ 2164.451295][T13101] 1e 90 4295141312 [ 2164.459078][T13101] 7 80 4295141312 [ 2164.464274][T13101] 1 90 4295141312 [ 2164.469691][T13101] 8 80 4295141312 [ 2164.474672][T13101] 4 80 4295141312 [ 2164.484957][T13101] 1 90 4295141312 [ 2164.490720][T13101] last result at 4295141492 [ 2164.498055][T13101] last redo_fd_request at 4295153276 [ 2164.513088][T13101] status=80 [ 2164.517521][T13101] fdc_busy=1 [ 2164.521918][T13101] floppy_work.func=floppy_work_workfn [ 2164.528159][T13101] cont=ffffffff8a1f4920 [ 2164.533037][T13101] current_req=0000000000000000 [ 2164.539476][T13101] command_status=-1 [ 2164.544731][T13101] [ 2164.548204][T13101] floppy1: floppy timeout called [ 2164.557078][T13101] [ 2164.560354][T13101] floppy driver state [ 2164.565528][T13101] ------------------- [ 2164.578076][T13101] now=4295153303 last interrupt=4295141312 diff=11991 last called handler=recal_interrupt [ 2164.600942][T13101] timeout_message=lock fdc [ 2164.608142][T13101] last output bytes: [ 2164.628150][T13101] 0 90 4295139496 [ 2164.634005][T13101] 1 90 4295139496 [ 2164.639738][T13101] 2 90 4295139496 [ 2164.645765][T13101] 24 90 4295139496 [ 2164.651853][T13101] 1b 90 4295139496 [ 2164.663375][T13101] ff 90 4295139496 [ 2164.668333][T13101] 12 80 4295141312 [ 2164.674657][T13101] 3 90 4295141312 [ 2164.680576][T13101] 13 80 4295141312 [ 2164.686329][T13101] 0 90 4295141312 [ 2164.692646][T13101] 1a 90 4295141312 [ 2164.702041][T13101] 0 90 4295141312 [ 2164.707027][T13101] 3 80 4295141312 [ 2164.724414][T13101] a1 90 4295141312 [ 2164.734428][T13101] 1e 90 4295141312 [ 2164.742573][T13101] 7 80 4295141312 [ 2164.748384][T13101] 1 90 4295141312 [ 2164.756326][T13101] 8 80 4295141312 [ 2164.761760][T13101] 4 80 4295141312 [ 2164.769134][T13101] 1 90 4295141312 [ 2164.778072][T13101] last result at 4295141492 [ 2164.787618][T13101] last redo_fd_request at 4295153300 [ 2164.798099][T13101] status=80 [ 2164.802894][T13101] fdc_busy=1 [ 2164.810626][T13101] floppy_work.func=floppy_work_workfn [ 2164.822513][T13101] cont=ffffffff8a1f4920 [ 2164.830822][T13101] current_req=0000000000000000 [ 2164.838761][T13101] command_status=-1 [ 2164.845949][T13101] [ 2164.851080][T13101] floppy1: floppy timeout called [ 2164.882279][T11777] [ 2164.893581][T11777] floppy driver state [ 2164.914548][T11777] ------------------- [ 2164.919561][T11777] now=4295153337 last interrupt=4295141312 diff=12025 last called handler=recal_interrupt [ 2164.935414][T11777] timeout_message=lock fdc [ 2164.948070][T11777] last output bytes: [ 2164.957109][T11777] 0 90 4295139496 [ 2164.962809][T11777] 1 90 4295139496 [ 2164.974589][T11777] 2 90 4295139496 [ 2164.992509][T11777] 24 90 4295139496 [ 2164.997163][T11777] 1b 90 4295139496 [ 2165.030214][T11777] ff 90 4295139496 [ 2165.035454][T11777] 12 80 4295141312 [ 2165.052587][T11777] 3 90 4295141312 [ 2165.093840][T11777] 13 80 4295141312 [ 2165.099781][T11777] 0 90 4295141312 [ 2165.105844][T11777] 1a 90 4295141312 [ 2165.111274][T11777] 0 90 4295141312 [ 2165.116503][T11777] 3 80 4295141312 [ 2165.122049][T11777] a1 90 4295141312 [ 2165.127352][T11777] 1e 90 4295141312 [ 2165.133882][T11777] 7 80 4295141312 [ 2165.140757][T11777] 1 90 4295141312 [ 2165.146969][T11777] 8 80 4295141312 [ 2165.155311][T11777] 4 80 4295141312 [ 2165.179799][T11777] 1 90 4295141312 [ 2165.197529][T11777] last result at 4295141492 [ 2165.225041][T11777] last redo_fd_request at 4295153332 [ 2165.232882][T11777] status=80 [ 2165.253751][T11777] fdc_busy=1 [ 2165.258723][T11777] floppy_work.func=floppy_work_workfn [ 2165.277187][T11777] cont=ffffffff8a1f4920 [ 2165.297926][T11777] current_req=0000000000000000 [ 2165.304735][T11777] command_status=-1 [ 2165.318535][T11777] [ 2165.324275][T11777] floppy1: floppy timeout called [ 2165.393299][T13101] [ 2165.427236][T13101] floppy driver state [ 2165.449201][T13101] ------------------- [ 2165.456305][T13101] now=4295153390 last interrupt=4295141312 diff=12078 last called handler=recal_interrupt [ 2165.538151][T13101] timeout_message=lock fdc [ 2165.557506][T13101] last output bytes: [ 2165.566026][T13101] 0 90 4295139496 [ 2165.580037][T13101] 1 90 4295139496 [ 2165.585516][T13101] 2 90 4295139496 [ 2165.604476][T13101] 24 90 4295139496 [ 2165.612106][T13101] 1b 90 4295139496 08:02:59 executing program 0: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r0 = getpgid(0x0) ioprio_get$pid(0x2, r0) syz_open_procfs(r0, 0x0) 08:02:59 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:02:59 executing program 2: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) ioctl$FLOPPY_FDPOLLDRVSTAT(r0, 0x80340213, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x1}) [ 2165.620656][T13101] ff 90 4295139496 [ 2165.634752][T13101] 12 80 4295141312 [ 2165.639223][T13101] 3 90 4295141312 [ 2165.650089][T13101] 13 80 4295141312 [ 2165.655411][T13101] 0 90 4295141312 [ 2165.660900][T13101] 1a 90 4295141312 [ 2165.667694][T13101] 0 90 4295141312 [ 2165.672906][T13101] 3 80 4295141312 [ 2165.677545][T13101] a1 90 4295141312 [ 2165.690163][T13101] 1e 90 4295141312 [ 2165.695741][T13101] 7 80 4295141312 [ 2165.703118][T13101] 1 90 4295141312 [ 2165.710902][T13101] 8 80 4295141312 [ 2165.719234][T13101] 4 80 4295141312 [ 2165.725293][T13101] 1 90 4295141312 [ 2165.731783][T13101] last result at 4295141492 [ 2165.740178][T13101] last redo_fd_request at 4295153383 [ 2165.757375][T13101] status=80 [ 2165.769062][T13101] fdc_busy=1 [ 2165.774340][T13101] floppy_work.func=floppy_work_workfn [ 2165.783471][T13101] cont=ffffffff8a1f4920 [ 2165.793929][T13101] current_req=0000000000000000 [ 2165.802514][T13101] command_status=-1 [ 2165.809181][T13101] [ 2165.812962][T13101] floppy1: floppy timeout called [ 2165.831668][T13101] [ 2165.835895][T13101] floppy driver state [ 2165.846850][T13101] ------------------- [ 2165.858128][T13101] now=4295153431 last interrupt=4295141312 diff=12119 last called handler=recal_interrupt [ 2165.870844][T13101] timeout_message=lock fdc [ 2165.885490][T13101] last output bytes: [ 2165.898560][T13101] 0 90 4295139496 [ 2165.903414][T13101] 1 90 4295139496 [ 2165.908244][T13101] 2 90 4295139496 [ 2165.931268][T13101] 24 90 4295139496 [ 2165.938533][T13101] 1b 90 4295139496 [ 2165.944616][T13101] ff 90 4295139496 [ 2165.951376][T13101] 12 80 4295141312 [ 2165.958918][T13101] 3 90 4295141312 [ 2165.964411][T13101] 13 80 4295141312 [ 2165.971591][T13101] 0 90 4295141312 [ 2165.978543][T13101] 1a 90 4295141312 [ 2165.985133][T13101] 0 90 4295141312 [ 2165.990646][T13101] 3 80 4295141312 [ 2165.997334][T13101] a1 90 4295141312 [ 2166.002545][T13101] 1e 90 4295141312 [ 2166.007536][T13101] 7 80 4295141312 [ 2166.013703][T13101] 1 90 4295141312 [ 2166.019497][T13101] 8 80 4295141312 [ 2166.024867][T13101] 4 80 4295141312 [ 2166.030035][T13101] 1 90 4295141312 [ 2166.038075][T13101] last result at 4295141492 [ 2166.045397][T13101] last redo_fd_request at 4295153428 [ 2166.054012][T13101] status=80 [ 2166.059127][T13101] fdc_busy=1 [ 2166.063106][T13101] floppy_work.func=floppy_work_workfn [ 2166.069323][T13101] cont=ffffffff8a1f4920 [ 2166.074199][T13101] current_req=0000000000000000 [ 2166.088338][T13101] command_status=-1 [ 2166.094135][T13101] [ 2166.097368][T13101] floppy1: floppy timeout called [ 2166.138469][T13101] [ 2166.143271][T13101] floppy driver state [ 2166.149827][T13101] ------------------- [ 2166.155157][T13101] now=4295153460 last interrupt=4295141312 diff=12148 last called handler=recal_interrupt [ 2166.170104][T13101] timeout_message=lock fdc [ 2166.175390][T13101] last output bytes: [ 2166.179947][T13101] 0 90 4295139496 [ 2166.187151][T13101] 1 90 4295139496 [ 2166.193135][T13101] 2 90 4295139496 [ 2166.197400][T13101] 24 90 4295139496 [ 2166.202465][T13101] 1b 90 4295139496 [ 2166.208122][T13101] ff 90 4295139496 [ 2166.238065][T13101] 12 80 4295141312 [ 2166.243265][T13101] 3 90 4295141312 [ 2166.263533][T13101] 13 80 4295141312 [ 2166.268708][T13101] 0 90 4295141312 [ 2166.273829][T13101] 1a 90 4295141312 [ 2166.278549][T13101] 0 90 4295141312 [ 2166.282950][T13101] 3 80 4295141312 [ 2166.287670][T13101] a1 90 4295141312 [ 2166.293224][T13101] 1e 90 4295141312 [ 2166.317985][T13101] 7 80 4295141312 [ 2166.323642][T13101] 1 90 4295141312 [ 2166.350916][T13101] 8 80 4295141312 [ 2166.376668][T13101] 4 80 4295141312 [ 2166.383583][T13101] 1 90 4295141312 [ 2166.407927][T13101] last result at 4295141492 [ 2166.417097][T13101] last redo_fd_request at 4295153458 [ 2166.428120][T13101] status=80 [ 2166.441443][T13101] fdc_busy=1 [ 2166.445909][T13101] floppy_work.func=floppy_work_workfn [ 2166.462270][T13101] cont=ffffffff8a1f4920 [ 2166.478932][T13101] current_req=0000000000000000 [ 2166.488905][T13101] command_status=-1 [ 2166.498343][T13101] [ 2166.520408][T13101] floppy1: floppy timeout called [ 2166.584735][T13101] [ 2166.587588][T13101] floppy driver state [ 2166.595259][T13101] ------------------- [ 2166.601233][T13101] now=4295153505 last interrupt=4295141312 diff=12193 last called handler=recal_interrupt [ 2166.620991][T13101] timeout_message=lock fdc 08:03:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, r1, 0x711, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r5 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) r6 = socket$key(0xf, 0x3, 0x2) r7 = syz_open_procfs(0x0, 0x0) renameat(r7, &(0x7f0000000140)='./cgroup\x00', r7, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=@newtclass={0xbc, 0x28, 0x10, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff3}, {0xc5a880a0db548863, 0xfff1}, {0xb, 0x5}}, [@tclass_kind_options=@c_atm={{0x8}, {0x80, 0x2, [@TCA_ATM_HDR={0x7, 0x3, "b59d69"}, @TCA_ATM_FD={0x8, 0x1, r5}, @TCA_ATM_FD={0x8, 0x1, r6}, @TCA_ATM_EXCESS={0x8, 0x4, {0x8, 0xe}}, @TCA_ATM_FD={0x8, 0x1, r7}, @TCA_ATM_EXCESS={0x8, 0x4, {0x9, 0xd}}, @TCA_ATM_HDR={0x34, 0x3, "2e0b83db4c9e3cce1492703fded3dad8599871b3af3bbadcd86577b9b8ec312d5a26c66ff6e58365e7a1fdd86b1bcb91"}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_EXCESS={0x8, 0x4, {0xc, 0xfff2}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xb, 0x2}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xae}}, @TCA_RATE={0x6, 0x5, {0x3f, 0x1}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24000001}, 0x10) r8 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r8, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FLOPPY_FDDEFPRM(r8, 0x401c0243, &(0x7f0000000080)={0x100, 0x200, 0x0, 0x100, 0x1f, 0xe3, 0x1, 0x8, 0x4, &(0x7f0000000000)='/dev/fd#\x00'}) 08:03:00 executing program 0: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r0 = getpgid(0x0) ioprio_get$pid(0x2, r0) 08:03:00 executing program 2: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x70) r2 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x101001, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='mand\x00', 0x0, 0x0) ioctl$FLOPPY_FDFMTEND(r1, 0x249) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f0000000200)={0x100, &(0x7f0000000080)="364182a08794d0fd28d7f7a5c09c2549ff4192b9ee1db5d57d5eb1763fff8c099af3bef743dd05ebd9c9de999d957b492070edef438f7ea216a1ddd990b7f4fe9e3dcefc8b77a95fbb2edae124b0cbe54f4f59d1b0685d30a79b0bb11a667493126ad4987572ff4d58d4c035e373dfb928a987660c9b8a8d7bb985522414e0f96a648d56c218d956e7d09f4f5366054a08799fa470a4c43d2f7f15a671304da7b1b4827bbe2f3ce8de6e518cee3c244dd02379a9d473e12d8b3b475cc6d93f4df4e9ba769dcf597e3f852893f5e5ba071548e3b761f0652822444d0f", &(0x7f0000000180)=0x4, 0x0, 0xdc, 0x0, 0x0, 0x4e, 0x8, "db5ff79035741141e4718f8518cc6b1f", 0x0, '\x00', 0x7}) 08:03:00 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2166.638648][T13101] last output bytes: [ 2166.659107][T13101] 0 90 4295139496 [ 2166.664475][T13101] 1 90 4295139496 [ 2166.669762][T13101] 2 90 4295139496 [ 2166.674233][T13101] 24 90 4295139496 [ 2166.680095][T13101] 1b 90 4295139496 [ 2166.685375][T13101] ff 90 4295139496 [ 2166.690754][T13101] 12 80 4295141312 [ 2166.697332][T13101] 3 90 4295141312 [ 2166.702682][T13101] 13 80 4295141312 [ 2166.707192][T13101] 0 90 4295141312 [ 2166.714176][T13101] 1a 90 4295141312 [ 2166.719748][T13101] 0 90 4295141312 [ 2166.724992][T13101] 3 80 4295141312 [ 2166.730359][T13101] a1 90 4295141312 [ 2166.734235][T13101] 1e 90 4295141312 [ 2166.738981][T13101] 7 80 4295141312 [ 2166.743514][T13101] 1 90 4295141312 [ 2166.747507][T13101] 8 80 4295141312 [ 2166.753183][T13101] 4 80 4295141312 [ 2166.759121][T13101] 1 90 4295141312 [ 2166.773444][T13101] last result at 4295141492 [ 2166.780660][T13101] last redo_fd_request at 4295153502 [ 2166.789342][T13101] status=80 [ 2166.794540][T13101] fdc_busy=1 [ 2166.799306][T13101] floppy_work.func=floppy_work_workfn [ 2166.806788][T13101] cont=ffffffff8a1f4920 [ 2166.812975][T13101] current_req=0000000000000000 [ 2166.822022][T13101] command_status=-1 [ 2166.827798][T13101] [ 2166.831544][T13101] floppy1: floppy timeout called [ 2166.839324][T13101] [ 2166.842880][T13101] floppy driver state [ 2166.849764][T13101] ------------------- [ 2166.857262][T13101] now=4295153530 last interrupt=4295141312 diff=12218 last called handler=recal_interrupt [ 2166.874041][T13101] timeout_message=lock fdc [ 2166.881947][T13101] last output bytes: [ 2166.888330][T13101] 0 90 4295139496 [ 2166.895911][T13101] 1 90 4295139496 [ 2166.902038][T13101] 2 90 4295139496 [ 2166.907955][T13101] 24 90 4295139496 [ 2166.913809][T13101] 1b 90 4295139496 [ 2166.921247][T13101] ff 90 4295139496 [ 2166.926034][T13101] 12 80 4295141312 [ 2166.931035][T13101] 3 90 4295141312 [ 2166.936705][T13101] 13 80 4295141312 [ 2166.942800][T13101] 0 90 4295141312 [ 2166.948539][T13101] 1a 90 4295141312 [ 2166.957296][T13101] 0 90 4295141312 [ 2166.963174][T13101] 3 80 4295141312 [ 2166.972437][T13101] a1 90 4295141312 [ 2166.978283][T13101] 1e 90 4295141312 [ 2166.984071][T13101] 7 80 4295141312 [ 2166.990652][T13101] 1 90 4295141312 [ 2166.996311][T13101] 8 80 4295141312 [ 2167.005565][T13101] 4 80 4295141312 [ 2167.010372][T13101] 1 90 4295141312 [ 2167.015265][T13101] last result at 4295141492 [ 2167.021508][T13101] last redo_fd_request at 4295153529 [ 2167.033991][T13101] status=80 [ 2167.039219][T13101] fdc_busy=1 [ 2167.044180][T13101] floppy_work.func=floppy_work_workfn [ 2167.051161][T13101] cont=ffffffff8a1f4920 [ 2167.057295][T13101] current_req=0000000000000000 [ 2167.063635][T13101] command_status=-1 [ 2167.069461][T13101] [ 2167.073540][T13101] floppy1: floppy timeout called [ 2167.083162][T11777] [ 2167.086206][T11777] floppy driver state [ 2167.098186][T11777] ------------------- [ 2167.103436][T11777] now=4295153555 last interrupt=4295141312 diff=12243 last called handler=recal_interrupt [ 2167.118088][T11777] timeout_message=lock fdc [ 2167.126013][T11777] last output bytes: [ 2167.133438][T11777] 0 90 4295139496 [ 2167.140151][T11777] 1 90 4295139496 [ 2167.144940][T11777] 2 90 4295139496 [ 2167.149879][T11777] 24 90 4295139496 [ 2167.155406][T11777] 1b 90 4295139496 [ 2167.161876][T11777] ff 90 4295139496 [ 2167.167005][T11777] 12 80 4295141312 [ 2167.172244][T11777] 3 90 4295141312 [ 2167.176992][T11777] 13 80 4295141312 [ 2167.182760][T11777] 0 90 4295141312 [ 2167.201798][T11777] 1a 90 4295141312 [ 2167.208035][T11777] 0 90 4295141312 [ 2167.217630][T11777] 3 80 4295141312 [ 2167.229952][T11777] a1 90 4295141312 [ 2167.249982][T11777] 1e 90 4295141312 [ 2167.255076][T11777] 7 80 4295141312 [ 2167.262648][T11777] 1 90 4295141312 [ 2167.269035][T11777] 8 80 4295141312 [ 2167.276921][T11777] 4 80 4295141312 [ 2167.282875][T11777] 1 90 4295141312 [ 2167.287764][T11777] last result at 4295141492 [ 2167.300893][T11777] last redo_fd_request at 4295153553 [ 2167.308310][T11777] status=80 [ 2167.312559][T11777] fdc_busy=1 [ 2167.316531][T11777] floppy_work.func=floppy_work_workfn [ 2167.326055][T11777] cont=ffffffff8a1f4920 [ 2167.336135][T11777] current_req=0000000000000000 [ 2167.343488][T11777] command_status=-1 [ 2167.348860][T11777] [ 2167.351972][T11777] floppy1: floppy timeout called [ 2167.374444][T17293] [ 2167.380633][T17293] floppy driver state [ 2167.386324][T17293] ------------------- [ 2167.392742][T17293] now=4295153584 last interrupt=4295141312 diff=12272 last called handler=recal_interrupt [ 2167.424032][T17293] timeout_message=lock fdc [ 2167.430358][T17293] last output bytes: [ 2167.435091][T17293] 0 90 4295139496 [ 2167.442042][T17293] 1 90 4295139496 [ 2167.449119][T17293] 2 90 4295139496 [ 2167.456663][T17293] 24 90 4295139496 [ 2167.466009][T17293] 1b 90 4295139496 [ 2167.475948][T17293] ff 90 4295139496 [ 2167.481230][T17293] 12 80 4295141312 [ 2167.496870][T17293] 3 90 4295141312 [ 2167.502820][T17293] 13 80 4295141312 [ 2167.519370][T17293] 0 90 4295141312 [ 2167.524921][T17293] 1a 90 4295141312 [ 2167.538831][T17293] 0 90 4295141312 [ 2167.544925][T17293] 3 80 4295141312 [ 2167.554105][T17293] a1 90 4295141312 [ 2167.560622][T17293] 1e 90 4295141312 [ 2167.566605][T17293] 7 80 4295141312 [ 2167.573716][T17293] 1 90 4295141312 [ 2167.580988][T17293] 8 80 4295141312 [ 2167.606730][T17293] 4 80 4295141312 [ 2167.618492][T17293] 1 90 4295141312 [ 2167.623695][T17293] last result at 4295141492 [ 2167.641745][T17293] last redo_fd_request at 4295153582 [ 2167.650746][T17293] status=80 [ 2167.655243][T17293] fdc_busy=1 [ 2167.664794][T17293] floppy_work.func=floppy_work_workfn [ 2167.679196][T17293] cont=ffffffff8a1f4920 [ 2167.686769][T17293] current_req=0000000000000000 [ 2167.693832][T17293] command_status=-1 [ 2167.699647][T17293] [ 2167.706630][T17293] floppy1: floppy timeout called [ 2167.747206][T13101] [ 2167.750403][T13101] floppy driver state [ 2167.756076][T13101] ------------------- [ 2167.798270][T13101] now=4295153625 last interrupt=4295141312 diff=12313 last called handler=recal_interrupt [ 2167.843320][T13101] timeout_message=lock fdc [ 2167.856286][T13101] last output bytes: [ 2167.863722][T13101] 0 90 4295139496 [ 2167.867667][T13101] 1 90 4295139496 [ 2167.873199][T13101] 2 90 4295139496 [ 2167.878614][T13101] 24 90 4295139496 [ 2167.884641][T13101] 1b 90 4295139496 [ 2167.891668][T13101] ff 90 4295139496 [ 2167.898279][T13101] 12 80 4295141312 [ 2167.905878][T13101] 3 90 4295141312 [ 2167.914117][T13101] 13 80 4295141312 [ 2167.920329][T13101] 0 90 4295141312 [ 2167.925611][T13101] 1a 90 4295141312 [ 2167.932032][T13101] 0 90 4295141312 [ 2167.939282][T13101] 3 80 4295141312 [ 2167.952837][T13101] a1 90 4295141312 [ 2167.958716][T13101] 1e 90 4295141312 [ 2167.971614][T13101] 7 80 4295141312 [ 2167.978159][T13101] 1 90 4295141312 [ 2167.983992][T13101] 8 80 4295141312 [ 2167.990198][T13101] 4 80 4295141312 [ 2168.001772][T13101] 1 90 4295141312 [ 2168.007762][T13101] last result at 4295141492 [ 2168.019127][T13101] last redo_fd_request at 4295153616 [ 2168.047694][T13101] status=80 [ 2168.053519][T13101] fdc_busy=1 [ 2168.064775][T13101] floppy_work.func=floppy_work_workfn [ 2168.074466][T13101] cont=ffffffff8a1f4920 [ 2168.096643][T13101] current_req=0000000000000000 [ 2168.106134][T13101] command_status=-1 [ 2168.112892][T13101] [ 2168.117244][T13101] floppy1: floppy timeout called [ 2168.130424][T13101] [ 2168.133952][T13101] floppy driver state [ 2168.139085][T13101] ------------------- [ 2168.143795][T13101] now=4295153659 last interrupt=4295141312 diff=12347 last called handler=recal_interrupt [ 2168.155259][T13101] timeout_message=lock fdc [ 2168.161497][T13101] last output bytes: [ 2168.167279][T13101] 0 90 4295139496 [ 2168.177159][T13101] 1 90 4295139496 [ 2168.182435][T13101] 2 90 4295139496 [ 2168.192602][T13101] 24 90 4295139496 [ 2168.197517][T13101] 1b 90 4295139496 [ 2168.203070][T13101] ff 90 4295139496 [ 2168.215571][T13101] 12 80 4295141312 [ 2168.223147][T13101] 3 90 4295141312 [ 2168.230167][T13101] 13 80 4295141312 [ 2168.235710][T13101] 0 90 4295141312 [ 2168.242751][T13101] 1a 90 4295141312 [ 2168.249072][T13101] 0 90 4295141312 [ 2168.260962][T13101] 3 80 4295141312 [ 2168.266659][T13101] a1 90 4295141312 [ 2168.277199][T13101] 1e 90 4295141312 [ 2168.287806][T13101] 7 80 4295141312 [ 2168.293168][T13101] 1 90 4295141312 [ 2168.305565][T13101] 8 80 4295141312 [ 2168.325465][T13101] 4 80 4295141312 [ 2168.336645][T13101] 1 90 4295141312 [ 2168.342256][T13101] last result at 4295141492 08:03:01 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:01 executing program 0: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) getpgid(0x0) 08:03:01 executing program 2: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) renameat(r0, &(0x7f0000000140)='./cgroup\x00', r0, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDDEFPRM(r0, 0x401c0243, &(0x7f0000000040)={0x3, 0x8, 0x80000000, 0xfff, 0xd8, 0x1, 0x9, 0x80, 0x3f, &(0x7f0000000000)='/dev/fd#\x00'}) [ 2168.350145][T13101] last redo_fd_request at 4295153657 [ 2168.368364][T13101] status=80 [ 2168.373080][T13101] fdc_busy=1 [ 2168.377659][T13101] floppy_work.func=floppy_work_workfn [ 2168.386848][T13101] cont=ffffffff8a1f4920 [ 2168.392228][T13101] current_req=0000000000000000 [ 2168.404112][T13101] command_status=-1 [ 2168.409591][T13101] [ 2168.415441][T13101] floppy1: floppy timeout called [ 2168.425341][T13101] [ 2168.428621][T13101] floppy driver state [ 2168.434732][T13101] ------------------- [ 2168.441201][T13101] now=4295153689 last interrupt=4295141312 diff=12377 last called handler=recal_interrupt [ 2168.459991][T13101] timeout_message=lock fdc [ 2168.466800][T13101] last output bytes: [ 2168.476374][T13101] 0 90 4295139496 [ 2168.482318][T13101] 1 90 4295139496 [ 2168.488276][T13101] 2 90 4295139496 [ 2168.492931][T13101] 24 90 4295139496 [ 2168.500074][T13101] 1b 90 4295139496 [ 2168.505571][T13101] ff 90 4295139496 [ 2168.511912][T13101] 12 80 4295141312 [ 2168.517572][T13101] 3 90 4295141312 [ 2168.523640][T13101] 13 80 4295141312 [ 2168.529331][T13101] 0 90 4295141312 [ 2168.536266][T13101] 1a 90 4295141312 [ 2168.545991][T13101] 0 90 4295141312 [ 2168.553406][T13101] 3 80 4295141312 [ 2168.562176][T13101] a1 90 4295141312 [ 2168.569234][T13101] 1e 90 4295141312 [ 2168.574634][T13101] 7 80 4295141312 [ 2168.581037][T13101] 1 90 4295141312 [ 2168.591318][T13101] 8 80 4295141312 [ 2168.598731][T13101] 4 80 4295141312 [ 2168.604140][T13101] 1 90 4295141312 [ 2168.611876][T13101] last result at 4295141492 [ 2168.620579][T13101] last redo_fd_request at 4295153687 [ 2168.629521][T13101] status=80 [ 2168.633789][T13101] fdc_busy=1 [ 2168.638712][T13101] floppy_work.func=floppy_work_workfn [ 2168.646905][T13101] cont=ffffffff8a1f4920 [ 2168.654464][T13101] current_req=0000000000000000 [ 2168.662773][T13101] command_status=-1 [ 2168.675768][T13101] [ 2168.681885][T13101] floppy1: floppy timeout called [ 2168.690019][T13101] [ 2168.694243][T13101] floppy driver state [ 2168.700766][T13101] ------------------- [ 2168.709054][T13101] now=4295153716 last interrupt=4295141312 diff=12404 last called handler=recal_interrupt [ 2168.724196][T13101] timeout_message=lock fdc [ 2168.743652][T13101] last output bytes: [ 2168.749297][T13101] 0 90 4295139496 [ 2168.755122][T13101] 1 90 4295139496 [ 2168.764677][T13101] 2 90 4295139496 [ 2168.770154][T13101] 24 90 4295139496 [ 2168.774989][T13101] 1b 90 4295139496 [ 2168.782045][T13101] ff 90 4295139496 [ 2168.787297][T13101] 12 80 4295141312 [ 2168.792482][T13101] 3 90 4295141312 [ 2168.797084][T13101] 13 80 4295141312 [ 2168.801778][T13101] 0 90 4295141312 [ 2168.807090][T13101] 1a 90 4295141312 [ 2168.813593][T13101] 0 90 4295141312 [ 2168.819159][T13101] 3 80 4295141312 [ 2168.825186][T13101] a1 90 4295141312 [ 2168.829947][T13101] 1e 90 4295141312 [ 2168.834816][T13101] 7 80 4295141312 [ 2168.844075][T13101] 1 90 4295141312 [ 2168.851049][T13101] 8 80 4295141312 [ 2168.857369][T13101] 4 80 4295141312 [ 2168.867130][T13101] 1 90 4295141312 [ 2168.871966][T13101] last result at 4295141492 [ 2168.879292][T13101] last redo_fd_request at 4295153714 [ 2168.886538][T13101] status=80 [ 2168.897666][T13101] fdc_busy=1 [ 2168.906017][T13101] floppy_work.func=floppy_work_workfn [ 2168.915235][T13101] cont=ffffffff8a1f4920 [ 2168.923566][T13101] current_req=0000000000000000 [ 2168.931590][T13101] command_status=-1 [ 2168.938566][T13101] [ 2168.943948][T13101] floppy1: floppy timeout called [ 2168.973273][T11777] [ 2168.977238][T11777] floppy driver state [ 2168.987456][T11777] ------------------- [ 2168.993261][T11777] now=4295153744 last interrupt=4295141312 diff=12432 last called handler=recal_interrupt [ 2169.038009][T11777] timeout_message=lock fdc [ 2169.044739][T11777] last output bytes: [ 2169.086241][T11777] 0 90 4295139496 [ 2169.102910][T11777] 1 90 4295139496 [ 2169.109720][T11777] 2 90 4295139496 [ 2169.116274][T11777] 24 90 4295139496 [ 2169.133979][T11777] 1b 90 4295139496 [ 2169.146627][T11777] ff 90 4295139496 08:03:02 executing program 0: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) 08:03:02 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:02 executing program 3: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x401, 0x200) ioctl$FLOPPY_FDCLRPRM(r0, 0x241) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FLOPPY_FDGETDRVPRM(r0, 0x80580211, &(0x7f0000000080)) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x1010c2, 0x0) ioctl$FLOPPY_FDDEFPRM(r1, 0x401c0243, &(0x7f0000000140)={0xfce, 0xcb, 0x80000000, 0xffffda30, 0xfffffffa, 0x4, 0x1, 0x80, 0xd2, &(0x7f0000000100)='*\\$/#[#,#\x00'}) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000180)) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') r3 = syz_open_procfs(0x0, 0x0) renameat(r3, &(0x7f0000000140)='./cgroup\x00', r3, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r4 = getuid() setresuid(0xee01, r4, 0x0) fchown(r3, r4, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000200)={0xced2, 0x7, 0x4, 0x5, 0x1, [{0x1, 0x200, 0x100000001, '\x00', 0x1088}]}) [ 2169.158396][T11777] 12 80 4295141312 [ 2169.163085][T11777] 3 90 4295141312 [ 2169.167480][T11777] 13 80 4295141312 [ 2169.179729][T11777] 0 90 4295141312 [ 2169.185389][T11777] 1a 90 4295141312 [ 2169.196061][T11777] 0 90 4295141312 [ 2169.204988][T11777] 3 80 4295141312 [ 2169.216626][T11777] a1 90 4295141312 [ 2169.227134][T11777] 1e 90 4295141312 [ 2169.241565][T11777] 7 80 4295141312 [ 2169.249964][T11777] 1 90 4295141312 [ 2169.256120][T11777] 8 80 4295141312 [ 2169.263938][T11777] 4 80 4295141312 [ 2169.273446][T11777] 1 90 4295141312 [ 2169.281631][T11777] last result at 4295141492 [ 2169.290968][T11777] last redo_fd_request at 4295153741 [ 2169.306515][T11777] status=80 [ 2169.322964][T11777] fdc_busy=1 [ 2169.329120][T11777] floppy_work.func=floppy_work_workfn [ 2169.338482][T11777] cont=ffffffff8a1f4920 [ 2169.345658][T11777] current_req=0000000000000000 [ 2169.351870][T11777] command_status=-1 [ 2169.357172][T11777] [ 2169.360912][T11777] floppy1: floppy timeout called [ 2169.369187][T11777] [ 2169.372924][T11777] floppy driver state [ 2169.378739][T11777] ------------------- [ 2169.383718][T11777] now=4295153783 last interrupt=4295141312 diff=12471 last called handler=recal_interrupt [ 2169.398277][T11777] timeout_message=lock fdc [ 2169.403174][T11777] last output bytes: [ 2169.407180][T11777] 0 90 4295139496 [ 2169.414449][T11777] 1 90 4295139496 [ 2169.420864][T11777] 2 90 4295139496 [ 2169.427397][T11777] 24 90 4295139496 [ 2169.435780][T11777] 1b 90 4295139496 [ 2169.442970][T11777] ff 90 4295139496 [ 2169.449107][T11777] 12 80 4295141312 [ 2169.454461][T11777] 3 90 4295141312 [ 2169.467625][T11777] 13 80 4295141312 [ 2169.474161][T11777] 0 90 4295141312 [ 2169.480335][T11777] 1a 90 4295141312 [ 2169.485281][T11777] 0 90 4295141312 [ 2169.495871][T11777] 3 80 4295141312 [ 2169.501848][T11777] a1 90 4295141312 [ 2169.507669][T11777] 1e 90 4295141312 [ 2169.514495][T11777] 7 80 4295141312 [ 2169.519379][T11777] 1 90 4295141312 [ 2169.523886][T11777] 8 80 4295141312 [ 2169.528851][T11777] 4 80 4295141312 [ 2169.535703][T11777] 1 90 4295141312 [ 2169.544306][T11777] last result at 4295141492 [ 2169.553082][T11777] last redo_fd_request at 4295153782 [ 2169.560586][T11777] status=80 [ 2169.565916][T11777] fdc_busy=1 [ 2169.572590][T11777] floppy_work.func=floppy_work_workfn [ 2169.580472][T11777] cont=ffffffff8a1f4920 [ 2169.585610][T11777] current_req=0000000000000000 [ 2169.594200][T11777] command_status=-1 [ 2169.600075][T11777] [ 2169.603547][T11777] floppy1: floppy timeout called [ 2169.612596][T11777] [ 2169.616353][T11777] floppy driver state [ 2169.622316][T11777] ------------------- [ 2169.629890][T11777] now=4295153807 last interrupt=4295141312 diff=12495 last called handler=recal_interrupt [ 2169.644128][T11777] timeout_message=lock fdc [ 2169.652405][T11777] last output bytes: [ 2169.659557][T11777] 0 90 4295139496 [ 2169.664110][T11777] 1 90 4295139496 [ 2169.670904][T11777] 2 90 4295139496 [ 2169.684466][T11777] 24 90 4295139496 [ 2169.689776][T11777] 1b 90 4295139496 [ 2169.694356][T11777] ff 90 4295139496 [ 2169.700988][T11777] 12 80 4295141312 [ 2169.706756][T11777] 3 90 4295141312 [ 2169.714080][T11777] 13 80 4295141312 [ 2169.723049][T11777] 0 90 4295141312 [ 2169.727737][T11777] 1a 90 4295141312 [ 2169.732682][T11777] 0 90 4295141312 [ 2169.737454][T11777] 3 80 4295141312 [ 2169.742739][T11777] a1 90 4295141312 [ 2169.750047][T11777] 1e 90 4295141312 [ 2169.755976][T11777] 7 80 4295141312 [ 2169.766973][T11777] 1 90 4295141312 [ 2169.772991][T11777] 8 80 4295141312 [ 2169.781881][T11777] 4 80 4295141312 [ 2169.790138][T11777] 1 90 4295141312 [ 2169.795881][T11777] last result at 4295141492 [ 2169.821534][T11777] last redo_fd_request at 4295153806 [ 2169.834789][T11777] status=80 [ 2169.841100][T11777] fdc_busy=1 [ 2169.849220][T11777] floppy_work.func=floppy_work_workfn [ 2169.858004][T11777] cont=ffffffff8a1f4920 [ 2169.864597][T11777] current_req=0000000000000000 [ 2169.873700][T11777] command_status=-1 [ 2169.880405][T11777] [ 2169.883788][T11777] floppy1: floppy timeout called [ 2169.905243][T11777] [ 2169.909296][T11777] floppy driver state [ 2169.914478][T11777] ------------------- [ 2169.938015][T11777] now=4295153839 last interrupt=4295141312 diff=12527 last called handler=recal_interrupt [ 2169.957147][T11777] timeout_message=lock fdc [ 2169.965275][T11777] last output bytes: [ 2169.973704][T11777] 0 90 4295139496 [ 2169.989507][T11777] 1 90 4295139496 [ 2169.997156][T11777] 2 90 4295139496 [ 2170.004469][T11777] 24 90 4295139496 [ 2170.010468][T11777] 1b 90 4295139496 [ 2170.017186][T11777] ff 90 4295139496 [ 2170.023855][T11777] 12 80 4295141312 [ 2170.035136][T11777] 3 90 4295141312 [ 2170.041351][T11777] 13 80 4295141312 [ 2170.048808][T11777] 0 90 4295141312 [ 2170.054082][T11777] 1a 90 4295141312 [ 2170.092388][T11777] 0 90 4295141312 [ 2170.103123][T11777] 3 80 4295141312 [ 2170.112682][T11777] a1 90 4295141312 [ 2170.124268][T11777] 1e 90 4295141312 [ 2170.134291][T11777] 7 80 4295141312 [ 2170.156969][T11777] 1 90 4295141312 [ 2170.185284][T11777] 8 80 4295141312 [ 2170.193623][T11777] 4 80 4295141312 [ 2170.205576][T11777] 1 90 4295141312 [ 2170.216498][T11777] last result at 4295141492 [ 2170.224077][T11777] last redo_fd_request at 4295153834 08:03:03 executing program 0: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) 08:03:03 executing program 3: r0 = syz_open_procfs(0x0, 0x0) renameat(r0, &(0x7f0000000140)='./cgroup\x00', r0, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000000200)) r1 = syz_open_dev$floppy(&(0x7f00000001c0), 0x2000001, 0x200) ioctl$FLOPPY_FDDEFPRM(r1, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:03 executing program 2: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) ioctl$FLOPPY_FDDEFPRM(r0, 0x401c0243, &(0x7f00000000c0)={0x400, 0xffff8001, 0xac2, 0x89, 0x6, 0x81, 0x4, 0x7f, 0x3, &(0x7f0000000040)='/dev/fd#\x00'}) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='}*\x00'}) [ 2170.236707][T11777] status=80 [ 2170.242710][T11777] fdc_busy=1 [ 2170.247043][T11777] floppy_work.func=floppy_work_workfn [ 2170.254711][T11777] cont=ffffffff8a1f4920 [ 2170.261760][T11777] current_req=0000000000000000 [ 2170.270946][T11777] command_status=-1 [ 2170.282317][T11777] [ 2170.286231][T11777] floppy1: floppy timeout called [ 2170.294361][T11777] [ 2170.297467][T11777] floppy driver state [ 2170.302746][T11777] ------------------- [ 2170.315424][T11777] now=4295153876 last interrupt=4295141312 diff=12564 last called handler=recal_interrupt [ 2170.336274][T11777] timeout_message=lock fdc [ 2170.345257][T11777] last output bytes: [ 2170.358686][T11777] 0 90 4295139496 [ 2170.362660][T11777] 1 90 4295139496 [ 2170.366351][T11777] 2 90 4295139496 [ 2170.373714][T11777] 24 90 4295139496 [ 2170.379328][T11777] 1b 90 4295139496 [ 2170.384113][T11777] ff 90 4295139496 [ 2170.397036][T11777] 12 80 4295141312 [ 2170.407516][T11777] 3 90 4295141312 [ 2170.435422][T11777] 13 80 4295141312 [ 2170.451327][T11777] 0 90 4295141312 [ 2170.463907][T11777] 1a 90 4295141312 [ 2170.471055][T11777] 0 90 4295141312 [ 2170.476280][T11777] 3 80 4295141312 [ 2170.499369][T11777] a1 90 4295141312 [ 2170.503966][T11777] 1e 90 4295141312 [ 2170.510557][T11777] 7 80 4295141312 [ 2170.515309][T11777] 1 90 4295141312 [ 2170.522295][T11777] 8 80 4295141312 [ 2170.527551][T11777] 4 80 4295141312 [ 2170.536706][T11777] 1 90 4295141312 [ 2170.543720][T11777] last result at 4295141492 [ 2170.551585][T11777] last redo_fd_request at 4295153874 [ 2170.565906][T11777] status=80 [ 2170.577288][T11777] fdc_busy=1 [ 2170.585139][T11777] floppy_work.func=floppy_work_workfn [ 2170.600128][T11777] cont=ffffffff8a1f4920 [ 2170.606897][T11777] current_req=0000000000000000 [ 2170.617029][T11777] command_status=-1 [ 2170.625266][T11777] [ 2170.633502][T11777] floppy1: floppy timeout called [ 2170.653325][T11777] [ 2170.657097][T11777] floppy driver state [ 2170.681861][T11777] ------------------- [ 2170.690567][T11777] now=4295153914 last interrupt=4295141312 diff=12602 last called handler=recal_interrupt [ 2170.709393][T11777] timeout_message=lock fdc [ 2170.715613][T11777] last output bytes: [ 2170.724211][T11777] 0 90 4295139496 [ 2170.730365][T11777] 1 90 4295139496 [ 2170.742058][T11777] 2 90 4295139496 [ 2170.751112][T11777] 24 90 4295139496 [ 2170.756046][T11777] 1b 90 4295139496 [ 2170.762787][T11777] ff 90 4295139496 [ 2170.769608][T11777] 12 80 4295141312 [ 2170.774995][T11777] 3 90 4295141312 [ 2170.781112][T11777] 13 80 4295141312 [ 2170.788502][T11777] 0 90 4295141312 [ 2170.794083][T11777] 1a 90 4295141312 [ 2170.799420][T11777] 0 90 4295141312 [ 2170.804333][T11777] 3 80 4295141312 [ 2170.808722][T11777] a1 90 4295141312 [ 2170.813176][T11777] 1e 90 4295141312 [ 2170.818697][T11777] 7 80 4295141312 [ 2170.823904][T11777] 1 90 4295141312 [ 2170.831932][T11777] 8 80 4295141312 [ 2170.838439][T11777] 4 80 4295141312 [ 2170.846321][T11777] 1 90 4295141312 [ 2170.854914][T11777] last result at 4295141492 [ 2170.860092][T11777] last redo_fd_request at 4295153910 [ 2170.865492][T11777] status=80 [ 2170.870105][T11777] fdc_busy=1 [ 2170.874722][T11777] floppy_work.func=floppy_work_workfn [ 2170.885688][T11777] cont=ffffffff8a1f4920 [ 2170.892699][T11777] current_req=0000000000000000 [ 2170.906607][T11777] command_status=-1 [ 2170.915733][T11777] [ 2170.928589][T11777] floppy1: floppy timeout called [ 2170.952286][T11777] [ 2170.959127][T11777] floppy driver state [ 2170.964845][T11777] ------------------- [ 2170.983924][T11777] now=4295153943 last interrupt=4295141312 diff=12631 last called handler=recal_interrupt [ 2170.997425][T11777] timeout_message=lock fdc [ 2171.006962][T11777] last output bytes: [ 2171.014165][T11777] 0 90 4295139496 [ 2171.021084][T11777] 1 90 4295139496 [ 2171.027033][T11777] 2 90 4295139496 [ 2171.033286][T11777] 24 90 4295139496 [ 2171.039467][T11777] 1b 90 4295139496 [ 2171.046065][T11777] ff 90 4295139496 [ 2171.052439][T11777] 12 80 4295141312 [ 2171.059599][T11777] 3 90 4295141312 [ 2171.066095][T11777] 13 80 4295141312 [ 2171.072525][T11777] 0 90 4295141312 [ 2171.077700][T11777] 1a 90 4295141312 [ 2171.083232][T11777] 0 90 4295141312 [ 2171.092683][T11777] 3 80 4295141312 [ 2171.099400][T11777] a1 90 4295141312 [ 2171.104563][T11777] 1e 90 4295141312 [ 2171.109754][T11777] 7 80 4295141312 [ 2171.114832][T11777] 1 90 4295141312 [ 2171.120861][T11777] 8 80 4295141312 [ 2171.126122][T11777] 4 80 4295141312 [ 2171.133925][T11777] 1 90 4295141312 [ 2171.142065][T11777] last result at 4295141492 [ 2171.158345][T11777] last redo_fd_request at 4295153938 [ 2171.165729][T11777] status=80 [ 2171.177373][T11777] fdc_busy=1 [ 2171.183368][T11777] floppy_work.func=floppy_work_workfn [ 2171.197422][T11777] cont=ffffffff8a1f4920 [ 2171.203661][T11777] current_req=0000000000000000 [ 2171.215555][T11777] command_status=-1 [ 2171.221222][T11777] [ 2171.225422][T11777] floppy1: floppy timeout called [ 2171.286249][T11777] [ 2171.304405][T11777] floppy driver state [ 2171.313314][T11777] ------------------- 08:03:04 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:04 executing program 0: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) [ 2171.321832][T11777] now=4295153977 last interrupt=4295141312 diff=12665 last called handler=recal_interrupt [ 2171.337188][T11777] timeout_message=lock fdc [ 2171.346343][T11777] last output bytes: 08:03:04 executing program 3: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDCLRPRM(r0, 0x241) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) r2 = syz_mount_image$hpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffeffff, 0x7, &(0x7f0000000600)=[{&(0x7f0000000100)="695adde160bd4a786b03ca568acde839997d03b01d87e3cc52e6216363572c79e58b32ab5ec7d9cd73f32787b643b2d4e4b05d74085ba4b54aa2bf2f56eee8eb0ea5b6dd0363893db3d4ffdc0af7d54720c4f22b5bfe29c8010026903e06b5cdec95b76627578e3e6a6a3af50f79bbfe990948ea60b365fb85a3ebae1e4d6f76cb", 0x81, 0x2}, {&(0x7f0000000200)="0c689946756bc8", 0x7, 0xcc75}, {&(0x7f0000000240)="48cc5feab096ae693d5c3a2dae8d96d5f3b7212a6c6dfc42758a66752de2fda3a7d5d9184ddb366a64dccbb272a52a823b403ec6571640ab54f4a54e15314f3d8ea9defeb7a031d2bbe7bba1efe9eb74815e9a463e295f0236c8b90f8698e6136cb874aa3b44be266b114e14fd52ed788b831fcc73b27fe66783b20d678c0ceccac656102f46bafae181c360c4119407380318bd0a0fc6e9c6818aa75f10f230a1a495889412ede15bd4943996ad646959d722a3c69b47c154317a694c32b28f4e7979e81ec18dfa12e71f77b0852b0a7eec1b9ba3911b918db6d02601507c384e0a4c0e160c479253980f3d99f83c86caf7c5a2", 0xf4, 0x3f}, {&(0x7f0000000340)="e19158d8108e", 0x6, 0x3}, {&(0x7f0000000380)="eb442c845a2995267a5a41bd494a284ff1d74de2b6da53c16d1320fd1a77df7573892e12783cb326dc1a1701b869a2c5c5aff9d9849783944bdd8589f02430b1b66f7d7b185e2829224a4b9e746da595b56bcad8a86cb055dcd83390cb733459a3f4995f61fb4aaff8f3d25d643cea31a2ea3b2e1923b930aaca80136b39f1ae851e55e20974d14178c684a28a0b64feefecdb04ad9ab6e272e314d4ce124d6a6432a8bec0debaf199568440ea0f4832c51a3ea94eb8051b4f242430f624a2b4eec5e1b8367de6d8476122b73e91ab306e0343036b4c6d", 0xd7, 0x1}, {&(0x7f0000000480)="3cec7eaaf37444a4bf044effe2fbbca4075bf3b4f3e49bfcb521e5ad8e7450e3afe4290f90bab69035e20764199a9d28dfe6d6140c2d8580bad42c2f272d5300b050a67f16b74df1d0633b2911", 0x4d, 0x9}, {&(0x7f0000000500)="84b4b663ead2734b91e37fe8b04ddb10b606411eddf800132b6a2d489b669e5ead5b6f602b8813d2e0fa07b2cadfc363f960ad9c23d27f48452fd341fd9aced0d6970208d024c845cf09c8c818b5e4148f66b15564f7f602e0c0bfbf2d96fd9b50a41f971db03f2f66b57446f31f9fded5c6782ef85129b10d73d704da077aebcb8ed22c972f9cd49b426656219647c26d2b22da3c25e8c3d6a4175da855c25551eea400433de976a8dcb120126e913314d80ba45086a04e57db72e3cfc694debbe6a5e648548ce312cfdc18789b958a61574df4d3d8c4ab", 0xd8, 0x3}], 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="61707072616973655f747970653d696d617369672c0043bee0b78176a7d092ef9bfc1c715236584c59fb717ec3d1c13a815aaf74d9f6bdb561ae35a1e2f1485e192e6cca7aec611fb81f86aacbe307850587a5e2"]) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) ioctl$FLOPPY_FDCLRPRM(r1, 0x241) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x5) syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) [ 2171.356236][T11777] 0 90 4295139496 [ 2171.362443][T11777] 1 90 4295139496 [ 2171.370633][T11777] 2 90 4295139496 [ 2171.375963][T11777] 24 90 4295139496 [ 2171.381838][T11777] 1b 90 4295139496 [ 2171.386710][T11777] ff 90 4295139496 [ 2171.393310][T11777] 12 80 4295141312 [ 2171.399221][T11777] 3 90 4295141312 [ 2171.404774][T11777] 13 80 4295141312 [ 2171.410435][T11777] 0 90 4295141312 [ 2171.415461][T11777] 1a 90 4295141312 [ 2171.421179][T11777] 0 90 4295141312 [ 2171.422231][T20910] loop3: detected capacity change from 0 to 264192 [ 2171.427702][T11777] 3 80 4295141312 [ 2171.455474][T11777] a1 90 4295141312 [ 2171.461304][T11777] 1e 90 4295141312 [ 2171.468235][T11777] 7 80 4295141312 [ 2171.475722][T11777] 1 90 4295141312 [ 2171.482818][T11777] 8 80 4295141312 [ 2171.487238][T20910] hpfs: bad mount options. [ 2171.487529][T11777] 4 80 4295141312 [ 2171.487550][T11777] 1 90 4295141312 [ 2171.487564][T11777] last result at 4295141492 [ 2171.487574][T11777] last redo_fd_request at 4295153972 [ 2171.487631][T11777] status=80 [ 2171.487645][T11777] fdc_busy=1 [ 2171.487655][T11777] floppy_work.func=floppy_work_workfn [ 2171.487683][T11777] cont=ffffffff8a1f4920 [ 2171.561622][T11777] current_req=0000000000000000 [ 2171.579158][T11777] command_status=-1 [ 2171.588748][T11777] [ 2171.594631][T11777] floppy1: floppy timeout called [ 2171.619513][T11777] [ 2171.622469][T11777] floppy driver state [ 2171.627756][T11777] ------------------- [ 2171.633709][T11777] now=4295154008 last interrupt=4295141312 diff=12696 last called handler=recal_interrupt [ 2171.655014][T11777] timeout_message=lock fdc [ 2171.661672][T11777] last output bytes: [ 2171.667538][T11777] 0 90 4295139496 [ 2171.673809][T11777] 1 90 4295139496 [ 2171.681095][T11777] 2 90 4295139496 [ 2171.686102][T11777] 24 90 4295139496 [ 2171.692727][T11777] 1b 90 4295139496 [ 2171.699786][T11777] ff 90 4295139496 [ 2171.704126][T11777] 12 80 4295141312 [ 2171.709941][T11777] 3 90 4295141312 [ 2171.714761][T11777] 13 80 4295141312 [ 2171.720731][T11777] 0 90 4295141312 [ 2171.725571][T11777] 1a 90 4295141312 [ 2171.741498][T11777] 0 90 4295141312 [ 2171.747458][T11777] 3 80 4295141312 [ 2171.752903][T11777] a1 90 4295141312 [ 2171.758867][T11777] 1e 90 4295141312 [ 2171.764004][T11777] 7 80 4295141312 [ 2171.769080][T11777] 1 90 4295141312 [ 2171.776687][T11777] 8 80 4295141312 [ 2171.789073][T11777] 4 80 4295141312 [ 2171.794865][T11777] 1 90 4295141312 [ 2171.800305][T11777] last result at 4295141492 [ 2171.806190][T11777] last redo_fd_request at 4295154007 [ 2171.815716][T11777] status=80 [ 2171.820777][T11777] fdc_busy=1 [ 2171.826442][T11777] floppy_work.func=floppy_work_workfn [ 2171.838398][T11777] cont=ffffffff8a1f4920 [ 2171.849642][T11777] current_req=0000000000000000 [ 2171.859247][T11777] command_status=-1 [ 2171.865387][T11777] [ 2171.869569][T11777] floppy1: floppy timeout called [ 2171.898366][T17293] [ 2171.901315][T17293] floppy driver state [ 2171.906402][T17293] ------------------- [ 2171.915686][T17293] now=4295154036 last interrupt=4295141312 diff=12724 last called handler=recal_interrupt [ 2171.928343][T17293] timeout_message=lock fdc [ 2171.943688][T17293] last output bytes: [ 2171.949496][T17293] 0 90 4295139496 [ 2171.954902][T17293] 1 90 4295139496 [ 2171.960733][T17293] 2 90 4295139496 [ 2171.966345][T17293] 24 90 4295139496 [ 2171.972135][T17293] 1b 90 4295139496 [ 2171.978325][T17293] ff 90 4295139496 [ 2171.984702][T17293] 12 80 4295141312 [ 2171.990825][T17293] 3 90 4295141312 [ 2172.006846][T17293] 13 80 4295141312 [ 2172.013369][T17293] 0 90 4295141312 [ 2172.023331][T17293] 1a 90 4295141312 [ 2172.028451][T17293] 0 90 4295141312 [ 2172.033903][T17293] 3 80 4295141312 [ 2172.038932][T17293] a1 90 4295141312 [ 2172.045907][T17293] 1e 90 4295141312 [ 2172.053487][T17293] 7 80 4295141312 [ 2172.057599][T17293] 1 90 4295141312 [ 2172.063752][T17293] 8 80 4295141312 [ 2172.068246][T17293] 4 80 4295141312 [ 2172.071890][T17293] 1 90 4295141312 [ 2172.076288][T17293] last result at 4295141492 [ 2172.082390][T17293] last redo_fd_request at 4295154034 [ 2172.107013][T17293] status=80 [ 2172.114014][T17293] fdc_busy=1 [ 2172.120868][T17293] floppy_work.func=floppy_work_workfn [ 2172.133662][T17293] cont=ffffffff8a1f4920 [ 2172.140667][T17293] current_req=0000000000000000 [ 2172.148182][T17293] command_status=-1 [ 2172.154777][T17293] [ 2172.163396][T17293] floppy1: floppy timeout called [ 2172.178457][T17293] [ 2172.183692][T17293] floppy driver state [ 2172.190746][T17293] ------------------- [ 2172.197439][T17293] now=4295154064 last interrupt=4295141312 diff=12752 last called handler=recal_interrupt [ 2172.221336][T17293] timeout_message=lock fdc [ 2172.233195][T17293] last output bytes: [ 2172.246562][T17293] 0 90 4295139496 [ 2172.273858][T17293] 1 90 4295139496 [ 2172.283633][T17293] 2 90 4295139496 [ 2172.294169][T17293] 24 90 4295139496 [ 2172.302604][T17293] 1b 90 4295139496 [ 2172.312156][T17293] ff 90 4295139496 [ 2172.318661][T17293] 12 80 4295141312 [ 2172.338530][T17293] 3 90 4295141312 [ 2172.344790][T17293] 13 80 4295141312 [ 2172.356593][T17293] 0 90 4295141312 [ 2172.362472][T17293] 1a 90 4295141312 [ 2172.370762][T17293] 0 90 4295141312 [ 2172.386781][T17293] 3 80 4295141312 [ 2172.396263][T17293] a1 90 4295141312 [ 2172.410697][T17293] 1e 90 4295141312 [ 2172.421555][T17293] 7 80 4295141312 [ 2172.439399][T17293] 1 90 4295141312 [ 2172.451923][T17293] 8 80 4295141312 [ 2172.464793][T17293] 4 80 4295141312 [ 2172.472383][T17293] 1 90 4295141312 [ 2172.492694][T17293] last result at 4295141492 [ 2172.502645][T17293] last redo_fd_request at 4295154062 [ 2172.511693][T17293] status=80 [ 2172.518526][T17293] fdc_busy=1 [ 2172.527284][T17293] floppy_work.func=floppy_work_workfn [ 2172.533976][T17293] cont=ffffffff8a1f4920 [ 2172.542565][T17293] current_req=0000000000000000 [ 2172.569455][T17293] command_status=-1 [ 2172.574658][T17293] [ 2172.579594][T17293] floppy1: floppy timeout called [ 2172.588253][T17293] [ 2172.591849][T17293] floppy driver state [ 2172.596498][T17293] ------------------- [ 2172.605316][T17293] now=4295154105 last interrupt=4295141312 diff=12793 last called handler=recal_interrupt [ 2172.621269][T17293] timeout_message=lock fdc [ 2172.629715][T17293] last output bytes: [ 2172.641818][T17293] 0 90 4295139496 [ 2172.642794][T20910] loop3: detected capacity change from 0 to 264192 [ 2172.646651][T17293] 1 90 4295139496 [ 2172.668206][T20910] hpfs: bad mount options. [ 2172.675993][T17293] 2 90 4295139496 [ 2172.687301][T17293] 24 90 4295139496 [ 2172.692662][T17293] 1b 90 4295139496 [ 2172.697309][T17293] ff 90 4295139496 [ 2172.703720][T17293] 12 80 4295141312 [ 2172.713611][T17293] 3 90 4295141312 [ 2172.721449][T17293] 13 80 4295141312 [ 2172.726362][T17293] 0 90 4295141312 [ 2172.733310][T17293] 1a 90 4295141312 [ 2172.740612][T17293] 0 90 4295141312 [ 2172.746831][T17293] 3 80 4295141312 [ 2172.754842][T17293] a1 90 4295141312 08:03:06 executing program 0: syz_open_dev$floppy(0x0, 0x1, 0x0) 08:03:06 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2172.771705][T17293] 1e 90 4295141312 [ 2172.778608][T17293] 7 80 4295141312 [ 2172.783948][T17293] 1 90 4295141312 [ 2172.788962][T17293] 8 80 4295141312 [ 2172.793214][T17293] 4 80 4295141312 [ 2172.797724][T17293] 1 90 4295141312 08:03:06 executing program 0: syz_open_dev$floppy(0x0, 0x1, 0x0) [ 2172.803695][T17293] last result at 4295141492 [ 2172.813487][T17293] last redo_fd_request at 4295154103 [ 2172.822127][T17293] status=80 [ 2172.827371][T17293] fdc_busy=1 [ 2172.835128][T17293] floppy_work.func=floppy_work_workfn [ 2172.844055][T17293] cont=ffffffff8a1f4920 [ 2172.850989][T17293] current_req=0000000000000000 [ 2172.858562][T17293] command_status=-1 [ 2172.864173][T17293] [ 2172.866960][T17293] floppy1: floppy timeout called [ 2172.878787][T11777] [ 2172.882242][T11777] floppy driver state [ 2172.887703][T11777] ------------------- [ 2172.917968][T11777] now=4295154137 last interrupt=4295141312 diff=12825 last called handler=recal_interrupt [ 2172.947931][T11777] timeout_message=lock fdc [ 2172.956931][T11777] last output bytes: [ 2172.972924][T11777] 0 90 4295139496 [ 2172.977730][T11777] 1 90 4295139496 08:03:06 executing program 3: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x7ff, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:06 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:06 executing program 0: syz_open_dev$floppy(0x0, 0x1, 0x0) [ 2173.028038][T11777] 2 90 4295139496 [ 2173.032924][T11777] 24 90 4295139496 [ 2173.056868][T11777] 1b 90 4295139496 [ 2173.060287][T11777] ff 90 4295139496 [ 2173.068747][T11777] 12 80 4295141312 [ 2173.074394][T11777] 3 90 4295141312 [ 2173.082746][T11777] 13 80 4295141312 [ 2173.087570][T11777] 0 90 4295141312 [ 2173.092119][T11777] 1a 90 4295141312 [ 2173.096500][T11777] 0 90 4295141312 [ 2173.101196][T11777] 3 80 4295141312 [ 2173.106849][T11777] a1 90 4295141312 [ 2173.113150][T11777] 1e 90 4295141312 [ 2173.124297][T11777] 7 80 4295141312 [ 2173.132834][T11777] 1 90 4295141312 [ 2173.142611][T11777] 8 80 4295141312 [ 2173.155411][T11777] 4 80 4295141312 [ 2173.177532][T11777] 1 90 4295141312 08:03:06 executing program 0: syz_open_dev$floppy(&(0x7f00000001c0), 0x0, 0x0) 08:03:06 executing program 2: r0 = getuid() setresuid(0xee01, r0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getuid() setresuid(0xee01, r2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe4) r4 = syz_open_procfs(0x0, 0x0) renameat(r4, &(0x7f0000000140)='./cgroup\x00', r4, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) read$FUSE(r4, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000002280)={{}, {0x1, 0x1}, [{0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x2, r0}, {0x2, 0x1, r1}, {0x2, 0x6, 0xee00}, {0x2, 0x1, r2}, {0x2, 0x2, r3}], {0x4, 0x6}, [{0x8, 0x0, 0xee01}, {0x8, 0x7, r5}, {}, {0x8, 0x6}, {0x8, 0x7, 0xee01}, {0x8, 0x2, 0xffffffffffffffff}], {0x10, 0x6}, {0x20, 0x6}}, 0x84, 0x0) syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) 08:03:06 executing program 3: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x200) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2173.247806][T11777] last result at 4295141492 [ 2173.265138][T11777] last redo_fd_request at 4295154132 [ 2173.273055][T11777] status=80 [ 2173.276712][T11777] fdc_busy=1 [ 2173.286812][T11777] floppy_work.func=floppy_work_workfn [ 2173.307209][T11777] cont=ffffffff8a1f4920 [ 2173.314543][T11777] current_req=0000000000000000 [ 2173.322819][T11777] command_status=-1 [ 2173.329097][T11777] [ 2173.333880][T11777] floppy1: floppy timeout called [ 2173.348164][T11777] [ 2173.352929][T11777] floppy driver state [ 2173.359196][T11777] ------------------- [ 2173.365187][T11777] now=4295154181 last interrupt=4295141312 diff=12869 last called handler=recal_interrupt [ 2173.410719][T11777] timeout_message=lock fdc [ 2173.427933][T11777] last output bytes: 08:03:06 executing program 0: syz_open_dev$floppy(&(0x7f00000001c0), 0x0, 0x0) [ 2173.445598][T11777] 0 90 4295139496 [ 2173.454489][T11777] 1 90 4295139496 [ 2173.469239][T11777] 2 90 4295139496 [ 2173.488097][T11777] 24 90 4295139496 [ 2173.492697][T11777] 1b 90 4295139496 [ 2173.516810][T11777] ff 90 4295139496 [ 2173.548103][T11777] 12 80 4295141312 [ 2173.559675][T11777] 3 90 4295141312 [ 2173.568029][T11777] 13 80 4295141312 [ 2173.573076][T11777] 0 90 4295141312 [ 2173.577026][T11777] 1a 90 4295141312 [ 2173.582166][T11777] 0 90 4295141312 [ 2173.588889][T11777] 3 80 4295141312 [ 2173.615667][T11777] a1 90 4295141312 [ 2173.622832][T11777] 1e 90 4295141312 [ 2173.629143][T11777] 7 80 4295141312 [ 2173.634833][T11777] 1 90 4295141312 [ 2173.648144][T11777] 8 80 4295141312 [ 2173.659875][T11777] 4 80 4295141312 [ 2173.665275][T11777] 1 90 4295141312 [ 2173.669798][T11777] last result at 4295141492 [ 2173.681110][T11777] last redo_fd_request at 4295154179 [ 2173.689858][T11777] status=80 [ 2173.701171][T11777] fdc_busy=1 [ 2173.705840][T11777] floppy_work.func=floppy_work_workfn [ 2173.718705][T11777] cont=ffffffff8a1f4920 [ 2173.727276][T11777] current_req=0000000000000000 [ 2173.742247][T11777] command_status=-1 [ 2173.754602][T11777] [ 2173.769400][T11777] floppy1: floppy timeout called [ 2173.789106][T11777] [ 2173.792976][T11777] floppy driver state [ 2173.811323][T11777] ------------------- [ 2173.818861][T11777] now=4295154227 last interrupt=4295141312 diff=12915 last called handler=recal_interrupt [ 2173.834890][T11777] timeout_message=lock fdc [ 2173.847267][T11777] last output bytes: [ 2173.860718][T11777] 0 90 4295139496 [ 2173.875765][T11777] 1 90 4295139496 [ 2173.880929][T11777] 2 90 4295139496 08:03:07 executing program 0: syz_open_dev$floppy(&(0x7f00000001c0), 0x0, 0x0) 08:03:07 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2173.885972][T11777] 24 90 4295139496 [ 2173.891470][T11777] 1b 90 4295139496 [ 2173.896116][T11777] ff 90 4295139496 [ 2173.903687][T11777] 12 80 4295141312 [ 2173.910123][T11777] 3 90 4295141312 [ 2173.915104][T11777] 13 80 4295141312 [ 2173.920617][T11777] 0 90 4295141312 [ 2173.925668][T11777] 1a 90 4295141312 [ 2173.930027][T11777] 0 90 4295141312 [ 2173.935085][T11777] 3 80 4295141312 [ 2173.941666][T11777] a1 90 4295141312 [ 2173.947051][T11777] 1e 90 4295141312 [ 2173.964431][T11777] 7 80 4295141312 [ 2173.971332][T11777] 1 90 4295141312 08:03:07 executing program 2: syz_open_dev$floppy(&(0x7f00000004c0), 0x0, 0x2) r0 = openat$vsock(0xffffff9c, &(0x7f0000000000), 0x2cc040, 0x0) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000200)={0x0, @reserved}) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="20e0508dcf8eb6f5850a89c3670e714400", @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, r4, 0x711, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000003c0)={@xdp={0x2c, 0xc, r6, 0x2f}, {&(0x7f0000000300)=""/97, 0x61}, &(0x7f0000000380), 0x1}, 0xa0) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f00000000c0)={0x200, &(0x7f0000000040)="934e07f22d250c058f422cc07e063c26608372500623dc80f7af158915532812df857debed21e541200d103cf1bc90d834d0923fe1bbf729f82ad8fc8318", &(0x7f0000000080), 0x0, 0x3e, 0x0, 0x0, 0x25, 0x1f, "d56b5b0c2a5fc14193b0418ae79521b4", 0x0, '\x00', 0x1000}) r7 = syz_open_procfs(0x0, 0x0) renameat(r7, &(0x7f0000000140)='./cgroup\x00', r7, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRES16], 0x20}}, 0x800) getsockopt$llc_int(r7, 0x10c, 0x2, &(0x7f0000000180), &(0x7f00000002c0)=0x4) [ 2173.994778][T11777] 8 80 4295141312 [ 2174.003693][T11777] 4 80 4295141312 [ 2174.025021][T11777] 1 90 4295141312 [ 2174.032531][T11777] last result at 4295141492 [ 2174.039745][T11777] last redo_fd_request at 4295154224 [ 2174.049079][T11777] status=80 [ 2174.054146][T11777] fdc_busy=1 [ 2174.059751][T11777] floppy_work.func=floppy_work_workfn [ 2174.069393][T11777] cont=ffffffff8a1f4920 [ 2174.076235][T11777] current_req=0000000000000000 [ 2174.083787][T11777] command_status=-1 [ 2174.089855][T11777] [ 2174.093490][T11777] floppy1: floppy timeout called [ 2174.121343][T13101] [ 2174.125327][T13101] floppy driver state [ 2174.132537][T13101] ------------------- [ 2174.164859][T13101] now=4295154261 last interrupt=4295141312 diff=12949 last called handler=recal_interrupt [ 2174.191860][T13101] timeout_message=lock fdc [ 2174.202843][T13101] last output bytes: [ 2174.215145][T13101] 0 90 4295139496 [ 2174.222261][T13101] 1 90 4295139496 [ 2174.228580][T13101] 2 90 4295139496 [ 2174.234489][T13101] 24 90 4295139496 [ 2174.241112][T13101] 1b 90 4295139496 [ 2174.247525][T13101] ff 90 4295139496 [ 2174.255621][T13101] 12 80 4295141312 [ 2174.260847][T13101] 3 90 4295141312 [ 2174.265703][T13101] 13 80 4295141312 [ 2174.272261][T13101] 0 90 4295141312 [ 2174.280468][T13101] 1a 90 4295141312 [ 2174.306365][T13101] 0 90 4295141312 [ 2174.319864][T13101] 3 80 4295141312 [ 2174.328015][T13101] a1 90 4295141312 [ 2174.342672][T13101] 1e 90 4295141312 [ 2174.362731][T13101] 7 80 4295141312 [ 2174.370875][T13101] 1 90 4295141312 [ 2174.408125][T13101] 8 80 4295141312 [ 2174.411825][T13101] 4 80 4295141312 [ 2174.416135][T13101] 1 90 4295141312 [ 2174.452231][T13101] last result at 4295141492 [ 2174.482989][T13101] last redo_fd_request at 4295154257 [ 2174.498246][T13101] status=80 [ 2174.504483][T13101] fdc_busy=1 [ 2174.518768][T13101] floppy_work.func=floppy_work_workfn [ 2174.534800][T13101] cont=ffffffff8a1f4920 [ 2174.544568][T13101] current_req=0000000000000000 [ 2174.557132][T13101] command_status=-1 [ 2174.590896][T13101] [ 2174.600631][T13101] floppy1: floppy timeout called [ 2174.607383][T13101] [ 2174.611179][T13101] floppy driver state [ 2174.617179][T13101] ------------------- [ 2174.623367][T13101] now=4295154307 last interrupt=4295141312 diff=12995 last called handler=recal_interrupt [ 2174.642700][T13101] timeout_message=lock fdc [ 2174.649084][T13101] last output bytes: [ 2174.660247][T13101] 0 90 4295139496 [ 2174.665650][T13101] 1 90 4295139496 [ 2174.692159][T13101] 2 90 4295139496 08:03:08 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x50000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:08 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x108) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 08:03:08 executing program 2: mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x40010, 0xffffffffffffffff, 0x9be90000) syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FLOPPY_FDFMTBEG(r0, 0x247) 08:03:08 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$FLOPPY_FDDEFPRM(r2, 0x401c0243, &(0x7f00000000c0)={0x6, 0x33, 0xffffffff, 0x7fffffff, 0x7f, 0x0, 0x80, 0x4, 0x3, &(0x7f0000000080)='/dev/fd#\x00'}) ioctl$FLOPPY_FDDEFPRM(r1, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2174.710110][T13101] 24 90 4295139496 [ 2174.719596][T13101] 1b 90 4295139496 [ 2174.723315][T20954] loop0: detected capacity change from 0 to 87 [ 2174.725127][T13101] ff 90 4295139496 [ 2174.741922][T13101] 12 80 4295141312 [ 2174.753473][T13101] 3 90 4295141312 [ 2174.759696][T13101] 13 80 4295141312 [ 2174.765673][T13101] 0 90 4295141312 [ 2174.773104][T13101] 1a 90 4295141312 [ 2174.778793][T13101] 0 90 4295141312 [ 2174.783720][T13101] 3 80 4295141312 [ 2174.789255][T13101] a1 90 4295141312 [ 2174.795183][T13101] 1e 90 4295141312 [ 2174.801295][T13101] 7 80 4295141312 [ 2174.806884][T13101] 1 90 4295141312 [ 2174.812897][T13101] 8 80 4295141312 [ 2174.814240][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 2174.814256][ T37] audit: type=1804 audit(1638172988.285:741): pid=20954 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1322/file1/bus" dev="loop0" ino=1048720 res=1 errno=0 [ 2174.818153][T13101] 4 80 4295141312 [ 2174.840189][ T37] audit: type=1800 audit(1638172988.285:742): pid=20954 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048720 res=0 errno=0 [ 2174.870786][T13101] 1 90 4295141312 [ 2174.908283][T13101] last result at 4295141492 [ 2174.910137][T20954] syz-executor.0: attempt to access beyond end of device [ 2174.910137][T20954] loop0: rw=0, want=90, limit=87 [ 2174.914622][T13101] last redo_fd_request at 4295154305 [ 2174.941348][T13101] status=80 [ 2174.945990][T13101] fdc_busy=1 [ 2174.950504][T13101] floppy_work.func=floppy_work_workfn [ 2174.968009][T13101] cont=ffffffff8a1f4920 [ 2174.975706][T13101] current_req=0000000000000000 [ 2174.983277][T13101] command_status=-1 [ 2174.988196][T13101] [ 2174.992487][T13101] floppy1: floppy timeout called [ 2175.009761][T13101] [ 2175.014449][T13101] floppy driver state [ 2175.033142][T13101] ------------------- [ 2175.049732][T13101] now=4295154350 last interrupt=4295141312 diff=13038 last called handler=recal_interrupt [ 2175.065327][T13101] timeout_message=lock fdc [ 2175.090283][T13101] last output bytes: [ 2175.095835][T13101] 0 90 4295139496 [ 2175.106820][T13101] 1 90 4295139496 [ 2175.116623][T13101] 2 90 4295139496 [ 2175.129895][T13101] 24 90 4295139496 [ 2175.137012][T13101] 1b 90 4295139496 [ 2175.146350][T13101] ff 90 4295139496 [ 2175.166150][T13101] 12 80 4295141312 [ 2175.172780][T13101] 3 90 4295141312 [ 2175.179437][T13101] 13 80 4295141312 [ 2175.189481][T13101] 0 90 4295141312 [ 2175.210909][T13101] 1a 90 4295141312 [ 2175.216071][T13101] 0 90 4295141312 [ 2175.222809][T13101] 3 80 4295141312 [ 2175.233831][T13101] a1 90 4295141312 [ 2175.242892][T13101] 1e 90 4295141312 [ 2175.256409][T13101] 7 80 4295141312 [ 2175.275820][T13101] 1 90 4295141312 [ 2175.286336][T13101] 8 80 4295141312 [ 2175.303138][T13101] 4 80 4295141312 [ 2175.309061][T13101] 1 90 4295141312 [ 2175.314617][T13101] last result at 4295141492 [ 2175.325895][T13101] last redo_fd_request at 4295154346 [ 2175.337543][T13101] status=80 [ 2175.347592][T13101] fdc_busy=1 [ 2175.366131][T13101] floppy_work.func=floppy_work_workfn [ 2175.392282][T13101] cont=ffffffff8a1f4920 [ 2175.408051][T13101] current_req=0000000000000000 [ 2175.416236][T13101] command_status=-1 [ 2175.439039][T13101] [ 2175.445248][T13101] floppy1: floppy timeout called [ 2175.456986][T13101] [ 2175.471871][T13101] floppy driver state [ 2175.480798][T13101] ------------------- [ 2175.520032][T13101] now=4295154397 last interrupt=4295141312 diff=13085 last called handler=recal_interrupt [ 2175.555073][T13101] timeout_message=lock fdc [ 2175.564381][T13101] last output bytes: [ 2175.569294][T13101] 0 90 4295139496 [ 2175.576253][T13101] 1 90 4295139496 [ 2175.585341][T13101] 2 90 4295139496 [ 2175.592594][T13101] 24 90 4295139496 [ 2175.603981][T13101] 1b 90 4295139496 [ 2175.611600][T13101] ff 90 4295139496 [ 2175.638810][T13101] 12 80 4295141312 08:03:09 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:09 executing program 0: ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0205710, &(0x7f0000000080)={0x1, 0x3f, 0x2}) r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000340)={0x0, 0x819e, 0x1, [0xffffff8000000000, 0x80, 0x10001, 0x8001, 0x7fff], [0xac, 0x7, 0x1000000000, 0x1ff, 0x1, 0x3641, 0x5d6, 0xff, 0x9, 0x100000001, 0xb02, 0x4, 0xffffffffffff7fff, 0x2, 0x8, 0x1, 0x9, 0x9, 0x2, 0x8b, 0x6, 0x4, 0x3, 0x4d1a, 0x7fff, 0x80000001, 0xfffffffffffffffb, 0x100000000, 0x9, 0x2, 0x5, 0x7fff, 0x3, 0x3f, 0x0, 0x1ff, 0x7, 0x6, 0xa3c, 0x7fffffff, 0xfffffffffffffffd, 0x8, 0xb5f, 0x9e9, 0x1, 0x1, 0xfff, 0x0, 0x0, 0xffffffffffffff00, 0x7, 0x7, 0x20, 0x3, 0x1f, 0x6, 0x8, 0x800, 0x800, 0x1000, 0x5, 0x52000000000000, 0x7, 0xe8, 0x8354, 0x9421, 0x5, 0x100, 0x1, 0xfff, 0xb6a, 0x5, 0x401, 0xdc8, 0x9, 0x7fff, 0x3da, 0x369, 0x4, 0x1, 0x5, 0x4, 0x81, 0x4, 0x8000, 0xffff, 0x4800000000000, 0x1, 0x7, 0x80, 0x8, 0x94, 0x510db812, 0x0, 0x53b8, 0x4, 0x5, 0x7, 0x0, 0x15780abf, 0x1ff, 0x3, 0x7, 0x8, 0x6, 0xcd2f, 0x1, 0x3, 0x7, 0x3, 0xeaae, 0x1, 0xfffffffffffffffe, 0x1, 0x1, 0x9, 0x2, 0x6, 0x100, 0x1, 0x2a]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000780)={r2, 0x6, 0x1ba709dc, 0x1}) ftruncate(r1, 0x800) open(&(0x7f0000000180)='./file1\x00', 0x40000, 0x0) lseek(r1, 0x0, 0x2) r3 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) [ 2175.647196][T20959] loop0: detected capacity change from 0 to 87 [ 2175.648857][T13101] 3 90 4295141312 [ 2175.660842][T13101] 13 80 4295141312 [ 2175.661495][T20959] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 2175.665649][T13101] 0 90 4295141312 [ 2175.665671][T13101] 1a 90 4295141312 [ 2175.665693][T13101] 0 90 4295141312 [ 2175.665709][T13101] 3 80 4295141312 [ 2175.665724][T13101] a1 90 4295141312 [ 2175.665738][T13101] 1e 90 4295141312 [ 2175.665753][T13101] 7 80 4295141312 [ 2175.711565][T13101] 1 90 4295141312 [ 2175.716466][T13101] 8 80 4295141312 [ 2175.721985][T13101] 4 80 4295141312 [ 2175.727070][T13101] 1 90 4295141312 [ 2175.733002][T13101] last result at 4295141492 [ 2175.740802][T13101] last redo_fd_request at 4295154390 [ 2175.748809][T13101] status=80 [ 2175.753049][T13101] fdc_busy=1 [ 2175.767608][T13101] floppy_work.func=floppy_work_workfn [ 2175.775750][T13101] cont=ffffffff8a1f4920 [ 2175.792735][T13101] current_req=0000000000000000 [ 2175.810125][ T37] audit: type=1804 audit(1638172989.275:743): pid=20959 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1323/file1/bus" dev="sda1" ino=1198 res=1 errno=0 [ 2175.818440][T13101] command_status=-1 [ 2175.901251][T13101] [ 2175.905333][T13101] floppy1: floppy timeout called [ 2175.914956][ T37] audit: type=1800 audit(1638172989.275:744): pid=20959 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1198 res=0 errno=0 [ 2175.941618][T17293] [ 2175.987352][T17293] floppy driver state [ 2176.002199][T17293] ------------------- [ 2176.014134][T17293] now=4295154446 last interrupt=4295141312 diff=13134 last called handler=recal_interrupt [ 2176.038442][T17293] timeout_message=lock fdc [ 2176.046482][T17293] last output bytes: [ 2176.064839][T17293] 0 90 4295139496 [ 2176.070662][T17293] 1 90 4295139496 [ 2176.075281][T17293] 2 90 4295139496 [ 2176.089404][T17293] 24 90 4295139496 [ 2176.093351][T17293] 1b 90 4295139496 [ 2176.100203][T17293] ff 90 4295139496 [ 2176.106236][T17293] 12 80 4295141312 [ 2176.113311][T17293] 3 90 4295141312 [ 2176.126435][T17293] 13 80 4295141312 [ 2176.133938][T17293] 0 90 4295141312 [ 2176.141271][T17293] 1a 90 4295141312 [ 2176.150202][T17293] 0 90 4295141312 [ 2176.156209][T17293] 3 80 4295141312 [ 2176.175052][T17293] a1 90 4295141312 [ 2176.192126][T17293] 1e 90 4295141312 [ 2176.205854][T17293] 7 80 4295141312 [ 2176.218709][T17293] 1 90 4295141312 [ 2176.224471][T17293] 8 80 4295141312 [ 2176.230283][T17293] 4 80 4295141312 [ 2176.236994][T17293] 1 90 4295141312 [ 2176.243714][T17293] last result at 4295141492 [ 2176.253452][T17293] last redo_fd_request at 4295154439 [ 2176.271939][T17293] status=80 [ 2176.276407][T17293] fdc_busy=1 [ 2176.286340][T17293] floppy_work.func=floppy_work_workfn [ 2176.330739][T17293] cont=ffffffff8a1f4920 [ 2176.336714][T17293] current_req=0000000000000000 [ 2176.350247][T17293] command_status=-1 [ 2176.361284][T17293] [ 2176.366348][T17293] floppy1: floppy timeout called [ 2176.424162][T17293] [ 2176.434891][T17293] floppy driver state [ 2176.452392][T17293] ------------------- [ 2176.465878][T17293] now=4295154491 last interrupt=4295141312 diff=13179 last called handler=recal_interrupt [ 2176.496726][T17293] timeout_message=lock fdc [ 2176.508840][T17293] last output bytes: [ 2176.525715][T17293] 0 90 4295139496 [ 2176.531098][T17293] 1 90 4295139496 [ 2176.536687][T17293] 2 90 4295139496 [ 2176.543573][T17293] 24 90 4295139496 [ 2176.558622][T17293] 1b 90 4295139496 [ 2176.565357][T17293] ff 90 4295139496 [ 2176.581220][T17293] 12 80 4295141312 [ 2176.589738][T17293] 3 90 4295141312 [ 2176.606849][T17293] 13 80 4295141312 [ 2176.613249][T17293] 0 90 4295141312 [ 2176.619737][T17293] 1a 90 4295141312 [ 2176.626407][T17293] 0 90 4295141312 [ 2176.635236][T17293] 3 80 4295141312 [ 2176.644013][T17293] a1 90 4295141312 [ 2176.651421][T17293] 1e 90 4295141312 [ 2176.664448][T17293] 7 80 4295141312 [ 2176.672330][T17293] 1 90 4295141312 [ 2176.678750][T17293] 8 80 4295141312 [ 2176.749640][T17293] 4 80 4295141312 [ 2176.757500][T17293] 1 90 4295141312 08:03:10 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0xfcffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2176.771516][T17293] last result at 4295141492 [ 2176.783536][T17293] last redo_fd_request at 4295154486 08:03:10 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000080)=0x1c, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000240), 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$vsock(0xffffff9c, &(0x7f0000000280), 0x402282, 0x0) bind$can_raw(r3, &(0x7f00000002c0), 0x10) r4 = syz_io_uring_complete(0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000380), 0x7, 0x800) sendmsg$nl_crypto(r5, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=@getstat={0xe0, 0x15, 0x10, 0x70bd26, 0x25dfdbfb, {{'ccm_base(xts(camellia),sha256-mb)\x00'}, '\x00', '\x00', 0x2000}, [""]}, 0xe0}, 0x1, 0x0, 0x0, 0x4001}, 0x4000004) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x4e22, 0x7fffffff, @private2, 0xffffffe0}, {0xa, 0x4e20, 0x10001, @empty, 0x2}, 0xfff, [0x3, 0x5f, 0x7a0, 0xbc, 0x3, 0x5, 0x100, 0x100]}, 0x5c) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x0, @vsock={0x28, 0x0, 0xffffffff, @my=0x1}, @nfc={0x27, 0x0, 0x0, 0x1}, @in={0x2, 0x4e23, @private=0xa010100}, 0x6, 0x0, 0x0, 0x0, 0x200, &(0x7f0000000100)='vxcan1\x00', 0xfff, 0x0, 0x5}) r6 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r6, 0x301, &(0x7f0000000040)={0x7, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'nr0\x00', {0x2, 0x0, @private}}) [ 2176.793201][T17293] status=80 [ 2176.798736][T17293] fdc_busy=1 08:03:10 executing program 2: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) renameat(r0, &(0x7f0000000140)='./cgroup\x00', r0, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDFMTEND(r0, 0x249) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x41, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@fscache}, {@cache_mmap}, {@access_any}, {@mmap}, {@access_client}], [{@pcr={'pcr', 0x3d, 0x2}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfsdef={'smackfsdef', 0x3d, '/'}}, {@measure}, {@obj_role={'obj_role', 0x3d, ':,,\'-^\'&l\xde'}}, {@euid_eq={'euid', 0x3d, r3}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@appraise}]}}) 08:03:10 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$9p_rdma(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0xdd350f1bbb501382, &(0x7f0000000200)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0x40}}, {@common=@noextend}, {@rq={'rq', 0x3d, 0x2}}, {@common=@nodevmap}, {@common=@access_uid={'access', 0x3d, r1}}], [{@euid_lt={'euid<', 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, 'msdos\x00'}}, {@fsname={'fsname', 0x3d, 'msdos\x00'}}]}}) lseek(r0, 0x0, 0x2) r2 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) open(&(0x7f0000003400)='./file1\x00', 0x10042, 0x1) sendfile(r0, r2, 0x0, 0x8400fffffffa) setxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file1\x00', &(0x7f0000002380), &(0x7f00000023c0)={0x0, 0xfb, 0x1015, 0x1, 0xc, "19fbc8868f0242f9104b27a7c0702b23", "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"}, 0x1015, 0x3) [ 2176.824877][T17293] floppy_work.func=floppy_work_workfn [ 2176.858678][T20972] loop0: detected capacity change from 0 to 87 [ 2176.861863][T17293] cont=ffffffff8a1f4920 [ 2176.877035][T17293] current_req=0000000000000000 [ 2176.883914][T17293] command_status=-1 [ 2176.889285][T17293] [ 2176.893146][T17293] floppy1: floppy timeout called [ 2176.917542][T17293] [ 2176.927235][T17293] floppy driver state [ 2176.933178][T17293] ------------------- [ 2176.940955][T17293] now=4295154539 last interrupt=4295141312 diff=13227 last called handler=recal_interrupt [ 2176.957287][ T37] audit: type=1804 audit(1638172990.425:745): pid=20972 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1324/file1/bus" dev="loop0" ino=1048721 res=1 errno=0 [ 2176.970350][T20972] syz-executor.0: attempt to access beyond end of device [ 2176.970350][T20972] loop0: rw=0, want=90, limit=87 [ 2176.998207][T17293] timeout_message=lock fdc [ 2177.027205][T17293] last output bytes: [ 2177.036878][ T37] audit: type=1800 audit(1638172990.425:746): pid=20972 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048721 res=0 errno=0 [ 2177.047982][T17293] 0 90 4295139496 [ 2177.070905][T17293] 1 90 4295139496 [ 2177.079061][T17293] 2 90 4295139496 [ 2177.088014][T17293] 24 90 4295139496 [ 2177.101307][T17293] 1b 90 4295139496 [ 2177.106495][T17293] ff 90 4295139496 [ 2177.112460][T17293] 12 80 4295141312 [ 2177.124536][T17293] 3 90 4295141312 [ 2177.140336][T17293] 13 80 4295141312 [ 2177.150756][T17293] 0 90 4295141312 [ 2177.159148][T17293] 1a 90 4295141312 [ 2177.164685][T17293] 0 90 4295141312 [ 2177.171532][T17293] 3 80 4295141312 [ 2177.176927][T17293] a1 90 4295141312 [ 2177.184613][T17293] 1e 90 4295141312 [ 2177.190923][T17293] 7 80 4295141312 [ 2177.198224][T17293] 1 90 4295141312 [ 2177.202761][T17293] 8 80 4295141312 [ 2177.209571][T17293] 4 80 4295141312 [ 2177.217275][T17293] 1 90 4295141312 [ 2177.226798][T17293] last result at 4295141492 [ 2177.241039][T17293] last redo_fd_request at 4295154536 [ 2177.249588][T17293] status=80 [ 2177.253930][T17293] fdc_busy=1 [ 2177.261492][T17293] floppy_work.func=floppy_work_workfn [ 2177.271949][T17293] cont=ffffffff8a1f4920 [ 2177.278312][T17293] current_req=0000000000000000 [ 2177.286479][T17293] command_status=-1 [ 2177.298846][T17293] [ 2177.306194][T17293] floppy1: floppy timeout called [ 2177.328248][T13101] [ 2177.332272][T13101] floppy driver state [ 2177.345311][T13101] ------------------- [ 2177.353212][T13101] now=4295154580 last interrupt=4295141312 diff=13268 last called handler=recal_interrupt [ 2177.364787][T13101] timeout_message=lock fdc [ 2177.376951][T13101] last output bytes: [ 2177.409974][T13101] 0 90 4295139496 [ 2177.417526][T13101] 1 90 4295139496 [ 2177.426617][T13101] 2 90 4295139496 [ 2177.431280][T13101] 24 90 4295139496 [ 2177.435808][T13101] 1b 90 4295139496 [ 2177.463241][T13101] ff 90 4295139496 [ 2177.489654][T13101] 12 80 4295141312 [ 2177.495576][T13101] 3 90 4295141312 [ 2177.514619][T13101] 13 80 4295141312 [ 2177.558147][T13101] 0 90 4295141312 [ 2177.563820][T13101] 1a 90 4295141312 [ 2177.578014][T13101] 0 90 4295141312 [ 2177.583237][T13101] 3 80 4295141312 [ 2177.598550][T13101] a1 90 4295141312 [ 2177.607621][T13101] 1e 90 4295141312 [ 2177.621186][T13101] 7 80 4295141312 [ 2177.635108][T13101] 1 90 4295141312 [ 2177.655205][T13101] 8 80 4295141312 [ 2177.667572][T13101] 4 80 4295141312 [ 2177.681900][T13101] 1 90 4295141312 [ 2177.710650][T13101] last result at 4295141492 [ 2177.722039][T13101] last redo_fd_request at 4295154576 [ 2177.733675][T13101] status=80 [ 2177.743122][T13101] fdc_busy=1 [ 2177.748238][T13101] floppy_work.func=floppy_work_workfn [ 2177.756149][T13101] cont=ffffffff8a1f4920 08:03:11 executing program 0: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2177.777389][T13101] current_req=0000000000000000 [ 2177.790167][T13101] command_status=-1 [ 2177.795559][T13101] [ 2177.799990][T13101] floppy1: floppy timeout called [ 2177.852042][ T3758] [ 2177.852058][ T3758] floppy driver state [ 2177.852067][ T3758] ------------------- [ 2177.852076][ T3758] now=4295154630 last interrupt=4295141312 diff=13318 last called handler=recal_interrupt [ 2177.852161][ T3758] timeout_message=lock fdc [ 2177.852172][ T3758] last output bytes: [ 2177.852181][ T3758] 0 90 4295139496 [ 2177.852214][ T3758] 1 90 4295139496 [ 2177.852230][ T3758] 2 90 4295139496 [ 2177.852245][ T3758] 24 90 4295139496 [ 2177.852260][ T3758] 1b 90 4295139496 [ 2177.852274][ T3758] ff 90 4295139496 [ 2177.852288][ T3758] 12 80 4295141312 [ 2177.852301][ T3758] 3 90 4295141312 [ 2177.852315][ T3758] 13 80 4295141312 [ 2177.852329][ T3758] 0 90 4295141312 [ 2177.852344][ T3758] 1a 90 4295141312 [ 2177.852358][ T3758] 0 90 4295141312 [ 2177.852372][ T3758] 3 80 4295141312 [ 2177.852387][ T3758] a1 90 4295141312 [ 2177.852401][ T3758] 1e 90 4295141312 [ 2177.852415][ T3758] 7 80 4295141312 [ 2177.852428][ T3758] 1 90 4295141312 [ 2177.852443][ T3758] 8 80 4295141312 [ 2177.852457][ T3758] 4 80 4295141312 [ 2177.852471][ T3758] 1 90 4295141312 [ 2177.852485][ T3758] last result at 4295141492 [ 2177.852497][ T3758] last redo_fd_request at 4295154628 [ 2177.852569][ T3758] status=80 [ 2177.852583][ T3758] fdc_busy=1 [ 2177.852593][ T3758] floppy_work.func=floppy_work_workfn [ 2177.852617][ T3758] cont=ffffffff8a1f4920 08:03:11 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:11 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb78e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000001c0)='./bus\x00', 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r2, 0x0, 0x6}, 0x0) syz_io_uring_setup(0x777, &(0x7f0000001500), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x1, 0x4004, @fd_index=0x4, 0x8001, &(0x7f0000000080)="13c9e017712c2df46eb6ef3435bd30e8ccf25480", 0x14, 0x2, 0x1}, 0x100) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r5 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r5, 0x0, 0x8400fffffffa) 08:03:11 executing program 2: syz_open_dev$floppy(&(0x7f0000000040), 0xff, 0x80000) r0 = syz_open_procfs(0x0, 0x0) renameat(r0, &(0x7f0000000140)='./cgroup\x00', r0, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="4eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDCLRPRM(r0, 0x241) [ 2177.852630][ T3758] current_req=0000000000000000 [ 2177.852642][ T3758] command_status=-1 [ 2177.852653][ T3758] [ 2177.852731][ T3758] floppy1: floppy timeout called [ 2177.866210][ T3758] 08:03:11 executing program 3: r0 = syz_open_procfs(0x0, 0x0) renameat(r0, &(0x7f0000000140)='./cgroup\x00', r0, &(0x7f0000000040)='./cgroup\x00') r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x20000890}, 0x20040800) sendto$inet6(r0, &(0x7f0000000000)="87871cf97f8fcdb55191ff9eb2eb80a1a4732dec56b3b8ec97", 0x19, 0x40, 0x0, 0x0) r2 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r2, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2177.866224][ T3758] floppy driver state [ 2177.866233][ T3758] ------------------- [ 2177.866242][ T3758] now=4295154631 last interrupt=4295141312 diff=13319 last called handler=recal_interrupt [ 2177.866283][ T3758] timeout_message=lock fdc [ 2177.866294][ T3758] last output bytes: [ 2177.866303][ T3758] 0 90 4295139496 [ 2177.866319][ T3758] 1 90 4295139496 [ 2177.866334][ T3758] 2 90 4295139496 [ 2177.866350][ T3758] 24 90 4295139496 [ 2177.866366][ T3758] 1b 90 4295139496 [ 2177.866381][ T3758] ff 90 4295139496 [ 2177.866397][ T3758] 12 80 4295141312 [ 2177.866412][ T3758] 3 90 4295141312 [ 2177.866427][ T3758] 13 80 4295141312 [ 2177.866443][ T3758] 0 90 4295141312 [ 2177.866458][ T3758] 1a 90 4295141312 [ 2177.866472][ T3758] 0 90 4295141312 [ 2177.866487][ T3758] 3 80 4295141312 [ 2177.866502][ T3758] a1 90 4295141312 [ 2177.866518][ T3758] 1e 90 4295141312 [ 2177.866533][ T3758] 7 80 4295141312 [ 2177.866549][ T3758] 1 90 4295141312 [ 2177.866564][ T3758] 8 80 4295141312 [ 2177.866595][ T3758] 4 80 4295141312 [ 2177.866610][ T3758] 1 90 4295141312 [ 2177.866623][ T3758] last result at 4295141492 [ 2177.866633][ T3758] last redo_fd_request at 4295154630 [ 2177.866694][ T3758] status=80 [ 2177.866707][ T3758] fdc_busy=1 [ 2177.866717][ T3758] floppy_work.func=floppy_work_workfn [ 2177.866740][ T3758] cont=ffffffff8a1f4920 [ 2177.866752][ T3758] current_req=0000000000000000 [ 2177.866762][ T3758] command_status=-1 [ 2177.866773][ T3758] [ 2177.866849][ T3758] floppy1: floppy timeout called [ 2177.873215][ T3758] [ 2178.172420][T20982] loop0: detected capacity change from 0 to 87 [ 2178.180205][ T3758] floppy driver state [ 2178.419936][ T3758] ------------------- [ 2178.426246][ T3758] now=4295154687 last interrupt=4295141312 diff=13375 last called handler=recal_interrupt [ 2178.460155][ T37] audit: type=1804 audit(1638172991.925:747): pid=20982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1326/file1/bus" dev="loop0" ino=1048723 res=1 errno=0 [ 2178.465988][ T3758] timeout_message=lock fdc [ 2178.512744][ T37] audit: type=1800 audit(1638172991.935:748): pid=20982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048723 res=0 errno=0 [ 2178.524113][ T3758] last output bytes: [ 2178.566212][ T3758] 0 90 4295139496 [ 2178.571991][ T3758] 1 90 4295139496 [ 2178.580450][ T3758] 2 90 4295139496 [ 2178.587596][ T3758] 24 90 4295139496 [ 2178.595661][ T3758] 1b 90 4295139496 [ 2178.603013][ T3758] ff 90 4295139496 [ 2178.614335][ T3758] 12 80 4295141312 [ 2178.623454][ T3758] 3 90 4295141312 [ 2178.630227][ T3758] 13 80 4295141312 [ 2178.635897][ T3758] 0 90 4295141312 [ 2178.642748][ T3758] 1a 90 4295141312 [ 2178.648637][ T3758] 0 90 4295141312 [ 2178.653282][ T3758] 3 80 4295141312 [ 2178.659163][ T3758] a1 90 4295141312 [ 2178.667522][ T3758] 1e 90 4295141312 [ 2178.683311][ T3758] 7 80 4295141312 [ 2178.687732][ T3758] 1 90 4295141312 [ 2178.692166][ T3758] 8 80 4295141312 [ 2178.696138][ T3758] 4 80 4295141312 [ 2178.707599][ T3758] 1 90 4295141312 [ 2178.713701][ T3758] last result at 4295141492 [ 2178.725994][ T3758] last redo_fd_request at 4295154631 [ 2178.733756][ T3758] status=80 [ 2178.749786][ T3758] fdc_busy=1 [ 2178.757582][ T3758] floppy_work.func=floppy_work_workfn [ 2178.783533][ T3758] cont=ffffffff8a1f4920 [ 2178.794814][ T3758] current_req=0000000000000000 [ 2178.805954][ T3758] command_status=-1 [ 2178.815666][ T3758] [ 2178.822358][ T3758] floppy1: floppy timeout called 08:03:12 executing program 2: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) ioctl$FLOPPY_FDFMTEND(0xffffffffffffffff, 0x249) [ 2178.841945][ T3758] [ 2178.850488][ T3758] floppy driver state 08:03:12 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d5000/0x1000)=nil, &(0x7f0000000000)=0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb78e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000001c0)='./bus\x00', 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r2, 0x0, 0x6}, 0x0) syz_io_uring_setup(0x777, &(0x7f0000001500), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x1, 0x4004, @fd_index=0x4, 0x8001, &(0x7f0000000080)="13c9e017712c2df46eb6ef3435bd30e8ccf25480", 0x14, 0x2, 0x1}, 0x100) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r5 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r5, 0x0, 0x8400fffffffa) [ 2178.868632][ T3758] ------------------- [ 2178.874121][ T3758] now=4295154732 last interrupt=4295141312 diff=13420 last called handler=recal_interrupt [ 2178.885642][T20994] loop0: detected capacity change from 0 to 87 [ 2178.888302][ T3758] timeout_message=lock fdc [ 2178.905493][ T3758] last output bytes: [ 2178.913951][ T3758] 0 90 4295139496 [ 2178.920080][ T3758] 1 90 4295139496 [ 2178.926428][ T3758] 2 90 4295139496 [ 2178.933061][ T3758] 24 90 4295139496 [ 2178.939077][ T3758] 1b 90 4295139496 [ 2178.943623][ T3758] ff 90 4295139496 [ 2178.950098][ T3758] 12 80 4295141312 [ 2178.955691][ T3758] 3 90 4295141312 [ 2178.962011][ T3758] 13 80 4295141312 [ 2178.967071][ T3758] 0 90 4295141312 [ 2178.977640][ T3758] 1a 90 4295141312 [ 2178.990506][ T3758] 0 90 4295141312 [ 2178.997549][ T3758] 3 80 4295141312 [ 2179.003705][ T3758] a1 90 4295141312 [ 2179.019106][ T3758] 1e 90 4295141312 [ 2179.024310][ T3758] 7 80 4295141312 [ 2179.031330][ T3758] 1 90 4295141312 [ 2179.045603][ T3758] 8 80 4295141312 [ 2179.050164][ T3758] 4 80 4295141312 [ 2179.056906][ T3758] 1 90 4295141312 [ 2179.064882][ T3758] last result at 4295141492 [ 2179.072568][ T3758] last redo_fd_request at 4295154728 [ 2179.080426][ T3758] status=80 [ 2179.084120][ T3758] fdc_busy=1 [ 2179.088964][ T3758] floppy_work.func=floppy_work_workfn [ 2179.096050][ T3758] cont=ffffffff8a1f4960 [ 2179.104438][ T3758] current_req=0000000000000000 [ 2179.113126][ T3758] command_status=-1 [ 2179.120456][ T3758] [ 2179.127151][ T3758] floppy1: floppy timeout called [ 2179.133482][ T3758] floppy.c: no request in request_done [ 2179.134777][ T37] audit: type=1804 audit(1638172992.605:749): pid=20994 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1327/file1/bus" dev="sda1" ino=1181 res=1 errno=0 [ 2179.191089][T17293] [ 2179.194928][T17293] floppy driver state [ 2179.204221][T17293] ------------------- [ 2179.208730][ T37] audit: type=1800 audit(1638172992.605:750): pid=20994 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1181 res=0 errno=0 [ 2179.212194][T17293] now=4295154765 last interrupt=4295141312 diff=13453 last called handler=recal_interrupt [ 2179.256342][T17293] timeout_message=lock fdc [ 2179.263138][T17293] last output bytes: [ 2179.272592][T17293] 0 90 4295139496 [ 2179.283373][T17293] 1 90 4295139496 [ 2179.287462][T17293] 2 90 4295139496 [ 2179.292299][T17293] 24 90 4295139496 [ 2179.298157][T17293] 1b 90 4295139496 [ 2179.306793][T17293] ff 90 4295139496 [ 2179.312697][T17293] 12 80 4295141312 [ 2179.318377][T17293] 3 90 4295141312 [ 2179.325372][T17293] 13 80 4295141312 [ 2179.330826][T17293] 0 90 4295141312 [ 2179.342342][T17293] 1a 90 4295141312 [ 2179.354500][T17293] 0 90 4295141312 [ 2179.360186][T17293] 3 80 4295141312 [ 2179.370815][T17293] a1 90 4295141312 [ 2179.377418][T17293] 1e 90 4295141312 [ 2179.385035][T17293] 7 80 4295141312 [ 2179.393278][T17293] 1 90 4295141312 [ 2179.398208][T17293] 8 80 4295141312 [ 2179.403229][T17293] 4 80 4295141312 [ 2179.417573][T17293] 1 90 4295141312 [ 2179.424206][T17293] last result at 4295141492 [ 2179.430821][T17293] last redo_fd_request at 4295154759 [ 2179.438256][T17293] status=80 [ 2179.443714][T17293] fdc_busy=1 [ 2179.448654][T17293] floppy_work.func=floppy_work_workfn [ 2179.456293][T17293] cont=ffffffff8a1f4920 [ 2179.461904][T17293] current_req=0000000000000000 [ 2179.474124][T17293] command_status=-1 [ 2179.480562][T17293] [ 2179.484321][T17293] floppy1: floppy timeout called [ 2179.508279][T17293] [ 2179.511748][T17293] floppy driver state [ 2179.517448][T17293] ------------------- [ 2179.530531][T17293] now=4295154798 last interrupt=4295141312 diff=13486 last called handler=recal_interrupt [ 2179.547236][T17293] timeout_message=lock fdc [ 2179.563608][T17293] last output bytes: [ 2179.571474][T17293] 0 90 4295139496 [ 2179.581461][T17293] 1 90 4295139496 [ 2179.586741][T17293] 2 90 4295139496 [ 2179.592451][T17293] 24 90 4295139496 [ 2179.598008][T17293] 1b 90 4295139496 [ 2179.611043][T17293] ff 90 4295139496 [ 2179.616496][T17293] 12 80 4295141312 [ 2179.623375][T17293] 3 90 4295141312 [ 2179.631690][T17293] 13 80 4295141312 [ 2179.638649][T17293] 0 90 4295141312 [ 2179.645538][T17293] 1a 90 4295141312 [ 2179.651004][T17293] 0 90 4295141312 [ 2179.657619][T17293] 3 80 4295141312 [ 2179.664519][T17293] a1 90 4295141312 [ 2179.670792][T17293] 1e 90 4295141312 [ 2179.680375][T17293] 7 80 4295141312 [ 2179.697525][T17293] 1 90 4295141312 [ 2179.703049][T17293] 8 80 4295141312 [ 2179.716501][T17293] 4 80 4295141312 [ 2179.722985][T17293] 1 90 4295141312 [ 2179.727231][T17293] last result at 4295141492 [ 2179.734634][T17293] last redo_fd_request at 4295154796 [ 2179.741957][T17293] status=80 [ 2179.745800][T17293] fdc_busy=1 [ 2179.767290][T17293] floppy_work.func=floppy_work_workfn [ 2179.781217][T17293] cont=ffffffff8a1f4920 [ 2179.787759][T17293] current_req=0000000000000000 [ 2179.795958][T17293] command_status=-1 [ 2179.802542][T17293] [ 2179.807478][T17293] floppy1: floppy timeout called [ 2179.846952][T17293] 08:03:13 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2179.869101][T17293] floppy driver state [ 2179.875455][T17293] ------------------- [ 2179.908062][T17293] now=4295154836 last interrupt=4295141312 diff=13524 last called handler=recal_interrupt [ 2179.921131][T17293] timeout_message=lock fdc [ 2179.927741][T17293] last output bytes: [ 2179.934013][T17293] 0 90 4295139496 [ 2179.949286][T17293] 1 90 4295139496 [ 2179.956632][T17293] 2 90 4295139496 [ 2179.971859][T17293] 24 90 4295139496 [ 2179.989817][T17293] 1b 90 4295139496 [ 2180.002264][T17293] ff 90 4295139496 [ 2180.009115][T17293] 12 80 4295141312 [ 2180.025578][T17293] 3 90 4295141312 [ 2180.040630][T17293] 13 80 4295141312 [ 2180.053731][T17293] 0 90 4295141312 [ 2180.068055][T17293] 1a 90 4295141312 08:03:13 executing program 3: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDDEFPRM(r1, 0x301, &(0x7f0000000040)={0xfffffffe, 0x20000002, 0x0, 0x100, 0x0, 0x0, 0x3, 0x20, 0x86, 0x0}) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDGETDRVPRM(r2, 0x80580211, &(0x7f0000000240)) ioctl$FLOPPY_FDGETDRVPRM(r0, 0x80580211, &(0x7f0000000080)) 08:03:13 executing program 2: syz_open_dev$floppy(&(0x7f0000000040), 0x1, 0x400) r0 = syz_open_procfs(0x0, 0x0) renameat(r0, &(0x7f0000000140)='./cgroup\x00', r0, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDGETDRVPRM(r0, 0x80580211, &(0x7f0000000080)) [ 2180.098220][T17293] 0 90 4295141312 [ 2180.105053][T17293] 3 80 4295141312 [ 2180.114435][T17293] a1 90 4295141312 [ 2180.122844][T17293] 1e 90 4295141312 [ 2180.130421][T17293] 7 80 4295141312 [ 2180.141522][T17293] 1 90 4295141312 [ 2180.147657][T17293] 8 80 4295141312 [ 2180.160532][T17293] 4 80 4295141312 [ 2180.165576][T17293] 1 90 4295141312 [ 2180.173060][T17293] last result at 4295141492 [ 2180.182365][T17293] last redo_fd_request at 4295154828 [ 2180.190647][T17293] status=80 [ 2180.194656][T17293] fdc_busy=1 [ 2180.201224][T17293] floppy_work.func=floppy_work_workfn [ 2180.209254][T17293] cont=ffffffff8a1f4920 [ 2180.215793][T17293] current_req=0000000000000000 [ 2180.224443][T17293] command_status=-1 [ 2180.230598][T17293] [ 2180.234302][T17293] floppy1: floppy timeout called [ 2180.249795][T11777] [ 2180.253241][T11777] floppy driver state [ 2180.260121][T11777] ------------------- [ 2180.276668][T11777] now=4295154872 last interrupt=4295141312 diff=13560 last called handler=recal_interrupt [ 2180.293557][T11777] timeout_message=lock fdc [ 2180.304042][T11777] last output bytes: [ 2180.315840][T11777] 0 90 4295139496 [ 2180.328154][T11777] 1 90 4295139496 [ 2180.335791][T11777] 2 90 4295139496 [ 2180.341187][T11777] 24 90 4295139496 [ 2180.348888][T11777] 1b 90 4295139496 [ 2180.356648][T11777] ff 90 4295139496 [ 2180.363105][T11777] 12 80 4295141312 [ 2180.368544][T11777] 3 90 4295141312 [ 2180.373529][T11777] 13 80 4295141312 [ 2180.378524][T11777] 0 90 4295141312 [ 2180.385283][T11777] 1a 90 4295141312 [ 2180.392493][T11777] 0 90 4295141312 [ 2180.398830][T11777] 3 80 4295141312 [ 2180.405563][T11777] a1 90 4295141312 [ 2180.411629][T11777] 1e 90 4295141312 [ 2180.416856][T11777] 7 80 4295141312 [ 2180.422325][T11777] 1 90 4295141312 [ 2180.428359][T11777] 8 80 4295141312 [ 2180.434413][T11777] 4 80 4295141312 [ 2180.446929][T11777] 1 90 4295141312 [ 2180.458801][T11777] last result at 4295141492 [ 2180.468072][T11777] last redo_fd_request at 4295154869 [ 2180.482084][T11777] status=80 [ 2180.486592][T11777] fdc_busy=1 [ 2180.491387][T11777] floppy_work.func=floppy_work_workfn [ 2180.499343][T11777] cont=ffffffff8a1f4920 [ 2180.506396][T11777] current_req=0000000000000000 [ 2180.514455][T11777] command_status=-1 [ 2180.524269][T11777] [ 2180.528986][T11777] floppy1: floppy timeout called [ 2180.543892][T11777] [ 2180.547974][T11777] floppy driver state [ 2180.554906][T11777] ------------------- [ 2180.563953][T11777] now=4295154901 last interrupt=4295141312 diff=13589 last called handler=recal_interrupt [ 2180.583022][T11777] timeout_message=lock fdc [ 2180.600091][T11777] last output bytes: [ 2180.608756][T11777] 0 90 4295139496 [ 2180.615526][T11777] 1 90 4295139496 [ 2180.621695][T11777] 2 90 4295139496 [ 2180.627261][T11777] 24 90 4295139496 [ 2180.627759][T21010] loop0: detected capacity change from 0 to 87 [ 2180.634924][T11777] 1b 90 4295139496 [ 2180.648353][T11777] ff 90 4295139496 [ 2180.654386][T11777] 12 80 4295141312 08:03:14 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000080)=0x6) sendfile(r0, r1, 0x0, 0x8400fffffffa) 08:03:14 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2180.660805][T11777] 3 90 4295141312 [ 2180.665417][T11777] 13 80 4295141312 [ 2180.671302][T11777] 0 90 4295141312 [ 2180.676239][T11777] 1a 90 4295141312 [ 2180.681155][T11777] 0 90 4295141312 [ 2180.685620][T11777] 3 80 4295141312 [ 2180.690770][T11777] a1 90 4295141312 [ 2180.696420][T11777] 1e 90 4295141312 [ 2180.704054][T11777] 7 80 4295141312 [ 2180.709175][T11777] 1 90 4295141312 [ 2180.714412][T11777] 8 80 4295141312 [ 2180.719851][T11777] 4 80 4295141312 [ 2180.723922][ T37] audit: type=1804 audit(1638172994.195:751): pid=21010 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1328/file1/bus" dev="loop0" ino=1048724 res=1 errno=0 [ 2180.724737][T11777] 1 90 4295141312 [ 2180.724757][T11777] last result at 4295141492 [ 2180.724767][T11777] last redo_fd_request at 4295154898 [ 2180.724825][T11777] status=80 [ 2180.751904][T21010] syz-executor.0: attempt to access beyond end of device [ 2180.751904][T21010] loop0: rw=0, want=90, limit=87 [ 2180.766224][ T37] audit: type=1800 audit(1638172994.195:752): pid=21010 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048724 res=0 errno=0 [ 2180.786553][T11777] fdc_busy=1 [ 2180.838659][T11777] floppy_work.func=floppy_work_workfn [ 2180.846125][T11777] cont=ffffffff8a1f4920 [ 2180.851189][T11777] current_req=0000000000000000 [ 2180.857263][T11777] command_status=-1 [ 2180.865049][T11777] [ 2180.868551][T11777] floppy1: floppy timeout called [ 2180.893070][T11777] [ 2180.895874][T11777] floppy driver state [ 2180.906472][T11777] ------------------- [ 2180.910556][T11777] now=4295154935 last interrupt=4295141312 diff=13623 last called handler=recal_interrupt [ 2180.964993][T11777] timeout_message=lock fdc [ 2180.981220][T11777] last output bytes: [ 2181.020125][T11777] 0 90 4295139496 [ 2181.041190][T21019] loop0: detected capacity change from 0 to 87 08:03:14 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:14 executing program 0: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000480)={0x1, @win={{0x9, 0x3, 0x7ff, 0xe2}, 0x6, 0x8, &(0x7f0000000340)={{0x81, 0x7, 0x7, 0x10000}, &(0x7f0000000300)={{0x4, 0x8c1, 0x8, 0x2cf}}}, 0xfffff5e4, &(0x7f0000000380)="bd0fe824fdb08d52d930ad4d768f08a043ee292f78a4e69c800e7d3e8568bd6cc0249fcd450295f0c026e6364c12213452398296e5d5663836c490d422394c11fffb879658932c3ddf7d45355fa088dd6a599fe1322901bfdf3f8bc9c92128b7dde9c886a8c93b3281b81dbdce3548f3fe332350df63ce3f0ce401d4754a6960707670c10bdf789aa62dd4e0649d04973a458d9ecab7d75761b295dd9200ce5d6ec428971449b5478c9f94110a4e6b3c18e03855fe32731feb975ad48cda4e6497415586a3c3e7e2219e3e6304edf5eea4f221cc43f765", 0x5}}) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = syz_open_procfs(0x0, 0x0) r1 = syz_mount_image$efs(&(0x7f0000000640), &(0x7f0000000680)='./bus\x00', 0x3, 0x1, &(0x7f0000000780)=[{&(0x7f00000006c0)="ec16e13c2e5323e4a50c42ae64b789351f96600f35d58d7b9c35178b1901f9347488bbb2ab9a1b9508eca30a76f8ee60ece207c82732c236b8197602835cdb811124f654e7e7c5e5f0fd6e267b8f1dc86dc0cbdbc69d3782cc7d9c3233b83f3839b3c97e15fabff9c8c5ee7ffe9467867381593b7346bb9525a0ca763e76234c34448210f5edbe7a4d381506d95878c4f25f5cd922bb88f29b5846b390f0aa239b4e1eef06a084eca0", 0xa9, 0x8}], 0x1008000, &(0x7f00000007c0)={[{'+*[^*%-'}, {'$'}, {'msdos\x00'}, {'msdos\x00'}, {'+['}, {'.+[\'%]'}, {'msdos\x00'}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_lt={'euid<', 0xee00}}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@hash}, {@appraise_type}, {@dont_measure}, {@uid_gt={'uid>', 0xee00}}]}) renameat(r0, &(0x7f0000000c80)='./cgroup\x00', r1, &(0x7f0000000040)='./bus\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0000e9518d59f4efd17b9e8d61d15efd3c1251398baf4fdd4678866c85427114e2ec4dad7c10b6d897d88aee3e494cd2c25a8b5fe08d883f365067129ca20d774bca23977d7b82fcb044d0896c0cef957e2a4929db846c11c8550cd9f487ecc4fbd2ad6c1cac983e72d65a7a55e635bd2666213a6c39c6", @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) symlinkat(&(0x7f0000000240)='./file1\x00', r2, &(0x7f0000000280)='./cgroup\x00') bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f0000000080)='./file1\x00', r0}, 0x10) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) renameat(0xffffffffffffffff, &(0x7f0000000140)='./cgroup\x00', 0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000880)=@generic={0x6, "919d476e139f6801b3ab9c8b0e1b562914ca9c6fb4d8e364afeeaf6b81ed393f23714498f165f7b7fc59ff7f1315b5e8803ffe6b3e2ab922e2b9998a909420448c0f41ebc512edd741a1ef320fc0735f41a9d84f0ff5316106c0c3a79ca12145d70d9b255a11fb2dca3fe1bdfc12a22c936a5ec094a7f300c1a4ed7ab62d"}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000900)="a8e369a166f171efedbd6b51109f7f9c8144c496de0ee7cb083eb108db03439e68fabeeb7dd3256572795855564fa6709328f7d7be6ccbf677152c278a5092a2b37ad158bda57263cac0fe4c0369a36f9550cd1e296e9ae459119e9d08ea9960174b08e0234989ec7792b66d88b18eba7897f46583acde0c8e7b0d1a8f903995a6564bb18d6ca1e034ee1d2258f3c0442f89081f0cb7eeb0a51111ae7a05a2", 0x9f}, {&(0x7f00000009c0)="964cb1d81f70727c62feb44a38adf1f3af9b6da03c42cddef923e08f412bc0200e8dd1b8ff82805ee99c48c1320edc2c353b7d86582e0926d094b0a4a96141c43aa7b9cfcb8fcbd1290c8e", 0x4b}, {&(0x7f0000000a40)="f4f08495527b067330202fa4a8c2edd4a8cd4681ba0e79bc010efeb916b6392f2ec7f689feaac108e487a0b78a5c44755eaf08b6e64175276203be6e9c159d8550399fe71d9527d456d6e1d3b5437a3f9b87cd38029d46b5a6394e42ab27194dd04da5c0d27e78ace5fc11022a5617e24da217ec476dca05711252ef1f7bb24c1c5b", 0x82}], 0x3, &(0x7f0000000b40)=[{0xac, 0x117, 0x1ff, "49d1251e9a26bd6edb5e60454785b8195ad11661840ef66ec54bc0460c1a8dea94eb60456ea3eadf92925fa6b4f3016a6947815311630c006c377fbf97214a78d604811614ce6136adc2cedc78a83687660655ab85a4f1dd299cf12ee608a0217c9536ee2923e33c247cf9a97b40181619a89e57a77e3610b80b692fff44be7459e73b91ab7a868646d61725e7c15912d287686374a7044c952e424626f824"}, {0x40, 0x10c, 0xca8f, "35938554e069bda6051dc303240345a9b0c3e06235ccb15c77e4d169790e661fa23ad3427bcefaa78bc06cd3cf30f246c7c1303a"}], 0xec}, 0x4000) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) 08:03:14 executing program 3: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f0000000200)={0x2, &(0x7f0000000080)="2f3c928d0118dbe7fb4ba8d0ab59c1711464704b5de19d358eb6a0d012aa2c00118601e63e18579178258841bdd3008168735caec52e1a6f6e1f7aac78a0aba94467a6b0fc5ef78556b0423bd52e3ecb7d7daaacfdeb1eb74536344fbe332983c7095d4d7590b3a6df1ceebf552e648220c6b53cf7848814dbc9b4319f974a841139a0d84c414450348bc18906b643f1a20c07c56780cf1ae3d737d5c0dafdc11f979edc648a9baf28da729a7d4ce6608686e0be473fc13ba208981b9ec9947a27a9deeda47b8b11fdc52f92eb836bd156", &(0x7f0000000000)=0xed, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x2, "a680dc4539228a889609458d34d130b3", 0x0, '\x00', 0x7fffffff}) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0}) r1 = openat$bsg(0xffffff9c, &(0x7f0000000180), 0x22a401, 0x0) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) readahead(r2, 0x1, 0xbd) ioctl$FLOPPY_FDGETDRVPRM(r1, 0x80580211, &(0x7f0000000280)) 08:03:14 executing program 2: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDRAWCMD(r1, 0x258, &(0x7f0000000100)={0x40, &(0x7f0000000000)="5b53ea08b6d42def7fd22ade8d16b601945c10288b64417de55bedd0202f3078d1a6f2455831364bba889f73493771e9cfd45688b416fa4bb5d57d50a33b4f8b64091c4315915bc8cd4e41132b5ff0848df260fc37ed588e5ea41c2ceb2cb3fef39ccfdfa30a91ae3a6d9418c4d9fbc0ebd8ff1f8317e7d13dda079390ff7792b882ad11d1a087a900307791e2b339f1740086556218f51aa21d03170d890f47e6914796e13d79b6e1011b8c65aad2", &(0x7f00000000c0)=0x3, 0x0, 0xaf, 0x0, 0x0, 0xff, 0xbb, "97da29bab00d3e35fab9ba2fd3f88b54", 0x0, '\x00', 0x3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './cgroup\x00'}) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f0000000240)) [ 2181.058859][T11777] 1 90 4295139496 [ 2181.065360][T11777] 2 90 4295139496 [ 2181.073925][T11777] 24 90 4295139496 [ 2181.079290][T11777] 1b 90 4295139496 [ 2181.084948][T11777] ff 90 4295139496 [ 2181.095934][T11777] 12 80 4295141312 [ 2181.102305][T11777] 3 90 4295141312 [ 2181.108659][T11777] 13 80 4295141312 [ 2181.115240][T11777] 0 90 4295141312 [ 2181.127337][T11777] 1a 90 4295141312 [ 2181.134533][T11777] 0 90 4295141312 [ 2181.136327][ T37] audit: type=1804 audit(1638172994.605:753): pid=21019 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1329/file1/bus" dev="loop0" ino=1048725 res=1 errno=0 [ 2181.143176][T11777] 3 80 4295141312 [ 2181.173460][ T37] audit: type=1800 audit(1638172994.605:754): pid=21019 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048725 res=0 errno=0 [ 2181.181037][T11777] a1 90 4295141312 [ 2181.222369][T11777] 1e 90 4295141312 [ 2181.228120][T11777] 7 80 4295141312 [ 2181.233144][T11777] 1 90 4295141312 [ 2181.242524][T21019] syz-executor.0: attempt to access beyond end of device [ 2181.242524][T21019] loop0: rw=0, want=90, limit=87 [ 2181.245454][T11777] 8 80 4295141312 [ 2181.268919][T11777] 4 80 4295141312 [ 2181.274384][T11777] 1 90 4295141312 [ 2181.282744][T11777] last result at 4295141492 [ 2181.289392][T11777] last redo_fd_request at 4295154933 [ 2181.296480][T11777] status=80 [ 2181.302684][T11777] fdc_busy=1 [ 2181.307308][T11777] floppy_work.func=floppy_work_workfn [ 2181.331930][T11777] cont=ffffffff8a1f4920 [ 2181.341621][T11777] current_req=0000000000000000 [ 2181.348584][T11777] command_status=-1 [ 2181.354588][T11777] [ 2181.362060][T11777] floppy1: floppy timeout called [ 2181.373499][ T3758] [ 2181.396135][ T3758] floppy driver state [ 2181.406862][ T3758] ------------------- [ 2181.418169][ T3758] now=4295154987 last interrupt=4295141312 diff=13675 last called handler=recal_interrupt [ 2181.435573][ T3758] timeout_message=lock fdc [ 2181.442598][ T3758] last output bytes: [ 2181.447687][ T3758] 0 90 4295139496 [ 2181.454373][ T3758] 1 90 4295139496 [ 2181.461691][ T3758] 2 90 4295139496 [ 2181.467786][ T3758] 24 90 4295139496 [ 2181.476077][ T3758] 1b 90 4295139496 [ 2181.484693][ T3758] ff 90 4295139496 [ 2181.492383][ T3758] 12 80 4295141312 [ 2181.498123][ T3758] 3 90 4295141312 [ 2181.503504][ T3758] 13 80 4295141312 [ 2181.510167][ T3758] 0 90 4295141312 [ 2181.520783][ T3758] 1a 90 4295141312 [ 2181.525479][ T3758] 0 90 4295141312 [ 2181.534083][ T3758] 3 80 4295141312 [ 2181.545902][ T3758] a1 90 4295141312 [ 2181.559810][ T3758] 1e 90 4295141312 [ 2181.567297][ T3758] 7 80 4295141312 [ 2181.575256][ T3758] 1 90 4295141312 [ 2181.581370][ T3758] 8 80 4295141312 [ 2181.587097][ T3758] 4 80 4295141312 [ 2181.593081][ T3758] 1 90 4295141312 [ 2181.598197][ T3758] last result at 4295141492 [ 2181.604101][ T3758] last redo_fd_request at 4295154982 [ 2181.612181][ T3758] status=80 [ 2181.616436][ T3758] fdc_busy=1 [ 2181.621055][ T3758] floppy_work.func=floppy_work_workfn [ 2181.634133][ T3758] cont=ffffffff8a1f4920 [ 2181.643031][ T3758] current_req=0000000000000000 [ 2181.655965][ T3758] command_status=-1 [ 2181.662424][ T3758] [ 2181.666194][ T3758] floppy1: floppy timeout called [ 2181.675631][ T3758] [ 2181.680326][ T3758] floppy driver state [ 2181.685594][ T3758] ------------------- [ 2181.698924][ T3758] now=4295155015 last interrupt=4295141312 diff=13703 last called handler=recal_interrupt [ 2181.744912][ T3758] timeout_message=lock fdc [ 2181.751759][ T3758] last output bytes: [ 2181.757389][ T3758] 0 90 4295139496 [ 2181.763126][ T3758] 1 90 4295139496 [ 2181.771002][ T3758] 2 90 4295139496 [ 2181.788175][ T3758] 24 90 4295139496 [ 2181.794637][ T3758] 1b 90 4295139496 [ 2181.802906][ T3758] ff 90 4295139496 [ 2181.812170][ T3758] 12 80 4295141312 [ 2181.819806][ T3758] 3 90 4295141312 [ 2181.830103][ T3758] 13 80 4295141312 [ 2181.836807][ T3758] 0 90 4295141312 [ 2181.846615][ T3758] 1a 90 4295141312 [ 2181.854507][ T3758] 0 90 4295141312 [ 2181.860344][ T3758] 3 80 4295141312 [ 2181.865645][ T3758] a1 90 4295141312 [ 2181.871683][ T3758] 1e 90 4295141312 [ 2181.878934][ T3758] 7 80 4295141312 [ 2181.883932][ T3758] 1 90 4295141312 [ 2181.889479][ T3758] 8 80 4295141312 [ 2181.896077][ T3758] 4 80 4295141312 [ 2181.902643][ T3758] 1 90 4295141312 [ 2181.908377][ T3758] last result at 4295141492 [ 2181.924942][ T3758] last redo_fd_request at 4295155012 [ 2181.932535][ T3758] status=80 [ 2181.936466][ T3758] fdc_busy=1 [ 2181.941112][ T3758] floppy_work.func=floppy_work_workfn [ 2181.961960][ T3758] cont=ffffffff8a1f4920 [ 2181.968478][ T3758] current_req=0000000000000000 [ 2181.975340][ T3758] command_status=-1 [ 2181.980662][ T3758] [ 2181.986096][ T3758] floppy1: floppy timeout called [ 2182.006483][T17293] [ 2182.010128][T17293] floppy driver state [ 2182.025416][T17293] ------------------- [ 2182.034790][T17293] now=4295155048 last interrupt=4295141312 diff=13736 last called handler=recal_interrupt [ 2182.054538][T17293] timeout_message=lock fdc [ 2182.061670][T17293] last output bytes: [ 2182.076296][T17293] 0 90 4295139496 [ 2182.082713][T17293] 1 90 4295139496 [ 2182.094838][T17293] 2 90 4295139496 [ 2182.105520][T17293] 24 90 4295139496 [ 2182.112471][T17293] 1b 90 4295139496 [ 2182.118237][T17293] ff 90 4295139496 [ 2182.123966][T17293] 12 80 4295141312 [ 2182.128264][T17293] 3 90 4295141312 [ 2182.137232][T17293] 13 80 4295141312 [ 2182.148106][T17293] 0 90 4295141312 [ 2182.164389][T17293] 1a 90 4295141312 [ 2182.169862][T17293] 0 90 4295141312 [ 2182.185964][T17293] 3 80 4295141312 [ 2182.191341][T17293] a1 90 4295141312 [ 2182.198193][T17293] 1e 90 4295141312 [ 2182.204573][T17293] 7 80 4295141312 [ 2182.210306][T17293] 1 90 4295141312 [ 2182.214865][T17293] 8 80 4295141312 [ 2182.220275][T17293] 4 80 4295141312 [ 2182.225375][T17293] 1 90 4295141312 [ 2182.231178][T17293] last result at 4295141492 [ 2182.252866][T17293] last redo_fd_request at 4295155045 [ 2182.272450][T17293] status=80 [ 2182.282218][T17293] fdc_busy=1 [ 2182.289877][T17293] floppy_work.func=floppy_work_workfn [ 2182.296025][T17293] cont=ffffffff8a1f4920 [ 2182.301529][T17293] current_req=0000000000000000 [ 2182.308754][T17293] command_status=-1 [ 2182.314198][T17293] [ 2182.318346][T17293] floppy1: floppy timeout called [ 2182.351469][T17293] [ 2182.369723][T17293] floppy driver state [ 2182.402196][T17293] ------------------- [ 2182.408742][T17293] now=4295155086 last interrupt=4295141312 diff=13774 last called handler=recal_interrupt [ 2182.431259][T17293] timeout_message=lock fdc [ 2182.457421][T17293] last output bytes: [ 2182.467600][T17293] 0 90 4295139496 [ 2182.487279][T17293] 1 90 4295139496 [ 2182.494560][T17293] 2 90 4295139496 [ 2182.499855][T21028] loop0: detected capacity change from 0 to 87 [ 2182.509198][T17293] 24 90 4295139496 [ 2182.516030][T17293] 1b 90 4295139496 [ 2182.526028][T17293] ff 90 4295139496 08:03:15 executing program 3: r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) copy_file_range(r0, &(0x7f00000000c0)=0x3, 0xffffffffffffffff, &(0x7f0000000100)=0xfffffffffe3146d6, 0x5, 0x0) syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0x9, 0x0) ioctl$FLOPPY_FDDEFPRM(r1, 0x301, &(0x7f0000000040)={0x0, 0x7da3, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}) 08:03:15 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) r2 = getuid() setresuid(0xee01, r2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000540)=0xe4) syz_mount_image$ntfs(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x0, 0x4, &(0x7f00000002c0)=[{&(0x7f00000001c0), 0x0, 0x6}, {&(0x7f0000000200), 0x0, 0x34}, {&(0x7f0000000240)="21f186bf55bf7a8782e4f7b849303058633896102df0f6df0ac9f8675ad5e69a8095d203205eabbe1b2fc9890f7952ba5962875d2dc18683997f6355f3d879670b5b75381d5c9d0939fdd7eab26a666f73aafe75e3f36775782d07ec71eb57", 0x5f, 0x6}, {&(0x7f0000000340)="c707340fdeefb393c790928ac0819498d81dcc2e13d86a823e40ede9ebc25bced45a04769cbaafb70306b913aaf19da0a583132649744ee465878fee7efe8009a8b06955b0ae96f4fa476a2d8df1cd7d2dde40211971cba1a62bd7f9d6ac019bd3d5c2278b7eda0c6196f480a76b178b99297be93fe56d433cd894b5b867ede9967a1a13d9a95a828bb29fe36a9955a65f04a46e8f02055f3ccc9c3c26ee7a6318183bb8505445d2acec3dd2f579481184cf7c362e46d0ae051a0f29a074c3b147c15f52455de832805eedcd2588b1cbfa61b9b0916a02507dd9906ae131d0d9edf193e4b9858fe4f0952f8be7f2982a6e738e49e7bc", 0xf6, 0x6}], 0x20000, &(0x7f0000000580)={[{@disable_sparse_yes}], [{@hash}, {@euid_eq={'euid', 0x3d, r2}}, {@uid_lt={'uid<', r3}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}]}) 08:03:15 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0x40002, 0x800) r0 = syz_open_procfs(0x0, 0x0) renameat(r0, &(0x7f0000000140)='./cgroup\x00', r0, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDPOLLDRVSTAT(r0, 0x80340213, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1}) 08:03:15 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2182.553083][T17293] 12 80 4295141312 [ 2182.566537][T17293] 3 90 4295141312 [ 2182.577743][ T37] audit: type=1804 audit(1638172996.045:755): pid=21028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1330/file1/bus" dev="loop0" ino=1048726 res=1 errno=0 [ 2182.587608][T17293] 13 80 4295141312 [ 2182.598208][T21028] syz-executor.0: attempt to access beyond end of device [ 2182.598208][T21028] loop0: rw=0, want=90, limit=87 [ 2182.618188][ T37] audit: type=1800 audit(1638172996.045:756): pid=21028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048726 res=0 errno=0 [ 2182.650487][T17293] 0 90 4295141312 [ 2182.712795][T17293] 1a 90 4295141312 [ 2182.733769][T17293] 0 90 4295141312 [ 2182.753362][T17293] 3 80 4295141312 [ 2182.760910][T17293] a1 90 4295141312 [ 2182.790236][T17293] 1e 90 4295141312 [ 2182.822289][T17293] 7 80 4295141312 [ 2182.831258][T17293] 1 90 4295141312 [ 2182.837542][T17293] 8 80 4295141312 [ 2182.845023][T17293] 4 80 4295141312 [ 2182.852499][T17293] 1 90 4295141312 [ 2182.858516][T17293] last result at 4295141492 [ 2182.864893][T17293] last redo_fd_request at 4295155080 [ 2182.872213][T17293] status=80 [ 2182.878579][T17293] fdc_busy=1 [ 2182.883044][T17293] floppy_work.func=floppy_work_workfn [ 2182.892203][T17293] cont=ffffffff8a1f4920 [ 2182.898433][T17293] current_req=0000000000000000 [ 2182.905555][T17293] command_status=-1 [ 2182.911709][T17293] [ 2182.915169][T17293] floppy1: floppy timeout called [ 2182.930096][T11777] [ 2182.939690][T11777] floppy driver state [ 2182.991913][T11777] ------------------- [ 2183.004176][T11777] now=4295155145 last interrupt=4295141312 diff=13833 last called handler=recal_interrupt [ 2183.017281][T21042] loop0: detected capacity change from 0 to 4 [ 2183.029079][T11777] timeout_message=lock fdc [ 2183.052105][T21042] FAT-fs (loop0): bogus number of reserved sectors [ 2183.059057][T11777] last output bytes: [ 2183.064940][T21042] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2183.070301][T11777] 0 90 4295139496 [ 2183.106154][T11777] 1 90 4295139496 [ 2183.110884][T11777] 2 90 4295139496 [ 2183.115624][T11777] 24 90 4295139496 [ 2183.120926][T11777] 1b 90 4295139496 [ 2183.136056][T11777] ff 90 4295139496 [ 2183.143682][T11777] 12 80 4295141312 [ 2183.150083][T11777] 3 90 4295141312 [ 2183.155023][T11777] 13 80 4295141312 08:03:16 executing program 2: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) ioctl$FLOPPY_FDFMTEND(r0, 0x249) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDFMTEND(r1, 0x249) 08:03:16 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x800, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 08:03:16 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2183.167377][ T37] audit: type=1804 audit(1638172996.635:757): pid=21045 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1331/file1/bus" dev="sda1" ino=1198 res=1 errno=0 [ 2183.206382][T11777] 0 90 4295141312 [ 2183.215274][T11777] 1a 90 4295141312 [ 2183.219495][ T37] audit: type=1800 audit(1638172996.635:758): pid=21045 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1198 res=0 errno=0 [ 2183.222504][T11777] 0 90 4295141312 [ 2183.263524][T11777] 3 80 4295141312 [ 2183.269908][T11777] a1 90 4295141312 [ 2183.276653][T11777] 1e 90 4295141312 [ 2183.282428][T11777] 7 80 4295141312 [ 2183.289948][T11777] 1 90 4295141312 [ 2183.295709][T11777] 8 80 4295141312 [ 2183.304629][T11777] 4 80 4295141312 [ 2183.313976][T11777] 1 90 4295141312 [ 2183.323203][T11777] last result at 4295141492 [ 2183.336466][T11777] last redo_fd_request at 4295155136 [ 2183.346093][T11777] status=80 [ 2183.352218][T11777] fdc_busy=1 [ 2183.359271][T11777] floppy_work.func=floppy_work_workfn [ 2183.376837][T11777] cont=ffffffff8a1f4920 [ 2183.386172][T11777] current_req=0000000000000000 [ 2183.393873][T11777] command_status=-1 [ 2183.399917][T11777] [ 2183.404841][T11777] floppy1: floppy timeout called [ 2183.430181][T11777] [ 2183.433270][T11777] floppy driver state [ 2183.438944][T11777] ------------------- [ 2183.444430][T11777] now=4295155189 last interrupt=4295141312 diff=13877 last called handler=recal_interrupt [ 2183.461097][T11777] timeout_message=lock fdc [ 2183.467920][T11777] last output bytes: [ 2183.474419][T11777] 0 90 4295139496 [ 2183.481087][T11777] 1 90 4295139496 [ 2183.493341][T11777] 2 90 4295139496 [ 2183.502812][T11777] 24 90 4295139496 [ 2183.510136][T11777] 1b 90 4295139496 [ 2183.519226][T11777] ff 90 4295139496 [ 2183.534749][T11777] 12 80 4295141312 [ 2183.541219][T11777] 3 90 4295141312 [ 2183.547656][T11777] 13 80 4295141312 [ 2183.560073][T11777] 0 90 4295141312 [ 2183.565968][T11777] 1a 90 4295141312 [ 2183.572218][T11777] 0 90 4295141312 [ 2183.578555][T11777] 3 80 4295141312 [ 2183.583980][T11777] a1 90 4295141312 [ 2183.589293][T11777] 1e 90 4295141312 [ 2183.596062][T11777] 7 80 4295141312 [ 2183.602881][T11777] 1 90 4295141312 [ 2183.609863][T11777] 8 80 4295141312 [ 2183.616302][T11777] 4 80 4295141312 [ 2183.623394][T11777] 1 90 4295141312 [ 2183.629142][T11777] last result at 4295141492 [ 2183.636348][T11777] last redo_fd_request at 4295155188 [ 2183.643681][T11777] status=80 [ 2183.652700][T11777] fdc_busy=1 [ 2183.663148][T11777] floppy_work.func=floppy_work_workfn [ 2183.681150][T11777] cont=ffffffff8a1f4920 [ 2183.689880][T11777] current_req=0000000000000000 [ 2183.704290][T11777] command_status=-1 [ 2183.711199][T11777] [ 2183.714692][T11777] floppy1: floppy timeout called [ 2183.731150][T11777] [ 2183.735357][T11777] floppy driver state [ 2183.747716][T11777] ------------------- [ 2183.756638][T11777] now=4295155220 last interrupt=4295141312 diff=13908 last called handler=recal_interrupt [ 2183.776962][T11777] timeout_message=lock fdc [ 2183.786607][T11777] last output bytes: [ 2183.793386][T11777] 0 90 4295139496 [ 2183.799680][T11777] 1 90 4295139496 [ 2183.810372][T11777] 2 90 4295139496 [ 2183.818430][T11777] 24 90 4295139496 [ 2183.841174][T11777] 1b 90 4295139496 [ 2183.859702][T11777] ff 90 4295139496 [ 2183.864783][T11777] 12 80 4295141312 [ 2183.874172][T11777] 3 90 4295141312 [ 2183.879956][T11777] 13 80 4295141312 [ 2183.886134][T11777] 0 90 4295141312 [ 2183.892707][T11777] 1a 90 4295141312 [ 2183.900180][T11777] 0 90 4295141312 [ 2183.906571][T11777] 3 80 4295141312 [ 2183.914064][T11777] a1 90 4295141312 [ 2183.921463][T11777] 1e 90 4295141312 [ 2183.931180][T11777] 7 80 4295141312 [ 2183.938320][T11777] 1 90 4295141312 [ 2183.944724][T11777] 8 80 4295141312 [ 2183.964245][T11777] 4 80 4295141312 [ 2183.977429][T11777] 1 90 4295141312 [ 2183.986189][T11777] last result at 4295141492 [ 2183.994444][T11777] last redo_fd_request at 4295155217 [ 2184.012091][T11777] status=80 [ 2184.036970][T11777] fdc_busy=1 [ 2184.055835][T11777] floppy_work.func=floppy_work_workfn [ 2184.081017][T11777] cont=ffffffff8a1f4920 [ 2184.105789][T11777] current_req=0000000000000000 [ 2184.134228][T11777] command_status=-1 [ 2184.141146][T11777] [ 2184.144693][T11777] floppy1: floppy timeout called [ 2184.164087][T11777] [ 2184.167757][T11777] floppy driver state [ 2184.192386][T11777] ------------------- [ 2184.198871][T11777] now=4295155265 last interrupt=4295141312 diff=13953 last called handler=recal_interrupt [ 2184.216252][T11777] timeout_message=lock fdc [ 2184.224475][T11777] last output bytes: [ 2184.230584][T11777] 0 90 4295139496 [ 2184.236676][T11777] 1 90 4295139496 [ 2184.243265][T11777] 2 90 4295139496 [ 2184.259232][T11777] 24 90 4295139496 [ 2184.265778][T11777] 1b 90 4295139496 [ 2184.273908][T11777] ff 90 4295139496 [ 2184.281731][T11777] 12 80 4295141312 [ 2184.289818][T11777] 3 90 4295141312 [ 2184.299723][T11777] 13 80 4295141312 [ 2184.310226][T11777] 0 90 4295141312 [ 2184.317972][T11777] 1a 90 4295141312 [ 2184.323810][T11777] 0 90 4295141312 [ 2184.329417][T11777] 3 80 4295141312 [ 2184.335025][T11777] a1 90 4295141312 [ 2184.340593][T11777] 1e 90 4295141312 [ 2184.346295][T11777] 7 80 4295141312 [ 2184.360582][T11777] 1 90 4295141312 [ 2184.365923][T11777] 8 80 4295141312 [ 2184.394924][T11777] 4 80 4295141312 [ 2184.411691][T11777] 1 90 4295141312 [ 2184.435456][T11777] last result at 4295141492 [ 2184.450502][T11777] last redo_fd_request at 4295155261 [ 2184.474470][T11777] status=80 [ 2184.479827][T11777] fdc_busy=1 [ 2184.486399][T11777] floppy_work.func=floppy_work_workfn [ 2184.498020][T11777] cont=ffffffff8a1f4920 [ 2184.504395][T11777] current_req=0000000000000000 [ 2184.529663][T11777] command_status=-1 [ 2184.539057][T11777] [ 2184.552325][T11777] floppy1: floppy timeout called [ 2184.578360][T11777] [ 2184.584600][T11777] floppy driver state [ 2184.595087][T11777] ------------------- [ 2184.618779][T11777] now=4295155307 last interrupt=4295141312 diff=13995 last called handler=recal_interrupt [ 2184.650558][T11777] timeout_message=lock fdc [ 2184.678353][T11777] last output bytes: [ 2184.703628][T11777] 0 90 4295139496 [ 2184.710902][T11777] 1 90 4295139496 [ 2184.720906][T11777] 2 90 4295139496 [ 2184.729516][T11777] 24 90 4295139496 [ 2184.743809][T11777] 1b 90 4295139496 [ 2184.783087][T11777] ff 90 4295139496 08:03:18 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 08:03:18 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:18 executing program 3: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x301, &(0x7f0000000040)={0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2184.788562][T11777] 12 80 4295141312 [ 2184.825077][T11777] 3 90 4295141312 [ 2184.829223][T21050] loop0: detected capacity change from 0 to 87 [ 2184.841564][T11777] 13 80 4295141312 [ 2184.848179][T11777] 0 90 4295141312 [ 2184.853949][T11777] 1a 90 4295141312 [ 2184.866901][T11777] 0 90 4295141312 [ 2184.874310][T11777] 3 80 4295141312 [ 2184.890273][T11777] a1 90 4295141312 [ 2184.896976][T11777] 1e 90 4295141312 [ 2184.908898][T11777] 7 80 4295141312 08:03:18 executing program 2: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r2], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x4048813) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f00000000c0)={@desc={0x1, 0x0, @desc2}, 0x10, 0x0, '\x00', @d}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000080)) ioctl$FLOPPY_FDWERRORCLR(r0, 0x256) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x8000, 0x8}) [ 2184.926957][ T37] audit: type=1804 audit(1638172998.395:759): pid=21050 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1332/file1/bus" dev="loop0" ino=1048727 res=1 errno=0 [ 2184.934072][T11777] 1 90 4295141312 [ 2184.967592][T11777] 8 80 4295141312 [ 2184.976938][T11777] 4 80 4295141312 [ 2184.983509][T11777] 1 90 4295141312 [ 2184.985959][ T37] audit: type=1800 audit(1638172998.435:760): pid=21050 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048727 res=0 errno=0 [ 2184.989088][T11777] last result at 4295141492 [ 2185.025253][T11777] last redo_fd_request at 4295155301 [ 2185.037792][T11777] status=80 [ 2185.042104][T11777] fdc_busy=1 [ 2185.047565][T11777] floppy_work.func=floppy_work_workfn [ 2185.060649][T11777] cont=ffffffff8a1f4920 [ 2185.066267][T11777] current_req=0000000000000000 [ 2185.075105][T11777] command_status=-1 [ 2185.095461][T11777] [ 2185.101241][T11777] floppy1: floppy timeout called [ 2185.133691][T17293] [ 2185.137039][T17293] floppy driver state [ 2185.145771][T17293] ------------------- [ 2185.152726][T17293] now=4295155360 last interrupt=4295141312 diff=14048 last called handler=recal_interrupt [ 2185.169218][T17293] timeout_message=lock fdc [ 2185.177455][T17293] last output bytes: [ 2185.184759][T17293] 0 90 4295139496 [ 2185.191491][T17293] 1 90 4295139496 [ 2185.198710][T17293] 2 90 4295139496 [ 2185.227808][T17293] 24 90 4295139496 [ 2185.233874][T17293] 1b 90 4295139496 [ 2185.242487][T17293] ff 90 4295139496 [ 2185.249657][T17293] 12 80 4295141312 [ 2185.257199][T17293] 3 90 4295141312 [ 2185.263362][T17293] 13 80 4295141312 [ 2185.269340][T17293] 0 90 4295141312 [ 2185.275809][T17293] 1a 90 4295141312 [ 2185.281778][T17293] 0 90 4295141312 [ 2185.286560][T17293] 3 80 4295141312 [ 2185.292616][T17293] a1 90 4295141312 [ 2185.299214][T17293] 1e 90 4295141312 [ 2185.305155][T17293] 7 80 4295141312 [ 2185.310903][T17293] 1 90 4295141312 [ 2185.316234][T17293] 8 80 4295141312 [ 2185.321880][T17293] 4 80 4295141312 [ 2185.327022][T17293] 1 90 4295141312 [ 2185.336058][T17293] last result at 4295141492 [ 2185.342862][T17293] last redo_fd_request at 4295155356 [ 2185.366328][T17293] status=80 [ 2185.372899][T17293] fdc_busy=1 [ 2185.377995][T17293] floppy_work.func=floppy_work_workfn [ 2185.378028][T17293] cont=ffffffff8a1f4920 [ 2185.378041][T17293] current_req=0000000000000000 [ 2185.378053][T17293] command_status=-1 [ 2185.403785][T17293] [ 2185.408119][T17293] floppy1: floppy timeout called [ 2185.415177][T17293] [ 2185.418822][T17293] floppy driver state [ 2185.424700][T17293] ------------------- [ 2185.432556][T17293] now=4295155388 last interrupt=4295141312 diff=14076 last called handler=recal_interrupt [ 2185.449452][T17293] timeout_message=lock fdc [ 2185.458646][T17293] last output bytes: [ 2185.466513][T17293] 0 90 4295139496 [ 2185.473046][T17293] 1 90 4295139496 [ 2185.480323][T17293] 2 90 4295139496 [ 2185.484601][T17293] 24 90 4295139496 [ 2185.490864][T17293] 1b 90 4295139496 [ 2185.499142][T17293] ff 90 4295139496 [ 2185.507731][T17293] 12 80 4295141312 [ 2185.514805][T17293] 3 90 4295141312 [ 2185.521367][T17293] 13 80 4295141312 [ 2185.535880][T17293] 0 90 4295141312 [ 2185.543183][T17293] 1a 90 4295141312 [ 2185.548738][T17293] 0 90 4295141312 [ 2185.566699][T17293] 3 80 4295141312 [ 2185.573209][T17293] a1 90 4295141312 [ 2185.579136][T17293] 1e 90 4295141312 [ 2185.584208][T17293] 7 80 4295141312 [ 2185.588785][T17293] 1 90 4295141312 [ 2185.593823][T17293] 8 80 4295141312 [ 2185.598744][T17293] 4 80 4295141312 [ 2185.604697][T17293] 1 90 4295141312 [ 2185.624057][T17293] last result at 4295141492 [ 2185.631297][T17293] last redo_fd_request at 4295155386 [ 2185.640556][T17293] status=80 [ 2185.645885][T17293] fdc_busy=1 [ 2185.651868][T17293] floppy_work.func=floppy_work_workfn [ 2185.663179][T17293] cont=ffffffff8a1f4920 [ 2185.671249][T17293] current_req=0000000000000000 [ 2185.677630][T17293] command_status=-1 [ 2185.684129][T17293] [ 2185.689408][T17293] floppy1: floppy timeout called [ 2185.698439][T17293] [ 2185.701601][T17293] floppy driver state [ 2185.706206][T17293] ------------------- [ 2185.714407][T17293] now=4295155416 last interrupt=4295141312 diff=14104 last called handler=recal_interrupt [ 2185.731527][T17293] timeout_message=lock fdc [ 2185.758380][T17293] last output bytes: [ 2185.764940][T17293] 0 90 4295139496 [ 2185.772647][T17293] 1 90 4295139496 [ 2185.778584][T17293] 2 90 4295139496 [ 2185.784166][T17293] 24 90 4295139496 [ 2185.790076][T17293] 1b 90 4295139496 [ 2185.795793][T17293] ff 90 4295139496 [ 2185.805621][T17293] 12 80 4295141312 [ 2185.812023][T17293] 3 90 4295141312 [ 2185.816583][T17293] 13 80 4295141312 [ 2185.822851][T17293] 0 90 4295141312 [ 2185.829484][T17293] 1a 90 4295141312 [ 2185.835019][T17293] 0 90 4295141312 [ 2185.841306][T17293] 3 80 4295141312 [ 2185.846721][T17293] a1 90 4295141312 [ 2185.853632][T17293] 1e 90 4295141312 [ 2185.860269][T17293] 7 80 4295141312 [ 2185.873965][T17293] 1 90 4295141312 [ 2185.882627][T17293] 8 80 4295141312 [ 2185.889348][T17293] 4 80 4295141312 [ 2185.894779][T17293] 1 90 4295141312 [ 2185.901759][T17293] last result at 4295141492 [ 2185.908167][T17293] last redo_fd_request at 4295155414 [ 2185.915926][T17293] status=80 [ 2185.919783][T17293] fdc_busy=1 [ 2185.926982][T17293] floppy_work.func=floppy_work_workfn [ 2185.934820][T17293] cont=ffffffff8a1f4920 [ 2185.942811][T17293] current_req=0000000000000000 [ 2185.950813][T17293] command_status=-1 [ 2185.957297][T17293] [ 2185.962049][T17293] floppy1: floppy timeout called [ 2185.995578][ T3758] [ 2186.001651][ T3758] floppy driver state [ 2186.036824][ T3758] ------------------- [ 2186.051181][ T3758] now=4295155450 last interrupt=4295141312 diff=14138 last called handler=recal_interrupt [ 2186.076617][ T3758] timeout_message=lock fdc [ 2186.086472][ T3758] last output bytes: [ 2186.099194][ T3758] 0 90 4295139496 [ 2186.106553][ T3758] 1 90 4295139496 [ 2186.125843][ T3758] 2 90 4295139496 [ 2186.134944][ T3758] 24 90 4295139496 [ 2186.142716][ T3758] 1b 90 4295139496 [ 2186.152176][ T3758] ff 90 4295139496 [ 2186.166184][ T3758] 12 80 4295141312 [ 2186.176663][ T3758] 3 90 4295141312 [ 2186.184182][ T3758] 13 80 4295141312 [ 2186.192947][ T3758] 0 90 4295141312 [ 2186.206509][ T3758] 1a 90 4295141312 [ 2186.212907][ T3758] 0 90 4295141312 [ 2186.227113][ T3758] 3 80 4295141312 [ 2186.248284][ T3758] a1 90 4295141312 [ 2186.254783][ T3758] 1e 90 4295141312 [ 2186.262893][ T3758] 7 80 4295141312 [ 2186.270171][ T3758] 1 90 4295141312 [ 2186.275664][ T3758] 8 80 4295141312 [ 2186.284145][ T3758] 4 80 4295141312 [ 2186.291484][ T3758] 1 90 4295141312 [ 2186.297561][ T3758] last result at 4295141492 [ 2186.305010][ T3758] last redo_fd_request at 4295155444 [ 2186.314958][ T3758] status=80 08:03:19 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 08:03:19 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:19 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7fc750a0971b7e3bdc33a652f30e64c31a0b6f925e786f8eca21b5762e03ece9d9a9b2c3a9dcf0aebadc4cdf21a0278e209ef9f5f4eef2554516d206eaf8c3bfc79b90d6c4348caa92ba277e40c06235597b07b16d8aea627e95013e0b12570749a882f475a9c", 0x74, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) open(&(0x7f0000000080)='./file1\x00', 0x200000, 0x60) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2186.316840][T21061] loop0: detected capacity change from 0 to 87 [ 2186.326431][ T3758] fdc_busy=1 [ 2186.341276][T21063] loop3: detected capacity change from 0 to 87 [ 2186.347944][ T3758] floppy_work.func=floppy_work_workfn [ 2186.365536][ T3758] cont=ffffffff8a1f4920 [ 2186.381732][ T3758] current_req=0000000000000000 [ 2186.389166][ T3758] command_status=-1 [ 2186.394746][ T3758] [ 2186.414229][ T3758] floppy1: floppy timeout called [ 2186.436631][ T3758] [ 2186.440736][ T3758] floppy driver state [ 2186.446105][ T3758] ------------------- [ 2186.451486][ T3758] now=4295155489 last interrupt=4295141312 diff=14177 last called handler=recal_interrupt [ 2186.470083][ T3758] timeout_message=lock fdc [ 2186.489806][ T3758] last output bytes: [ 2186.501624][ T3758] 0 90 4295139496 [ 2186.509286][ T3758] 1 90 4295139496 [ 2186.512578][ T37] audit: type=1804 audit(1638172999.985:761): pid=21063 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir938124162/syzkaller.1iDaaV/1369/file1/bus" dev="sda1" ino=1194 res=1 errno=0 [ 2186.515515][ T3758] 2 90 4295139496 [ 2186.548607][ T37] audit: type=1800 audit(1638172999.985:762): pid=21063 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1194 res=0 errno=0 [ 2186.557007][ T3758] 24 90 4295139496 [ 2186.583418][ T37] audit: type=1804 audit(1638172999.985:763): pid=21061 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1333/file1/bus" dev="loop0" ino=1048728 res=1 errno=0 [ 2186.614320][ T3758] 1b 90 4295139496 [ 2186.653436][ T37] audit: type=1800 audit(1638172999.985:764): pid=21061 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048728 res=0 errno=0 [ 2186.687000][ T3758] ff 90 4295139496 [ 2186.695903][ T3758] 12 80 4295141312 [ 2186.716059][ T3758] 3 90 4295141312 [ 2186.722919][ T3758] 13 80 4295141312 [ 2186.732568][ T3758] 0 90 4295141312 [ 2186.745449][ T3758] 1a 90 4295141312 [ 2186.751218][ T3758] 0 90 4295141312 [ 2186.756672][ T3758] 3 80 4295141312 [ 2186.764941][ T3758] a1 90 4295141312 [ 2186.771155][ T3758] 1e 90 4295141312 [ 2186.777053][ T3758] 7 80 4295141312 [ 2186.783629][ T3758] 1 90 4295141312 [ 2186.792622][ T3758] 8 80 4295141312 [ 2186.801613][ T3758] 4 80 4295141312 [ 2186.810149][ T3758] 1 90 4295141312 [ 2186.817096][ T3758] last result at 4295141492 [ 2186.825019][ T3758] last redo_fd_request at 4295155487 [ 2186.834670][ T3758] status=80 [ 2186.843678][ T3758] fdc_busy=1 [ 2186.876925][ T3758] floppy_work.func=floppy_work_workfn [ 2186.889814][ T3758] cont=ffffffff8a1f4920 [ 2186.901286][ T3758] current_req=0000000000000000 [ 2186.914178][ T3758] command_status=-1 [ 2186.927611][ T3758] [ 2186.933260][ T3758] floppy1: floppy timeout called [ 2186.973070][T11777] [ 2186.976717][T11777] floppy driver state [ 2186.994262][T11777] ------------------- [ 2187.008647][T11777] now=4295155546 last interrupt=4295141312 diff=14234 last called handler=recal_interrupt [ 2187.033083][T11777] timeout_message=lock fdc [ 2187.050380][T11777] last output bytes: [ 2187.062640][T11777] 0 90 4295139496 08:03:20 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 08:03:20 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2187.073893][T11777] 1 90 4295139496 [ 2187.088855][T21068] loop0: detected capacity change from 0 to 87 [ 2187.099261][T11777] 2 90 4295139496 [ 2187.105085][T11777] 24 90 4295139496 [ 2187.110977][T11777] 1b 90 4295139496 [ 2187.116090][T11777] ff 90 4295139496 [ 2187.128135][T11777] 12 80 4295141312 [ 2187.135192][T11777] 3 90 4295141312 [ 2187.144073][T11777] 13 80 4295141312 [ 2187.153372][T11777] 0 90 4295141312 [ 2187.163169][T11777] 1a 90 4295141312 [ 2187.169646][T11777] 0 90 4295141312 [ 2187.175922][T11777] 3 80 4295141312 [ 2187.182680][T11777] a1 90 4295141312 [ 2187.187289][T11777] 1e 90 4295141312 [ 2187.193679][T11777] 7 80 4295141312 [ 2187.200858][T11777] 1 90 4295141312 [ 2187.208855][T11777] 8 80 4295141312 [ 2187.216500][T11777] 4 80 4295141312 [ 2187.225135][T11777] 1 90 4295141312 [ 2187.233882][T11777] last result at 4295141492 [ 2187.242595][T11777] last redo_fd_request at 4295155540 [ 2187.256327][T11777] status=80 [ 2187.263877][ T37] audit: type=1804 audit(1638173000.735:765): pid=21068 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1334/file1/bus" dev="loop0" ino=1048729 res=1 errno=0 [ 2187.306911][T11777] fdc_busy=1 [ 2187.327947][T11777] floppy_work.func=floppy_work_workfn [ 2187.336602][T11777] cont=ffffffff8a1f4920 [ 2187.347718][T11777] current_req=0000000000000000 [ 2187.366956][ T37] audit: type=1800 audit(1638173000.735:766): pid=21068 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048729 res=0 errno=0 [ 2187.417091][T11777] command_status=-1 [ 2187.445216][T11777] [ 2187.456223][T11777] floppy1: floppy timeout called [ 2187.489190][T13101] [ 2187.492539][T13101] floppy driver state [ 2187.508043][T13101] ------------------- [ 2187.513402][T13101] now=4295155595 last interrupt=4295141312 diff=14283 last called handler=recal_interrupt [ 2187.528243][T13101] timeout_message=lock fdc [ 2187.537590][T13101] last output bytes: [ 2187.556015][T13101] 0 90 4295139496 [ 2187.566769][T13101] 1 90 4295139496 [ 2187.577671][T13101] 2 90 4295139496 [ 2187.586609][T13101] 24 90 4295139496 [ 2187.599498][T13101] 1b 90 4295139496 [ 2187.610743][T13101] ff 90 4295139496 [ 2187.616629][T13101] 12 80 4295141312 [ 2187.624143][T13101] 3 90 4295141312 [ 2187.630439][T13101] 13 80 4295141312 [ 2187.646055][T13101] 0 90 4295141312 [ 2187.654450][T21074] loop0: detected capacity change from 0 to 87 [ 2187.662318][T13101] 1a 90 4295141312 08:03:21 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7fc750a0971b7e3bdc33a652f30e64c31a0b6f925e786f8eca21b5762e03ece9d9a9b2c3a9dcf0aebadc4cdf21a0278e209ef9f5f4eef2554516d206eaf8c3bfc79b90d6c4348caa92ba277e40c06235597b07b16d8aea627e95013e0b12570749a882f475a9c", 0x74, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) open(&(0x7f0000000080)='./file1\x00', 0x200000, 0x60) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 08:03:21 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) 08:03:21 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:21 executing program 2: getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001500)=0x2f) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000003c0)={r4, 0x1ff}, 0x14) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000280), &(0x7f0000000300)=0x4) r5 = syz_open_procfs(0x0, 0x0) renameat(r5, &(0x7f0000000140)='./cgroup\x00', r5, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000340)={r2, 0x5}, 0xc) renameat(0xffffffffffffffff, &(0x7f0000000140)='./cgroup\x00', 0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="0004000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000380)=""/7, 0x7, 0x40000040, &(0x7f0000000400)={0xa, 0x4e21, 0x5, @mcast1, 0x5}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={r4, @in={{0x2, 0x0, @multicast1}}, 0x1000, 0x963f, 0x8001, 0x8, 0x0, 0x3, 0x81}, &(0x7f0000000240)=0x9c) r6 = socket(0x1e, 0x80000, 0x7) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000140)={r0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={r0, 0x10000}, 0x8) [ 2187.669580][T13101] 0 90 4295141312 [ 2187.676439][T13101] 3 80 4295141312 [ 2187.681516][T13101] a1 90 4295141312 [ 2187.687156][T21076] loop3: detected capacity change from 0 to 87 [ 2187.689160][T13101] 1e 90 4295141312 [ 2187.704869][T13101] 7 80 4295141312 [ 2187.710255][T13101] 1 90 4295141312 [ 2187.715116][T13101] 8 80 4295141312 [ 2187.720036][T13101] 4 80 4295141312 [ 2187.724408][T13101] 1 90 4295141312 [ 2187.728327][T13101] last result at 4295141492 [ 2187.732652][T13101] last redo_fd_request at 4295155592 [ 2187.737466][T13101] status=80 [ 2187.740600][T13101] fdc_busy=1 [ 2187.744012][T13101] floppy_work.func=floppy_work_workfn [ 2187.751308][T13101] cont=ffffffff8a1f4920 [ 2187.763455][T13101] current_req=0000000000000000 [ 2187.775493][T13101] command_status=-1 [ 2187.783357][ T37] audit: type=1804 audit(1638173001.255:767): pid=21076 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir938124162/syzkaller.1iDaaV/1370/file1/bus" dev="sda1" ino=1192 res=1 errno=0 [ 2187.783601][T13101] [ 2187.814484][ T37] audit: type=1800 audit(1638173001.255:768): pid=21076 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1192 res=0 errno=0 [ 2187.857314][T13101] floppy1: floppy timeout called [ 2187.868089][T13101] [ 2187.871761][T13101] floppy driver state [ 2187.877256][T13101] ------------------- [ 2187.883133][T13101] now=4295155633 last interrupt=4295141312 diff=14321 last called handler=recal_interrupt [ 2187.897781][T13101] timeout_message=lock fdc [ 2187.906066][T13101] last output bytes: [ 2187.911683][T13101] 0 90 4295139496 [ 2187.917407][T13101] 1 90 4295139496 [ 2187.930640][T13101] 2 90 4295139496 [ 2187.937191][T13101] 24 90 4295139496 [ 2187.945131][T13101] 1b 90 4295139496 [ 2187.952795][T13101] ff 90 4295139496 [ 2187.958983][T13101] 12 80 4295141312 [ 2187.965858][T13101] 3 90 4295141312 [ 2187.980336][T13101] 13 80 4295141312 [ 2187.986058][T13101] 0 90 4295141312 [ 2187.995759][T21083] loop0: detected capacity change from 0 to 87 [ 2188.012313][T13101] 1a 90 4295141312 [ 2188.019586][T13101] 0 90 4295141312 [ 2188.028400][T13101] 3 80 4295141312 [ 2188.032918][T13101] a1 90 4295141312 08:03:21 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) 08:03:21 executing program 2: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) ioctl$FLOPPY_FDCLRPRM(r0, 0x241) r1 = syz_io_uring_setup(0x72be, &(0x7f0000000000)={0x0, 0x86f1, 0x2, 0x1, 0x260}, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) fstat(r1, &(0x7f0000000100)) [ 2188.048570][T13101] 1e 90 4295141312 [ 2188.054244][T13101] 7 80 4295141312 [ 2188.059780][T13101] 1 90 4295141312 [ 2188.065352][T13101] 8 80 4295141312 [ 2188.071608][T13101] 4 80 4295141312 [ 2188.089485][T13101] 1 90 4295141312 [ 2188.096396][T13101] last result at 4295141492 [ 2188.104863][T13101] last redo_fd_request at 4295155631 [ 2188.113849][T13101] status=80 [ 2188.122302][T13101] fdc_busy=1 [ 2188.136318][T13101] floppy_work.func=floppy_work_workfn [ 2188.143642][T13101] cont=ffffffff8a1f4920 [ 2188.159091][T13101] current_req=0000000000000000 [ 2188.182391][T13101] command_status=-1 [ 2188.189345][T13101] [ 2188.193363][T13101] floppy1: floppy timeout called [ 2188.203953][T17293] [ 2188.206639][T17293] floppy driver state [ 2188.232164][T17293] ------------------- [ 2188.239595][T17293] now=4295155669 last interrupt=4295141312 diff=14357 last called handler=recal_interrupt [ 2188.258049][T17293] timeout_message=lock fdc [ 2188.265676][T17293] last output bytes: [ 2188.272368][T17293] 0 90 4295139496 [ 2188.291043][T17293] 1 90 4295139496 [ 2188.296289][T17293] 2 90 4295139496 [ 2188.301250][T17293] 24 90 4295139496 [ 2188.308301][T17293] 1b 90 4295139496 [ 2188.318486][T17293] ff 90 4295139496 [ 2188.324316][T17293] 12 80 4295141312 [ 2188.334175][T17293] 3 90 4295141312 [ 2188.343927][T17293] 13 80 4295141312 [ 2188.353676][T17293] 0 90 4295141312 [ 2188.359869][T17293] 1a 90 4295141312 [ 2188.368902][T17293] 0 90 4295141312 [ 2188.398156][T17293] 3 80 4295141312 [ 2188.404666][T17293] a1 90 4295141312 [ 2188.432800][T17293] 1e 90 4295141312 [ 2188.473848][T17293] 7 80 4295141312 [ 2188.479791][T17293] 1 90 4295141312 [ 2188.487805][T17293] 8 80 4295141312 [ 2188.493612][T17293] 4 80 4295141312 [ 2188.518068][T17293] 1 90 4295141312 [ 2188.522982][T17293] last result at 4295141492 [ 2188.537511][T17293] last redo_fd_request at 4295155665 [ 2188.546926][T17293] status=80 [ 2188.564383][T17293] fdc_busy=1 [ 2188.568803][T17293] floppy_work.func=floppy_work_workfn [ 2188.597691][T17293] cont=ffffffff8a1f4920 [ 2188.638114][T17293] current_req=0000000000000000 [ 2188.646856][T17293] command_status=-1 [ 2188.661928][T17293] [ 2188.690021][T17293] floppy1: floppy timeout called [ 2188.758787][T17293] [ 2188.783743][T17293] floppy driver state [ 2188.793795][T17293] ------------------- [ 2188.800345][T17293] now=4295155725 last interrupt=4295141312 diff=14413 last called handler=recal_interrupt [ 2188.819661][T17293] timeout_message=lock fdc [ 2188.827659][T17293] last output bytes: [ 2188.834032][T17293] 0 90 4295139496 [ 2188.840783][T17293] 1 90 4295139496 [ 2188.848105][T17293] 2 90 4295139496 [ 2188.854256][T17293] 24 90 4295139496 [ 2188.862937][T17293] 1b 90 4295139496 08:03:22 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:22 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) [ 2188.876649][T17293] ff 90 4295139496 08:03:22 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7fc750a0971b7e3bdc33a652f30e64c31a0b6f925e786f8eca21b5762e03ece9d9a9b2c3a9dcf0aebadc4cdf21a0278e209ef9f5f4eef2554516d206eaf8c3bfc79b90d6c4348caa92ba277e40c06235597b07b16d8aea627e95013e0b12570749a882f475a9c", 0x74, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) open(&(0x7f0000000080)='./file1\x00', 0x200000, 0x60) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2188.892241][T21090] loop0: detected capacity change from 0 to 87 [ 2188.896983][T17293] 12 80 4295141312 [ 2188.904863][T21094] loop3: detected capacity change from 0 to 87 [ 2188.915846][T17293] 3 90 4295141312 [ 2188.925579][T17293] 13 80 4295141312 [ 2188.935652][T17293] 0 90 4295141312 [ 2188.940109][T17293] 1a 90 4295141312 [ 2188.944776][T17293] 0 90 4295141312 [ 2188.956939][T17293] 3 80 4295141312 [ 2188.962686][T17293] a1 90 4295141312 [ 2188.980117][T17293] 1e 90 4295141312 [ 2188.995234][T17293] 7 80 4295141312 [ 2189.019993][T17293] 1 90 4295141312 [ 2189.027291][T17293] 8 80 4295141312 [ 2189.047207][T17293] 4 80 4295141312 [ 2189.055210][ T37] audit: type=1804 audit(1638173002.525:769): pid=21094 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir938124162/syzkaller.1iDaaV/1371/file1/bus" dev="sda1" ino=1183 res=1 errno=0 [ 2189.083669][T17293] 1 90 4295141312 [ 2189.106270][ T37] audit: type=1800 audit(1638173002.575:770): pid=21094 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1183 res=0 errno=0 [ 2189.121428][T17293] last result at 4295141492 [ 2189.151446][T17293] last redo_fd_request at 4295155720 [ 2189.186330][T17293] status=80 [ 2189.191101][T17293] fdc_busy=1 [ 2189.195610][T17293] floppy_work.func=floppy_work_workfn [ 2189.217262][T17293] cont=ffffffff8a1f4920 [ 2189.247300][T17293] current_req=0000000000000000 [ 2189.253917][T17293] command_status=-1 [ 2189.259662][T17293] [ 2189.262950][T17293] floppy1: floppy timeout called [ 2189.274423][T13101] [ 2189.281650][T13101] floppy driver state [ 2189.286521][T13101] ------------------- [ 2189.303176][T13101] now=4295155775 last interrupt=4295141312 diff=14463 last called handler=recal_interrupt [ 2189.346320][T13101] timeout_message=lock fdc [ 2189.353637][T13101] last output bytes: [ 2189.364542][T13101] 0 90 4295139496 [ 2189.369544][T13101] 1 90 4295139496 [ 2189.375882][T13101] 2 90 4295139496 [ 2189.390095][T13101] 24 90 4295139496 [ 2189.397656][T13101] 1b 90 4295139496 [ 2189.404678][T13101] ff 90 4295139496 [ 2189.418771][T13101] 12 80 4295141312 08:03:22 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2189.426805][T21098] loop0: detected capacity change from 0 to 87 08:03:22 executing program 2: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) sendmsg$xdp(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2c, 0xf, r2, 0x10}, 0x10, &(0x7f0000000480)=[{&(0x7f00000000c0)="fe5c973a9670c98dba257fd5b864001f000bd58f85945d6eea36c3d7a464d510dec908e40ac22a36d8773e5e74fc32948b6e80f147b471d9fea0298858b580fc88436dd1759f72fc76974fca8d2ecb43ac5b9fa6b2f9c7469acf483fe8255fb60e23f1dc4241f1416e12f0ba", 0x6c}, {&(0x7f0000000200)="ff12787a34d991cd57b4ed92bb86fc7260b4bac60430f97f61acf65f0940b5631c975993166298c3a1784ff5d23e4a150998164a7344b612dc944a81fa5e96ffa9d5ca9600a5a25854fb58fbf1bf6a98f03299b8ec2b1e3a1c981d829d9366031875a3215bb06d326ae9c06fc93f355ced976fdac861318264f05cd197f6f529ea3899402b2c693ec34b7f78e013b00c987c7bca43998b9611ac3fcb791f61493306c3121ea981e8deb80248da977c5f", 0xb0}, {&(0x7f00000002c0)="70821b8864ce265f4654054be9b351694735b32dca39b882793c7a9d1935c5a92d4e6216ef77f8db702f77576fd7b67db9ba9ada72ad8618d64320a27275679502a9282eb75a8d109129d3945a37b84e2976f9a3d830570665e7bc4476a27269068628d4c134f94efec04c990d9820c9230e8be5ed6fac6b91f7ae9b314d585a4e85405bd32fc167f6025c6b4d7f8f8c0e4482d5abb4967dd5c157eb305e3250d95fc647fd732c8670334313fa712bb193cb0b58d6a2fae612f472b8f59ab773e664937fd3324085e2823d93de5ac6c1b5111c323e3aa3d451f48cf79f0500", 0xdf}, {&(0x7f00000003c0)="a5e5c7aebb4d039b6c52975cc5f81a9cfc8e7b6fd38ede9ec15c4d9a3965efb0f5f7154320a54928a45af670085a1993511a6888c8c827531d4808ed9ea30cddb9c42f804d522238f7e91882b12326f0251fbcaf6dabfe0fb2afc46d334eb84f2a63682dd205ee8ea821c173803d25883d859ca19150e7368da9a43801c033333824d9b0a79565d9e3", 0x89}, {&(0x7f0000000140)="10f2", 0x2}, {&(0x7f0000000180)="9aadc0d422d75775cd9696dc8e9b98adfde16407fb351e267adfdea9f801007f07a26efe0aa7de28bb225ba38068518674161ac68737bd3007ea43", 0x3b}], 0x6, 0x0, 0x0, 0x80}, 0x804) [ 2189.440372][T13101] 3 90 4295141312 [ 2189.451989][T13101] 13 80 4295141312 [ 2189.467666][T13101] 0 90 4295141312 [ 2189.474749][T13101] 1a 90 4295141312 [ 2189.483666][T13101] 0 90 4295141312 [ 2189.490680][T13101] 3 80 4295141312 [ 2189.497509][T13101] a1 90 4295141312 [ 2189.509578][T13101] 1e 90 4295141312 [ 2189.515285][T13101] 7 80 4295141312 [ 2189.524317][T13101] 1 90 4295141312 [ 2189.529301][T13101] 8 80 4295141312 [ 2189.534781][T13101] 4 80 4295141312 [ 2189.540826][T13101] 1 90 4295141312 [ 2189.546172][T13101] last result at 4295141492 [ 2189.555745][T13101] last redo_fd_request at 4295155772 [ 2189.563316][T13101] status=80 08:03:23 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2189.568031][T13101] fdc_busy=1 [ 2189.572447][T13101] floppy_work.func=floppy_work_workfn [ 2189.581634][T13101] cont=ffffffff8a1f4920 [ 2189.588036][T13101] current_req=0000000000000000 [ 2189.595086][T13101] command_status=-1 [ 2189.600851][T13101] [ 2189.604571][T13101] floppy1: floppy timeout called [ 2189.613136][T13101] [ 2189.616021][T13101] floppy driver state [ 2189.621704][T13101] ------------------- [ 2189.626793][T13101] now=4295155807 last interrupt=4295141312 diff=14495 last called handler=recal_interrupt [ 2189.652469][T13101] timeout_message=lock fdc [ 2189.664830][T13101] last output bytes: [ 2189.672480][T13101] 0 90 4295139496 [ 2189.683278][T13101] 1 90 4295139496 [ 2189.690288][T13101] 2 90 4295139496 [ 2189.695869][T13101] 24 90 4295139496 [ 2189.700631][T21103] loop0: detected capacity change from 0 to 87 [ 2189.702229][T13101] 1b 90 4295139496 [ 2189.716461][T13101] ff 90 4295139496 [ 2189.722427][T13101] 12 80 4295141312 [ 2189.729160][T13101] 3 90 4295141312 [ 2189.748505][T13101] 13 80 4295141312 [ 2189.775101][T13101] 0 90 4295141312 [ 2189.784491][T13101] 1a 90 4295141312 [ 2189.793164][T13101] 0 90 4295141312 [ 2189.802289][T13101] 3 80 4295141312 [ 2189.811637][T13101] a1 90 4295141312 [ 2189.819694][T13101] 1e 90 4295141312 [ 2189.829884][T13101] 7 80 4295141312 08:03:23 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2189.839359][T13101] 1 90 4295141312 [ 2189.847178][T13101] 8 80 4295141312 [ 2189.855820][T13101] 4 80 4295141312 [ 2189.863027][T13101] 1 90 4295141312 [ 2189.871396][T13101] last result at 4295141492 08:03:23 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7fc750a0971b7e3bdc33a652f30e64c31a0b6f925e786f8eca21b5762e03ece9d9a9b2c3a9dcf0aebadc4cdf21a0278e209ef9f5f4eef2554516d206eaf8c3bfc79b90d6c4348caa92ba277e40c06235597b07b16d8aea627e95013e0b12570749a882f475a9c", 0x74, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) open(&(0x7f0000000080)='./file1\x00', 0x200000, 0x60) open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) [ 2189.882056][T13101] last redo_fd_request at 4295155806 [ 2189.903308][T13101] status=80 [ 2189.908380][T13101] fdc_busy=1 [ 2189.913104][T13101] floppy_work.func=floppy_work_workfn [ 2189.921652][T13101] cont=ffffffff8a1f4920 [ 2189.927465][T13101] current_req=0000000000000000 [ 2189.934564][T13101] command_status=-1 [ 2189.939692][T13101] [ 2189.942483][T13101] floppy1: floppy timeout called 08:03:23 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2189.952796][T13101] [ 2189.961899][T13101] floppy driver state [ 2189.963671][T21105] loop3: detected capacity change from 0 to 87 [ 2189.967470][T13101] ------------------- [ 2189.967483][T13101] now=4295155841 last interrupt=4295141312 diff=14529 last called handler=recal_interrupt [ 2189.967520][T13101] timeout_message=lock fdc [ 2189.967526][T13101] last output bytes: [ 2189.967531][T13101] 0 90 4295139496 [ 2189.967541][T13101] 1 90 4295139496 [ 2189.967549][T13101] 2 90 4295139496 [ 2189.967558][T13101] 24 90 4295139496 [ 2189.967566][T13101] 1b 90 4295139496 [ 2190.016096][T21109] loop0: detected capacity change from 0 to 87 [ 2190.020006][T13101] ff 90 4295139496 [ 2190.020029][T13101] 12 80 4295141312 [ 2190.049661][T13101] 3 90 4295141312 [ 2190.054515][T13101] 13 80 4295141312 [ 2190.059722][T13101] 0 90 4295141312 [ 2190.064774][T13101] 1a 90 4295141312 [ 2190.069776][T13101] 0 90 4295141312 [ 2190.076814][T13101] 3 80 4295141312 [ 2190.082029][T13101] a1 90 4295141312 [ 2190.086986][T13101] 1e 90 4295141312 08:03:23 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2190.092901][T13101] 7 80 4295141312 [ 2190.097746][T13101] 1 90 4295141312 [ 2190.103436][T13101] 8 80 4295141312 [ 2190.109089][T13101] 4 80 4295141312 [ 2190.114365][T13101] 1 90 4295141312 [ 2190.119681][T13101] last result at 4295141492 [ 2190.125651][T13101] last redo_fd_request at 4295155840 [ 2190.133781][T13101] status=80 [ 2190.138518][T13101] fdc_busy=1 [ 2190.142590][T13101] floppy_work.func=floppy_work_workfn 08:03:23 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7fc750a0971b7e3bdc33a652f30e64c31a0b6f925e786f8eca21b5762e03ece9d9a9b2c3a9dcf0aebadc4cdf21a0278e209ef9f5f4eef2554516d206eaf8c3bfc79b90d6c4348caa92ba277e40c06235597b07b16d8aea627e95013e0b12570749a882f475a9c", 0x74, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) open(&(0x7f0000000080)='./file1\x00', 0x200000, 0x60) [ 2190.151658][T13101] cont=ffffffff8a1f4920 [ 2190.158061][T13101] current_req=0000000000000000 [ 2190.164526][T13101] command_status=-1 [ 2190.170286][T13101] [ 2190.173756][T13101] floppy1: floppy timeout called [ 2190.198253][T17293] [ 2190.202198][T17293] floppy driver state [ 2190.207355][T17293] ------------------- 08:03:23 executing program 2: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f00000000c0)={0x800, &(0x7f0000000000)="fd56204c82355821cd539d77701035f9c72f0fd28424cfaf8a8ba175cf967b782cfe39c307b63fc3060543c9f67de545bb36aa138c552b7204c575c23e5bc09f1d2862fe04906f88", &(0x7f0000000080)=0x8, 0x0, 0x48, 0x0, 0x0, 0x7, 0x7f, "324086dfce3946f7887a00c63236e803", 0x0, '\x00', 0x5}) [ 2190.222378][T17293] now=4295155867 last interrupt=4295141312 diff=14555 last called handler=recal_interrupt [ 2190.223568][T21113] loop0: detected capacity change from 0 to 87 [ 2190.236377][T17293] timeout_message=lock fdc [ 2190.249206][T17293] last output bytes: [ 2190.254450][T17293] 0 90 4295139496 [ 2190.260379][T21117] loop3: detected capacity change from 0 to 87 [ 2190.269611][T17293] 1 90 4295139496 [ 2190.274854][T17293] 2 90 4295139496 [ 2190.279847][T17293] 24 90 4295139496 [ 2190.284622][T17293] 1b 90 4295139496 [ 2190.289651][T17293] ff 90 4295139496 [ 2190.294669][T17293] 12 80 4295141312 [ 2190.299964][T17293] 3 90 4295141312 [ 2190.305137][T17293] 13 80 4295141312 [ 2190.310167][T17293] 0 90 4295141312 [ 2190.315087][T17293] 1a 90 4295141312 [ 2190.320587][T17293] 0 90 4295141312 [ 2190.325579][T17293] 3 80 4295141312 [ 2190.331236][T17293] a1 90 4295141312 [ 2190.336066][T17293] 1e 90 4295141312 [ 2190.341549][T17293] 7 80 4295141312 [ 2190.346655][T17293] 1 90 4295141312 08:03:23 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2190.353646][T17293] 8 80 4295141312 [ 2190.358669][T17293] 4 80 4295141312 [ 2190.366065][T17293] 1 90 4295141312 [ 2190.372246][T17293] last result at 4295141492 [ 2190.378586][T17293] last redo_fd_request at 4295155865 [ 2190.385687][T17293] status=80 [ 2190.389572][T17293] fdc_busy=1 [ 2190.393570][T17293] floppy_work.func=floppy_work_workfn [ 2190.401149][T17293] cont=ffffffff8a1f4920 [ 2190.408497][T17293] current_req=0000000000000000 [ 2190.415646][T17293] command_status=-1 [ 2190.421802][T17293] [ 2190.425823][T17293] floppy1: floppy timeout called 08:03:23 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7fc750a0971b7e3bdc33a652f30e64c31a0b6f925e786f8eca21b5762e03ece9d9a9b2c3a9dcf0aebadc4cdf21a0278e209ef9f5f4eef2554516d206eaf8c3bfc79b90d6c4348caa92ba277e40c06235597b07b16d8aea627e95013e0b12570749a882f475a9c", 0x74, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) [ 2190.448184][ T3758] [ 2190.451836][ T3758] floppy driver state [ 2190.457520][ T3758] ------------------- [ 2190.463243][T21121] loop3: detected capacity change from 0 to 87 [ 2190.472381][ T3758] now=4295155892 last interrupt=4295141312 diff=14580 last called handler=recal_interrupt [ 2190.474515][T21122] loop0: detected capacity change from 0 to 87 [ 2190.485049][ T3758] timeout_message=lock fdc [ 2190.519315][ T3758] last output bytes: [ 2190.524894][ T3758] 0 90 4295139496 [ 2190.530495][ T3758] 1 90 4295139496 [ 2190.535744][ T3758] 2 90 4295139496 [ 2190.541383][ T3758] 24 90 4295139496 [ 2190.546348][ T3758] 1b 90 4295139496 08:03:24 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2190.552153][ T3758] ff 90 4295139496 [ 2190.557156][ T3758] 12 80 4295141312 [ 2190.562381][ T3758] 3 90 4295141312 [ 2190.567760][ T3758] 13 80 4295141312 [ 2190.573331][ T3758] 0 90 4295141312 [ 2190.579009][ T3758] 1a 90 4295141312 [ 2190.584100][ T3758] 0 90 4295141312 [ 2190.589072][ T3758] 3 80 4295141312 [ 2190.594384][ T3758] a1 90 4295141312 [ 2190.599010][ T3758] 1e 90 4295141312 [ 2190.603168][ T3758] 7 80 4295141312 [ 2190.607196][ T3758] 1 90 4295141312 [ 2190.611908][ T3758] 8 80 4295141312 08:03:24 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7fc750a0971b7e3bdc33a652f30e64c31a0b6f925e786f8eca21b5762e03ece9d9a9b2c3a9dcf0aebadc4cdf21a0278e209ef9f5f4eef2554516d206eaf8c3bfc79b90d6c4348caa92ba277e40c06235597b07b16d8aea627e95013e0b12570749a882f475a9c", 0x74, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) [ 2190.616748][ T3758] 4 80 4295141312 [ 2190.622614][ T3758] 1 90 4295141312 [ 2190.627321][ T3758] last result at 4295141492 [ 2190.633820][ T3758] last redo_fd_request at 4295155888 [ 2190.646999][ T3758] status=80 [ 2190.651478][ T3758] fdc_busy=1 [ 2190.655755][ T3758] floppy_work.func=floppy_work_workfn [ 2190.667332][T21125] loop3: detected capacity change from 0 to 87 [ 2190.673141][ T3758] cont=ffffffff8a1f4920 [ 2190.689710][T21127] loop0: detected capacity change from 0 to 87 [ 2190.716867][ T3758] current_req=0000000000000000 [ 2190.723731][ T3758] command_status=-1 [ 2190.729436][ T3758] [ 2190.732501][ T3758] floppy1: floppy timeout called [ 2190.741155][ T3758] 08:03:24 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:24 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') ftruncate(0xffffffffffffffff, 0x7) lseek(0xffffffffffffffff, 0x0, 0x2) r0 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) [ 2190.745114][ T3758] floppy driver state [ 2190.751494][ T3758] ------------------- [ 2190.757454][ T3758] now=4295155920 last interrupt=4295141312 diff=14608 last called handler=recal_interrupt [ 2190.771267][ T3758] timeout_message=lock fdc [ 2190.776660][ T3758] last output bytes: [ 2190.782989][ T3758] 0 90 4295139496 [ 2190.787768][ T3758] 1 90 4295139496 [ 2190.792962][ T3758] 2 90 4295139496 [ 2190.798239][ T3758] 24 90 4295139496 [ 2190.803725][ T3758] 1b 90 4295139496 [ 2190.809397][ T3758] ff 90 4295139496 [ 2190.814331][ T3758] 12 80 4295141312 [ 2190.820056][ T3758] 3 90 4295141312 [ 2190.825216][ T3758] 13 80 4295141312 [ 2190.831128][ T3758] 0 90 4295141312 08:03:24 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7fc750a0971b7e3bdc33a652f30e64c31a0b6f925e786f8eca21b5762e03ece9d9a9b2c3a9dcf0aebadc4cdf21a0278e209ef9f5f4eef2554516d206eaf8c3bfc79b90d6c4348caa92ba277e40c06235597b07b16d8aea627e95013e0b12570749a882f475a9c", 0x74, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 2190.835661][ T3758] 1a 90 4295141312 [ 2190.841491][ T3758] 0 90 4295141312 [ 2190.848716][ T3758] 3 80 4295141312 [ 2190.853986][ T3758] a1 90 4295141312 [ 2190.856692][T21131] loop0: detected capacity change from 0 to 87 [ 2190.859925][ T3758] 1e 90 4295141312 [ 2190.860126][ T3758] 7 80 4295141312 [ 2190.860140][ T3758] 1 90 4295141312 [ 2190.860154][ T3758] 8 80 4295141312 [ 2190.860168][ T3758] 4 80 4295141312 [ 2190.860182][ T3758] 1 90 4295141312 [ 2190.860195][ T3758] last result at 4295141492 [ 2190.860205][ T3758] last redo_fd_request at 4295155919 [ 2190.860265][ T3758] status=80 [ 2190.920301][ T3758] fdc_busy=1 [ 2190.924487][ T3758] floppy_work.func=floppy_work_workfn [ 2190.931601][T21134] loop3: detected capacity change from 0 to 87 [ 2190.933965][ T3758] cont=ffffffff8a1f4920 [ 2190.947519][ T3758] current_req=0000000000000000 [ 2190.952747][ T3758] command_status=-1 [ 2190.959230][ T3758] [ 2190.966625][ T3758] floppy1: floppy timeout called [ 2190.998710][T17293] [ 2191.002240][T17293] floppy driver state [ 2191.012162][T17293] ------------------- [ 2191.042071][T17293] now=4295155949 last interrupt=4295141312 diff=14637 last called handler=recal_interrupt [ 2191.078816][T17293] timeout_message=lock fdc [ 2191.084347][T17293] last output bytes: [ 2191.090668][T17293] 0 90 4295139496 [ 2191.113004][T17293] 1 90 4295139496 [ 2191.118609][T17293] 2 90 4295139496 [ 2191.141023][T17293] 24 90 4295139496 [ 2191.150099][T17293] 1b 90 4295139496 [ 2191.157105][T17293] ff 90 4295139496 [ 2191.166260][T17293] 12 80 4295141312 [ 2191.179601][T17293] 3 90 4295141312 [ 2191.202387][T17293] 13 80 4295141312 [ 2191.207471][T17293] 0 90 4295141312 [ 2191.215814][T17293] 1a 90 4295141312 [ 2191.224799][T17293] 0 90 4295141312 [ 2191.238511][T17293] 3 80 4295141312 [ 2191.250463][T17293] a1 90 4295141312 [ 2191.255244][T17293] 1e 90 4295141312 [ 2191.265191][T17293] 7 80 4295141312 [ 2191.280062][T17293] 1 90 4295141312 [ 2191.287402][T21140] loop0: detected capacity change from 0 to 87 [ 2191.290096][T17293] 8 80 4295141312 [ 2191.301822][T21142] loop3: detected capacity change from 0 to 87 [ 2191.305572][T17293] 4 80 4295141312 [ 2191.321803][T17293] 1 90 4295141312 [ 2191.328146][T17293] last result at 4295141492 [ 2191.336241][T17293] last redo_fd_request at 4295155944 [ 2191.352776][T17293] status=80 [ 2191.356685][T17293] fdc_busy=1 08:03:24 executing program 2: ioctl$FLOPPY_FDCLRPRM(0xffffffffffffffff, 0x241) syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) 08:03:24 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7fc750a0971b7e3bdc33a652f30e64c31a0b6f925e786f8eca21b5762e03ece9d9a9b2c3a9dcf0aebadc4cdf21a0278e209ef9f5f4eef2554516d206eaf8c3bfc79b90d6c4348caa92ba277e40c06235597b07b16d8aea627e95013e0b12570749a882f475a9c", 0x74, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') 08:03:24 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') ftruncate(0xffffffffffffffff, 0x7) lseek(0xffffffffffffffff, 0x0, 0x2) r0 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) [ 2191.361862][T17293] floppy_work.func=floppy_work_workfn [ 2191.372189][T17293] cont=ffffffff8a1f4920 [ 2191.381604][T17293] current_req=0000000000000000 [ 2191.388053][T17293] command_status=-1 [ 2191.393830][T17293] [ 2191.398133][T17293] floppy1: floppy timeout called [ 2191.407653][ T3758] [ 2191.414526][ T3758] floppy driver state [ 2191.429284][ T3758] ------------------- [ 2191.448157][ T3758] now=4295155990 last interrupt=4295141312 diff=14678 last called handler=recal_interrupt [ 2191.461580][ T3758] timeout_message=lock fdc [ 2191.467511][ T3758] last output bytes: [ 2191.472311][ T3758] 0 90 4295139496 [ 2191.476728][ T3758] 1 90 4295139496 [ 2191.480727][ T3758] 2 90 4295139496 [ 2191.489595][ T3758] 24 90 4295139496 [ 2191.495009][ T3758] 1b 90 4295139496 [ 2191.501844][ T3758] ff 90 4295139496 [ 2191.513170][ T3758] 12 80 4295141312 [ 2191.519479][ T3758] 3 90 4295141312 [ 2191.528142][ T3758] 13 80 4295141312 [ 2191.536222][ T3758] 0 90 4295141312 [ 2191.541476][ T3758] 1a 90 4295141312 [ 2191.548924][ T3758] 0 90 4295141312 [ 2191.559977][ T3758] 3 80 4295141312 [ 2191.587965][ T3758] a1 90 4295141312 [ 2191.593764][ T3758] 1e 90 4295141312 [ 2191.617958][ T3758] 7 80 4295141312 [ 2191.623155][ T3758] 1 90 4295141312 [ 2191.638066][ T3758] 8 80 4295141312 [ 2191.643158][ T3758] 4 80 4295141312 [ 2191.649479][ T3758] 1 90 4295141312 [ 2191.654583][ T3758] last result at 4295141492 [ 2191.661173][ T3758] last redo_fd_request at 4295155985 [ 2191.670068][ T3758] status=80 [ 2191.674932][ T3758] fdc_busy=1 [ 2191.680334][ T3758] floppy_work.func=floppy_work_workfn [ 2191.697428][ T3758] cont=ffffffff8a1f4920 [ 2191.702566][ T3758] current_req=0000000000000000 [ 2191.707742][ T3758] command_status=-1 [ 2191.713611][ T3758] [ 2191.717046][ T3758] floppy1: floppy timeout called [ 2191.728855][ T3758] [ 2191.751832][ T3758] floppy driver state [ 2191.757768][ T3758] ------------------- [ 2191.784940][ T3758] now=4295156023 last interrupt=4295141312 diff=14711 last called handler=recal_interrupt [ 2191.801019][ T3758] timeout_message=lock fdc [ 2191.808547][ T3758] last output bytes: [ 2191.819767][ T3758] 0 90 4295139496 [ 2191.835884][ T3758] 1 90 4295139496 [ 2191.851569][ T3758] 2 90 4295139496 [ 2191.866096][ T3758] 24 90 4295139496 [ 2191.876297][ T3758] 1b 90 4295139496 [ 2191.887340][ T3758] ff 90 4295139496 [ 2191.897700][ T3758] 12 80 4295141312 [ 2191.919857][ T3758] 3 90 4295141312 [ 2191.925210][T21148] loop3: detected capacity change from 0 to 87 [ 2191.929778][ T3758] 13 80 4295141312 [ 2191.940958][ T3758] 0 90 4295141312 [ 2191.942609][T21150] loop0: detected capacity change from 0 to 87 [ 2191.950460][ T3758] 1a 90 4295141312 [ 2191.968201][ T3758] 0 90 4295141312 08:03:25 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') ftruncate(0xffffffffffffffff, 0x7) lseek(0xffffffffffffffff, 0x0, 0x2) r0 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) 08:03:25 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7fc750a0971b7e3bdc33a652f30e64c31a0b6f925e786f8eca21b5762e03ece9d9a9b2c3a9dcf0aebadc4cdf21a0278e209ef9f5f4eef2554516d206eaf8c3bfc79b90d6c4348caa92ba277e40c06235597b07b16d8aea627e95013e0b12570749a882f475a9c", 0x74, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:25 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:25 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x301440) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r0}}, './cgroup\x00'}) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) openat$cgroup_int(r1, &(0x7f0000000100)='memory.swap.max\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x2}}, './cgroup\x00'}) r4 = pidfd_getfd(r2, r3, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r4, 0x40086424, &(0x7f0000000040)={r5}) syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) [ 2191.973342][ T3758] 3 80 4295141312 [ 2191.980689][ T3758] a1 90 4295141312 [ 2191.984927][ T3758] 1e 90 4295141312 [ 2191.990724][ T3758] 7 80 4295141312 [ 2191.995757][ T3758] 1 90 4295141312 [ 2192.000525][ T3758] 8 80 4295141312 [ 2192.005049][ T3758] 4 80 4295141312 [ 2192.010021][ T3758] 1 90 4295141312 [ 2192.014502][ T3758] last result at 4295141492 [ 2192.019361][ T3758] last redo_fd_request at 4295156017 [ 2192.032579][ T3758] status=80 [ 2192.041212][ T3758] fdc_busy=1 [ 2192.048709][ T3758] floppy_work.func=floppy_work_workfn [ 2192.068065][ T3758] cont=ffffffff8a1f4920 [ 2192.078157][ T3758] current_req=0000000000000000 [ 2192.093813][ T3758] command_status=-1 [ 2192.105951][ T3758] [ 2192.118322][ T3758] floppy1: floppy timeout called [ 2192.131135][ T3758] [ 2192.133801][ T3758] floppy driver state [ 2192.138409][ T3758] ------------------- [ 2192.146333][ T3758] now=4295156059 last interrupt=4295141312 diff=14747 last called handler=recal_interrupt [ 2192.164110][ T3758] timeout_message=lock fdc [ 2192.179139][ T3758] last output bytes: [ 2192.185720][ T3758] 0 90 4295139496 [ 2192.193601][ T3758] 1 90 4295139496 [ 2192.203457][ T3758] 2 90 4295139496 [ 2192.212983][ T3758] 24 90 4295139496 [ 2192.242343][ T3758] 1b 90 4295139496 [ 2192.247205][ T3758] ff 90 4295139496 [ 2192.253205][ T3758] 12 80 4295141312 [ 2192.260911][ T3758] 3 90 4295141312 [ 2192.288976][ T3758] 13 80 4295141312 [ 2192.296611][ T3758] 0 90 4295141312 [ 2192.302425][ T3758] 1a 90 4295141312 [ 2192.308245][ T3758] 0 90 4295141312 [ 2192.315465][ T3758] 3 80 4295141312 [ 2192.321651][ T3758] a1 90 4295141312 [ 2192.327625][ T3758] 1e 90 4295141312 [ 2192.334958][ T3758] 7 80 4295141312 [ 2192.339555][ T3758] 1 90 4295141312 [ 2192.361237][ T3758] 8 80 4295141312 [ 2192.368511][ T3758] 4 80 4295141312 [ 2192.380065][ T3758] 1 90 4295141312 [ 2192.387781][ T3758] last result at 4295141492 [ 2192.396216][T21157] loop0: detected capacity change from 0 to 87 [ 2192.402389][T21156] loop3: detected capacity change from 0 to 87 [ 2192.420347][ T3758] last redo_fd_request at 4295156058 [ 2192.430849][ T3758] status=80 08:03:25 executing program 3: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7fc750a0971b7e3bdc33a652f30e64c31a0b6f925e786f8eca21b5762e03ece9d9a9b2c3a9dcf0aebadc4cdf21a0278e209ef9f5f4eef2554516d206eaf8c3bfc79b90d6c4348caa92ba277e40c06235597b07b16d8aea627e95013e0b12570749a882f475a9c", 0x74, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:25 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2192.444816][ T3758] fdc_busy=1 [ 2192.455222][ T3758] floppy_work.func=floppy_work_workfn [ 2192.463344][ T3758] cont=ffffffff8a1f4920 [ 2192.469850][ T3758] current_req=0000000000000000 [ 2192.477077][ T3758] command_status=-1 [ 2192.482577][ T3758] [ 2192.485722][ T3758] floppy1: floppy timeout called [ 2192.496074][ T3758] [ 2192.497917][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 2192.497930][ T37] audit: type=1804 audit(1638173005.965:785): pid=21157 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1347/bus" dev="sda1" ino=1199 res=1 errno=0 [ 2192.500482][ T3758] floppy driver state [ 2192.506110][ T37] audit: type=1800 audit(1638173005.965:786): pid=21157 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1199 res=0 errno=0 [ 2192.538459][ T3758] ------------------- [ 2192.577553][ T3758] now=4295156102 last interrupt=4295141312 diff=14790 last called handler=recal_interrupt [ 2192.594341][ T3758] timeout_message=lock fdc [ 2192.604750][ T3758] last output bytes: [ 2192.616840][ T3758] 0 90 4295139496 [ 2192.631169][ T3758] 1 90 4295139496 [ 2192.637749][ T3758] 2 90 4295139496 [ 2192.661744][ T3758] 24 90 4295139496 [ 2192.676903][ T3758] 1b 90 4295139496 [ 2192.689295][ T3758] ff 90 4295139496 [ 2192.696288][ T3758] 12 80 4295141312 [ 2192.701642][ T3758] 3 90 4295141312 [ 2192.719102][ T3758] 13 80 4295141312 [ 2192.735699][ T3758] 0 90 4295141312 [ 2192.764832][ T3758] 1a 90 4295141312 [ 2192.774984][ T3758] 0 90 4295141312 [ 2192.789390][ T3758] 3 80 4295141312 [ 2192.798366][ T3758] a1 90 4295141312 [ 2192.814198][ T3758] 1e 90 4295141312 [ 2192.820925][ T3758] 7 80 4295141312 [ 2192.832543][ T3758] 1 90 4295141312 [ 2192.844285][ T3758] 8 80 4295141312 [ 2192.851139][ T3758] 4 80 4295141312 [ 2192.857326][ T3758] 1 90 4295141312 [ 2192.867114][ T3758] last result at 4295141492 [ 2192.899316][T21164] loop0: detected capacity change from 0 to 87 08:03:26 executing program 3: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7fc750a0971b7e3bdc33a652f30e64c31a0b6f925e786f8eca21b5762e03ece9d9a9b2c3a9dcf0aebadc4cdf21a0278e209ef9f5f4eef2554516d206eaf8c3bfc79b90d6c4348caa92ba277e40c06235597b07b16d8aea627e95013e0b12570749a882f475a9c", 0x74, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:26 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 08:03:26 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2192.909016][T21162] loop3: detected capacity change from 0 to 87 08:03:26 executing program 2: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) ioctl$FLOPPY_FDDEFPRM(r0, 0x401c0243, &(0x7f00000000c0)={0xfe6, 0x3, 0x3, 0x1, 0x2, 0xe0, 0x9, 0x45, 0x0, &(0x7f0000000080)=']\x00'}) ioctl$FLOPPY_FDGETDRVPRM(r0, 0x80580211, &(0x7f0000000240)) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDGETDRVPRM(r1, 0x80580211, &(0x7f0000000000)) [ 2192.917985][ T3758] last redo_fd_request at 4295156094 [ 2192.925680][ T3758] status=80 [ 2192.934847][ T3758] fdc_busy=1 [ 2192.939865][ T3758] floppy_work.func=floppy_work_workfn [ 2192.946452][ T3758] cont=ffffffff8a1f4920 [ 2192.951533][ T3758] current_req=0000000000000000 [ 2192.956978][ T3758] command_status=-1 [ 2192.961066][ T3758] [ 2192.963948][ T3758] floppy1: floppy timeout called [ 2192.978995][T17293] [ 2192.985021][ T37] audit: type=1804 audit(1638173006.455:787): pid=21164 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1348/bus" dev="sda1" ino=1199 res=1 errno=0 [ 2192.987240][T17293] floppy driver state [ 2193.026632][ T37] audit: type=1800 audit(1638173006.455:788): pid=21164 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1199 res=0 errno=0 [ 2193.026942][T17293] ------------------- [ 2193.060430][T17293] now=4295156151 last interrupt=4295141312 diff=14839 last called handler=recal_interrupt [ 2193.080373][T17293] timeout_message=lock fdc [ 2193.092538][T17293] last output bytes: [ 2193.101450][T17293] 0 90 4295139496 [ 2193.106557][T17293] 1 90 4295139496 [ 2193.111875][T17293] 2 90 4295139496 [ 2193.116734][T17293] 24 90 4295139496 [ 2193.122370][T17293] 1b 90 4295139496 [ 2193.129322][T17293] ff 90 4295139496 [ 2193.135669][T17293] 12 80 4295141312 [ 2193.149043][T17293] 3 90 4295141312 [ 2193.156301][T17293] 13 80 4295141312 [ 2193.163666][T17293] 0 90 4295141312 [ 2193.169500][T17293] 1a 90 4295141312 [ 2193.176754][T17293] 0 90 4295141312 [ 2193.183219][T17293] 3 80 4295141312 [ 2193.190339][T17293] a1 90 4295141312 [ 2193.196342][T17293] 1e 90 4295141312 [ 2193.202730][T17293] 7 80 4295141312 [ 2193.210876][T17293] 1 90 4295141312 [ 2193.217442][T17293] 8 80 4295141312 [ 2193.222790][T17293] 4 80 4295141312 [ 2193.228416][T17293] 1 90 4295141312 [ 2193.233675][T17293] last result at 4295141492 [ 2193.249175][T17293] last redo_fd_request at 4295156143 [ 2193.257286][T17293] status=80 [ 2193.265098][T17293] fdc_busy=1 [ 2193.271752][T17293] floppy_work.func=floppy_work_workfn [ 2193.281372][T17293] cont=ffffffff8a1f4920 [ 2193.288679][T17293] current_req=0000000000000000 [ 2193.296723][T17293] command_status=-1 [ 2193.305146][T17293] [ 2193.313356][T17293] floppy1: floppy timeout called [ 2193.327456][T17293] [ 2193.334540][T17293] floppy driver state [ 2193.340534][T17293] ------------------- [ 2193.347208][T17293] now=4295156179 last interrupt=4295141312 diff=14867 last called handler=recal_interrupt [ 2193.372025][T17293] timeout_message=lock fdc [ 2193.382437][T17293] last output bytes: [ 2193.389837][T17293] 0 90 4295139496 [ 2193.397763][T17293] 1 90 4295139496 [ 2193.406811][T17293] 2 90 4295139496 [ 2193.417324][T17293] 24 90 4295139496 [ 2193.431115][T17293] 1b 90 4295139496 [ 2193.436462][T17293] ff 90 4295139496 08:03:26 executing program 3: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7fc750a0971b7e3bdc33a652f30e64c31a0b6f925e786f8eca21b5762e03ece9d9a9b2c3a9dcf0aebadc4cdf21a0278e209ef9f5f4eef2554516d206eaf8c3bfc79b90d6c4348caa92ba277e40c06235597b07b16d8aea627e95013e0b12570749a882f475a9c", 0x74, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:26 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2193.443117][T21173] loop3: detected capacity change from 0 to 87 [ 2193.443489][T17293] 12 80 4295141312 [ 2193.443728][T21174] loop0: detected capacity change from 0 to 87 [ 2193.464218][T17293] 3 90 4295141312 [ 2193.469143][T17293] 13 80 4295141312 [ 2193.474105][T17293] 0 90 4295141312 [ 2193.480281][T17293] 1a 90 4295141312 [ 2193.485796][ T37] audit: type=1804 audit(1638173006.955:789): pid=21174 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1349/bus" dev="sda1" ino=1199 res=1 errno=0 [ 2193.485804][T17293] 0 90 4295141312 [ 2193.485825][T17293] 3 80 4295141312 [ 2193.485839][T17293] a1 90 4295141312 [ 2193.547179][ T37] audit: type=1800 audit(1638173006.975:790): pid=21174 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1199 res=0 errno=0 [ 2193.548734][T17293] 1e 90 4295141312 [ 2193.620020][T17293] 7 80 4295141312 [ 2193.625724][T17293] 1 90 4295141312 [ 2193.634455][T17293] 8 80 4295141312 [ 2193.643343][T17293] 4 80 4295141312 [ 2193.647600][T17293] 1 90 4295141312 [ 2193.653891][T17293] last result at 4295141492 [ 2193.664174][T17293] last redo_fd_request at 4295156177 [ 2193.672625][T17293] status=80 [ 2193.677235][T17293] fdc_busy=1 [ 2193.687182][T17293] floppy_work.func=floppy_work_workfn [ 2193.696257][T17293] cont=ffffffff8a1f4920 [ 2193.702801][T17293] current_req=0000000000000000 [ 2193.709513][T17293] command_status=-1 [ 2193.715550][T17293] [ 2193.719752][T17293] floppy1: floppy timeout called [ 2193.730422][T17293] [ 2193.734488][T17293] floppy driver state [ 2193.740210][T17293] ------------------- [ 2193.753237][T17293] now=4295156220 last interrupt=4295141312 diff=14908 last called handler=recal_interrupt [ 2193.775360][T17293] timeout_message=lock fdc [ 2193.783854][T17293] last output bytes: [ 2193.791050][T17293] 0 90 4295139496 [ 2193.801628][T17293] 1 90 4295139496 [ 2193.806682][T17293] 2 90 4295139496 [ 2193.819267][T17293] 24 90 4295139496 [ 2193.824985][T17293] 1b 90 4295139496 [ 2193.830116][T17293] ff 90 4295139496 [ 2193.835170][T17293] 12 80 4295141312 [ 2193.845395][T17293] 3 90 4295141312 [ 2193.858670][T17293] 13 80 4295141312 08:03:27 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7fc750a0971b7e3bdc33a652f30e64c31a0b6f925e786f8eca21b5762e03ece9d9a9b2c3a9dcf0aebadc4cdf21a0278e209ef9f5f4eef2554516d206eaf8c3bfc79b90d6c4348caa92ba277e40c06235597b07b16d8aea627e95013e0b12570749a882f475a9c", 0x74, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:27 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2193.865685][T17293] 0 90 4295141312 [ 2193.872885][T17293] 1a 90 4295141312 [ 2193.880415][T17293] 0 90 4295141312 [ 2193.885252][T17293] 3 80 4295141312 [ 2193.890249][T17293] a1 90 4295141312 [ 2193.895592][T17293] 1e 90 4295141312 [ 2193.901355][T17293] 7 80 4295141312 [ 2193.907001][T17293] 1 90 4295141312 [ 2193.913174][T17293] 8 80 4295141312 [ 2193.919544][T17293] 4 80 4295141312 [ 2193.932903][T17293] 1 90 4295141312 [ 2193.940299][T17293] last result at 4295141492 [ 2193.947396][T17293] last redo_fd_request at 4295156218 [ 2193.972330][T21177] loop3: detected capacity change from 0 to 87 [ 2193.981878][ T37] audit: type=1804 audit(1638173007.445:791): pid=21178 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1350/bus" dev="sda1" ino=1192 res=1 errno=0 [ 2193.982778][T17293] status=80 [ 2194.031133][ T37] audit: type=1800 audit(1638173007.455:792): pid=21178 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1192 res=0 errno=0 [ 2194.121300][T17293] fdc_busy=1 [ 2194.125413][T17293] floppy_work.func=floppy_work_workfn [ 2194.152517][T17293] cont=ffffffff8a1f4920 [ 2194.159029][T17293] current_req=0000000000000000 [ 2194.178088][T17293] command_status=-1 [ 2194.185572][T17293] [ 2194.188777][T17293] floppy1: floppy timeout called [ 2194.236030][T17293] [ 2194.240180][T17293] floppy driver state [ 2194.247776][T17293] ------------------- [ 2194.258084][T17293] now=4295156271 last interrupt=4295141312 diff=14959 last called handler=recal_interrupt [ 2194.284587][T17293] timeout_message=lock fdc [ 2194.310828][T17293] last output bytes: 08:03:27 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 08:03:27 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:27 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7fc750a0971b7e3bdc33a652f30e64c31a0b6f925e786f8eca21b5762e03ece9d9a9b2c3a9dcf0aebadc4cdf21a0278e209ef9f5f4eef2554516d206eaf8c3bfc79b90d6c4348caa92ba277e40c06235597b07b16d8aea627e95013e0b12570749a882f475a9c", 0x74, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2194.322345][T17293] 0 90 4295139496 [ 2194.335377][T17293] 1 90 4295139496 08:03:27 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$floppy(&(0x7f0000000000), 0xfffffff8, 0x0) [ 2194.342950][T17293] 2 90 4295139496 [ 2194.343748][T21182] loop3: detected capacity change from 0 to 87 [ 2194.358801][T17293] 24 90 4295139496 [ 2194.366759][ T37] audit: type=1804 audit(1638173007.835:793): pid=21181 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1351/bus" dev="sda1" ino=1187 res=1 errno=0 [ 2194.404307][T17293] 1b 90 4295139496 [ 2194.410389][T17293] ff 90 4295139496 [ 2194.415243][T17293] 12 80 4295141312 [ 2194.443311][T17293] 3 90 4295141312 [ 2194.449325][T17293] 13 80 4295141312 [ 2194.455861][T17293] 0 90 4295141312 [ 2194.461538][T17293] 1a 90 4295141312 [ 2194.465577][T17293] 0 90 4295141312 [ 2194.469757][T17293] 3 80 4295141312 [ 2194.474064][T17293] a1 90 4295141312 08:03:27 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2194.480677][ T37] audit: type=1800 audit(1638173007.835:794): pid=21181 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1187 res=0 errno=0 08:03:28 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7fc750a0971b7e3bdc33a652f30e64c31a0b6f925e786f8eca21b5762e03ece9d9a9b2c3a9dcf0aebadc4cdf21a0278e209ef9f5f4eef2554516d206eaf8c3bfc79b90d6c4348caa92ba277e40c06235597b07b16d8aea627e95013e0b12570749a882f475a9c", 0x74, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2194.527601][T17293] 1e 90 4295141312 [ 2194.542881][T17293] 7 80 4295141312 08:03:28 executing program 2: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f0000000140)={0x0, &(0x7f0000000000)="16be1d9a2d4c7b6bfe29160d657649a324f7e9228c182a4e14dd2d141745766c0b00db66419d3d2d42d09c5c1b0e312743a9209359c4a3f4162c18da14eca2e0388671595c8aabfa2e97020bdd4fe33348076f65900f0dec9a390b29ad9868789c420bc729d6a200096b7452d3300460e1fbaff2f16f9be74b5b2db603442747065464d025f4a43ed3772a96e705db0f3be168b069e31eed2b1190ce261b707e04ab6bf54e65aacf4f76779c512ea3f0add456557b626e31616e546330a48568e0e74b1e188a1f8430743b0d84a1e214520016fdb0816f2fd764c7a9a0", &(0x7f0000000100)=0x8, 0x0, 0xdd, 0x0, 0x0, 0x4, 0x6, "b894673eaf1ad0ba6beb029ed76fb1c8", 0x0, '\x00', 0x401}) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000200)={0x0, "faf8d93c329f9b96ac1bb6f8eb8410c0"}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca249435, &(0x7f0000001200)={0x1, 0x1, @start={r2, 0x1, "f6d1d6df2bc5305cbbcba6d50c4b5e5d2bd616c7170ff28e4de229a56f837d1dfa796ed6f34e85bf2a623f1398acd4849e5bcb301b06f3efd8a1a070baff9e14a956882868dcdf7fe13cd79cb299743119a3297283fa8398df71d760ec921bbca42cf5857b82ac92a5e2a7c29ad60a8e1bce70c62597feedc79972411ed5c08d50b655e0adeaf7ff52ea5db8de58c2570dafef2cae34bfb5e153690427415eb7ae0bc411a29adb5f0631c678c7b7dd18563f250a4815e6b5bc6c1834a0b4d3d6b3e9e345e0f12ae5ccac1ba961ffdedce8ab097a1c58b631588a313ed84f0252af4cb6382d6670374354a8646a79b91cb55414a89682b7cc5aea11ed7b44cffe6c11689b1a537fe754a0f092dc1626f61f9decafad44a99106b4c38db50b446104fa7078b03e891fe42e02c11c16cab9018b5bb6cd418bc3b414129370477c1d79d43692ab06b27fb712c151edf5e2388e272090c939560f653af457e222f0780706767480a47909d40b6f1740cc7c9d6eceb4931f330d2f6c5fc687e5a47f68499687acadd6a3c89bd844cfe84956418d647dd16690a1329ef8524ef40f9304acb44e13f56ff91affe93e2bb897ae07ae06a9649a50710b958ecd6779b9cebb06e9d120257a4fe7156c8dec47e537253617b027da4ace18127a6a345b80501e1c04ba22f0a8703470c17f829c5cde840c92965e4ca2c40f509715fe661220a2f6c3508836687fae0117d3ada38c02f882d96711ddd63f683dba5045e31c940b9f463bfdce7b06e6b1846ec8992eb275394dd36774171c6745bcebcab7e2e2eff7419fbcf2c83a65ffe6b3ad2a1c62331565594652701db8ccdd222035e260d90964064c55f99512da0b1001a3417f1b4e1ecd8e847233c7ecfeb1de9bbee97616dca5a8e2a4f23791ac735f33b9281dc315c7a3b3a0c67c6a3b48ffcf865e0098168de5ae450f826e769405e76840aca7d527d20d7907d88bd64a2bbed4545334a38c24e647e317ed3c51673d8347e98976aff6b82468168188aeacc1077288dc8bf75e12d24a20027033498c1ed75ece0b316857af5e5288d9c6a7c3fa148c90d1a439f82702cb411610ddb5442b76e21bcd989d1d1e3c1a194b74627663b5e1661e470307bc0b145964b245c2f87cb7a8c0585585ad5f70e2c246179c8061c2ef8601cde44e5fbcee21554371ff97440cea363fa994955011d42ff2f91acf457e007499d1587158bc6fff375bd97f76f614b490fe8b9cc69e99c50ce7a28416bf967ecd0d9117f6eec0cdf56578eb01729372ea6e67a74ba340e3a6b0d7a2f2f9a772a966207d8e2b8c35f5b2beec27b8a7561e045574bd63ce7727d8e148b21e4aa7768782dce4fbee8bf73a71c221e937ab58f4765077b3c4360bbceb917f11235dcd5bed03eec55796f5184900ec595d5eeeb305e81955be27591f228412", "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"}, [0xff, 0x1, 0x0, 0x6, 0x80000000, 0x2, 0x80, 0x2, 0x0, 0x9, 0x3, 0x6, 0x2, 0x8000, 0x54, 0x0, 0x0, 0x1, 0xaaf, 0x800, 0x3290390e, 0x8, 0x3ff, 0x8, 0x0, 0x80000000, 0x7, 0x9, 0x7ff, 0x4, 0xa4d9, 0x9, 0x7f, 0x20, 0x8000000000000, 0x0, 0xffffffff, 0xae7, 0x6, 0x9, 0x9, 0x1c0000, 0x49, 0x71, 0xfff, 0x4, 0x5, 0x6, 0x8, 0x9, 0x1, 0x8, 0x7, 0x4, 0x6, 0x2, 0xfffffffffffffffb, 0x1000, 0x1f, 0x2, 0x9, 0x8, 0x9, 0x2]}) ioctl$FLOPPY_FDCLRPRM(r0, 0x241) [ 2194.548393][T17293] 1 90 4295141312 [ 2194.554475][T17293] 8 80 4295141312 [ 2194.559827][T17293] 4 80 4295141312 [ 2194.563597][T17293] 1 90 4295141312 [ 2194.567501][T17293] last result at 4295141492 [ 2194.574147][T17293] last redo_fd_request at 4295156264 [ 2194.580318][T17293] status=80 [ 2194.584187][T17293] fdc_busy=1 [ 2194.588718][T17293] floppy_work.func=floppy_work_workfn [ 2194.596055][T17293] cont=ffffffff8a1f4920 [ 2194.603738][T17293] current_req=0000000000000000 [ 2194.613456][T17293] command_status=-1 [ 2194.636457][T17293] [ 2194.638037][T21193] loop3: detected capacity change from 0 to 87 [ 2194.641655][T17293] floppy1: floppy timeout called [ 2194.684845][T17293] [ 2194.688084][T17293] floppy driver state [ 2194.697157][T17293] ------------------- [ 2194.709686][T17293] now=4295156315 last interrupt=4295141312 diff=15003 last called handler=recal_interrupt [ 2194.726947][T17293] timeout_message=lock fdc [ 2194.736404][T17293] last output bytes: [ 2194.743217][T17293] 0 90 4295139496 [ 2194.748709][T17293] 1 90 4295139496 [ 2194.756225][T17293] 2 90 4295139496 [ 2194.798092][T17293] 24 90 4295139496 [ 2194.805665][T17293] 1b 90 4295139496 [ 2194.815495][T17293] ff 90 4295139496 [ 2194.821795][T17293] 12 80 4295141312 [ 2194.828315][T17293] 3 90 4295141312 [ 2194.834368][T17293] 13 80 4295141312 08:03:28 executing program 0: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 08:03:28 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:28 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7fc750a0971b7e3bdc33a652f30e64c31a0b6f925e786f8eca21b5762e03ece9d9a9b2c3a9dcf0aebadc4cdf21a0278e209ef9f5f4eef2554516d206eaf8c3bfc79b90d6c4348caa92ba277e40c06235597b07b16d8aea627e95013e0b12570749a882f475a9c", 0x74, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2194.870304][T17293] 0 90 4295141312 [ 2194.871985][T21199] loop0: detected capacity change from 0 to 87 [ 2194.876797][T17293] 1a 90 4295141312 [ 2194.916099][T17293] 0 90 4295141312 [ 2194.922848][T17293] 3 80 4295141312 [ 2194.928736][T17293] a1 90 4295141312 [ 2194.934820][T17293] 1e 90 4295141312 [ 2194.940571][T17293] 7 80 4295141312 [ 2194.946474][T17293] 1 90 4295141312 [ 2194.953955][T17293] 8 80 4295141312 [ 2194.962185][T17293] 4 80 4295141312 [ 2194.970245][T17293] 1 90 4295141312 [ 2194.981410][T17293] last result at 4295141492 [ 2194.987262][T17293] last redo_fd_request at 4295156311 [ 2194.999809][T17293] status=80 [ 2195.009541][T17293] fdc_busy=1 [ 2195.014938][T17293] floppy_work.func=floppy_work_workfn [ 2195.025937][T17293] cont=ffffffff8a1f4920 [ 2195.033604][T17293] current_req=0000000000000000 [ 2195.044328][T17293] command_status=-1 [ 2195.053207][T17293] [ 2195.057670][T17293] floppy1: floppy timeout called [ 2195.075207][T17293] [ 2195.097973][T17293] floppy driver state [ 2195.130552][T17293] ------------------- [ 2195.173294][T17293] now=4295156362 last interrupt=4295141312 diff=15050 last called handler=recal_interrupt [ 2195.207439][T17293] timeout_message=lock fdc [ 2195.261148][T17293] last output bytes: [ 2195.267753][T17293] 0 90 4295139496 [ 2195.281945][T17293] 1 90 4295139496 [ 2195.292490][T17293] 2 90 4295139496 [ 2195.297438][T17293] 24 90 4295139496 08:03:28 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7fc750a0971b7e3bdc33a652f30e64c31a0b6f925e786f8eca21b5762e03ece9d9a9b2c3a9dcf0aebadc4cdf21a0278e209ef9f5f4eef2554516d206eaf8c3bfc79b90d6c4348caa92ba277e40c06235597b07b16d8aea627e95013e0b12570749a882f475a9c", 0x74, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2195.311325][T17293] 1b 90 4295139496 [ 2195.318555][T17293] ff 90 4295139496 [ 2195.324687][T17293] 12 80 4295141312 [ 2195.345544][T17293] 3 90 4295141312 [ 2195.357629][T17293] 13 80 4295141312 [ 2195.364825][T17293] 0 90 4295141312 [ 2195.383698][T17293] 1a 90 4295141312 [ 2195.391575][T17293] 0 90 4295141312 [ 2195.397146][T17293] 3 80 4295141312 [ 2195.409710][T17293] a1 90 4295141312 [ 2195.417441][T17293] 1e 90 4295141312 [ 2195.426920][T17293] 7 80 4295141312 [ 2195.436755][T17293] 1 90 4295141312 [ 2195.462205][T17293] 8 80 4295141312 [ 2195.484434][T17293] 4 80 4295141312 [ 2195.489331][T17293] 1 90 4295141312 [ 2195.510838][T17293] last result at 4295141492 [ 2195.516304][T17293] last redo_fd_request at 4295156352 [ 2195.544843][T17293] status=80 [ 2195.554711][T17293] fdc_busy=1 [ 2195.568205][T17293] floppy_work.func=floppy_work_workfn [ 2195.594750][T17293] cont=ffffffff8a1f4920 [ 2195.602146][T17293] current_req=0000000000000000 08:03:28 executing program 0: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2195.612518][T17293] command_status=-1 [ 2195.629005][T17293] [ 2195.636079][T17293] floppy1: floppy timeout called [ 2195.666359][T21207] loop0: detected capacity change from 0 to 87 [ 2195.669448][T13101] [ 2195.678963][T13101] floppy driver state [ 2195.686207][T13101] ------------------- [ 2195.692656][T13101] now=4295156414 last interrupt=4295141312 diff=15102 last called handler=recal_interrupt [ 2195.708978][T13101] timeout_message=lock fdc [ 2195.716370][T13101] last output bytes: [ 2195.723490][T13101] 0 90 4295139496 [ 2195.735139][T13101] 1 90 4295139496 [ 2195.754383][T13101] 2 90 4295139496 [ 2195.761882][T13101] 24 90 4295139496 [ 2195.769026][T13101] 1b 90 4295139496 [ 2195.776568][T13101] ff 90 4295139496 [ 2195.796368][T13101] 12 80 4295141312 [ 2195.807014][T13101] 3 90 4295141312 [ 2195.824930][T13101] 13 80 4295141312 [ 2195.830787][T13101] 0 90 4295141312 [ 2195.836503][T13101] 1a 90 4295141312 [ 2195.843174][T13101] 0 90 4295141312 [ 2195.851611][T13101] 3 80 4295141312 [ 2195.858720][T13101] a1 90 4295141312 [ 2195.866127][T13101] 1e 90 4295141312 [ 2195.884980][T13101] 7 80 4295141312 [ 2195.890086][T13101] 1 90 4295141312 [ 2195.894886][T13101] 8 80 4295141312 [ 2195.899394][T13101] 4 80 4295141312 [ 2195.904253][T13101] 1 90 4295141312 [ 2195.908528][T13101] last result at 4295141492 [ 2195.930658][T13101] last redo_fd_request at 4295156411 [ 2195.938777][T13101] status=80 [ 2195.944219][T13101] fdc_busy=1 08:03:29 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7fc750a0971b7e3bdc33a652f30e64c31a0b6f925e786f8eca21b5762e03ece9d9a9b2c3a9dcf0aebadc4cdf21a0278e209ef9f5f4eef2554516d206eaf8c3bfc79b90d6c4348caa92ba277e40c06235597b07b16d8aea627e95013e0b12570749a882f475a9c", 0x74, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:29 executing program 0: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2195.957933][T13101] floppy_work.func=floppy_work_workfn [ 2195.975629][T21211] loop0: detected capacity change from 0 to 87 [ 2196.007638][T13101] cont=ffffffff8a1f4920 [ 2196.013994][T13101] current_req=0000000000000000 [ 2196.021593][T13101] command_status=-1 [ 2196.030668][T13101] [ 2196.096432][T13101] floppy1: floppy timeout called [ 2196.199604][T13101] [ 2196.205330][T13101] floppy driver state [ 2196.239744][T13101] ------------------- 08:03:29 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 08:03:29 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:29 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x0, 0x0, 0x18000, &(0x7f0000000080)=ANY=[]) [ 2196.270083][T13101] now=4295156472 last interrupt=4295141312 diff=15160 last called handler=recal_interrupt 08:03:29 executing program 2: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) ioctl$FLOPPY_FDDEFPRM(0xffffffffffffffff, 0x401c0243, &(0x7f0000000040)={0x80, 0x6, 0x7d, 0xfb, 0x4, 0x63, 0x8, 0x8, 0x2, &(0x7f0000000000)='\x00'}) [ 2196.288539][T13101] timeout_message=lock fdc [ 2196.294759][T13101] last output bytes: [ 2196.300263][T13101] 0 90 4295139496 [ 2196.305380][T13101] 1 90 4295139496 [ 2196.317496][T13101] 2 90 4295139496 08:03:29 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x0, 0x0, 0x18000, &(0x7f0000000080)=ANY=[]) [ 2196.377935][T13101] 24 90 4295139496 [ 2196.383605][T13101] 1b 90 4295139496 [ 2196.390160][T13101] ff 90 4295139496 [ 2196.395996][T13101] 12 80 4295141312 [ 2196.402120][T13101] 3 90 4295141312 [ 2196.403797][T21222] loop0: detected capacity change from 0 to 87 [ 2196.407538][T13101] 13 80 4295141312 [ 2196.407559][T13101] 0 90 4295141312 [ 2196.407573][T13101] 1a 90 4295141312 [ 2196.407588][T13101] 0 90 4295141312 [ 2196.407601][T13101] 3 80 4295141312 [ 2196.407614][T13101] a1 90 4295141312 [ 2196.407628][T13101] 1e 90 4295141312 [ 2196.407643][T13101] 7 80 4295141312 [ 2196.407657][T13101] 1 90 4295141312 [ 2196.407670][T13101] 8 80 4295141312 [ 2196.407683][T13101] 4 80 4295141312 [ 2196.407697][T13101] 1 90 4295141312 [ 2196.407712][T13101] last result at 4295141492 [ 2196.407723][T13101] last redo_fd_request at 4295156458 [ 2196.407785][T13101] status=80 [ 2196.407799][T13101] fdc_busy=1 [ 2196.407808][T13101] floppy_work.func=floppy_work_workfn [ 2196.538099][T13101] cont=ffffffff8a1f4920 [ 2196.544523][T13101] current_req=0000000000000000 [ 2196.555074][T13101] command_status=-1 [ 2196.562456][T13101] [ 2196.566194][T13101] floppy1: floppy timeout called [ 2196.609541][T13101] [ 2196.614476][T13101] floppy driver state [ 2196.639244][T13101] ------------------- [ 2196.650018][T13101] now=4295156510 last interrupt=4295141312 diff=15198 last called handler=recal_interrupt [ 2196.667039][T13101] timeout_message=lock fdc [ 2196.674517][T13101] last output bytes: [ 2196.692545][T13101] 0 90 4295139496 [ 2196.702588][T13101] 1 90 4295139496 [ 2196.722415][T13101] 2 90 4295139496 [ 2196.728119][T13101] 24 90 4295139496 [ 2196.733250][T13101] 1b 90 4295139496 [ 2196.743336][T13101] ff 90 4295139496 [ 2196.751282][T13101] 12 80 4295141312 [ 2196.768346][T13101] 3 90 4295141312 [ 2196.773112][T13101] 13 80 4295141312 [ 2196.777335][T13101] 0 90 4295141312 [ 2196.802554][T13101] 1a 90 4295141312 [ 2196.823146][T13101] 0 90 4295141312 [ 2196.828962][T13101] 3 80 4295141312 [ 2196.834249][T13101] a1 90 4295141312 [ 2196.841815][T13101] 1e 90 4295141312 [ 2196.862627][T13101] 7 80 4295141312 [ 2196.871556][T13101] 1 90 4295141312 [ 2196.907762][T13101] 8 80 4295141312 [ 2196.916924][T13101] 4 80 4295141312 [ 2196.931836][T13101] 1 90 4295141312 [ 2196.952418][T13101] last result at 4295141492 [ 2196.958415][T13101] last redo_fd_request at 4295156505 [ 2196.970328][T13101] status=80 [ 2196.974869][T13101] fdc_busy=1 [ 2196.979622][T13101] floppy_work.func=floppy_work_workfn [ 2197.005822][T13101] cont=ffffffff8a1f4920 [ 2197.023519][T13101] current_req=0000000000000000 [ 2197.038487][T13101] command_status=-1 [ 2197.045940][T13101] [ 2197.051675][T13101] floppy1: floppy timeout called [ 2197.077342][T13101] [ 2197.079972][T13101] floppy driver state [ 2197.085174][T13101] ------------------- [ 2197.093720][T13101] now=4295156554 last interrupt=4295141312 diff=15242 last called handler=recal_interrupt [ 2197.109839][T13101] timeout_message=lock fdc [ 2197.183842][T13101] last output bytes: [ 2197.189018][T13101] 0 90 4295139496 [ 2197.193641][T13101] 1 90 4295139496 [ 2197.214473][T13101] 2 90 4295139496 [ 2197.219924][T13101] 24 90 4295139496 [ 2197.246386][T13101] 1b 90 4295139496 [ 2197.267311][T13101] ff 90 4295139496 08:03:30 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:30 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2197.278720][T13101] 12 80 4295141312 [ 2197.285067][T13101] 3 90 4295141312 08:03:30 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x0, 0x0, 0x18000, &(0x7f0000000080)=ANY=[]) [ 2197.304826][T13101] 13 80 4295141312 [ 2197.310083][T21228] loop0: detected capacity change from 0 to 87 [ 2197.311984][T13101] 0 90 4295141312 [ 2197.324113][T13101] 1a 90 4295141312 [ 2197.332474][T13101] 0 90 4295141312 [ 2197.350108][T13101] 3 80 4295141312 [ 2197.359257][T13101] a1 90 4295141312 [ 2197.379405][T13101] 1e 90 4295141312 [ 2197.384397][T13101] 7 80 4295141312 [ 2197.393278][T13101] 1 90 4295141312 [ 2197.428935][T13101] 8 80 4295141312 08:03:31 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2197.577096][T13101] 4 80 4295141312 [ 2197.618075][T13101] 1 90 4295141312 [ 2197.625834][T21235] loop3: detected capacity change from 0 to 87 [ 2197.627061][T13101] last result at 4295141492 [ 2197.649886][T13101] last redo_fd_request at 4295156552 [ 2197.657640][T13101] status=80 [ 2197.662163][T13101] fdc_busy=1 [ 2197.666698][T13101] floppy_work.func=floppy_work_workfn [ 2197.679282][T13101] cont=ffffffff8a1f4920 [ 2197.685797][T13101] current_req=0000000000000000 [ 2197.692429][T13101] command_status=-1 [ 2197.699369][T13101] [ 2197.704518][T13101] floppy1: floppy timeout called [ 2197.736146][ T3758] [ 2197.738785][ T3758] floppy driver state [ 2197.743017][ T3758] ------------------- [ 2197.747025][ T3758] now=4295156619 last interrupt=4295141312 diff=15307 last called handler=recal_interrupt [ 2197.780028][ T3758] timeout_message=lock fdc [ 2197.790720][ T3758] last output bytes: [ 2197.812762][ T3758] 0 90 4295139496 [ 2197.823920][ T3758] 1 90 4295139496 [ 2197.838357][ T3758] 2 90 4295139496 [ 2197.843888][ T3758] 24 90 4295139496 [ 2197.850095][ T3758] 1b 90 4295139496 [ 2197.856114][ T3758] ff 90 4295139496 [ 2197.861256][ T3758] 12 80 4295141312 [ 2197.867206][ T3758] 3 90 4295141312 [ 2197.873680][ T3758] 13 80 4295141312 [ 2197.880188][ T3758] 0 90 4295141312 [ 2197.891889][ T3758] 1a 90 4295141312 [ 2197.896323][ T3758] 0 90 4295141312 [ 2197.902972][ T3758] 3 80 4295141312 [ 2197.911693][ T3758] a1 90 4295141312 08:03:31 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2197.918432][ T3758] 1e 90 4295141312 08:03:31 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2197.926885][ T3758] 7 80 4295141312 [ 2197.932307][ T3758] 1 90 4295141312 08:03:31 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000000)={0x4c, 0x9, 0x100}) syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) [ 2197.937266][ T3758] 8 80 4295141312 [ 2197.947992][T21237] loop0: detected capacity change from 0 to 87 [ 2197.957228][ T3758] 4 80 4295141312 [ 2197.962885][ T3758] 1 90 4295141312 [ 2197.973757][ T3758] last result at 4295141492 [ 2197.976207][T21241] loop3: detected capacity change from 0 to 87 [ 2197.991369][ T3758] last redo_fd_request at 4295156618 [ 2198.038411][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 2198.038430][ T37] audit: type=1804 audit(1638173011.515:807): pid=21237 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1358/bus" dev="sda1" ino=1198 res=1 errno=0 [ 2198.055323][ T3758] status=80 [ 2198.111853][ T37] audit: type=1800 audit(1638173011.535:808): pid=21237 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1198 res=0 errno=0 [ 2198.158130][ T3758] fdc_busy=1 [ 2198.170545][ T3758] floppy_work.func=floppy_work_workfn [ 2198.201062][ T3758] cont=ffffffff8a1f4920 [ 2198.223159][ T3758] current_req=0000000000000000 [ 2198.237082][ T3758] command_status=-1 [ 2198.244835][ T3758] [ 2198.254284][ T3758] floppy1: floppy timeout called [ 2198.281195][ T3758] 08:03:31 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2198.287467][ T3758] floppy driver state [ 2198.298260][ T3758] ------------------- 08:03:31 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2198.306920][ T3758] now=4295156675 last interrupt=4295141312 diff=15363 last called handler=recal_interrupt [ 2198.325124][ T3758] timeout_message=lock fdc [ 2198.350333][T21243] FAT-fs (loop0): bogus number of reserved sectors [ 2198.355341][ T3758] last output bytes: [ 2198.387993][ T3758] 0 90 4295139496 [ 2198.393574][ T3758] 1 90 4295139496 [ 2198.410022][ T3758] 2 90 4295139496 [ 2198.417973][T21243] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2198.423554][ T3758] 24 90 4295139496 [ 2198.435706][T21245] loop3: detected capacity change from 0 to 87 [ 2198.452008][ T3758] 1b 90 4295139496 [ 2198.457451][ T3758] ff 90 4295139496 [ 2198.464819][ T3758] 12 80 4295141312 [ 2198.467979][ T37] audit: type=1804 audit(1638173011.935:809): pid=21246 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1359/file1/bus" dev="sda1" ino=1198 res=1 errno=0 [ 2198.474652][ T3758] 3 90 4295141312 [ 2198.532378][ T3758] 13 80 4295141312 [ 2198.537530][ T3758] 0 90 4295141312 [ 2198.547165][ T3758] 1a 90 4295141312 [ 2198.556463][ T3758] 0 90 4295141312 [ 2198.564128][ T3758] 3 80 4295141312 [ 2198.568862][ T37] audit: type=1800 audit(1638173011.935:810): pid=21246 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1198 res=0 errno=0 [ 2198.593864][ T3758] a1 90 4295141312 [ 2198.624060][ T3758] 1e 90 4295141312 [ 2198.632172][ T3758] 7 80 4295141312 [ 2198.652071][ T3758] 1 90 4295141312 [ 2198.684192][ T3758] 8 80 4295141312 [ 2198.689952][ T3758] 4 80 4295141312 [ 2198.696735][ T3758] 1 90 4295141312 [ 2198.724184][ T3758] last result at 4295141492 [ 2198.734822][ T3758] last redo_fd_request at 4295156673 [ 2198.746351][ T3758] status=80 [ 2198.756918][ T3758] fdc_busy=1 [ 2198.762709][ T3758] floppy_work.func=floppy_work_workfn [ 2198.775078][ T3758] cont=ffffffff8a1f4920 [ 2198.782505][ T3758] current_req=0000000000000000 [ 2198.795396][ T3758] command_status=-1 [ 2198.801293][ T3758] [ 2198.805343][ T3758] floppy1: floppy timeout called [ 2198.826821][ T3758] [ 2198.867513][ T3758] floppy driver state 08:03:32 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:32 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 08:03:32 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {0x0, 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2198.885555][ T3758] ------------------- 08:03:32 executing program 2: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000100)={0x1, 0x1, 0x1000, 0xd0, &(0x7f0000000000)="ca804c0f95f256a293ea8398b24afaff27b7d575a6a3cf53dc9d8bf2333336da3d576931831cac5b115c7ba7a376f53a3c3a534e33adec1fd86701c0d5e968c120aa2a83985e8e5f6752aa98f60e6b69b672558a763bd46fa0dc0df05387ce4922a4e176d62e8972a853b2460f262774efd01740dbbbc0fda7e002c99e2a1a8d56cdf1a86602766c5512ffbe622f104ac07403c290bae1ea66fc341676e0c7df4d950aeef4d316162f825c52c6ff6e211550f95e674cc90ddbdc9475f2f2ae10f6baac72af84dc940da5edbeaaf34d78", 0xea, 0x0, &(0x7f0000000200)="0fdc30932f16d1578de06190c5a0f9cadb58165fb0a03c4c166efbc8162a464f659cdaf342b043d0633bf867c42f4657c515ae9657a075bcdb838d969290b537ab1923df2d04ee200af8daac9c122c70a8a5cf7c41dc32b90eb659b1a3c6a40ab32bd428374f96848afa161354a81931d1612c228924eb016278f9b77b8f097f3ed65bb720af72a29e6ae0118ca6fc7f27b47f9c07eafaa618c23dc44905b7520882d392da8e29c244211018af71f5d08a39439fcdbcf282c33848ebe35e125c6c0a0821008723f676d60bf106ab170aa7f27238fefda66097ae89b0de0da671e8a164258abe7d16d3f5"}) r1 = syz_io_uring_complete(0x0) ioctl$FLOPPY_FDRAWCMD(r1, 0x258, &(0x7f0000000340)={0x20, &(0x7f0000000180)="fcf215d0b930c0fb3f7cf82894eac289659f3d2f754cd751c7a2d12194b54973ddffe3fba25b7b3ba0de1413ec9001cf648de9a8e7", &(0x7f0000000300)=0x80, 0x0, 0x35, 0x0, 0x0, 0x20, 0x5, "83d2b48bab8a04e9975715f410331c9f", 0x0, '\x00', 0x14}) [ 2198.911002][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 2198.916182][T21251] loop3: detected capacity change from 0 to 87 [ 2198.920966][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 2198.940071][ T3758] now=4295156739 last interrupt=4295141312 diff=15427 last called handler=recal_interrupt [ 2198.946903][T21249] FAT-fs (loop0): bogus number of reserved sectors [ 2198.964618][ T3758] timeout_message=lock fdc [ 2198.964637][ T3758] last output bytes: [ 2198.964645][ T3758] 0 90 4295139496 [ 2198.964660][ T3758] 1 90 4295139496 [ 2198.964673][ T3758] 2 90 4295139496 [ 2198.964689][ T3758] 24 90 4295139496 [ 2198.964703][ T3758] 1b 90 4295139496 [ 2198.964718][ T3758] ff 90 4295139496 [ 2198.964732][ T3758] 12 80 4295141312 [ 2198.964746][ T3758] 3 90 4295141312 [ 2198.964760][ T3758] 13 80 4295141312 [ 2198.964775][ T3758] 0 90 4295141312 [ 2198.964789][ T3758] 1a 90 4295141312 [ 2198.964804][ T3758] 0 90 4295141312 [ 2198.964819][ T3758] 3 80 4295141312 [ 2198.964833][ T3758] a1 90 4295141312 [ 2198.964847][ T3758] 1e 90 4295141312 [ 2198.964860][ T3758] 7 80 4295141312 [ 2198.964873][ T3758] 1 90 4295141312 [ 2198.964885][ T3758] 8 80 4295141312 [ 2198.964897][ T3758] 4 80 4295141312 [ 2198.964911][ T3758] 1 90 4295141312 [ 2198.964925][ T3758] last result at 4295141492 [ 2198.964935][ T3758] last redo_fd_request at 4295156727 [ 2198.965006][ T3758] status=80 [ 2198.965027][ T3758] fdc_busy=1 [ 2198.965038][ T3758] floppy_work.func=floppy_work_workfn [ 2198.965065][ T3758] cont=ffffffff8a1f4920 [ 2198.965077][ T3758] current_req=0000000000000000 [ 2198.965088][ T3758] command_status=-1 [ 2198.965099][ T3758] [ 2198.965179][ T3758] floppy1: floppy timeout called [ 2198.995424][T21249] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2199.040025][ T3758] [ 2199.149271][ T37] audit: type=1804 audit(1638173012.595:811): pid=21259 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1360/file1/bus" dev="sda1" ino=1194 res=1 errno=0 [ 2199.161564][ T3758] floppy driver state [ 2199.199249][ T37] audit: type=1800 audit(1638173012.595:812): pid=21259 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1194 res=0 errno=0 [ 2199.236462][ T3758] ------------------- 08:03:32 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {0x0, 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2199.269635][ T3758] now=4295156772 last interrupt=4295141312 diff=15460 last called handler=recal_interrupt [ 2199.284436][ T3758] timeout_message=lock fdc [ 2199.291310][ T3758] last output bytes: [ 2199.297218][ T3758] 0 90 4295139496 [ 2199.303235][ T3758] 1 90 4295139496 [ 2199.320915][ T3758] 2 90 4295139496 [ 2199.327449][ T3758] 24 90 4295139496 [ 2199.335017][ T3758] 1b 90 4295139496 [ 2199.341726][ T3758] ff 90 4295139496 [ 2199.348568][ T3758] 12 80 4295141312 [ 2199.355792][ T3758] 3 90 4295141312 [ 2199.394294][ T3758] 13 80 4295141312 08:03:32 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2199.461012][ T3758] 0 90 4295141312 [ 2199.466109][ T3758] 1a 90 4295141312 [ 2199.477606][T21261] loop3: detected capacity change from 0 to 87 [ 2199.482876][T21263] FAT-fs (loop0): bogus number of reserved sectors [ 2199.495282][ T3758] 0 90 4295141312 [ 2199.495788][T21263] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2199.500686][ T3758] 3 80 4295141312 [ 2199.518109][ T3758] a1 90 4295141312 [ 2199.523088][ T3758] 1e 90 4295141312 [ 2199.531717][ T3758] 7 80 4295141312 [ 2199.574935][ T37] audit: type=1804 audit(1638173013.045:813): pid=21264 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1361/file1/bus" dev="sda1" ino=1194 res=1 errno=0 [ 2199.584603][ T3758] 1 90 4295141312 [ 2199.617436][ T3758] 8 80 4295141312 08:03:33 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {0x0, 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:33 executing program 2: sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1c}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x240000d0) r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2028001}, 0xfffffcd7, &(0x7f0000000180)={&(0x7f0000000340)={0xf8, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1}}}}, [@NL80211_ATTR_IE={0x85, 0x2a, [@supported_rates, @challenge={0x10, 0x1, 0x63}, @random={0x9e, 0x11, "3339105a03392c3d042f9502f266b42518"}, @rann={0x7e, 0x15, {{0x1, 0x3a}, 0x1, 0x7f, @device_a, 0x9, 0x7ff, 0x1ff}}, @mesh_chsw={0x76, 0x6, {0x4, 0x7f, 0x5, 0x8001}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @tim={0x5, 0x45, {0x7f, 0x3, 0xfc, "d3ce021d45a736acf16b1f464f9ee112345477d249edb56a4dac9afa3a4d67f8b596d813240f4114b2ac7c2aea12e08ae84ecda98caf2f17ed24fd9f6d3a29e66b81"}}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x180f, 0x3, 0x3, 0x0, {0x8, 0x1f, 0x0, 0x20, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x4, 0x20}}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="028e64b7766b"}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x404d, 0x1, 0x0, 0x0, {0x17c, 0x6, 0x0, 0x5, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x6, 0xff}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x200048d4}, 0x2000c004) ioctl$FLOPPY_FDCLRPRM(r0, 0x241) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x1ff) r1 = openat$sr(0xffffff9c, &(0x7f0000000200), 0x50042, 0x0) ioctl$FLOPPY_FDGETDRVSTAT(r1, 0x80340212, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x1}) [ 2199.623560][ T37] audit: type=1800 audit(1638173013.095:814): pid=21264 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1194 res=0 errno=0 [ 2199.634612][ T3758] 4 80 4295141312 [ 2199.673129][ T3758] 1 90 4295141312 [ 2199.679706][ T3758] last result at 4295141492 [ 2199.687784][ T3758] last redo_fd_request at 4295156746 [ 2199.695790][ T3758] status=80 [ 2199.700445][ T3758] fdc_busy=1 [ 2199.704917][ T3758] floppy_work.func=floppy_work_workfn [ 2199.716153][ T3758] cont=ffffffff8a1f4920 08:03:33 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2199.721680][ T3758] current_req=0000000000000000 [ 2199.727662][ T3758] command_status=-1 [ 2199.744401][ T3758] [ 2199.747657][ T3758] floppy1: floppy timeout called [ 2199.760457][ T3758] [ 2199.764001][ T3758] floppy driver state [ 2199.770076][ T3758] ------------------- [ 2199.775633][ T3758] now=4295156822 last interrupt=4295141312 diff=15510 last called handler=recal_interrupt [ 2199.789156][ T3758] timeout_message=lock fdc [ 2199.794847][ T3758] last output bytes: [ 2199.800416][ T3758] 0 90 4295139496 [ 2199.803801][T21271] loop3: detected capacity change from 0 to 87 [ 2199.804620][ T3758] 1 90 4295139496 [ 2199.804641][ T3758] 2 90 4295139496 [ 2199.804657][ T3758] 24 90 4295139496 [ 2199.804673][ T3758] 1b 90 4295139496 [ 2199.804688][ T3758] ff 90 4295139496 [ 2199.804703][ T3758] 12 80 4295141312 [ 2199.804717][ T3758] 3 90 4295141312 08:03:33 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2199.804731][ T3758] 13 80 4295141312 [ 2199.804744][ T3758] 0 90 4295141312 [ 2199.804758][ T3758] 1a 90 4295141312 [ 2199.804772][ T3758] 0 90 4295141312 [ 2199.804785][ T3758] 3 80 4295141312 [ 2199.804799][ T3758] a1 90 4295141312 [ 2199.806112][ T37] audit: type=1804 audit(1638173013.275:815): pid=21269 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1362/file1/bus" dev="sda1" ino=1194 res=1 errno=0 [ 2199.806164][ T37] audit: type=1800 audit(1638173013.275:816): pid=21269 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1194 res=0 errno=0 [ 2199.934974][ T3758] 1e 90 4295141312 [ 2199.940202][ T3758] 7 80 4295141312 [ 2199.945582][ T3758] 1 90 4295141312 [ 2199.950184][ T3758] 8 80 4295141312 [ 2199.954563][ T3758] 4 80 4295141312 [ 2199.960124][ T3758] 1 90 4295141312 [ 2199.964795][ T3758] last result at 4295141492 [ 2199.971485][ T3758] last redo_fd_request at 4295156820 [ 2199.979246][ T3758] status=80 [ 2199.983747][ T3758] fdc_busy=1 [ 2199.988691][ T3758] floppy_work.func=floppy_work_workfn [ 2199.996116][ T3758] cont=ffffffff8a1f4920 [ 2200.001762][ T3758] current_req=0000000000000000 [ 2200.008577][ T3758] command_status=-1 [ 2200.013985][ T3758] [ 2200.017377][ T3758] floppy1: floppy timeout called [ 2200.030094][ T3758] [ 2200.032826][ T3758] floppy driver state 08:03:33 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180), 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:33 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:33 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2200.040016][ T3758] ------------------- [ 2200.046245][ T3758] now=4295156849 last interrupt=4295141312 diff=15537 last called handler=recal_interrupt [ 2200.060902][ T3758] timeout_message=lock fdc [ 2200.066384][ T3758] last output bytes: [ 2200.073211][T21278] loop3: detected capacity change from 0 to 87 [ 2200.081720][ T3758] 0 90 4295139496 [ 2200.086793][ T3758] 1 90 4295139496 [ 2200.092034][ T3758] 2 90 4295139496 [ 2200.097176][ T3758] 24 90 4295139496 [ 2200.106152][ T3758] 1b 90 4295139496 [ 2200.111626][ T3758] ff 90 4295139496 08:03:33 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2200.116292][ T3758] 12 80 4295141312 [ 2200.122820][ T3758] 3 90 4295141312 [ 2200.128141][ T3758] 13 80 4295141312 [ 2200.133589][ T3758] 0 90 4295141312 [ 2200.143021][ T3758] 1a 90 4295141312 [ 2200.149218][ T3758] 0 90 4295141312 08:03:33 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180), 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2200.160853][ T3758] 3 80 4295141312 [ 2200.166104][T21283] loop0: detected capacity change from 0 to 87 [ 2200.167371][ T3758] a1 90 4295141312 [ 2200.182573][ T3758] 1e 90 4295141312 [ 2200.191819][ T3758] 7 80 4295141312 [ 2200.193802][T21283] FAT-fs (loop0): bogus number of reserved sectors [ 2200.198229][ T3758] 1 90 4295141312 [ 2200.198252][ T3758] 8 80 4295141312 [ 2200.208017][T21283] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2200.212822][ T3758] 4 80 4295141312 [ 2200.236263][ T3758] 1 90 4295141312 [ 2200.241750][ T3758] last result at 4295141492 [ 2200.247638][ T3758] last redo_fd_request at 4295156847 [ 2200.255025][ T3758] status=80 [ 2200.259264][ T3758] fdc_busy=1 [ 2200.263852][ T3758] floppy_work.func=floppy_work_workfn [ 2200.270955][ T3758] cont=ffffffff8a1f4920 [ 2200.277604][T21285] loop3: detected capacity change from 0 to 87 [ 2200.285282][ T3758] current_req=0000000000000000 [ 2200.291009][ T3758] command_status=-1 [ 2200.296529][ T3758] [ 2200.300187][ T3758] floppy1: floppy timeout called [ 2200.318466][ T3758] [ 2200.320948][ T3758] floppy driver state [ 2200.325398][ T3758] ------------------- 08:03:33 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0x1, 0x0) 08:03:33 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2200.335925][ T3758] now=4295156878 last interrupt=4295141312 diff=15566 last called handler=recal_interrupt [ 2200.350095][ T3758] timeout_message=lock fdc [ 2200.356000][ T3758] last output bytes: [ 2200.362106][ T3758] 0 90 4295139496 [ 2200.367570][ T3758] 1 90 4295139496 [ 2200.370539][T21287] loop0: detected capacity change from 0 to 87 [ 2200.372874][ T3758] 2 90 4295139496 [ 2200.386641][ T3758] 24 90 4295139496 [ 2200.391557][T21287] FAT-fs (loop0): bogus number of reserved sectors [ 2200.392164][ T3758] 1b 90 4295139496 [ 2200.413148][ T3758] ff 90 4295139496 [ 2200.418754][ T3758] 12 80 4295141312 [ 2200.419218][T21287] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2200.423943][ T3758] 3 90 4295141312 [ 2200.438590][ T3758] 13 80 4295141312 [ 2200.443492][ T3758] 0 90 4295141312 08:03:33 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180), 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2200.449000][ T3758] 1a 90 4295141312 [ 2200.454423][ T3758] 0 90 4295141312 [ 2200.460196][ T3758] 3 80 4295141312 [ 2200.465808][ T3758] a1 90 4295141312 [ 2200.470643][ T3758] 1e 90 4295141312 [ 2200.476894][ T3758] 7 80 4295141312 [ 2200.482474][ T3758] 1 90 4295141312 [ 2200.487441][ T3758] 8 80 4295141312 [ 2200.492467][ T3758] 4 80 4295141312 [ 2200.496676][ T3758] 1 90 4295141312 [ 2200.503331][ T3758] last result at 4295141492 [ 2200.509243][ T3758] last redo_fd_request at 4295156877 [ 2200.516597][ T3758] status=80 [ 2200.521394][ T3758] fdc_busy=1 [ 2200.526008][ T3758] floppy_work.func=floppy_work_workfn [ 2200.532843][ T3758] cont=ffffffff8a1f4920 08:03:34 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2200.537802][ T3758] current_req=0000000000000000 [ 2200.543554][ T3758] command_status=-1 [ 2200.547640][ T3758] [ 2200.551327][ T3758] floppy1: floppy timeout called [ 2200.560077][ T3758] [ 2200.563023][ T3758] floppy driver state [ 2200.567756][ T3758] ------------------- [ 2200.573585][ T3758] now=4295156902 last interrupt=4295141312 diff=15590 last called handler=recal_interrupt [ 2200.587895][T21292] loop3: detected capacity change from 0 to 87 [ 2200.589925][ T3758] timeout_message=lock fdc [ 2200.600903][ T3758] last output bytes: [ 2200.601761][T21294] loop0: detected capacity change from 0 to 87 [ 2200.605983][ T3758] 0 90 4295139496 [ 2200.606005][ T3758] 1 90 4295139496 [ 2200.606019][ T3758] 2 90 4295139496 [ 2200.634770][ T3758] 24 90 4295139496 [ 2200.636015][T21294] FAT-fs (loop0): bogus number of reserved sectors [ 2200.640058][ T3758] 1b 90 4295139496 [ 2200.650083][T21294] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2200.654522][ T3758] ff 90 4295139496 [ 2200.654546][ T3758] 12 80 4295141312 [ 2200.654562][ T3758] 3 90 4295141312 [ 2200.654578][ T3758] 13 80 4295141312 [ 2200.684538][ T3758] 0 90 4295141312 [ 2200.688941][ T3758] 1a 90 4295141312 [ 2200.693307][ T3758] 0 90 4295141312 [ 2200.698077][ T3758] 3 80 4295141312 [ 2200.702541][ T3758] a1 90 4295141312 [ 2200.706860][ T3758] 1e 90 4295141312 [ 2200.711480][ T3758] 7 80 4295141312 [ 2200.716107][ T3758] 1 90 4295141312 [ 2200.720945][ T3758] 8 80 4295141312 [ 2200.725358][ T3758] 4 80 4295141312 [ 2200.730657][ T3758] 1 90 4295141312 [ 2200.735278][ T3758] last result at 4295141492 [ 2200.741900][ T3758] last redo_fd_request at 4295156901 [ 2200.748736][ T3758] status=80 [ 2200.752634][ T3758] fdc_busy=1 [ 2200.756759][ T3758] floppy_work.func=floppy_work_workfn [ 2200.763932][ T3758] cont=ffffffff8a1f4920 [ 2200.769968][ T3758] current_req=0000000000000000 [ 2200.776760][ T3758] command_status=-1 [ 2200.782115][ T3758] [ 2200.785441][ T3758] floppy1: floppy timeout called [ 2200.801082][ T3758] [ 2200.804394][ T3758] floppy driver state [ 2200.809921][ T3758] ------------------- 08:03:34 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:34 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7fc750a0971b7e3bdc33a652f30e64c31a0b6f925e786f8eca21b5762e03ece9d9a9b2c3a9dcf0aebadc4cdf2", 0x3a, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2200.815596][ T3758] now=4295156926 last interrupt=4295141312 diff=15614 last called handler=recal_interrupt [ 2200.832754][ T3758] timeout_message=lock fdc [ 2200.834742][T21297] loop3: detected capacity change from 0 to 87 [ 2200.839283][ T3758] last output bytes: [ 2200.853497][ T3758] 0 90 4295139496 [ 2200.858730][ T3758] 1 90 4295139496 [ 2200.866810][ T3758] 2 90 4295139496 [ 2200.872406][ T3758] 24 90 4295139496 08:03:34 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2200.877737][ T3758] 1b 90 4295139496 [ 2200.884080][ T3758] ff 90 4295139496 [ 2200.889501][ T3758] 12 80 4295141312 [ 2200.894099][ T3758] 3 90 4295141312 [ 2200.900638][ T3758] 13 80 4295141312 [ 2200.905406][ T3758] 0 90 4295141312 [ 2200.910225][ T3758] 1a 90 4295141312 [ 2200.913265][T21301] loop0: detected capacity change from 0 to 87 [ 2200.914483][ T3758] 0 90 4295141312 [ 2200.914498][ T3758] 3 80 4295141312 [ 2200.914510][ T3758] a1 90 4295141312 [ 2200.914519][ T3758] 1e 90 4295141312 [ 2200.914527][ T3758] 7 80 4295141312 [ 2200.914537][ T3758] 1 90 4295141312 [ 2200.914548][ T3758] 8 80 4295141312 [ 2200.914556][ T3758] 4 80 4295141312 [ 2200.914565][ T3758] 1 90 4295141312 [ 2200.914573][ T3758] last result at 4295141492 [ 2200.914580][ T3758] last redo_fd_request at 4295156925 [ 2200.914626][ T3758] status=80 [ 2200.914636][ T3758] fdc_busy=1 [ 2200.914643][ T3758] floppy_work.func=floppy_work_workfn 08:03:34 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180), 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2200.944266][T21301] FAT-fs (loop0): bogus number of reserved sectors [ 2200.947617][ T3758] cont=ffffffff8a1f4920 [ 2200.947630][ T3758] current_req=0000000000000000 [ 2200.947636][ T3758] command_status=-1 [ 2200.947644][ T3758] [ 2200.947704][ T3758] floppy1: floppy timeout called [ 2200.958111][T21301] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2201.037618][T21305] loop3: detected capacity change from 0 to 87 [ 2201.041058][T13101] [ 2201.068096][T13101] floppy driver state [ 2201.073505][T13101] ------------------- [ 2201.093565][T13101] now=4295156954 last interrupt=4295141312 diff=15642 last called handler=recal_interrupt [ 2201.107533][T13101] timeout_message=lock fdc [ 2201.114015][T13101] last output bytes: [ 2201.119396][T13101] 0 90 4295139496 [ 2201.124548][T13101] 1 90 4295139496 [ 2201.130882][T13101] 2 90 4295139496 [ 2201.135950][T13101] 24 90 4295139496 [ 2201.141839][T13101] 1b 90 4295139496 [ 2201.146781][T13101] ff 90 4295139496 [ 2201.151395][T13101] 12 80 4295141312 [ 2201.156189][T13101] 3 90 4295141312 [ 2201.161072][T13101] 13 80 4295141312 [ 2201.166017][T13101] 0 90 4295141312 [ 2201.171390][T13101] 1a 90 4295141312 [ 2201.176596][T13101] 0 90 4295141312 [ 2201.182131][T13101] 3 80 4295141312 [ 2201.186968][T13101] a1 90 4295141312 [ 2201.192888][T13101] 1e 90 4295141312 [ 2201.197411][T13101] 7 80 4295141312 [ 2201.202188][T13101] 1 90 4295141312 [ 2201.206855][T13101] 8 80 4295141312 [ 2201.212080][T13101] 4 80 4295141312 [ 2201.216673][T13101] 1 90 4295141312 [ 2201.221134][T13101] last result at 4295141492 [ 2201.226432][T13101] last redo_fd_request at 4295156949 [ 2201.237646][T13101] status=80 [ 2201.242950][T13101] fdc_busy=1 [ 2201.247009][T13101] floppy_work.func=floppy_work_workfn [ 2201.254747][T13101] cont=ffffffff8a1f4920 [ 2201.260994][T13101] current_req=0000000000000000 [ 2201.266899][T13101] command_status=-1 [ 2201.272475][T13101] [ 2201.275592][T13101] floppy1: floppy timeout called [ 2201.292699][T13101] [ 2201.295779][T13101] floppy driver state [ 2201.302754][T13101] ------------------- 08:03:34 executing program 2: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x2d6, 0x0, 0x972, 0xfff, 0x7f}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x800}}, './file0\x00'}) r2 = syz_mount_image$cramfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffff001, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000100)="556b34c888f70595823e6a76d5cf3133b35aab71d3394f5888547cc09ba824d1496a9728baf4f34eda6160302d845d4bfa34df9e60c57c9d40fb7ef9c4519c513cd2554e0792da56d936d24d7fbceebf99fa5dd53157ad68f0a5a781b58e3a02a9da686477bbd3e75616563e96c2bb36f693fc8a0ea7a6e98664e515bdbdc4043284b880d8a7cf0261", 0x89, 0x8c1e85d}, {&(0x7f0000000200)="1bfe7f689b97a9639631391fcea91faad7e28125b056a322fe813ea759d4f77ca006234df12d", 0x26, 0x1ff}, {&(0x7f0000000240)="597cdc21903069b5d6c73a62cb90610e6f0571f67bb24431f913f4b514b0b5c246a7832d191ed6d4ec590309877f2a71654a4e50e3adcfaca25c3e6366e8eb15d207519a7b0333759737f4e8ea5806", 0x4f, 0x1}, {&(0x7f00000002c0)="99204571d937aca17597d5636ac5567ba13b9534cbc91c6b98365c74c03eacda873073c943a34f25ce2d54e12120ecef4ae0e74038fcb920862091bfd0994b545b9e87e80e40eeba836a61045e8f9cc7182a42de1a8522e0b99968879fc89e796a9fe1738cbc7047c72140e351f6bfa1a69e60b970deee531a94aaa4494af309d9c495e16e4fdeedec92cd91c5d1ac014a7e34805333dddc41b5bc376f99b669ba98ee0bec8a1d39963605284f3f203a51546b3d59ba5920acc27bfe942cd05f039f25089a130e0ac8580f5000d3643eab59ffa522b89bc09e6e808295b37fde843ec7c9db6f83aab4a80243c48845ebb5eecc92bf44fdf0f543c4bf7270", 0xfe, 0x3}, {&(0x7f00000003c0)="bfbbbd236d86f1fe9f05f2c87a5de838889aa5306b2c379db634da29155ae02f2e242660eb3b4cfdcbb8fb6827663b8772b888c453d128aa85af5add336bfda9c15225544ea888c5651c8abfd274571942f34965f53d9a53b617f144", 0x5c, 0xfffffbff}, {&(0x7f0000000440)="5c7beda200da9acc65d1d7b6a5276582065fee37bb1fa063b155c21ac1a8689b3d7fa0232adb274451d02de9d84ac2c4243f2ec252a9cc33c3ba55ddb745a62c770a57efcdc0f92eb1c62381b0352144adce38c6", 0x54, 0x2}, {&(0x7f00000004c0)="d92c9a23cd978e60b9be2463e5f99cea61ee740ecf696efce70ff031de428744df48466304bb64d682a73d490882c857a13049096611797271426863a93c2393404ebfa1e003a12cda893a09fe284f1dcb9373f8e779524a24c28d519d4c3850677613af64b7d50aae156e5eeab7ad4f97c5358a9de17988a70a84a59fee5ba39d975a23c22588e2d0756a60e594195847fa87e3702963b6aa05444e8ec6e469e13b58a75fa932b82cd90c91b41f5667c3d456159b27c72a304d64100920fc85d27c47a3274cde829c07e09bae0fe2a0e13a276bd6caf47fc9620f5392bf", 0xde, 0xb}], 0x4040, &(0x7f0000000640)={[{'/dev/fd#\x00'}, {'/%$('}, {'\x00'}, {'\x00'}, {'/'}, {'/dev/fd#\x00'}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@euid_gt}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185647, &(0x7f0000000780)={0x9f0000, 0x7, 0x2, r2, 0x0, &(0x7f0000000740)={0x980929, 0xfffffffa, '\x00', @p_u32=&(0x7f0000000700)=0x9}}) 08:03:34 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180), 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:34 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2201.307800][T13101] now=4295156975 last interrupt=4295141312 diff=15663 last called handler=recal_interrupt [ 2201.322279][T13101] timeout_message=lock fdc [ 2201.328796][T13101] last output bytes: [ 2201.333677][T13101] 0 90 4295139496 08:03:34 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2201.337679][T13101] 1 90 4295139496 [ 2201.344411][T13101] 2 90 4295139496 [ 2201.349408][T13101] 24 90 4295139496 [ 2201.350929][T21309] loop0: detected capacity change from 0 to 87 [ 2201.354130][T13101] 1b 90 4295139496 [ 2201.355276][T21308] loop3: detected capacity change from 0 to 87 [ 2201.378471][T13101] ff 90 4295139496 [ 2201.383883][T13101] 12 80 4295141312 [ 2201.394771][T21309] FAT-fs (loop0): bogus number of reserved sectors [ 2201.403905][T13101] 3 90 4295141312 [ 2201.413854][T13101] 13 80 4295141312 [ 2201.418236][T21309] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2201.421378][T13101] 0 90 4295141312 [ 2201.436521][T13101] 1a 90 4295141312 [ 2201.442442][T13101] 0 90 4295141312 [ 2201.449605][T21314] loop2: detected capacity change from 0 to 264192 08:03:34 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180), 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2201.458765][T13101] 3 80 4295141312 [ 2201.470609][T21314] cramfs: Unknown parameter '/dev/fd#' [ 2201.478324][T13101] a1 90 4295141312 [ 2201.483235][T13101] 1e 90 4295141312 [ 2201.488960][T13101] 7 80 4295141312 [ 2201.493738][T13101] 1 90 4295141312 [ 2201.497698][T13101] 8 80 4295141312 [ 2201.502590][T13101] 4 80 4295141312 [ 2201.506862][T13101] 1 90 4295141312 [ 2201.511259][T13101] last result at 4295141492 [ 2201.516085][T13101] last redo_fd_request at 4295156973 [ 2201.523012][T13101] status=80 [ 2201.526632][T13101] fdc_busy=1 [ 2201.530919][T13101] floppy_work.func=floppy_work_workfn [ 2201.536934][T13101] cont=ffffffff8a1f4920 [ 2201.542823][T13101] current_req=0000000000000000 08:03:35 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2201.564567][T13101] command_status=-1 [ 2201.578120][T13101] [ 2201.580989][T13101] floppy1: floppy timeout called [ 2201.607921][T13101] [ 2201.610798][T13101] floppy driver state [ 2201.615341][T13101] ------------------- [ 2201.626400][T13101] now=4295157007 last interrupt=4295141312 diff=15695 last called handler=recal_interrupt [ 2201.627303][T21319] loop3: detected capacity change from 0 to 87 [ 2201.638880][T13101] timeout_message=lock fdc [ 2201.653454][T13101] last output bytes: [ 2201.658651][T21321] loop0: detected capacity change from 0 to 87 [ 2201.658793][T13101] 0 90 4295139496 [ 2201.671720][T13101] 1 90 4295139496 [ 2201.677074][T13101] 2 90 4295139496 [ 2201.684127][T13101] 24 90 4295139496 [ 2201.685435][T21321] FAT-fs (loop0): bogus number of reserved sectors [ 2201.690207][T13101] 1b 90 4295139496 08:03:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7fc750a0971b7e3bdc33a652f30e64c", 0x1d, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2201.704287][T21321] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2201.705402][T13101] ff 90 4295139496 [ 2201.719044][T13101] 12 80 4295141312 [ 2201.724095][T13101] 3 90 4295141312 [ 2201.729238][T13101] 13 80 4295141312 [ 2201.734293][T13101] 0 90 4295141312 [ 2201.739218][T13101] 1a 90 4295141312 [ 2201.744215][T13101] 0 90 4295141312 [ 2201.749492][T13101] 3 80 4295141312 [ 2201.754186][T13101] a1 90 4295141312 [ 2201.759650][T13101] 1e 90 4295141312 [ 2201.764910][T13101] 7 80 4295141312 [ 2201.771318][T13101] 1 90 4295141312 [ 2201.776649][T13101] 8 80 4295141312 [ 2201.782388][T13101] 4 80 4295141312 [ 2201.787606][T13101] 1 90 4295141312 [ 2201.794371][T13101] last result at 4295141492 [ 2201.801110][T13101] last redo_fd_request at 4295157005 [ 2201.808722][T13101] status=80 08:03:35 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2201.814164][T13101] fdc_busy=1 [ 2201.819004][T13101] floppy_work.func=floppy_work_workfn [ 2201.825948][T21324] loop3: detected capacity change from 0 to 87 [ 2201.833405][T13101] cont=ffffffff8a1f4920 [ 2201.838858][T13101] current_req=0000000000000000 [ 2201.844616][T13101] command_status=-1 [ 2201.849692][T13101] [ 2201.852406][T13101] floppy1: floppy timeout called [ 2201.859860][T11777] [ 2201.862264][T21326] loop0: detected capacity change from 0 to 87 [ 2201.863167][T11777] floppy driver state [ 2201.878174][T11777] ------------------- [ 2201.879416][T21326] FAT-fs (loop0): bogus number of reserved sectors [ 2201.884180][T11777] now=4295157033 last interrupt=4295141312 diff=15721 last called handler=recal_interrupt [ 2201.892973][T21326] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2201.906856][T11777] timeout_message=lock fdc [ 2201.922462][T21314] loop2: detected capacity change from 0 to 264192 [ 2201.924975][T11777] last output bytes: [ 2201.961260][T11777] 0 90 4295139496 [ 2201.966031][T11777] 1 90 4295139496 [ 2201.971653][T11777] 2 90 4295139496 [ 2201.976975][T11777] 24 90 4295139496 [ 2201.984478][T11777] 1b 90 4295139496 [ 2201.990489][T11777] ff 90 4295139496 [ 2201.995072][T11777] 12 80 4295141312 [ 2202.000268][T11777] 3 90 4295141312 [ 2202.005321][T11777] 13 80 4295141312 [ 2202.011011][T11777] 0 90 4295141312 [ 2202.015842][T11777] 1a 90 4295141312 [ 2202.021563][T11777] 0 90 4295141312 [ 2202.025518][T11777] 3 80 4295141312 [ 2202.029770][T11777] a1 90 4295141312 [ 2202.034422][T11777] 1e 90 4295141312 [ 2202.038979][T11777] 7 80 4295141312 [ 2202.043025][T11777] 1 90 4295141312 [ 2202.046823][T11777] 8 80 4295141312 [ 2202.051432][T11777] 4 80 4295141312 [ 2202.056116][T11777] 1 90 4295141312 [ 2202.061873][T11777] last result at 4295141492 [ 2202.068512][T11777] last redo_fd_request at 4295157031 [ 2202.074699][T11777] status=80 [ 2202.079337][T11777] fdc_busy=1 [ 2202.083929][T11777] floppy_work.func=floppy_work_workfn [ 2202.094288][T11777] cont=ffffffff8a1f4920 [ 2202.100096][T11777] current_req=0000000000000000 [ 2202.106676][T11777] command_status=-1 [ 2202.111920][T11777] [ 2202.115105][T11777] floppy1: floppy timeout called [ 2202.140373][T17293] [ 2202.143405][T17293] floppy driver state 08:03:35 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 08:03:35 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180), 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2202.149356][T17293] ------------------- [ 2202.172563][T17293] now=4295157062 last interrupt=4295141312 diff=15750 last called handler=recal_interrupt [ 2202.173217][T21329] loop0: detected capacity change from 0 to 87 [ 2202.184802][T21331] loop3: detected capacity change from 0 to 87 08:03:35 executing program 2: r0 = openat$ipvs(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100000, 0x44, &(0x7f0000000200)=[{&(0x7f0000010000)="0200000000003434180100007a4a79349db4b8dc010000001f00000000000000000010000000000002000000000000001000000005000000010000000000000002000000000000000000000000000000e001000000000000561b675f00000000571b675f00000000571b675f000000000100320000000100561b675f00000000004eed0000000000000000000b00000080002000c0001000d5e9c444ac624a73aa02cbe5d9660aa500"/192, 0xc0, 0x400}, {&(0x7f0000010100)="1740cc4333e8f05b11faaf1e400007000000000000000000561b675f0000000010000000000000000b0000000500000030010000000000000100000000000000020000000000000001000000000000000100000001000000010000000000000000000000000000000600000000000000010000000000000003000000030000000200000000000000000000000000000003000000000000000100000000000000040000000000000002000000000000000400000000000000010000000000000001000000010000000500000000000000000000000000000005000000000000000100000000000000010000000100000006000000000000000000000000000000030000000000000001000000000000000300000003000000000000000000000001000000000000000200"/320, 0x140, 0x1000}, {&(0x7f0000010300)="0200000000000000100001022e0000000200000000000000100002022e2e00000b00000000000000e00706012e6e696c667300"/64, 0x40, 0x1800}, {&(0x7f0000010400)="f43f000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000ff0f00"/2080, 0x820, 0x2000}, {&(0x7f0000010d00)="00000000000000000000000000000000561b675f00000000561b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0x3080}, {&(0x7f0000010e00)="01000000000000000008000000000000561b675f00000000561b675f0000000000000000000000000000000000000000ed4102000000000000000000000000000100"/96, 0x60, 0x3100}, {&(0x7f0000010f00)="00000000000000000000000000000000561b675f00000000561b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0x3380}, {&(0x7f0000011000)="00000000000000000000000000000000561b675f00000000561b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0x3400}, {&(0x7f0000011100)="00000000000000000000000000000000561b675f00000000561b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0x3480}, {&(0x7f0000011200)="00000000000000000000000000000000561b675f00000000561b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0x3500}, {&(0x7f0000011300)="00000000000000000000000000000000561b675f00000000561b675f0000000000000000000000000000000000000000a4810100"/64, 0x40, 0x3580}, {&(0x7f0000011400)="0100"/32, 0x20, 0x3800}, {&(0x7f0000011500)="0000000000000000000000000000000000000000000000000100000000000000561b675f000000000b000000000000000200000000000000040000000000000003000000000000000000000000000000561b675f00000000561b675f000000000000000000000000000000000000000000800100000000000000000000000000020000000000000003000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000200000000000000", 0xe0, 0x38c0}, {&(0x7f0000011600)="0200000000000000000000000000000000000000000000000300000000000000", 0x20, 0x3a40}, {&(0x7f0000011700)="0200000000000000000000000000000000000000000000000400000000000000", 0x20, 0x3b00}, {&(0x7f0000011800)="0200000000000000000000000000000000000000000000000500000000000000", 0x20, 0x3bc0}, {&(0x7f0000011900)="0200000000000000000000000000000000000000000000000600000000000000", 0x20, 0x3c80}, {&(0x7f0000011a00)="0200000000000000000000000000000000000000000000000700000000000000", 0x20, 0x3d40}, {&(0x7f0000011b00)="0200000000000000000000000000000000000000000000000800000000000000", 0x20, 0x3e00}, {&(0x7f0000011c00)="0200000000000000000000000000000000000000000000000900000000000000", 0x20, 0x3ec0}, {&(0x7f0000011d00)="1d0000000000000002000000000000001e000000000000000000000000000000561b675f000000000b0000000300000000000000000000000000000003000000", 0x40, 0x4000}, {&(0x7f0000011e00)="f93f0000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000007f00"/2080, 0x820, 0x4800}, {&(0x7f0000012700)="03000000000000000100000000000000ffffffffffffffff000000000000000004000000000000000100000000000000ffffffffffffffff000000000000000005000000000000000100000000000000ffffffffffffffff000000000000000006000000000000000100000000000000ffffffffffffffff000000000000000007000000000000000100000000000000ffffffffffffffff000000000000000008000000000000000100000000000000ffffffffffffffff0000000000000000", 0xc0, 0x5820}, {&(0x7f0000012800)="d348c23990010000561b675f0000000003000000000000000000000000000000561b675f00000000561b675f00000000000000000000000000000000000000000080010000000000000000000000000009000000000000000a000000000000000b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000561b675f00000000561b675f0000000000000000000000000000000000000000008001000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000561b675f00000000561b675f0000000000000000000000000000000000000000008001000000000000000000000000000600"/352, 0x160, 0x6000}, {&(0x7f0000012a00)="21d95e363dd317c011faaf1e400001000000000000000000571b675f0000000010000000000000000300000002000000900000000000000002000000000000000c0000000000000002000000000000000100000001000000002000000000000000000000000000000200000000000000020000000000000001000000010000000c00"/160, 0xa0, 0x6800}, {&(0x7f0000012b00)="0c00000000000000100001022e0000000200000000000000100002022e2e00000d000000000000001800050166696c6530000000000000000e00000000000000c807050766696c653100"/96, 0x60, 0x7000}, {&(0x7f0000012c00)="0200000000000000100001022e0000000200000000000000100002022e2e00000b00000000000000180006012e6e696c66730000000000000c000000000000001800050266696c6530000000000000000f000000000000001800050166696c65310000000000000010000000000000001800050166696c65320000000000000010000000000000001800050166696c65330000000000000011000000000000006807090166696c652e636f6c6400"/192, 0xc0, 0x7800}, {&(0x7f0000012d00)="25bcbafee798e16c11faaf1e400000000100000000000000571b675f0000000020000000000000001000000008000000f00100000000000002000000000000000d0000000000000002000000000000000100000001000000002800000000000000000000000000000e0000000000000002000000000000000100000001000000003000000000000000000000000000000f0000000000000002000000000000000100000001000000003800000000000000000000000000001000000000000000020000000000000005000000050000000700000000000000000000000000000008000000000000000100000000000000090000000000000002000000000000000a0000000000000003000000000000000b000000000000000400000000000000110000000000000002000000000000000100000001000000000800000000000000000000000000000600000000000000020000000000000004000000040000000d0000000000000000000000000000000e0000000000000001000000000000000f00000000000000020000000000000001300000000000000300000000000000040000000000000000000000000000000100000001000000100000000000000000000000000000000500000000000000000000000000000001000000010000001100"/512, 0x200, 0x8000}, {&(0x7f0000012f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x8800}, {&(0x7f0000013400)='/tmp/syz-imagegen080357209/file0/file0\x00'/64, 0x40, 0x9000}, {&(0x7f0000013500)='syzkallers\x00'/32, 0x20, 0x9800}, {&(0x7f0000013600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xc800}, {&(0x7f0000013700)="ee3f000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000ffff0300"/2080, 0x820, 0xd000}, {&(0x7f0000014000)="00000000000000000000000000000000561b675f00000000561b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0xe080}, {&(0x7f0000014100)="01000000000000000008000000000000571b675f00000000571b675f0000000053e17b1a53e17b1a0000000000000000ed4103000000000000000000000000000c00"/96, 0x60, 0xe100}, {&(0x7f0000014200)="00000000000000000000000000000000561b675f00000000561b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0xe380}, {&(0x7f0000014300)="00000000000000000000000000000000561b675f00000000561b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0xe400}, {&(0x7f0000014400)="00000000000000000000000000000000561b675f00000000561b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0xe480}, {&(0x7f0000014500)="00000000000000000000000000000000561b675f00000000561b675f000000000000000000000000000000000000000000800100"/64, 0x40, 0xe500}, {&(0x7f0000014600)="00000000000000000000000000000000561b675f00000000561b675f0000000000000000000000000000000000000000a4810100"/64, 0x40, 0xe580}, {&(0x7f0000014700)="04000000000000000008000000000000571b675f00000000571b675f0000000053e17b1a53e17b1a0000000000000000ed41020000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009ca7294a0000000004000000000000001a04000000000000571b675f00000000571b675f0000000053e17b1a53e17b1a0000000000000000ed81010000000000000000000000000000280000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009da7294a0000000004000000000000002600000000000000571b675f00000000571b675f0000000053e17b1a53e17b1a0000000000000000eda1010000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009ea7294a0000000004000000000000000a00000000000000571b675f00000000571b675f0000000053e17b1a53e17b1a0000000000000000ed81010000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009fa7294a0000000014000000000000002823000000000000571b675f00000000571b675f0000000053e17b1a53e17b1a0000000000000000ed8102000000000000000000000000000700000000000000080000000000000009000000000000000a000000000000000b0000000000000000000000000000000000000000000000a0a7294a0000000004000000000000006400000000000000571b675f00000000571b675f0000000053e17b1a53e17b1a0000000000000000ed8101000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a1a7294a00000000", 0x300, 0xe600}, {&(0x7f0000014a00)="0200"/32, 0x20, 0xf000}, {&(0x7f0000014b00)="0000000000000000000000000000000000000000000000000100000000000000561b675f000000000b000000000000000200000000000000040000000000000003000000000000000000000000000000561b675f00000000561b675f000000000000000000000000000000000000000000800100000000000000000000000000020000000000000003000000000000000400"/160, 0xa0, 0xf0c0}, {&(0x7f0000014c00)="0000000000000000000000000000000000000000000000000200000000000000571b675f00000000210000000000000008000000000000000f0000000000000007000000000000000000000000000000561b675f00000000561b675f0000000000000000000000000000000000000000008001000000000000000000000000000d000000000000000e000000000000000f00000000000000013000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000300000000000000", 0xe0, 0xf180}, {&(0x7f0000014d00)="0200000000000000000000000000000000000000000000000400000000000000", 0x20, 0xf300}, {&(0x7f0000014e00)="0200000000000000000000000000000000000000000000000500000000000000", 0x20, 0xf3c0}, {&(0x7f0000014f00)="0200000000000000000000000000000000000000000000000600000000000000", 0x20, 0xf480}, {&(0x7f0000015000)="0200000000000000000000000000000000000000000000000700000000000000", 0x20, 0xf540}, {&(0x7f0000015100)="0200000000000000000000000000000000000000000000000800000000000000", 0x20, 0xf600}, {&(0x7f0000015200)="0200000000000000000000000000000000000000000000000900000000000000", 0x20, 0xf6c0}, {&(0x7f0000015300)="1b00000000000000040000000000000003000000000000000000000000000000571b675f000000000e00000003000000571b675f000000001000000003000000571b675f000000000b0000000200000000000000000000000000000002000000", 0x60, 0xf800}, {&(0x7f0000015400)="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", 0x400, 0x10000}, {&(0x7f0000015800)="e83f000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000004000000040000000400000ffff0300"/2080, 0x820, 0x10800}, {&(0x7f0000016100)="0100"/32, 0x20, 0x11100}, {&(0x7f0000016200)="0100"/32, 0x20, 0x11400}, {&(0x7f0000016300)="0100"/32, 0x20, 0x11500}, {&(0x7f0000016400)="0300"/32, 0x20, 0x11600}, {&(0x7f0000016500)="0100"/32, 0x20, 0x11700}, {&(0x7f0000016600)="03000000000000000100000000000000020000000000000000000000000000000400000000000000010000000000000002000000000000000000000000000000050000000000000001000000000000000200000000000000000000000000000006000000000000000100000000000000020000000000000000000000000000000700000000000000010000000000000001000000000000000000000000000000080000000000000001000000000000000100000000000000000000000000000014000000000000000200000000000000ffffffffffffffff000000000000000015000000000000000200000000000000ffffffffffffffff000000000000000016000000000000000200000000000000ffffffffffffffff000000000000000017000000000000000200000000000000ffffffffffffffff000000000000000018000000000000000200000000000000ffffffffffffffff00000000000000000f000000000000000200000000000000ffffffffffffffff00000000000000001a000000000000000200000000000000ffffffffffffffff00000000000000001b000000000000000200000000000000ffffffffffffffff00000000000000001c000000000000000200000000000000ffffffffffffffff00000000000000001e000000000000000200000000000000ffffffffffffffff00000000000000001f000000000000000200000000000000ffffffffffffffff0000000000000000", 0x220, 0x11820}, {&(0x7f0000016900)="19000000000000000200000000000000ffffffffffffffff0000000000000000", 0x20, 0x12000}, {&(0x7f0000016a00)="0e000000000000000200000000000000ffffffffffffffff0000000000000000", 0x20, 0x12800}, {&(0x7f0000016b00)="11000000000000000200000000000000ffffffffffffffff0000000000000000", 0x20, 0x13000}, {&(0x7f0000016c00)="12000000000000000200000000000000ffffffffffffffff00000000000000001d000000000000000200000000000000ffffffffffffffff0000000000000000", 0x40, 0x13800}, {&(0x7f0000016d00)="13000000000000000200000000000000ffffffffffffffff0000000000000000", 0x20, 0x14000}, {&(0x7f0000016e00)="0001080000000000000000000000000000000000000000000100000000000000020000000000000022000000000000008200000000000000a200000000000000c200000000000000e200"/96, 0x60, 0x14800}, {&(0x7f0000016f00)='\x00\x00\x00\x00\x00\x00\x00\x00!\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00#\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00%\x00\x00\x00\x00\x00\x00\x00&\x00\x00\x00\x00\x00\x00\x00\'\x00\x00\x00\x00\x00\x00\x00(\x00'/96, 0x60, 0x14c00}, {&(0x7f0000017000)="9352f9f790010000571b675f000000001b000000000000000000000000000000561b675f00000000561b675f00000000000000000000000000000000000000000080010000000000010201000000000000000000000000000a000000000000000b000000000000002900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000561b675f00000000561b675f0000000000000000000000000000000000000000008001000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000561b675f00000000561b675f0000000000000000000000000000000000000000008001000000000000000000000000001100"/352, 0x160, 0x15000}, {&(0x7f0000017200)="0200000000003434180100007a4a79340e8ce88e010000001f00000000000000000010000000000002000000000000001000000005000000020000000000000020000000000000000200000000000000b001000000000000561b675f00000000571b675f00000000571b675f000000000100320001000100561b675f00000000004eed0000000000000000000b00000080002000c0001000d5e9c444ac624a73aa02cbe5d9660aa500"/192, 0xc0, 0xff000}], 0x0, &(0x7f0000017300)) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180), 0x2, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1}) syz_open_dev$floppy(&(0x7f00000001c0), 0x7e, 0x80000) listxattr(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000580)=""/4096, 0x1000) [ 2202.186781][T17293] timeout_message=lock fdc [ 2202.212836][T17293] last output bytes: [ 2202.221003][T17293] 0 90 4295139496 [ 2202.226853][T17293] 1 90 4295139496 [ 2202.233023][T17293] 2 90 4295139496 [ 2202.237615][T17293] 24 90 4295139496 [ 2202.243118][T17293] 1b 90 4295139496 [ 2202.246241][T21329] FAT-fs (loop0): bogus number of reserved sectors [ 2202.250533][T17293] ff 90 4295139496 [ 2202.263347][T17293] 12 80 4295141312 [ 2202.269504][T17293] 3 90 4295141312 08:03:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180), 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2202.281873][T17293] 13 80 4295141312 [ 2202.287799][T17293] 0 90 4295141312 [ 2202.295472][T17293] 1a 90 4295141312 [ 2202.298061][T21329] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2202.302506][T17293] 0 90 4295141312 [ 2202.315593][T17293] 3 80 4295141312 [ 2202.323025][T17293] a1 90 4295141312 [ 2202.329446][T17293] 1e 90 4295141312 [ 2202.334411][T17293] 7 80 4295141312 [ 2202.367975][T17293] 1 90 4295141312 [ 2202.372705][T17293] 8 80 4295141312 [ 2202.373929][T21334] loop2: detected capacity change from 0 to 4080 [ 2202.377599][T17293] 4 80 4295141312 [ 2202.377621][T17293] 1 90 4295141312 [ 2202.377635][T17293] last result at 4295141492 [ 2202.377647][T17293] last redo_fd_request at 4295157057 [ 2202.377704][T17293] status=80 [ 2202.399523][T21334] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2202.429155][T17293] fdc_busy=1 [ 2202.432340][T21334] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 2048) [ 2202.448116][T17293] floppy_work.func=floppy_work_workfn [ 2202.454161][T17293] cont=ffffffff8a1f4920 [ 2202.458929][T17293] current_req=0000000000000000 [ 2202.459172][T21336] loop3: detected capacity change from 0 to 87 [ 2202.465141][T17293] command_status=-1 [ 2202.465159][T17293] [ 2202.465326][T17293] floppy1: floppy timeout called [ 2202.483633][T21334] NILFS (loop2): mounting unchecked fs [ 2202.486890][T17293] 08:03:35 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2202.508459][T17293] floppy driver state [ 2202.514061][T17293] ------------------- [ 2202.528277][T21334] NILFS (loop2): recovery complete [ 2202.528624][T17293] now=4295157098 last interrupt=4295141312 diff=15786 last called handler=recal_interrupt [ 2202.550313][T17293] timeout_message=lock fdc [ 2202.556336][T17293] last output bytes: [ 2202.562199][T17293] 0 90 4295139496 [ 2202.564092][T21338] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2202.567315][T17293] 1 90 4295139496 [ 2202.601689][T17293] 2 90 4295139496 [ 2202.606878][T17293] 24 90 4295139496 [ 2202.621965][T17293] 1b 90 4295139496 [ 2202.626862][T17293] ff 90 4295139496 [ 2202.633720][T17293] 12 80 4295141312 [ 2202.643403][T17293] 3 90 4295141312 [ 2202.650014][T17293] 13 80 4295141312 [ 2202.650454][T21341] loop0: detected capacity change from 0 to 87 [ 2202.655210][T17293] 0 90 4295141312 08:03:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180), 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2202.655233][T17293] 1a 90 4295141312 [ 2202.655247][T17293] 0 90 4295141312 [ 2202.655261][T17293] 3 80 4295141312 [ 2202.655274][T17293] a1 90 4295141312 [ 2202.655288][T17293] 1e 90 4295141312 [ 2202.674781][T21341] FAT-fs (loop0): bogus number of reserved sectors [ 2202.688086][T17293] 7 80 4295141312 [ 2202.691393][T21341] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2202.694773][T17293] 1 90 4295141312 08:03:36 executing program 2: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$FLOPPY_FDRAWCMD(r1, 0x258, &(0x7f00000000c0)={0x400, &(0x7f0000000040)="bf5531bf0f87", &(0x7f0000000080)=0x8, 0x0, 0x6, 0x0, 0x0, 0x7f, 0x1, "f3d57e489783dadc35ae139458d43953", 0x0, '\x00', 0x7fff}) [ 2202.694789][T17293] 8 80 4295141312 [ 2202.694797][T17293] 4 80 4295141312 [ 2202.694806][T17293] 1 90 4295141312 [ 2202.694814][T17293] last result at 4295141492 [ 2202.694821][T17293] last redo_fd_request at 4295157093 [ 2202.694867][T17293] status=80 [ 2202.763282][T17293] fdc_busy=1 [ 2202.767477][T17293] floppy_work.func=floppy_work_workfn [ 2202.775868][T17293] cont=ffffffff8a1f4920 [ 2202.781497][T17293] current_req=0000000000000000 [ 2202.787707][T17293] command_status=-1 [ 2202.792962][T17293] [ 2202.795965][T17293] floppy1: floppy timeout called [ 2202.857646][T21344] loop3: detected capacity change from 0 to 87 [ 2202.881004][T13101] 08:03:36 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2202.884171][T13101] floppy driver state [ 2202.891682][T13101] ------------------- [ 2202.898552][T13101] now=4295157135 last interrupt=4295141312 diff=15823 last called handler=recal_interrupt [ 2202.912019][T13101] timeout_message=lock fdc [ 2202.917992][T13101] last output bytes: [ 2202.924567][T21350] loop0: detected capacity change from 0 to 87 08:03:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7fc", 0xf, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2202.936316][T13101] 0 90 4295139496 [ 2202.941952][T13101] 1 90 4295139496 [ 2202.944148][T21350] FAT-fs (loop0): bogus number of reserved sectors [ 2202.947215][T13101] 2 90 4295139496 [ 2202.957651][T21350] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2202.963947][T13101] 24 90 4295139496 [ 2202.975327][T13101] 1b 90 4295139496 [ 2202.979763][T13101] ff 90 4295139496 [ 2202.984618][T13101] 12 80 4295141312 [ 2202.989817][T13101] 3 90 4295141312 [ 2202.994782][T13101] 13 80 4295141312 [ 2202.999840][T13101] 0 90 4295141312 [ 2203.004784][T13101] 1a 90 4295141312 [ 2203.009627][T13101] 0 90 4295141312 [ 2203.014979][T13101] 3 80 4295141312 [ 2203.019909][T13101] a1 90 4295141312 [ 2203.025144][T13101] 1e 90 4295141312 [ 2203.030595][T13101] 7 80 4295141312 [ 2203.035289][T13101] 1 90 4295141312 [ 2203.040605][T13101] 8 80 4295141312 [ 2203.046312][T13101] 4 80 4295141312 [ 2203.052110][T13101] 1 90 4295141312 [ 2203.057046][T13101] last result at 4295141492 [ 2203.063041][T13101] last redo_fd_request at 4295157125 [ 2203.071907][T13101] status=80 [ 2203.075937][T13101] fdc_busy=1 [ 2203.082132][T13101] floppy_work.func=floppy_work_workfn [ 2203.089380][T13101] cont=ffffffff8a1f4960 [ 2203.094750][T13101] current_req=0000000000000000 [ 2203.101043][T13101] command_status=-1 [ 2203.105793][T13101] [ 2203.108841][T13101] floppy1: floppy timeout called [ 2203.115566][T13101] floppy.c: no request in request_done [ 2203.123331][T13101] [ 2203.126292][T13101] floppy driver state [ 2203.131955][T13101] ------------------- [ 2203.137312][T13101] now=4295157158 last interrupt=4295141312 diff=15846 last called handler=recal_interrupt [ 2203.151131][T13101] timeout_message=lock fdc [ 2203.157029][T13101] last output bytes: [ 2203.162626][T13101] 0 90 4295139496 [ 2203.164525][T21355] loop3: detected capacity change from 0 to 87 [ 2203.168104][T13101] 1 90 4295139496 [ 2203.168125][T13101] 2 90 4295139496 [ 2203.168140][T13101] 24 90 4295139496 [ 2203.168156][T13101] 1b 90 4295139496 [ 2203.168171][T13101] ff 90 4295139496 [ 2203.168186][T13101] 12 80 4295141312 [ 2203.168202][T13101] 3 90 4295141312 [ 2203.168217][T13101] 13 80 4295141312 [ 2203.168233][T13101] 0 90 4295141312 [ 2203.168248][T13101] 1a 90 4295141312 [ 2203.168264][T13101] 0 90 4295141312 [ 2203.168279][T13101] 3 80 4295141312 [ 2203.168295][T13101] a1 90 4295141312 [ 2203.168310][T13101] 1e 90 4295141312 [ 2203.168326][T13101] 7 80 4295141312 [ 2203.168339][T13101] 1 90 4295141312 [ 2203.284072][T13101] 8 80 4295141312 [ 2203.291368][T13101] 4 80 4295141312 [ 2203.296892][T13101] 1 90 4295141312 [ 2203.302499][T13101] last result at 4295141492 [ 2203.308832][T13101] last redo_fd_request at 4295157157 [ 2203.315405][T13101] status=80 [ 2203.319618][T13101] fdc_busy=1 [ 2203.323796][T13101] floppy_work.func=floppy_work_workfn [ 2203.331354][T13101] cont=ffffffff8a1f4920 [ 2203.336629][T13101] current_req=0000000000000000 [ 2203.343154][T13101] command_status=-1 [ 2203.348404][T13101] [ 2203.351524][T13101] floppy1: floppy timeout called 08:03:36 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:36 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 08:03:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)='m', 0x1, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2203.406500][T13101] [ 2203.409522][T13101] floppy driver state [ 2203.412766][T21357] loop0: detected capacity change from 0 to 87 [ 2203.414111][T13101] ------------------- [ 2203.414125][T13101] now=4295157186 last interrupt=4295141312 diff=15874 last called handler=recal_interrupt [ 2203.414166][T13101] timeout_message=lock fdc [ 2203.414175][T13101] last output bytes: [ 2203.414183][T13101] 0 90 4295139496 [ 2203.414198][T13101] 1 90 4295139496 [ 2203.414212][T13101] 2 90 4295139496 [ 2203.454355][T21357] FAT-fs (loop0): bogus number of reserved sectors [ 2203.459189][T13101] 24 90 4295139496 [ 2203.460695][T21359] loop3: detected capacity change from 0 to 87 [ 2203.480465][T21357] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2203.486358][T13101] 1b 90 4295139496 [ 2203.486380][T13101] ff 90 4295139496 [ 2203.486396][T13101] 12 80 4295141312 [ 2203.486409][T13101] 3 90 4295141312 [ 2203.486423][T13101] 13 80 4295141312 [ 2203.486436][T13101] 0 90 4295141312 [ 2203.486450][T13101] 1a 90 4295141312 [ 2203.486466][T13101] 0 90 4295141312 [ 2203.486481][T13101] 3 80 4295141312 [ 2203.486495][T13101] a1 90 4295141312 [ 2203.486508][T13101] 1e 90 4295141312 [ 2203.486522][T13101] 7 80 4295141312 [ 2203.486536][T13101] 1 90 4295141312 [ 2203.486550][T13101] 8 80 4295141312 [ 2203.486564][T13101] 4 80 4295141312 [ 2203.486576][T13101] 1 90 4295141312 [ 2203.486597][T13101] last result at 4295141492 [ 2203.486609][T13101] last redo_fd_request at 4295157185 [ 2203.486669][T13101] status=80 [ 2203.486683][T13101] fdc_busy=1 [ 2203.486692][T13101] floppy_work.func=floppy_work_workfn 08:03:37 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)='m', 0x1, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2203.486720][T13101] cont=ffffffff8a1f4920 [ 2203.486733][T13101] current_req=0000000000000000 [ 2203.486743][T13101] command_status=-1 [ 2203.486753][T13101] [ 2203.486827][T13101] floppy1: floppy timeout called [ 2203.499278][ T3758] [ 2203.555585][ T37] kauditd_printk_skb: 24 callbacks suppressed [ 2203.555603][ T37] audit: type=1804 audit(1638173017.025:841): pid=21362 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1375/file1/bus" dev="sda1" ino=1199 res=1 errno=0 [ 2203.563981][ T3758] floppy driver state [ 2203.596422][ T37] audit: type=1800 audit(1638173017.065:842): pid=21362 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1199 res=0 errno=0 [ 2203.596994][ T3758] ------------------- [ 2203.718182][ T3758] now=4295157217 last interrupt=4295141312 diff=15905 last called handler=recal_interrupt [ 2203.731797][ T3758] timeout_message=lock fdc [ 2203.737691][ T3758] last output bytes: [ 2203.743050][ T3758] 0 90 4295139496 [ 2203.747196][ T3758] 1 90 4295139496 [ 2203.751681][ T3758] 2 90 4295139496 [ 2203.756752][ T3758] 24 90 4295139496 [ 2203.762309][ T3758] 1b 90 4295139496 [ 2203.767402][ T3758] ff 90 4295139496 [ 2203.772882][ T3758] 12 80 4295141312 [ 2203.777621][ T3758] 3 90 4295141312 [ 2203.785603][T21367] loop3: detected capacity change from 0 to 87 08:03:37 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2203.788423][ T3758] 13 80 4295141312 [ 2203.806698][ T3758] 0 90 4295141312 [ 2203.813634][ T3758] 1a 90 4295141312 [ 2203.820681][ T3758] 0 90 4295141312 [ 2203.825961][ T3758] 3 80 4295141312 [ 2203.830980][ T3758] a1 90 4295141312 [ 2203.836393][ T3758] 1e 90 4295141312 [ 2203.841838][ T3758] 7 80 4295141312 [ 2203.848175][ T3758] 1 90 4295141312 [ 2203.853506][ T3758] 8 80 4295141312 [ 2203.859353][ T3758] 4 80 4295141312 [ 2203.860400][T21369] loop0: detected capacity change from 0 to 87 [ 2203.864933][ T3758] 1 90 4295141312 [ 2203.878394][ T3758] last result at 4295141492 [ 2203.884508][ T3758] last redo_fd_request at 4295157193 [ 2203.892380][ T3758] status=80 [ 2203.896807][ T3758] fdc_busy=1 [ 2203.902059][ T3758] floppy_work.func=floppy_work_workfn [ 2203.909874][ T3758] cont=ffffffff8a1f4920 [ 2203.915624][ T3758] current_req=0000000000000000 [ 2203.918619][T21369] FAT-fs (loop0): bogus number of reserved sectors [ 2203.922299][ T3758] command_status=-1 [ 2203.935474][ T3758] [ 2203.939335][ T3758] floppy1: floppy timeout called [ 2203.946946][T21369] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2203.956346][ T3758] [ 2203.959822][ T3758] floppy driver state [ 2203.965273][ T3758] ------------------- 08:03:37 executing program 2: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x4000) [ 2203.971790][ T3758] now=4295157242 last interrupt=4295141312 diff=15930 last called handler=recal_interrupt 08:03:37 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)='m', 0x1, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2203.984928][ T3758] timeout_message=lock fdc [ 2203.991111][ T3758] last output bytes: [ 2203.996252][ T3758] 0 90 4295139496 [ 2204.000956][ T37] audit: type=1804 audit(1638173017.475:843): pid=21370 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1376/file1/bus" dev="sda1" ino=1199 res=1 errno=0 [ 2204.002114][ T3758] 1 90 4295139496 [ 2204.049224][ T3758] 2 90 4295139496 [ 2204.054844][ T37] audit: type=1800 audit(1638173017.475:844): pid=21370 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1199 res=0 errno=0 [ 2204.056201][ T3758] 24 90 4295139496 [ 2204.084239][ T3758] 1b 90 4295139496 [ 2204.089762][ T3758] ff 90 4295139496 [ 2204.094873][ T3758] 12 80 4295141312 08:03:37 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2204.110817][ T3758] 3 90 4295141312 [ 2204.115634][ T3758] 13 80 4295141312 [ 2204.120803][ T3758] 0 90 4295141312 [ 2204.125900][ T3758] 1a 90 4295141312 [ 2204.148225][ T3758] 0 90 4295141312 [ 2204.153320][ T3758] 3 80 4295141312 [ 2204.158713][ T3758] a1 90 4295141312 [ 2204.161529][T21374] loop3: detected capacity change from 0 to 87 [ 2204.162935][ T3758] 1e 90 4295141312 [ 2204.162948][ T3758] 7 80 4295141312 [ 2204.188271][ T3758] 1 90 4295141312 [ 2204.189917][T21376] loop0: detected capacity change from 0 to 87 [ 2204.193980][ T3758] 8 80 4295141312 [ 2204.194000][ T3758] 4 80 4295141312 [ 2204.194013][ T3758] 1 90 4295141312 [ 2204.194027][ T3758] last result at 4295141492 [ 2204.194039][ T3758] last redo_fd_request at 4295157239 [ 2204.194098][ T3758] status=80 [ 2204.215055][T21376] FAT-fs (loop0): invalid media value (0x00) [ 2204.220102][ T3758] fdc_busy=1 [ 2204.229224][T21376] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2204.232996][ T3758] floppy_work.func=floppy_work_workfn [ 2204.268618][ T3758] cont=ffffffff8a1f4920 [ 2204.273993][ T3758] current_req=0000000000000000 [ 2204.280866][ T3758] command_status=-1 [ 2204.285984][ T3758] [ 2204.291703][ T3758] floppy1: floppy timeout called [ 2204.302454][ T37] audit: type=1804 audit(1638173017.765:845): pid=21377 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1377/file1/bus" dev="sda1" ino=1199 res=1 errno=0 [ 2204.339947][ T37] audit: type=1800 audit(1638173017.765:846): pid=21377 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1199 res=0 errno=0 [ 2204.344386][T13101] [ 2204.371033][T13101] floppy driver state [ 2204.377336][T13101] ------------------- [ 2204.384588][T13101] now=4295157283 last interrupt=4295141312 diff=15971 last called handler=recal_interrupt [ 2204.428894][T13101] timeout_message=lock fdc [ 2204.435300][T13101] last output bytes: [ 2204.441058][T13101] 0 90 4295139496 [ 2204.446660][T13101] 1 90 4295139496 [ 2204.452069][T13101] 2 90 4295139496 [ 2204.457070][T13101] 24 90 4295139496 [ 2204.462905][T13101] 1b 90 4295139496 [ 2204.468364][T13101] ff 90 4295139496 [ 2204.473009][T13101] 12 80 4295141312 [ 2204.478377][T13101] 3 90 4295141312 [ 2204.483300][T13101] 13 80 4295141312 [ 2204.489662][T13101] 0 90 4295141312 [ 2204.493838][T13101] 1a 90 4295141312 [ 2204.498174][T13101] 0 90 4295141312 [ 2204.502397][T13101] 3 80 4295141312 [ 2204.507419][T13101] a1 90 4295141312 [ 2204.513768][T13101] 1e 90 4295141312 [ 2204.519236][T13101] 7 80 4295141312 [ 2204.524504][T13101] 1 90 4295141312 [ 2204.529841][T13101] 8 80 4295141312 [ 2204.534878][T13101] 4 80 4295141312 [ 2204.539703][T13101] 1 90 4295141312 [ 2204.545047][T13101] last result at 4295141492 [ 2204.551496][T13101] last redo_fd_request at 4295157276 [ 2204.558182][T13101] status=80 [ 2204.562641][T13101] fdc_busy=1 [ 2204.566815][T13101] floppy_work.func=floppy_work_workfn [ 2204.573778][T13101] cont=ffffffff8a1f4920 [ 2204.579608][T13101] current_req=0000000000000000 [ 2204.585720][T13101] command_status=-1 [ 2204.590747][T13101] [ 2204.593854][T13101] floppy1: floppy timeout called [ 2204.608672][T17293] 08:03:38 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:38 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d", 0x8, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:38 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2204.612836][T17293] floppy driver state [ 2204.617738][T17293] ------------------- [ 2204.623322][T21379] loop3: detected capacity change from 0 to 87 [ 2204.634362][T17293] now=4295157308 last interrupt=4295141312 diff=15996 last called handler=recal_interrupt [ 2204.638689][T21381] loop0: detected capacity change from 0 to 87 [ 2204.656141][T17293] timeout_message=lock fdc [ 2204.663633][T17293] last output bytes: [ 2204.669186][T21381] FAT-fs (loop0): invalid media value (0x00) [ 2204.670174][T17293] 0 90 4295139496 [ 2204.678061][T21381] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2204.681984][T17293] 1 90 4295139496 [ 2204.695168][T17293] 2 90 4295139496 [ 2204.700528][T17293] 24 90 4295139496 [ 2204.705613][T17293] 1b 90 4295139496 [ 2204.711249][T17293] ff 90 4295139496 [ 2204.715309][T17293] 12 80 4295141312 [ 2204.719932][T17293] 3 90 4295141312 [ 2204.724994][T17293] 13 80 4295141312 [ 2204.729614][T17293] 0 90 4295141312 [ 2204.733833][T17293] 1a 90 4295141312 [ 2204.739064][T17293] 0 90 4295141312 [ 2204.743892][T17293] 3 80 4295141312 [ 2204.746035][ T37] audit: type=1804 audit(1638173018.215:847): pid=21384 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1378/file1/bus" dev="sda1" ino=1199 res=1 errno=0 [ 2204.750526][T17293] a1 90 4295141312 [ 2204.781965][ T37] audit: type=1800 audit(1638173018.225:848): pid=21384 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1199 res=0 errno=0 [ 2204.786133][T17293] 1e 90 4295141312 [ 2204.816409][T17293] 7 80 4295141312 [ 2204.821464][T17293] 1 90 4295141312 [ 2204.826331][T17293] 8 80 4295141312 [ 2204.831479][T17293] 4 80 4295141312 [ 2204.835890][T17293] 1 90 4295141312 [ 2204.841209][T17293] last result at 4295141492 [ 2204.846996][T17293] last redo_fd_request at 4295157306 [ 2204.853714][T17293] status=80 08:03:38 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2204.858431][T17293] fdc_busy=1 [ 2204.863115][T17293] floppy_work.func=floppy_work_workfn [ 2204.870260][T17293] cont=ffffffff8a1f4920 [ 2204.875494][T17293] current_req=0000000000000000 [ 2204.880804][T17293] command_status=-1 [ 2204.885215][T17293] [ 2204.889095][T17293] floppy1: floppy timeout called 08:03:38 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d", 0x8, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2204.896378][T17293] [ 2204.900843][T21387] loop0: detected capacity change from 0 to 87 [ 2204.908665][T17293] floppy driver state [ 2204.913254][T17293] ------------------- [ 2204.917984][T17293] now=4295157337 last interrupt=4295141312 diff=16025 last called handler=recal_interrupt [ 2204.934053][T17293] timeout_message=lock fdc [ 2204.940568][T17293] last output bytes: [ 2204.945587][T17293] 0 90 4295139496 [ 2204.946369][T21389] loop3: detected capacity change from 0 to 87 [ 2204.948533][T21387] FAT-fs (loop0): invalid media value (0x00) [ 2204.948552][T21387] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2204.950856][T17293] 1 90 4295139496 [ 2204.980516][T17293] 2 90 4295139496 [ 2204.985506][T17293] 24 90 4295139496 [ 2204.991033][T17293] 1b 90 4295139496 [ 2204.995814][T17293] ff 90 4295139496 [ 2205.001097][T17293] 12 80 4295141312 [ 2205.006274][T17293] 3 90 4295141312 [ 2205.011946][T17293] 13 80 4295141312 [ 2205.017042][T17293] 0 90 4295141312 [ 2205.018864][ T37] audit: type=1804 audit(1638173018.485:849): pid=21390 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1379/file1/bus" dev="sda1" ino=1199 res=1 errno=0 [ 2205.058208][T17293] 1a 90 4295141312 [ 2205.059297][ T37] audit: type=1800 audit(1638173018.505:850): pid=21390 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1199 res=0 errno=0 [ 2205.063159][T17293] 0 90 4295141312 [ 2205.096378][T17293] 3 80 4295141312 [ 2205.101221][T17293] a1 90 4295141312 [ 2205.105947][T17293] 1e 90 4295141312 [ 2205.111112][T17293] 7 80 4295141312 [ 2205.115804][T17293] 1 90 4295141312 [ 2205.121160][T17293] 8 80 4295141312 [ 2205.125900][T17293] 4 80 4295141312 [ 2205.131259][T17293] 1 90 4295141312 [ 2205.135833][T17293] last result at 4295141492 [ 2205.142317][T17293] last redo_fd_request at 4295157334 [ 2205.153953][T17293] status=80 [ 2205.158018][T17293] fdc_busy=1 [ 2205.162009][T17293] floppy_work.func=floppy_work_workfn [ 2205.174839][T17293] cont=ffffffff8a1f4920 [ 2205.180907][T17293] current_req=0000000000000000 [ 2205.187216][T17293] command_status=-1 [ 2205.193226][T17293] [ 2205.196472][T17293] floppy1: floppy timeout called [ 2205.219719][T13101] 08:03:38 executing program 2: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) ioctl$FLOPPY_FDDEFPRM(r0, 0x401c0243, &(0x7f0000000040)={0x7, 0xa8, 0x10000, 0x4, 0x5645, 0x37, 0x0, 0x8d, 0xd8, &(0x7f0000000000)=':{\x00'}) 08:03:38 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d", 0x8, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:38 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2205.222304][T13101] floppy driver state [ 2205.225985][T13101] ------------------- [ 2205.236352][T13101] now=4295157368 last interrupt=4295141312 diff=16056 last called handler=recal_interrupt [ 2205.244422][T21392] loop3: detected capacity change from 0 to 87 08:03:38 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2205.247396][T13101] timeout_message=lock fdc [ 2205.262836][T21394] loop0: detected capacity change from 0 to 87 [ 2205.272997][T13101] last output bytes: [ 2205.276743][T13101] 0 90 4295139496 [ 2205.281435][T13101] 1 90 4295139496 [ 2205.285607][T21394] FAT-fs (loop0): invalid media value (0x00) [ 2205.286111][T13101] 2 90 4295139496 [ 2205.294685][T21394] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2205.301291][T13101] 24 90 4295139496 [ 2205.312144][T13101] 1b 90 4295139496 [ 2205.316965][T13101] ff 90 4295139496 [ 2205.327584][T13101] 12 80 4295141312 [ 2205.332427][T13101] 3 90 4295141312 [ 2205.337164][T13101] 13 80 4295141312 [ 2205.342012][T13101] 0 90 4295141312 [ 2205.347006][T13101] 1a 90 4295141312 [ 2205.352550][T13101] 0 90 4295141312 [ 2205.358330][T13101] 3 80 4295141312 [ 2205.363455][T13101] a1 90 4295141312 08:03:38 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0d", 0xc, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:38 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2205.392069][T13101] 1e 90 4295141312 [ 2205.397232][T13101] 7 80 4295141312 [ 2205.410817][T13101] 1 90 4295141312 [ 2205.415309][T13101] 8 80 4295141312 [ 2205.419280][T13101] 4 80 4295141312 [ 2205.423601][T13101] 1 90 4295141312 [ 2205.429080][T13101] last result at 4295141492 [ 2205.435430][T13101] last redo_fd_request at 4295157365 [ 2205.442033][T13101] status=80 [ 2205.447344][T21404] loop3: detected capacity change from 0 to 87 [ 2205.447664][T21403] loop0: detected capacity change from 0 to 87 [ 2205.448009][T13101] fdc_busy=1 [ 2205.448020][T13101] floppy_work.func=floppy_work_workfn [ 2205.448039][T13101] cont=ffffffff8a1f4920 [ 2205.448047][T13101] current_req=0000000000000000 [ 2205.448053][T13101] command_status=-1 [ 2205.448059][T13101] [ 2205.448457][T13101] floppy1: floppy timeout called [ 2205.452508][ T3758] 08:03:38 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2205.452517][ T3758] floppy driver state [ 2205.452522][ T3758] ------------------- [ 2205.452527][ T3758] now=4295157390 last interrupt=4295141312 diff=16078 last called handler=recal_interrupt [ 2205.452553][ T3758] timeout_message=lock fdc [ 2205.452559][ T3758] last output bytes: [ 2205.452564][ T3758] 0 90 4295139496 [ 2205.452574][ T3758] 1 90 4295139496 [ 2205.452582][ T3758] 2 90 4295139496 [ 2205.452590][ T3758] 24 90 4295139496 [ 2205.452599][ T3758] 1b 90 4295139496 [ 2205.452607][ T3758] ff 90 4295139496 [ 2205.452616][ T3758] 12 80 4295141312 [ 2205.452624][ T3758] 3 90 4295141312 [ 2205.452633][ T3758] 13 80 4295141312 [ 2205.452641][ T3758] 0 90 4295141312 [ 2205.452649][ T3758] 1a 90 4295141312 [ 2205.452658][ T3758] 0 90 4295141312 [ 2205.452666][ T3758] 3 80 4295141312 [ 2205.452674][ T3758] a1 90 4295141312 [ 2205.452682][ T3758] 1e 90 4295141312 [ 2205.452691][ T3758] 7 80 4295141312 [ 2205.452699][ T3758] 1 90 4295141312 [ 2205.452707][ T3758] 8 80 4295141312 [ 2205.452715][ T3758] 4 80 4295141312 [ 2205.452724][ T3758] 1 90 4295141312 [ 2205.452732][ T3758] last result at 4295141492 [ 2205.452738][ T3758] last redo_fd_request at 4295157390 [ 2205.452782][ T3758] status=80 [ 2205.452792][ T3758] fdc_busy=1 [ 2205.452798][ T3758] floppy_work.func=floppy_work_workfn [ 2205.452811][ T3758] cont=ffffffff8a1f4920 [ 2205.452818][ T3758] current_req=0000000000000000 [ 2205.452824][ T3758] command_status=-1 [ 2205.452831][ T3758] [ 2205.452885][ T3758] floppy1: floppy timeout called [ 2205.460288][ T3758] [ 2205.483161][T21403] FAT-fs (loop0): invalid media value (0x00) [ 2205.492076][ T3758] floppy driver state [ 2205.495737][T21403] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2205.502501][ T3758] ------------------- [ 2205.726775][ T3758] now=4295157417 last interrupt=4295141312 diff=16105 last called handler=recal_interrupt [ 2205.740962][ T3758] timeout_message=lock fdc [ 2205.748033][ T3758] last output bytes: [ 2205.753851][ T3758] 0 90 4295139496 [ 2205.760037][ T3758] 1 90 4295139496 [ 2205.765563][ T3758] 2 90 4295139496 [ 2205.771674][ T3758] 24 90 4295139496 [ 2205.777277][ T3758] 1b 90 4295139496 08:03:39 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0d", 0xc, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2205.783795][ T3758] ff 90 4295139496 [ 2205.789104][ T3758] 12 80 4295141312 [ 2205.793669][ T3758] 3 90 4295141312 [ 2205.798891][ T3758] 13 80 4295141312 [ 2205.803630][ T3758] 0 90 4295141312 [ 2205.809123][ T3758] 1a 90 4295141312 [ 2205.814750][ T3758] 0 90 4295141312 [ 2205.820628][ T3758] 3 80 4295141312 [ 2205.824974][ T3758] a1 90 4295141312 [ 2205.830153][ T3758] 1e 90 4295141312 [ 2205.834866][ T3758] 7 80 4295141312 [ 2205.839937][ T3758] 1 90 4295141312 [ 2205.844450][ T3758] 8 80 4295141312 [ 2205.849578][ T3758] 4 80 4295141312 [ 2205.853981][ T3758] 1 90 4295141312 [ 2205.859118][ T3758] last result at 4295141492 [ 2205.860594][T21410] loop3: detected capacity change from 0 to 87 [ 2205.865344][ T3758] last redo_fd_request at 4295157390 [ 2205.865408][ T3758] status=80 [ 2205.887260][ T3758] fdc_busy=1 [ 2205.892086][ T3758] floppy_work.func=floppy_work_workfn [ 2205.899883][ T3758] cont=ffffffff8a1f4920 [ 2205.905930][ T3758] current_req=0000000000000000 [ 2205.913437][ T3758] command_status=-1 [ 2205.919573][ T3758] [ 2205.923105][ T3758] floppy1: floppy timeout called [ 2205.933079][T13101] [ 2205.936050][T13101] floppy driver state [ 2205.941374][T13101] ------------------- [ 2205.946576][T13101] now=4295157439 last interrupt=4295141312 diff=16127 last called handler=recal_interrupt [ 2205.962117][T13101] timeout_message=lock fdc [ 2205.969396][T13101] last output bytes: [ 2205.975270][T13101] 0 90 4295139496 [ 2205.982691][T13101] 1 90 4295139496 [ 2205.987655][T13101] 2 90 4295139496 [ 2205.992795][T13101] 24 90 4295139496 [ 2205.997806][T13101] 1b 90 4295139496 [ 2206.002890][T13101] ff 90 4295139496 [ 2206.007579][T13101] 12 80 4295141312 [ 2206.012663][T13101] 3 90 4295141312 [ 2206.017367][T13101] 13 80 4295141312 [ 2206.022438][T13101] 0 90 4295141312 [ 2206.027122][T13101] 1a 90 4295141312 [ 2206.031507][T13101] 0 90 4295141312 [ 2206.035506][T13101] 3 80 4295141312 [ 2206.039477][T13101] a1 90 4295141312 [ 2206.043421][T13101] 1e 90 4295141312 [ 2206.047385][T13101] 7 80 4295141312 [ 2206.051338][T13101] 1 90 4295141312 [ 2206.055043][T13101] 8 80 4295141312 [ 2206.058964][T13101] 4 80 4295141312 [ 2206.062807][T13101] 1 90 4295141312 [ 2206.066495][T13101] last result at 4295141492 [ 2206.071356][T13101] last redo_fd_request at 4295157438 [ 2206.077036][T13101] status=80 [ 2206.080771][T13101] fdc_busy=1 [ 2206.084638][T13101] floppy_work.func=floppy_work_workfn [ 2206.091396][T13101] cont=ffffffff8a1f4920 [ 2206.096272][T13101] current_req=0000000000000000 [ 2206.101564][T13101] command_status=-1 [ 2206.105184][T13101] [ 2206.108018][T13101] floppy1: floppy timeout called [ 2206.117296][T13101] [ 2206.121568][T13101] floppy driver state [ 2206.125686][T13101] ------------------- [ 2206.130488][T13101] now=4295157458 last interrupt=4295141312 diff=16146 last called handler=recal_interrupt 08:03:39 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)=""/2, 0x2}, {&(0x7f00000000c0)=""/220, 0xdc}, {&(0x7f0000000200)=""/173, 0xad}, {&(0x7f00000002c0)=""/65, 0x41}], 0x4, &(0x7f0000000380)=""/137, 0x89}, 0x9}, {{&(0x7f0000000440)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000880)=[{&(0x7f00000004c0)=""/100, 0x6e}, {&(0x7f0000000540)=""/254, 0x93}, {&(0x7f0000000640)=""/93, 0x5d}, {&(0x7f00000006c0)=""/52, 0x34}, {&(0x7f0000000700)=""/100, 0x64}, {&(0x7f0000000780)=""/22, 0x16}, {&(0x7f00000007c0)=""/189, 0xbd}], 0x7, &(0x7f00000008c0)=""/194, 0xc2}, 0x5}, {{&(0x7f00000009c0)=@nfc, 0x80, &(0x7f0000001cc0)}, 0xff}, {{&(0x7f0000001d00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001d80)=""/191, 0xbf}, {&(0x7f0000001e40)=""/28, 0x1c}], 0x2, &(0x7f0000002040)=""/104, 0x68}, 0x2}], 0x4, 0x10022, &(0x7f0000001fc0)={0x0, 0x989680}) syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) 08:03:39 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 08:03:39 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0d", 0xc, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2206.143784][T13101] timeout_message=lock fdc [ 2206.149822][T13101] last output bytes: [ 2206.153872][T13101] 0 90 4295139496 [ 2206.157752][T13101] 1 90 4295139496 [ 2206.165043][T21414] loop3: detected capacity change from 0 to 87 [ 2206.179763][T21413] loop0: detected capacity change from 0 to 87 [ 2206.187406][T13101] 2 90 4295139496 [ 2206.193289][T21413] FAT-fs (loop0): invalid media value (0x00) [ 2206.196466][T13101] 24 90 4295139496 [ 2206.202527][T21413] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2206.206142][T13101] 1b 90 4295139496 [ 2206.216890][T13101] ff 90 4295139496 [ 2206.221013][T13101] 12 80 4295141312 [ 2206.225259][T13101] 3 90 4295141312 [ 2206.229289][T13101] 13 80 4295141312 [ 2206.233496][T13101] 0 90 4295141312 [ 2206.237283][T13101] 1a 90 4295141312 [ 2206.241538][T13101] 0 90 4295141312 [ 2206.246224][T13101] 3 80 4295141312 [ 2206.251218][T13101] a1 90 4295141312 [ 2206.255588][T13101] 1e 90 4295141312 [ 2206.260190][T13101] 7 80 4295141312 [ 2206.264723][T13101] 1 90 4295141312 [ 2206.270984][T13101] 8 80 4295141312 [ 2206.275081][T13101] 4 80 4295141312 08:03:39 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7", 0xe, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2206.279476][T13101] 1 90 4295141312 [ 2206.283361][T13101] last result at 4295141492 [ 2206.287958][T13101] last redo_fd_request at 4295157456 [ 2206.293918][T13101] status=80 [ 2206.297660][T13101] fdc_busy=1 [ 2206.301379][T13101] floppy_work.func=floppy_work_workfn 08:03:39 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2206.311035][T13101] cont=ffffffff8a1f4920 [ 2206.314251][T21418] loop3: detected capacity change from 0 to 87 [ 2206.316689][T13101] current_req=0000000000000000 [ 2206.316705][T13101] command_status=-1 [ 2206.316716][T13101] [ 2206.316817][T13101] floppy1: floppy timeout called [ 2206.329072][T17293] [ 2206.340327][T21420] loop0: detected capacity change from 0 to 87 [ 2206.341064][T17293] floppy driver state [ 2206.354661][T21420] FAT-fs (loop0): bogus number of FAT sectors [ 2206.358931][T17293] ------------------- [ 2206.364135][T21420] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2206.371196][T17293] now=4295157482 last interrupt=4295141312 diff=16170 last called handler=recal_interrupt [ 2206.371227][T17293] timeout_message=lock fdc [ 2206.401934][T17293] last output bytes: [ 2206.409860][T17293] 0 90 4295139496 [ 2206.415122][T17293] 1 90 4295139496 [ 2206.420587][T17293] 2 90 4295139496 [ 2206.425826][T17293] 24 90 4295139496 [ 2206.431080][T17293] 1b 90 4295139496 [ 2206.438772][T17293] ff 90 4295139496 [ 2206.443764][T17293] 12 80 4295141312 [ 2206.454562][T17293] 3 90 4295141312 [ 2206.459692][T17293] 13 80 4295141312 08:03:39 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5", 0xd, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2206.465078][T17293] 0 90 4295141312 [ 2206.475432][T17293] 1a 90 4295141312 [ 2206.480657][T17293] 0 90 4295141312 [ 2206.485921][T17293] 3 80 4295141312 [ 2206.490323][T21423] loop3: detected capacity change from 0 to 87 [ 2206.497230][T17293] a1 90 4295141312 [ 2206.502795][T17293] 1e 90 4295141312 [ 2206.518175][T17293] 7 80 4295141312 [ 2206.522499][T17293] 1 90 4295141312 [ 2206.526755][T17293] 8 80 4295141312 [ 2206.531476][T17293] 4 80 4295141312 [ 2206.535395][T17293] 1 90 4295141312 [ 2206.539558][T17293] last result at 4295141492 [ 2206.544301][T17293] last redo_fd_request at 4295157478 [ 2206.560431][T17293] status=80 [ 2206.568775][T17293] fdc_busy=1 [ 2206.572531][T17293] floppy_work.func=floppy_work_workfn [ 2206.579038][T17293] cont=ffffffff8a1f4920 [ 2206.584518][T17293] current_req=0000000000000000 [ 2206.591032][T17293] command_status=-1 [ 2206.596416][T17293] [ 2206.599667][T17293] floppy1: floppy timeout called [ 2206.606436][T17293] [ 2206.610844][T17293] floppy driver state 08:03:40 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:40 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2206.618405][T17293] ------------------- [ 2206.623403][T17293] now=4295157507 last interrupt=4295141312 diff=16195 last called handler=recal_interrupt [ 2206.639810][T21425] loop0: detected capacity change from 0 to 87 [ 2206.648467][T17293] timeout_message=lock fdc 08:03:40 executing program 2: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) renameat(r0, &(0x7f0000000140)='./cgroup\x00', r0, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDCLRPRM(r0, 0x241) 08:03:40 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5", 0xd, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2206.668412][T17293] last output bytes: [ 2206.673273][T21425] FAT-fs (loop0): bogus number of FAT sectors [ 2206.674071][T17293] 0 90 4295139496 [ 2206.674269][T21429] loop3: detected capacity change from 0 to 87 [ 2206.682510][T21425] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2206.688473][T17293] 1 90 4295139496 [ 2206.709194][T17293] 2 90 4295139496 [ 2206.714107][T17293] 24 90 4295139496 [ 2206.719490][T17293] 1b 90 4295139496 [ 2206.724834][T17293] ff 90 4295139496 [ 2206.730704][T17293] 12 80 4295141312 [ 2206.735779][T17293] 3 90 4295141312 [ 2206.741238][T17293] 13 80 4295141312 [ 2206.746013][T17293] 0 90 4295141312 [ 2206.751650][T17293] 1a 90 4295141312 [ 2206.757309][T17293] 0 90 4295141312 [ 2206.763393][T17293] 3 80 4295141312 [ 2206.777947][T17293] a1 90 4295141312 [ 2206.782926][T17293] 1e 90 4295141312 [ 2206.787454][T17293] 7 80 4295141312 [ 2206.791668][T17293] 1 90 4295141312 08:03:40 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5", 0xd, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2206.795383][T17293] 8 80 4295141312 [ 2206.799610][T17293] 4 80 4295141312 08:03:40 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2206.809609][T17293] 1 90 4295141312 [ 2206.849617][T17293] last result at 4295141492 [ 2206.853180][T21436] loop0: detected capacity change from 0 to 87 [ 2206.866122][T17293] last redo_fd_request at 4295157505 [ 2206.867627][T21438] loop3: detected capacity change from 0 to 87 [ 2206.873825][T17293] status=80 [ 2206.873841][T17293] fdc_busy=1 [ 2206.873851][T17293] floppy_work.func=floppy_work_workfn [ 2206.873877][T17293] cont=ffffffff8a1f4920 [ 2206.873888][T17293] current_req=0000000000000000 [ 2206.873899][T17293] command_status=-1 [ 2206.873908][T17293] [ 2206.873981][T17293] floppy1: floppy timeout called [ 2206.876128][T21436] FAT-fs (loop0): bogus number of FAT sectors [ 2206.902614][T13101] [ 2206.917118][T21436] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2206.930158][T13101] floppy driver state [ 2206.950367][T13101] ------------------- [ 2206.955546][T13101] now=4295157540 last interrupt=4295141312 diff=16228 last called handler=recal_interrupt [ 2206.965686][T13101] timeout_message=lock fdc [ 2206.971485][T13101] last output bytes: [ 2206.976714][T13101] 0 90 4295139496 [ 2206.983805][T13101] 1 90 4295139496 [ 2206.988600][T13101] 2 90 4295139496 [ 2206.992749][T13101] 24 90 4295139496 [ 2206.996966][T13101] 1b 90 4295139496 [ 2207.002102][T13101] ff 90 4295139496 [ 2207.006716][T13101] 12 80 4295141312 [ 2207.011811][T13101] 3 90 4295141312 [ 2207.031627][T13101] 13 80 4295141312 [ 2207.035294][T13101] 0 90 4295141312 [ 2207.039448][T13101] 1a 90 4295141312 [ 2207.043870][T13101] 0 90 4295141312 [ 2207.047740][T13101] 3 80 4295141312 [ 2207.052388][T13101] a1 90 4295141312 [ 2207.057212][T13101] 1e 90 4295141312 08:03:40 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 08:03:40 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7", 0xe}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2207.065715][T13101] 7 80 4295141312 [ 2207.071163][T13101] 1 90 4295141312 [ 2207.076326][T13101] 8 80 4295141312 [ 2207.081886][T13101] 4 80 4295141312 [ 2207.086937][T13101] 1 90 4295141312 [ 2207.091733][T13101] last result at 4295141492 [ 2207.096971][T13101] last redo_fd_request at 4295157533 [ 2207.104132][T13101] status=80 [ 2207.104495][T21441] loop3: detected capacity change from 0 to 87 [ 2207.108003][T13101] fdc_busy=1 [ 2207.108015][T13101] floppy_work.func=floppy_work_workfn [ 2207.108047][T13101] cont=ffffffff8a1f4920 [ 2207.108112][T13101] current_req=0000000000000000 [ 2207.108119][T13101] command_status=-1 [ 2207.108126][T13101] [ 2207.129949][T21443] loop0: detected capacity change from 0 to 87 [ 2207.133578][T13101] floppy1: floppy timeout called [ 2207.162548][T13101] [ 2207.165856][T13101] floppy driver state [ 2207.171327][T13101] ------------------- [ 2207.175969][T13101] now=4295157562 last interrupt=4295141312 diff=16250 last called handler=recal_interrupt [ 2207.186994][T13101] timeout_message=lock fdc [ 2207.192664][T13101] last output bytes: [ 2207.230867][T13101] 0 90 4295139496 [ 2207.235505][T13101] 1 90 4295139496 [ 2207.240083][T13101] 2 90 4295139496 [ 2207.244944][T13101] 24 90 4295139496 [ 2207.250651][T13101] 1b 90 4295139496 [ 2207.255890][T13101] ff 90 4295139496 [ 2207.261076][T13101] 12 80 4295141312 [ 2207.266213][T13101] 3 90 4295141312 [ 2207.270747][T13101] 13 80 4295141312 [ 2207.275352][T13101] 0 90 4295141312 [ 2207.280525][T13101] 1a 90 4295141312 [ 2207.285309][T13101] 0 90 4295141312 [ 2207.290534][T13101] 3 80 4295141312 [ 2207.294346][T13101] a1 90 4295141312 [ 2207.297742][T13101] 1e 90 4295141312 [ 2207.302065][T13101] 7 80 4295141312 [ 2207.306869][T13101] 1 90 4295141312 [ 2207.311219][T13101] 8 80 4295141312 [ 2207.315632][T13101] 4 80 4295141312 [ 2207.320643][T13101] 1 90 4295141312 [ 2207.325537][T13101] last result at 4295141492 [ 2207.331610][T13101] last redo_fd_request at 4295157561 [ 2207.340066][T13101] status=80 [ 2207.344087][T13101] fdc_busy=1 [ 2207.348503][T13101] floppy_work.func=floppy_work_workfn [ 2207.355140][T13101] cont=ffffffff8a1f4920 [ 2207.360706][T13101] current_req=0000000000000000 [ 2207.366884][T13101] command_status=-1 [ 2207.372250][T13101] [ 2207.375289][T13101] floppy1: floppy timeout called [ 2207.392517][T13101] [ 2207.395647][T13101] floppy driver state 08:03:40 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:40 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2207.400930][T13101] ------------------- [ 2207.405730][T13101] now=4295157585 last interrupt=4295141312 diff=16273 last called handler=recal_interrupt [ 2207.429045][T13101] timeout_message=lock fdc [ 2207.429998][T21445] loop0: detected capacity change from 0 to 87 [ 2207.433916][T13101] last output bytes: [ 2207.433929][T13101] 0 90 4295139496 [ 2207.450657][T13101] 1 90 4295139496 [ 2207.455165][T13101] 2 90 4295139496 [ 2207.459526][T13101] 24 90 4295139496 [ 2207.463448][T13101] 1b 90 4295139496 [ 2207.467381][T13101] ff 90 4295139496 [ 2207.471277][T13101] 12 80 4295141312 [ 2207.475338][T13101] 3 90 4295141312 [ 2207.479886][T13101] 13 80 4295141312 [ 2207.484507][T13101] 0 90 4295141312 [ 2207.489145][T13101] 1a 90 4295141312 [ 2207.493033][T13101] 0 90 4295141312 [ 2207.496684][T13101] 3 80 4295141312 [ 2207.500459][T13101] a1 90 4295141312 [ 2207.504878][T13101] 1e 90 4295141312 [ 2207.508782][T13101] 7 80 4295141312 [ 2207.512467][T13101] 1 90 4295141312 [ 2207.515950][T13101] 8 80 4295141312 [ 2207.519537][T13101] 4 80 4295141312 [ 2207.523212][T13101] 1 90 4295141312 [ 2207.526864][T13101] last result at 4295141492 [ 2207.531595][T13101] last redo_fd_request at 4295157583 [ 2207.537554][T13101] status=80 [ 2207.540811][T13101] fdc_busy=1 [ 2207.544268][T13101] floppy_work.func=floppy_work_workfn [ 2207.549712][T13101] cont=ffffffff8a1f4920 [ 2207.554887][T13101] current_req=0000000000000000 [ 2207.562007][T13101] command_status=-1 [ 2207.565960][T13101] [ 2207.568942][T13101] floppy1: floppy timeout called [ 2207.575468][T13101] [ 2207.578006][T13101] floppy driver state [ 2207.582421][T13101] ------------------- [ 2207.587538][T13101] now=4295157603 last interrupt=4295141312 diff=16291 last called handler=recal_interrupt [ 2207.597559][T13101] timeout_message=lock fdc [ 2207.602989][T13101] last output bytes: [ 2207.608001][T13101] 0 90 4295139496 [ 2207.612714][T13101] 1 90 4295139496 [ 2207.617279][T13101] 2 90 4295139496 [ 2207.621766][T13101] 24 90 4295139496 [ 2207.625917][T13101] 1b 90 4295139496 [ 2207.630555][T13101] ff 90 4295139496 [ 2207.635481][T13101] 12 80 4295141312 [ 2207.640387][T13101] 3 90 4295141312 [ 2207.645251][T13101] 13 80 4295141312 [ 2207.650259][T13101] 0 90 4295141312 [ 2207.655011][T13101] 1a 90 4295141312 [ 2207.659293][T13101] 0 90 4295141312 [ 2207.664484][T13101] 3 80 4295141312 [ 2207.669484][T13101] a1 90 4295141312 [ 2207.674172][T13101] 1e 90 4295141312 [ 2207.680444][T13101] 7 80 4295141312 [ 2207.685369][T13101] 1 90 4295141312 [ 2207.690597][T13101] 8 80 4295141312 [ 2207.695585][T13101] 4 80 4295141312 [ 2207.700644][T13101] 1 90 4295141312 [ 2207.704984][T13101] last result at 4295141492 [ 2207.710878][T13101] last redo_fd_request at 4295157602 [ 2207.717466][T13101] status=80 [ 2207.721624][T13101] fdc_busy=1 [ 2207.725741][T13101] floppy_work.func=floppy_work_workfn [ 2207.732716][T13101] cont=ffffffff8a1f4920 [ 2207.738134][T13101] current_req=0000000000000000 [ 2207.743685][T13101] command_status=-1 [ 2207.748392][T13101] [ 2207.751227][T13101] floppy1: floppy timeout called [ 2207.761670][T13101] [ 2207.765187][T13101] floppy driver state [ 2207.774834][T13101] ------------------- 08:03:41 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7", 0xe}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:41 executing program 2: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000080)) r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="10000000f26c2fac66724600002e2f66695e003000"]) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$FLOPPY_FDRAWCMD(r2, 0x258, &(0x7f0000000200)={0x100, &(0x7f0000000280)="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", &(0x7f0000000140)=0x1, 0x0, 0x13c, 0x0, 0x0, 0x1, 0x3, "c182341ac8c1636cd2a1e6ec8918af81", 0x0, '\x00', 0x9}) 08:03:41 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2207.781097][T13101] now=4295157623 last interrupt=4295141312 diff=16311 last called handler=recal_interrupt [ 2207.794471][T21451] loop0: detected capacity change from 0 to 87 [ 2207.803101][T21452] loop3: detected capacity change from 0 to 87 [ 2207.808026][T13101] timeout_message=lock fdc [ 2207.827728][T13101] last output bytes: [ 2207.833321][T13101] 0 90 4295139496 [ 2207.840265][T13101] 1 90 4295139496 [ 2207.845816][T13101] 2 90 4295139496 [ 2207.851505][T13101] 24 90 4295139496 [ 2207.856697][T13101] 1b 90 4295139496 [ 2207.861870][T13101] ff 90 4295139496 [ 2207.867352][T13101] 12 80 4295141312 [ 2207.872705][T13101] 3 90 4295141312 [ 2207.878013][T13101] 13 80 4295141312 [ 2207.883260][T13101] 0 90 4295141312 [ 2207.888504][T13101] 1a 90 4295141312 [ 2207.893619][T13101] 0 90 4295141312 [ 2207.899032][T13101] 3 80 4295141312 [ 2207.903627][T13101] a1 90 4295141312 [ 2207.909732][T13101] 1e 90 4295141312 [ 2207.914381][T13101] 7 80 4295141312 [ 2207.919753][T13101] 1 90 4295141312 [ 2207.924739][T13101] 8 80 4295141312 [ 2207.930202][T13101] 4 80 4295141312 [ 2207.935462][T13101] 1 90 4295141312 08:03:41 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 08:03:41 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7", 0xe}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2207.940857][T13101] last result at 4295141492 [ 2207.948314][T13101] last redo_fd_request at 4295157620 [ 2207.954996][T13101] status=80 [ 2207.960158][T13101] fdc_busy=1 [ 2207.964615][T13101] floppy_work.func=floppy_work_workfn [ 2207.972455][T13101] cont=ffffffff8a1f4920 [ 2207.978803][T13101] current_req=0000000000000000 [ 2207.984992][T13101] command_status=-1 [ 2207.985444][T21457] loop3: detected capacity change from 0 to 87 [ 2207.990743][T13101] [ 2207.990849][T13101] floppy1: floppy timeout called [ 2208.009811][T13101] [ 2208.013474][T13101] floppy driver state [ 2208.019978][T13101] ------------------- [ 2208.026043][T13101] now=4295157647 last interrupt=4295141312 diff=16335 last called handler=recal_interrupt [ 2208.040918][T13101] timeout_message=lock fdc [ 2208.047243][T13101] last output bytes: [ 2208.054641][T13101] 0 90 4295139496 [ 2208.060200][T13101] 1 90 4295139496 [ 2208.064962][T13101] 2 90 4295139496 [ 2208.069952][T13101] 24 90 4295139496 [ 2208.075244][T13101] 1b 90 4295139496 [ 2208.080846][T13101] ff 90 4295139496 [ 2208.085636][T13101] 12 80 4295141312 [ 2208.090607][T13101] 3 90 4295141312 [ 2208.095466][T13101] 13 80 4295141312 [ 2208.100531][T13101] 0 90 4295141312 [ 2208.105443][T13101] 1a 90 4295141312 [ 2208.110746][T13101] 0 90 4295141312 [ 2208.115374][T13101] 3 80 4295141312 [ 2208.120275][T13101] a1 90 4295141312 [ 2208.124854][T13101] 1e 90 4295141312 [ 2208.129054][T13101] 7 80 4295141312 [ 2208.133900][T13101] 1 90 4295141312 [ 2208.138945][T13101] 8 80 4295141312 [ 2208.144094][T13101] 4 80 4295141312 [ 2208.148943][T13101] 1 90 4295141312 [ 2208.153734][T13101] last result at 4295141492 [ 2208.160013][T13101] last redo_fd_request at 4295157646 [ 2208.166717][T13101] status=80 [ 2208.170778][T13101] fdc_busy=1 [ 2208.176750][T21459] loop0: detected capacity change from 0 to 87 [ 2208.184317][T13101] floppy_work.func=floppy_work_workfn 08:03:41 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975169a029d1e9a6b0db5e7", 0xe, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2208.190112][T13101] cont=ffffffff8a1f4920 [ 2208.195011][T13101] current_req=0000000000000000 [ 2208.201103][T13101] command_status=-1 [ 2208.205960][T13101] [ 2208.209737][T13101] floppy1: floppy timeout called 08:03:41 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x50000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2208.228637][T21462] loop3: detected capacity change from 0 to 87 [ 2208.237987][T13101] [ 2208.240555][T13101] floppy driver state [ 2208.244723][T13101] ------------------- [ 2208.249056][T13101] now=4295157670 last interrupt=4295141312 diff=16358 last called handler=recal_interrupt [ 2208.265012][T13101] timeout_message=lock fdc [ 2208.271981][T13101] last output bytes: [ 2208.276111][T13101] 0 90 4295139496 [ 2208.280353][T13101] 1 90 4295139496 [ 2208.285164][T13101] 2 90 4295139496 08:03:41 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2208.290884][T13101] 24 90 4295139496 [ 2208.294605][T13101] 1b 90 4295139496 [ 2208.299062][T13101] ff 90 4295139496 [ 2208.304419][T13101] 12 80 4295141312 [ 2208.309200][T13101] 3 90 4295141312 [ 2208.313938][T13101] 13 80 4295141312 [ 2208.318976][T13101] 0 90 4295141312 [ 2208.323377][T13101] 1a 90 4295141312 [ 2208.327272][T13101] 0 90 4295141312 08:03:41 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2208.331662][T13101] 3 80 4295141312 [ 2208.337160][T13101] a1 90 4295141312 [ 2208.341395][T13101] 1e 90 4295141312 [ 2208.345614][T13101] 7 80 4295141312 [ 2208.351802][T13101] 1 90 4295141312 [ 2208.356882][T13101] 8 80 4295141312 [ 2208.361496][T13101] 4 80 4295141312 [ 2208.365964][T13101] 1 90 4295141312 [ 2208.371003][T13101] last result at 4295141492 [ 2208.376457][T13101] last redo_fd_request at 4295157666 [ 2208.377497][T21467] loop3: detected capacity change from 0 to 87 [ 2208.383281][T13101] status=80 [ 2208.383298][T13101] fdc_busy=1 [ 2208.383307][T13101] floppy_work.func=floppy_work_workfn [ 2208.383333][T13101] cont=ffffffff8a1f4920 [ 2208.383344][T13101] current_req=0000000000000000 [ 2208.383354][T13101] command_status=-1 [ 2208.383365][T13101] [ 2208.383440][T13101] floppy1: floppy timeout called [ 2208.429703][T21469] loop0: detected capacity change from 0 to 87 [ 2208.450112][T13101] [ 2208.453411][T13101] floppy driver state [ 2208.476422][T13101] ------------------- [ 2208.481634][T13101] now=4295157693 last interrupt=4295141312 diff=16381 last called handler=recal_interrupt 08:03:41 executing program 2: fstatfs(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x318, 0x1fc, 0x1fc, 0x318, 0x1fc, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x240, 0x0, {0x6000000}, [@common=@inet=@socket1={{0x24}}, @common=@inet=@hashlimit3={{0x158}, {'vlan0\x00', {0x2803000000000000, 0x5, 0x0, 0x0, 0x0, 0xfd9d, 0xfffff000}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x43c) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2ff, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x600}], 0x1c, 0x0) syz_open_dev$floppy(&(0x7f00000001c0), 0x2, 0x0) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, r4, 0x711, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000049c0)={0x9, {{0xa, 0x4e22, 0x1, @local, 0x6}}}, 0x84) sendmmsg$inet6(r2, &(0x7f00000048c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000001980)=[{&(0x7f0000000080)="cd7094edc584480bba6cc5dafbbf1d4cc8ae4701ba80a80bab6c8866ab2119caf47912b25be89fdaf72395711e0d672cab26eeadc2fd95f19304397617c88176577b469184bfb363731238ff7ab665be785dec3b02dfc74a6037514adc58b21a09ba935a706b21dd6eee5e9e92338da8f98075925321ec758825ece654d67a03bea568dbb51ac8fd0aec14161479c8cb224de2cd57a9f891839ffb87d7ed9b666a64fa35644e6f", 0xa7}, {&(0x7f0000000140)}, {&(0x7f00000007c0)="9399a2b463f735a491a901eed6d947063a95c399d86928e69eca2e8a725b266d8fa8785b92943e28f76fceab366c5ef6fdcd9a5e36a7a6e31f4f41d52de2b089402ef3f7b8e939b3671426ead3df7b3d846cadc1ee66f1a1e03dc1d6f34908428f611a2c371942dad70418794deff20476d27e202dcc508da64bcbc7012d1c74f12a3da651964d67d69ae1ea1689baf0151086ddf33be606cfbc9e6d8ed3d85c1389b2b27bb38d0a20aeaf4d52707a70071585c987dc064d5e53d17b9358222f39fba62d8b8a4eda4db47ec06d7ffebb359c4fcf50e4f3e25809f1e4c37ce9b7ccbcc7ab0e5d3a8c717bca22cd52b67cec9ae2f1a0d3075aada9de4bd353332372b0e8521ed63fbd0914f6e1a6e23672eccaf8bebec2a6a693ffb8a9aaf93ec814be0f5f8e1ae1594e62a5d13734e1a7a5dbd2c0c7e33b08d36b18120a7377475e79af4108c05979146cab94aa8d599c01edfc068527b836003f92731676b492764a1db4670da5ec97677b00c769cc464ca7f4709a45dc3a4cd201044032fa71337be8820f0bbd5168481e5f7c807ebf4b250fb96ddce9e1936a8cb83cf3819da0aa98f7f1c1ca28e1c71a25918f822c87bb562246697811532b691c132d6c3a8d53dd3310889787f669ff3d04fa04434803f020403de6377927aba255de9d0b23624876befea7f1774a9cf51d3a93b138431442f2a0e1fa3fd4efdc5bcccd6de2aa123fdedcd5e721f80a169d1d308bd68cbaa3e67947abdfe683e44045756aff94c379335116c8920987dd95914d1542177db4c869cffc224c6d91e54d485b6f71fe1fa3953ae50064efb80d914a64e2c4e4143c3d25a8e8d07841d26524ed36a4a260febbcb49e0022e694d5e7cef2839e4f51d8ff344b6c6f2ed5beed75befc5038704d86dd3aa1b7d38719f28f73fced91e29b5eedda0aa1d4b422d09beed3e1dc8a3a79051f5b9545f98b730050a4d6b875ee263aa65a29e0d6f99d1128da2e78e3b894350166ca4b60b0531e20c0c730bff61163dd2c231016a206ef66d86aa41b68da5bdd25a12c22b0fceb31ca93f3cb1a50476ad15b82ac9f596a73aeaf58ff580ab01a9ef22424dd63dd4826774991ce42a333bf2749d6fbf4c69877cba452e3553945f5ea6f0643e01aa074f64145e27336fd184ed4b597f481ad10ac38b1102f54078ec6e3ae39bca34f552639ff3aaefe88edfb0c20c41b5bc15cb1702eb7cfa2ebddeb21e2409d810b72e626122a4615f4898abd8628b2691ad37997210ffe942a65b9729213d957c37c186cb6a40e1413fc22e87abe8e68771ee10e1de822e03494c3ec7d89cc90aacea44a3ef5bdd9190882d6bd64d4aa7502702d39404cffa11e0a365773ce01eb9821282d317c490231871e5e90676655ef58f8316bdb27f85f022ae81e8e0b91c7d40171ea06e39275e134fb5adad6f5db5a131fd7bcee63dc83b49b94b221e62910d3cf86d91fe2d120b356fb911cb27609a8522b36b219d3a3078977302956d779dfa83156ccdbc0b00fccf024a240c4fc523130518abb96d790b85ec30805de54cb62cf3fd351567c8ca07b008acdf0791417cc89111e199f54de03ccc8b49cf6ffe7c3227da1540c2f2639974d7a57ba895b2396cf468d075416ab0a069a82bec61dcdffc0b8e14ed7c77699805ed35e12960a525e1a52f7b3b19f54dc94c56034c1f042b17d3c18d112dfd89ffaf4f4a425fbaa4bd93bef17ac9533c73e1351d1f62884886c103ceff534e98cfe4bd09175b40eb6eaba050e28412feb5333813b838059b532aa33c65db8ba7cdf73945e3beaef164f27cbeac06e6b2b8bdc93cff1360263388dcd6abe38b5eb0c04a2048c53cbea86ad1c9173aa09c1ed89b6b9ae639f13ee3ce3b9a980669701c17b9548829d23f28cfcd2b0b9db666cd4c8b77c8187bc6c1729743011c936b6b52754136d7f5a62537a916a044858b1354a1ae26a7fccc035536640c2da6540803159e33cfc78638bc31273164447b27099006bde6a93d78561bcec0b2ca72736cb6fd64d22075f8fd4fd018419e8d5751d5d4d3508db4c156f2877cceb262946359eec81932e8f585dfb11b050d412e11b06de6c11aec553f975306f0e4eaab7aa72e1f4ccbefe2582def3ce9cbcf906a8874583c812b31d928fbcb6b9970a4431af23b6708e49f696b1501a59654b83cdd343e9c4081ec1fe794f9518d03e0bf9cd003e35b37142c414de7c3a91732d3ccf36089cce1c0dbb7b31eb105fb13671e825799b9772e067cbd8378bf86ee5c2ed7f4f762fa9e3b1e82d8b90d131c6e7d89f396feb98efcbb508e233bf6fd788f6eafc7d622b9316d19cfb20facebaed9c46292c8990734cdced80fc313cca5fe98b3a09c849138b800297c8850caec2da30bd59162aaf262a1bbf1332858bf22e3f1610735dcc0c8568121ee7e95e992519c65616e4db6a3d3c4495afb320461d521f0f44828b878434b8fddb3bdd6a763a652b583bdcb810104a7598d1597db840d1c575a03cfd5a459d4eeb9057193e8197d1d275aac1542f11934e5c6a89039f6667edca62d7a98128ba545a3027e3cefe35ad340dd9ab1e835c56e38fddfff594c691c3be22b959c7f928ed53ceb28344cf8778210be3cc51c673833261f5787f2ece31a6b6b58482b46b7bf333fed86e55b54765ce725688b71cadd586e91e919ca879564a79edcecd3fb411dc154aa6d7041f48349a7b96cd0e7485748c0fd53d0ac6843ce66d44280df2b85fa86c186dfc5535f64c49ee0e3569d5663f6bb879b52d4413563bd4f5d9f7bce0158bbe6082d6d86d7699a06ac01d23697b8f8993265c4841bb0006a9e62fe47a295a5e9762c045ae0aaa78f0b04bc4ddd64494f902edad99a41b4cf19cdf9cc953f562e914f57529feee6f862460adb456738a732de7d4d349210a47bc94920975952294e746285df969d20cdd456546f65fd09d0af13d731a0a1cc2070e8e02bff4b243b4b7569d2687f684f22f85db04364b5772951ab0c8aa85f8d0c7c4d185abe90d78b4c85806dfede7ffff39d687d89c76748745ef1e176f68e518a792971744450deb3d7b18f61860405cf0e1122de774f301cac366759bf67e34e67d9a059b6cbffb2e40152df94c86e3b5a5dee7e24817d0072e13d7eabf3ffc51adf568db940294f9092c487f8455a170a3db0209109c25eda9fa71baab398afabfafa4ac03339999253f3c0c47e6a08fddf5635426d0865bd5a0a2630e0d5f1eaf0e83adab23a203c7a5533e8f7728c1baf86a15e646e1020a9210fd476f7309d2ce2cc9a1680952120f8dc6a9faecdabf5b8494771772ddac82a267ad38aabfdb716b8b38d8d7b94d93547fb5a3508c464391ba37e3f1a4b0d2c3d6d2155948c46cac182ddd2d667edfea3dc4554b40c860fc03d6d7db8c71e92f8a323230172d95761e39ba7260f0fd9163b64c74f697982bede618cc1df6c4e0ef314da42ba36456fd6eed241dbe8fc84c0f89b096ebe6093459ae66a1d3d497d264b87a27b47e4d3d979f7dae8974ac8ef76d15733acc96f5740d58df72e6eb15af48778d95fe81e90d2fd45a7825913eb92fbeff86bf84e1b6c9b7d68f8283540a3a9ef0284a1dd1507c167c982f8ea09867d2c54e0ac70d52d877c56a038a4908773418e736a6daa8bd1f5e8894427bcd6482ec855257cfeffda05b1d120627acd9ef570409aa2bf7376d10d8470b9317e90d78862006548e1676615d68e0561c853029d04bb67adf3d692ba39f4249fb42c30daf37f71f3615b1f0af9fea21fa68e744b65d9390fb2cf03975ebbb2c6787a7870d7d7613193ae7f57b0b1a637ac4da77b68c4a7fa2ad7f59347ebb65d160d38f3fd9afae700407d4e65905b11cc75e822c87df16ad0e66cea8a3b28fd253f240af9d1ab3a22ee55ccc90e405741004a80a5200ec036f4ad3f8690f4b660c49589fc3d5f6ec0efa97c0edb197bcee162c898c4af191a1f807ebad8bcfeafdf034df002c65e920833490600a3de084c970cab6d65b0ff7d170f1a2731eaeb9f7d7e3e94fc766deaac958fa4eeda5586f429c2a0e5af38996c58a592e4e1e4d59bd5c776dd10c8d8332b17aba09a076f7ac8719cdb188302a3e16b0976fcd4556fb224a619cc1c04f63bdb49c99a97e4ca5cbdc01a8774f67c4002d66942cd74396904ae20ab86e0aaccc28435865023782f87908aefbe0f43588df8ac006db4120cb584682539452203bf8559d8b2ab997fbebf1cd8b9d6a76b4c086da06580816e3289bb5ee889ae8a7d83df4c2026b1fe625ab546e248fd65a6e04aa51f9069c30364ff6f4df7d3198d95840990a37ecbce6b144e4002ca9278939b1116d84f21292c0949ff853cbdc737fe0886515a4b32c4dc3f566df0cb94cfef19af608044d61bc4a6868d74467ecc8226716378dc665c24ce74b2922feea29081d6447e602110bb524ab5016580dbd3888ad4d81f77a48be4d130a2b62402b4271734c45a74e172099f00584319109afd6f15e3e31d9150a59d12ec808003069fe3c5ac1f8139be196279a84e61655036e0c2e57a04a66e932258ed2f3c7cb5b41628acda30ecd86b56252419e6925975546f5217c71c325bfccc005cf8e3240e05e2858dfe2fb27d33d9e1a16aef28142ed9cce7486c986d2deb210c45304957c6989789d5c38b49f561a0ad174c17f6f3c70bd288aa5e2946438a1b0544f39a16c9967c66c952148ebe503022d4a46886fefb179e1b97da306b6fc7f8f0342347aa5b531dddfffe2dab39b9d9d527301af9e02664e4dcfa9a33cdfbd67383e2ea06ed741ac5cbe5bd1e2fa10b081e5f62390d1724d129d671ca33bb3d3dd982678e22c9213d031eec057aa8b6c8e0bc73af4070c7da927186b710736b4bfa859ded9322771908be8f4aa77b256ede5b25d7ee6fc067e8f6b2ced24de04546350c7c97acf0e1b7376c568405dadd16bc2490f01d760b045c6dfa0690235d8f2ecbc32176bde1e94f5ff308dba6c17ebbf2cf3f424d19b72774b019e378d331f5886843d09668171f4ed8b8e4907bb6997b3ec81e195fb24a5838b92ea5c44d85ab05d3c156f1d0976e69464aa05f1ca545b048543b82a20ceb36299d3990740ae8086d2da059797f64dff6ed4ad73c554af9a9bdadd324e1462a11df9a247a47c183bde48a64532af16e4d5a905a7c138569d2bce02e140be788b0a734a71a3437b15a37432e1a295bae87fbf33b465fd3c1d9548efe7c598bdcd10e78a6e28f1df4f3168c8c8118fffbfd8e40ed716ce915c9fa7f9be87d70227a961eb6efb5a0a437107f7cba32acb4345328b3ced00ae49b0e517bc688680e0ca8088e052ef0e8ea65ffe915a45dc63d20a0bd5aff43aea63e080e8686614c7488dfac6061819fefc17b0c321aa01cfe7b49c90a12b76de3487705fc39773c07f460462fccc22719f80bf2cb096f7d51a0c1ff39a1f4fd1d9bde894ccd646ec53f2ec56d2188cb3d4784ee00d5e6ccd8938c61a4a3e3b5f0b59939c7a76b85eb3b1d932f03eee1827e81381c1942e7d8282cb11a6e0ecd55468fe88d9a6d7c8a539e83f592dd1ce638853242a3c938b9d37cd90fa13333c9f952da094b95cb7680ec275f8e0a2f14f6318dfcaa05c596abe3a0d6fc89fd1a58fb68861c4cccf7d401c3d05c73d68ae3bf4a81a69ba0c3859e3c1552eeaebb5ce1a9522cfddf6f71900136355e2cadbd4c5499b28ee2b7c271e84b78dd3159b240915a9c5b6d3aa96b9a43f7ecd7d11d5810cc16d108c799f7bd0886396f", 0x1000}, {&(0x7f0000000180)="6403e5e97269dfc18ffe168e4f1ad32a2e3c698ffc41e1d27702535db3458f04104e3903760d75fd", 0x28}, {&(0x7f0000000200)="641673da", 0x4}, {&(0x7f0000000240)="acc16c4a6b00ac8160f0c80e8b603c15748500af5167bd562d0c2785861eb158168023697cb6d42dab42b6009bde34837551fc157eec7937c674e28eac375f7ffc03b4c62bb3bb293b43257022bb283e2dd9f3d5f263f0e3f7a9a1606a53cc5a6d2b8bb8c058297da987b3edc2c9566f43d416a430cf5ee7987f47e2a4bc4f92788a9a27882f7dd755c545926a12d455692e4b48f72cb8714d0349e5ff8bfcd2adda85db62add7600af738813bbbc8ad258f5ff130685377686dd148e53ec1aa5a9859fb7a96dc072c0db6d150b9408d3d384b9ee54fe772", 0xd8}, {&(0x7f00000017c0)="808d2be297af991dc592938f6009fb2a5e6b4ff0b7a4779ba54970d7a5f33c481844781ab4ab004196ad32585070b30b557be9034e39f835f42a18600e0200df8989979256b691847bf91a71cf0e9aef6ffd8b1aebd0528718cac3e6a1efd25baf0b8daa3ef2f3a39dd67d261b2bc3917d", 0x71}, {&(0x7f0000001840)="2de46bc9f3f4f021ddb206806cf510bcfd24f9b28661530894c7ac9a57faa31b74c5f316c6d654882c6b8b0a326ffbe66fb22aad3fd1e2e9ccf565d58e718c4ae9fff415eec60c2410b472ac7e189d54771fa1e81fc4d03b59a580cd4338d9954867795006c78a0d656a3a0c2fb3c9b872b3ea260ad4d03f4f01668729434dc4ddf6278f", 0x84}, {&(0x7f0000000340)="66387a029899919a3ae629ddfcd03d2265396158e5cd61367e0f948f098f5693cac5bf36a8e8aabfe9a346872f5e1632bc50832596fa58d5d3b610193a", 0x3d}, {&(0x7f0000001900)="75503c488429ad8cb51a1f42c0cfebe721e647720e8fb1ed9a783f29fb643c8918875e5eb5c3992cc8847acc9369ea41c63afea218ebb41bdce3416901189a27aa2b8042376bfa33", 0x48}], 0xa, &(0x7f0000001a00)=[@rthdr_2292={{0x34, 0x29, 0x39, {0x3a, 0x4, 0x0, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x25}, @empty]}}}, @rthdrdstopts={{0x2c, 0x29, 0x37, {0x33, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x2}, @pad1, @ra={0x5, 0x2, 0x5}]}}}, @rthdr_2292={{0x34, 0x29, 0x39, {0x1, 0x4, 0x2, 0xfe, 0x0, [@private2, @loopback]}}}, @dstopts_2292={{0x24, 0x29, 0x4, {0x0, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x1}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001b00)="73f2", 0x2}, {&(0x7f0000001b40)="f007b7ec1e27cef90938fb47c98f57d932b8d7ce48492be692e03d68914e185d7a14bcfec09403ab65f0a3157526f3fcf594b23dab3de4595e092bea1a6a6b3d2df4d4bcf8b7e4a4736d0f32a6785fc769aa24bd546d7b381a7f2e4e6914", 0x5e}, {&(0x7f0000001bc0)="4fa15df219d4e2ed1af3536be1a61ed25acb11b9f29cba94844a125def8df7cbe9218288bd20128ae36dfb1671ddd9c2e6b97646bb5c64ced088e482ffae4bf2771bde8b97b354fd8148292345e04d54af7482ad039ea35f88ddc208a0a21d5eefb9d08f5d30ac9097cc837c012756634c7206cbd29733bbe2714f644c16a852664573d15560b74afef0b2b6a7b031c35fe866d445d8dff63e017c0398d82e8b497ae09d9ddcdbb279f9f68ab90866e71d7342f65096c9df78eb25f508603ac3ffae3da3d6bab7317ce0327d7f1524818bc82eab3fada000dc0f45fd94ea", 0xde}, {&(0x7f0000001cc0)="39330aee76beeea671a53a2032f64a935e0ec8276aae5ce620f959b14c2f06b8ab8b447eb1c9fdf77655de9711f2e617caa4f68caa6f1dd343d04f3b1ec8840cbc23f68654d338a319d91bed4521c1", 0x4f}, {&(0x7f0000001d40)="2b7068e0fc2d2af42a75871095126ade0c4014313885e0a11e6d01f7c042b46363b444400a18a18aeaf230c76f3bf7e7913db58c3ed8c806be6cdc2b36e64d178553f75c7514129817e5ec691d9d4a151eb687b3109f23da", 0x58}], 0x5, &(0x7f0000001e00)=[@tclass={{0x10, 0x29, 0x43, 0x8}}, @tclass={{0x10, 0x29, 0x43, 0x5}}, @hopopts={{0x1c, 0x29, 0x36, {0x2c, 0x0, '\x00', [@ra={0x5, 0x2, 0x1000}]}}}, @hopopts={{0xec, 0x29, 0x36, {0x73, 0x1a, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0x8, 0x1e, "36b3e81a8c96ce9c613a473b3a9a642034ab54733f8632259c8bc4786a94"}, @calipso={0x7, 0x38, {0x1, 0xc, 0xea, 0x7, [0x2, 0x3, 0x1, 0x1, 0xfffffffffffffeff, 0x6]}}, @enc_lim={0x4, 0x1, 0x80}, @generic={0x5, 0x65, "44a93a5f08a4f6f48b07a3168a39f9380f5fc0e9b8f74238135d37496761dbe0b3dd648d3344872a7315964da20f1014db4d0b60d06c8a3cf1babad0be4c88792eb166d44ab5d3eddf4762a0a67d3897325afd6b0c6b901103223a4cb0d92df84a1188ea26"}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x7}}, @tclass={{0x10, 0x29, 0x43, 0x7}}, @rthdrdstopts={{0xec, 0x29, 0x37, {0x88, 0x1a, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0xff, 0x800, [0x2, 0x4, 0xffffffffffff7ebc, 0x3ff]}}, @jumbo={0xc2, 0x4, 0x100}, @generic={0x4, 0x79, "c6436ba41fa366eae37b759aff5a21586865d01d1cb88b9ee67bc986119ae711db93dce789b42a213c9defe4f64148b3e8ea59702b7eff30ba9506a2e8f24bef1df01d37f5ece8a41ddfb26640714476cdcd5f00ecd27c23f3eaeb4f7f961c2aca8f2796c08a6ddd87b91a7617d0d1c1c9e69a39eb6f06e64d"}, @pad1, @enc_lim={0x4, 0x1, 0x1}, @ra, @pad1, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0x10001}]}}}, @dstopts_2292={{0xac, 0x29, 0x4, {0x5c, 0x12, '\x00', [@padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x30, {0x1, 0xa, 0x0, 0x64f, [0xfff, 0x8, 0x4, 0x91, 0x80]}}, @calipso={0x7, 0x58, {0x0, 0x14, 0xfe, 0x3, [0x45f, 0x6, 0x9, 0xfffffffffffffff9, 0x1, 0x7fff, 0x1, 0x64ea40b9, 0x7, 0x7]}}, @ra={0x5, 0x2, 0xfff}, @enc_lim={0x4, 0x1, 0x5f}]}}}], 0x2e0}}, {{&(0x7f0000002100)={0xa, 0x4e20, 0x123b, @remote, 0x194b}, 0x1c, &(0x7f0000002600)=[{&(0x7f0000002140)="ef932a23a4c493faf45f98eda42538408ddf63d25b5eae3179f41b63ce3cc254929b81cd0712132f07a73c266de14427963fc3bf1c4e50671aeb0e2b1e5b9ba94f7458f572e33b43d417bc1890c2bd64807edbb5167e95dc538dc173b1e015d3997b7686f1dbaceaeda6c8f1588e6a0d39a22130591a85a241fbb1863060a9d653cd770d9b3f906b370775ef57c5fd809db6cc5846bf1f17e1de957b5ea78e3dae83bc8561bfa65b18d46d0e3b43c5da83bf0e927902a94b145ebab0aef07500ba3debbc1150f8be96fa9ad1c3031f13ba32e478a8d987", 0xd7}, {&(0x7f0000002240)="4b3481dff59a4a0ab3350b7fbd323fe0c2c95b46738f7f35694cdb40bb2a459c7a40e66cdbe3a66f8c606940f2e1793dae07867bdb46c8efabf2fe0ade176c874383b66bee5d257571f54b22a119d59897824eb2b837ee92f6a2256f78e44c245fc7c5535d0daea7d9aad0f8e12c4ea4a0384c5bf98b8e46b6a0a85acd94b30095bc494a57c307697127a5336fb3144879a918cfc0c839daecbbfdbfa80ceada7945144b78555cb8383d5b24a9ac3902851f63b819c44c6a", 0xb8}, {&(0x7f0000002300)="65262aa523767bd5a4a704f0004c36ac9c97b9e73b2c9f44b21e0bb2b5f8619b2b3965ccdb4272c8bdfd7f1d2d2554a7b600fac23b8676638fb73bd5b24ef1534478a0739d98698c0b8d79a9c91142bcdf07884153e3ae3b941a62c083ca64ca52bc4494ed4b9904f9d979e341ef1e6dae26677e2100b4e1f947d16cc2da601f90a4917edef546968831ebf0f3e7ab4b162685dab6e32d2cec0ee3b8f1ab1c0d18e041f98ecbd4001e829dc926dc66e2355f92c50964f2a3e021172ab29ffb3e202309ceb11a95cb5933e81eb8695a", 0xcf}, {&(0x7f0000002400)="c2f44bed3ae1818be5a26a3bcd855364e8a72fac47e5da235363baa7f3ce10eeb0b32600e62758730e941f77548bab8bc498472da47aff616938a460102c0aa8fa41613c073e93092783ccb563b54279ea47a8aede", 0x55}, {&(0x7f0000002480)="b887293cea3d4816260b94cc9b0132ca36213e5d7e6f2c5942f674c1b6d60c650a084dbfea31e3b0b0a7e88cf02e8a8b2a2f75225802dbf7e967d6cf4255c9d2c9e67c092c2470add41802fc86ddc9d45d39f2d3692116fa3ac638d1aea457fa020f577febb1184e3b8b19b0b849b69bec1ed46c8f85d2268c3e26ea640c218659ee6c26b79b", 0x86}, {&(0x7f0000002540)="21bb57261b74ad02d23273b8a69d5fa42e3f494b5e7ec4c786b712093c3001", 0x1f}, {&(0x7f0000002580)="b9a010a7a0fbd7caaa67644354c14938cea4a5d0deb15b146087ef276c3a813fb1fafa9d1111e5595dcd6346f53bd513eec639846621b66eca484d6dd8da6838807aff738af0afef45086bfa9f5bfad71d855295571091f5f35a9625f58d33c051c6ad4021bf9273e439a9e554010084dae0e67a8827ef597cb9a318d9", 0x7d}], 0x7, &(0x7f0000002640)=[@hopopts={{0x2c, 0x29, 0x36, {0x3a, 0x2, '\x00', [@hao={0xc9, 0x10, @empty}]}}}, @dstopts={{0x1c, 0x29, 0x37, {0x2b, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}], 0x48}}, {{&(0x7f00000026c0)={0xa, 0x4e23, 0x1ff, @mcast2, 0x3ff}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000002700)="b05a74c444da49f28a5e477b202111bd754caf343e5c92d0b45e48d23029b8c1d824823cc4d62f44b53017286f8c5a68e021d426f9268446dcb8d0f10a570fdf0d6c555b20f4ed9143c251e067cc05dec62ff42b45a64f308a60173199e1c1807b3cc35029429290efbf76f57e8bc92e772c65fb90b3b397a306", 0x7a}, {&(0x7f0000002780)="d06865c84c13b2187d3bdb38c2bf4002c2d8ba443a0691a65a9b90d3566908687076a68c83ce4cd3325ba8a81849aa45c0bc94a7e811ff07dd7bfa7bccc379adfb0d9dbcdf0837a1d194857a3a67b24a98960827016a013959891d4667ae07642fdc72db731f0e24d0580a57d5b6c399f7534fb60f25a3f69efd1349e0df62126e84dc86d372f76d7b2c5caebbc81ced6e84e10f7cf575f70f106a30e8ddb6", 0x9f}, {&(0x7f0000002840)="073137038541a4679a1d74487ab6e0d960aa6514b1c750015fbad88819046676c23eaf632aefcbf06ac3e6e5f461b72c27e10af23225f5512683172b72f76107cb1797de988240a85e870a4cc849e81c4c992cf40d06c42eb1655b4ffbc8a417075562", 0x63}, {&(0x7f00000028c0)="170ca104c9becb39eaf089211f732e27c67f0d0dab7b66dd626707fa", 0x1c}, {&(0x7f0000002900)="0f6b222247e55fa6386a0dbd234524dff3732d3373537faeee998206cc758cb6cfe68fd60edb53b2a01a358fdd6eda02d5b2e279dfd807caf93fd36b1c16c7a4869f7b3f8b10b0fb753d0a45ab5ced1f81aec007f99dde21bd39524e26d49577394dae8f08", 0x65}, {&(0x7f0000002980)="8708fbb89cd89a20388f3abfcf92f47202426f8465e95ddcef7f3600c4aca180cf820da883c55c71741256dc40b40397d2c336ad7e0fc7a98756cd2cdb66a87db39a459a55b5c3589ec4506f48a28b3d523732dc8256ce370c6fe7dc85cb934b94091e7d18c6cc1cf414105cbdd0dc7cf202aaf4701c", 0x76}], 0x6, &(0x7f0000002a40)=[@pktinfo={{0x20, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r6}}}, @dstopts={{0xd4, 0x29, 0x37, {0x3c, 0x18, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0x9}, @pad1, @generic={0x1f, 0x85, "524a8e38c9ebbbfb51685eaae7d22fcc9bafb92916b3e5401017a0132ae3bd6aa38a28336370d101b903529879beb9056f4003b8e3a0a5cb57123e3a5abb19c3b368b1407c35acf91b92e976c831002a380a739bcdcd853851647d36a39a7305c131df2e705e143a82785f26a2f64cd7fecea4e1a0d6e3c4c36ecf748360ba1e63a66a504c"}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0x4bd}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x30}}]}}}, @rthdr={{0xa4, 0x29, 0x39, {0x6c, 0x12, 0x0, 0x8, 0x0, [@loopback, @mcast2, @private2, @mcast2, @mcast1, @loopback, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback]}}}], 0x198}}, {{&(0x7f0000002c00)={0xa, 0x4e24, 0x10000, @dev={0xfe, 0x80, '\x00', 0x44}, 0x1}, 0x1c, &(0x7f0000002e80)=[{&(0x7f0000002c40)="abf24729dc91c64e31e240738cd26e2b15d64822da94e165ef7b863c0cc95531c37f26b2592f4a9c98fffba8dc951446ba0e76547e146c64f0a818aaa6c5b401589e39c9b81a42da2c4366a9a72a60b1abfa6f5221041a2567cecf6cfca94a439c839aeea69ec183c0d99aa3b14c3eadc8972d9a576d6853b3f1b74fe088660c1047081a8b3adb9be1e2aa1d1152ee6be4e0414195016b24a7f805ac970847e1615680ed411e559269b2cac114a8ecca503eb68c41ed80d5aac3d98ad93ef59eb3a2a33d36c0cab37d7bd8df65d2ce1785a351ec2c9608cbb6ff30ebfe39db53a1f3fa90109e6569d4dfa87bee8ec1834441afaa5a46806b781c74158615", 0xfe}, {&(0x7f0000002d40)="473b3a6f4a067a457a86cff59b45e0", 0xf}, {&(0x7f0000002d80)="ff075c2b869f3aaff68007784bea963e936ae6e0abcae0e012e6cc2467e1039f32883892b8cd21a9a8e49d804dee82ac1b20faeb3d1c2f42f2c7d61565f284f3408b3ed2f921131ef2a208c262a8a5e47c66845576abba195da4c595053eeeecf9998e71f1505c8954ccc70023edd8afcdad815126be577bdf8244f8380dc94b5bb305f994a15123add5f5f293373bf37f7cefbd85e85a60b6ed143df4da7ce86a630a4f56bca2bc3d5ce1767102a1a333c2e487f4db6bf5b9b8499c0ad8351b0363d9b6168b7b497dc006a8b1dc48112061b0f7c3e91aa69b3c4a872d69", 0xde}], 0x3, &(0x7f0000002ec0)=[@dontfrag={{0x10, 0x29, 0x3e, 0x8}}], 0x10}}, {{&(0x7f0000002f00)={0xa, 0x4e20, 0x1f, @mcast1, 0xfffffff8}, 0x1c, &(0x7f0000004300)=[{&(0x7f0000002f40)="fca52a11d2f7317c93800b3b03987d311bf18a594aff26d5639099e051c2bde9c27f31368ab6c9102988bb1575052f20217b8739b75638f1f2dd63cf74696edb2026a35e95237020235f68d5c05739adcfd1528d03db6287abc41033d738f1c8be1147e944f131f72626faf6588564a04529e32a09f04b0565eae10dbb31632c2ee219e642cfd60122a536", 0x8b}, {&(0x7f0000003000)="46920475f6df25d808facad736a79d8ea68e148496152554b7c75c5f3857d977756b8f09258d102f57456d8a9a8e3e09303bfaa12b383be593bad6411f55ac52e150a73e3e7598f935985bcfaf728d921e8aa622ccd49ebbeec73da3832ce983e9cbf74fc772e48bbd60089e1c63546fca8262979b790bce1b5f38bb25b10cf5f0c1c2bd6fde8e4dcf10e2664e22c0a7ea695eb2fa5510492f11d49c6bec8245bc4efa61e59b0a695f44ffb74a3f59b6b5d97b67fbf3b2d4cb4d78076bc4debca4a84b6b2d1da40faa4015bea448f13b3539b52bfdd82d", 0xd7}, {&(0x7f0000003100)="07b33c5c1d6d768432a5f2f3b425d143def24b62d85b2596297ebb9cf82b9af4e9026a2efc3dde7e4d28cd57027211c9c8f9bb9c38d6ca871e4348ef0139f7fa9dd29a984f437323f499da0cc0df6d156c22f53d96c7636e", 0x58}, {&(0x7f0000003180)="16dd6cb8ab12358abe7c16b8fde97cf251f69261733c1a3a5763759e3c04ac37d317e91ce26d51c243a9c8859e0696df51bcf91ba5b452e17706656c542f019f1e2f8748fbbcea158e66f613fe44471f8f5576c3d5178158308a4211f4259b7386690a974dd1e80fffff09b80aca0ea9bd3e2aefca4d1f249956", 0x7a}, {&(0x7f0000003200)="c0dadcbe8ea95e547598bc7b534fd75ff41fc906358732487d8b60be116247a14e757c0015d58b3dc020faa8e16f6d512a3f8547d75313eee9a0938e1fdb57380464db7caa7e36fbcc9a07c067077b4612b1b872f2311c8cd14dd1df986b19fea5f086637b7392342831cf7cf37284995870d14bca63c1a3beae0671d0400b31343c831ffef2d7933c66194dc3fa68a997e848830729721d96f34345f0df43e6df03623520cd948418735f8b2ea908a2b2fa8b5cab1fe4e7b9a3f95fd1505699229cab05a674c07805eca9bbef7bd0fc5d548faf4d86ccb6855779539796320e9f6f805a75e831991636d70582", 0xed}, {&(0x7f0000003300)="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", 0x1000}], 0x6}}, {{&(0x7f0000004340)={0xa, 0x4e23, 0x74, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1}, 0x1c, &(0x7f0000004680)=[{&(0x7f0000004dc0)="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", 0x1000}, {&(0x7f0000004380)="42ee651dede184fcd6d2f9bebfc047245b25442088b37106ad774f3fa766780260833ae6a5e18fdcde30b2af453d3661e3bf3029fc46f25d48e41a6568b08d71d7c78ffd32ec6ed64c760aa59dd5c70683a51cc06bd09fc745671b556cca88283cade6005c529c754c2096e37477d95e1a16eb712eef5a9bb1931af88eb8f93b26bbc383690df7946b61da493fb86c17ab18b61bbebdc8df06e373e67bb3d2cb7e3eb3f1af89bb5e2b3f56a59c4f439628ad77388e73ebf659ea7e1cb709429aa42272d2933ee773c2ee662f26eaa4c6cf", 0xd1}, {&(0x7f0000004480)="ad2f3c995075a1165b29cfd22b08dea5488697ea9ee4682c9264594b0294f905ad54ccf6de76be7229d7e9cdbc478dc4782eadc3f31dcd46dde219b265a3e3ebbf61eccb039cf1db95c078bca4050ce3f67ee440f7f9e8e9aa6debd534a70c60eaebf091214cf53a4c026d406c2fdd12e79769ed772875fa639243dafeb284c3eb6ed66d66c83416d762b28c0188dd6d6dfa9e9a05d8fcefdd567e0b543847dc48251a71b346726167b99d540b4abbe15e7f8860ef451656ab1dbf705ea17128927fbfe835908c0ff01239a94ff6fd7c1472c7861f950ac6", 0xd8}, {&(0x7f0000004580)="fccc601f05c66b4577baf328bedb06cb5bb81253517998c43baa64d9acb3e86bd8fb126301f763", 0x27}, {&(0x7f00000045c0)="43e5f5e7c0f04329ad756a1a01031ce4af3cfc721595df82cd9c4c0056be2e47bd373eb53f7dc927af9730c50340ef08eabc94ab7a3c6250afd089714f890862c28fd43d3d1cb664cae229c86d79a3c3e32e32d7b380b1f4352c328ec1cef3dd0d4acabca055b85895bed3eaf063a38029dbb1fa4b44f4dd22fbe6a223f49a7d03bc5f4d", 0x84}], 0x5}}, {{&(0x7f00000046c0)={0xa, 0x4e21, 0x3ff, @mcast2, 0xffff}, 0x1c, &(0x7f0000004740)=[{&(0x7f0000004700)="a4565558df8e8f1fecbed701f8a266f5b79f9e1a81143c73", 0x18}, {&(0x7f0000005dc0)="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", 0x1000}], 0x2, &(0x7f0000004780)=[@hopopts_2292={{0x104, 0x29, 0x36, {0xff, 0x1d, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @calipso={0x7, 0x30, {0x3, 0xa, 0xa6, 0x20, [0x1ff, 0x1, 0x8, 0xffffffff7fffffff, 0xf8]}}, @pad1, @pad1, @hao={0xc9, 0x10, @empty}, @generic={0x9, 0x63, "f73dbedf3f70107b59f3504a699a7df7250234fda0e400145e195edebdfd704215dfe62b231a3e436941b18ee506a80b72109a0ba4295ef8a7c14ed87c8b0f30df319d6461c2ab501225790b62ec43fec9857984ef49af8f13d6996805a24ded82a10b"}, @calipso={0x7, 0x18, {0x0, 0x4, 0xa1, 0x57b7, [0x100, 0xffff]}}, @hao={0xc9, 0x10, @mcast1}]}}}], 0x104}}], 0x8, 0x4000000) [ 2208.524425][T13101] timeout_message=lock fdc [ 2208.530286][T13101] last output bytes: [ 2208.534909][T13101] 0 90 4295139496 [ 2208.535695][T21471] xt_hashlimit: overflow, try lower: 2883148186447249408/5 08:03:42 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:42 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2208.554067][T13101] 1 90 4295139496 [ 2208.559625][T13101] 2 90 4295139496 [ 2208.563807][T13101] 24 90 4295139496 [ 2208.568078][T13101] 1b 90 4295139496 [ 2208.572253][T13101] ff 90 4295139496 [ 2208.576423][T13101] 12 80 4295141312 [ 2208.580629][T13101] 3 90 4295141312 [ 2208.584879][T13101] 13 80 4295141312 [ 2208.589445][T13101] 0 90 4295141312 [ 2208.593607][T13101] 1a 90 4295141312 [ 2208.597790][T13101] 0 90 4295141312 [ 2208.602603][T13101] 3 80 4295141312 [ 2208.607094][T13101] a1 90 4295141312 [ 2208.611706][T13101] 1e 90 4295141312 [ 2208.615917][T13101] 7 80 4295141312 [ 2208.619576][T13101] 1 90 4295141312 [ 2208.623300][T13101] 8 80 4295141312 [ 2208.626435][T13101] 4 80 4295141312 [ 2208.631904][T13101] 1 90 4295141312 [ 2208.636191][T13101] last result at 4295141492 [ 2208.638483][T21474] loop3: detected capacity change from 0 to 87 [ 2208.641099][T13101] last redo_fd_request at 4295157688 [ 2208.654154][T13101] status=80 [ 2208.657058][T13101] fdc_busy=1 [ 2208.660167][T13101] floppy_work.func=floppy_work_workfn [ 2208.665495][T13101] cont=ffffffff8a1f4920 [ 2208.670623][T13101] current_req=0000000000000000 [ 2208.676495][T13101] command_status=-1 [ 2208.681532][T13101] [ 2208.684529][T13101] floppy1: floppy timeout called [ 2208.770115][T21471] xt_hashlimit: overflow, try lower: 2883148186447249408/5 08:03:42 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2208.793069][ T3758] [ 2208.796154][ T3758] floppy driver state [ 2208.807522][T21477] loop0: detected capacity change from 0 to 87 [ 2208.807985][ T3758] ------------------- [ 2208.828080][ T3758] now=4295157728 last interrupt=4295141312 diff=16416 last called handler=recal_interrupt [ 2208.843588][ T3758] timeout_message=lock fdc [ 2208.849847][ T3758] last output bytes: [ 2208.854201][ T3758] 0 90 4295139496 08:03:42 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2208.858226][ T3758] 1 90 4295139496 [ 2208.862665][ T3758] 2 90 4295139496 [ 2208.866678][ T3758] 24 90 4295139496 [ 2208.875783][ T3758] 1b 90 4295139496 [ 2208.880311][ T3758] ff 90 4295139496 [ 2208.884143][ T3758] 12 80 4295141312 [ 2208.892471][ T3758] 3 90 4295141312 [ 2208.896670][ T3758] 13 80 4295141312 [ 2208.900655][T21482] loop3: detected capacity change from 0 to 87 [ 2208.913583][ T3758] 0 90 4295141312 [ 2208.913897][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 2208.913914][ T37] audit: type=1804 audit(1638173022.385:873): pid=21483 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1391/bus" dev="sda1" ino=1194 res=1 errno=0 [ 2208.920048][ T3758] 1a 90 4295141312 [ 2208.925660][ T37] audit: type=1800 audit(1638173022.385:874): pid=21483 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1194 res=0 errno=0 [ 2208.986786][ T3758] 0 90 4295141312 [ 2208.991393][ T3758] 3 80 4295141312 [ 2208.995535][ T3758] a1 90 4295141312 [ 2208.999752][ T3758] 1e 90 4295141312 [ 2209.003730][ T3758] 7 80 4295141312 [ 2209.007455][ T3758] 1 90 4295141312 [ 2209.011673][ T3758] 8 80 4295141312 [ 2209.015810][ T3758] 4 80 4295141312 [ 2209.019861][ T3758] 1 90 4295141312 08:03:42 executing program 2: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) renameat(r0, &(0x7f0000000140)='./cgroup\x00', r0, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca", @ANYRES16, @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x2) ioctl$FLOPPY_FDFMTEND(r0, 0x249) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) pread64(r1, &(0x7f0000000200)=""/95, 0x5f, 0xff) r2 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4004) [ 2209.023910][ T3758] last result at 4295141492 [ 2209.029736][ T3758] last redo_fd_request at 4295157720 [ 2209.035952][ T3758] status=80 [ 2209.039677][ T3758] fdc_busy=1 [ 2209.043477][ T3758] floppy_work.func=floppy_work_workfn [ 2209.049238][ T3758] cont=ffffffff8a1f4920 08:03:42 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2209.053899][ T3758] current_req=0000000000000000 [ 2209.059662][ T3758] command_status=-1 [ 2209.064460][ T3758] [ 2209.067553][ T3758] floppy1: floppy timeout called [ 2209.075649][T13101] [ 2209.078809][T13101] floppy driver state [ 2209.083615][T13101] ------------------- [ 2209.089507][T13101] now=4295157753 last interrupt=4295141312 diff=16441 last called handler=recal_interrupt [ 2209.103232][T13101] timeout_message=lock fdc [ 2209.109384][T13101] last output bytes: [ 2209.114485][T13101] 0 90 4295139496 [ 2209.120951][T13101] 1 90 4295139496 [ 2209.126169][T13101] 2 90 4295139496 08:03:42 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180), 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2209.131917][T13101] 24 90 4295139496 [ 2209.137343][T13101] 1b 90 4295139496 [ 2209.143040][T13101] ff 90 4295139496 [ 2209.149010][T13101] 12 80 4295141312 [ 2209.154409][T13101] 3 90 4295141312 [ 2209.160929][T13101] 13 80 4295141312 [ 2209.168768][T13101] 0 90 4295141312 [ 2209.173303][T13101] 1a 90 4295141312 [ 2209.177755][T13101] 0 90 4295141312 [ 2209.183012][T13101] 3 80 4295141312 [ 2209.186925][T21490] loop3: detected capacity change from 0 to 87 [ 2209.188946][T13101] a1 90 4295141312 [ 2209.190218][T21491] loop0: detected capacity change from 0 to 87 [ 2209.209050][T13101] 1e 90 4295141312 [ 2209.214443][T13101] 7 80 4295141312 [ 2209.220462][T13101] 1 90 4295141312 [ 2209.225795][T13101] 8 80 4295141312 [ 2209.231158][T13101] 4 80 4295141312 [ 2209.236246][T13101] 1 90 4295141312 [ 2209.242358][T13101] last result at 4295141492 [ 2209.249129][T13101] last redo_fd_request at 4295157752 [ 2209.256292][T13101] status=80 08:03:42 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2209.259923][T13101] fdc_busy=1 [ 2209.264707][T13101] floppy_work.func=floppy_work_workfn [ 2209.271788][T13101] cont=ffffffff8a1f4920 [ 2209.290209][T13101] current_req=0000000000000000 [ 2209.295514][T13101] command_status=-1 [ 2209.300640][T13101] [ 2209.304048][T13101] floppy1: floppy timeout called 08:03:42 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180), 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2209.319666][ T3758] [ 2209.322536][ T3758] floppy driver state [ 2209.328010][ T3758] ------------------- [ 2209.332549][ T3758] now=4295157778 last interrupt=4295141312 diff=16466 last called handler=recal_interrupt [ 2209.351293][T21493] loop3: detected capacity change from 0 to 87 [ 2209.359019][ T3758] timeout_message=lock fdc [ 2209.359030][ T3758] last output bytes: [ 2209.359036][ T3758] 0 90 4295139496 [ 2209.359047][ T3758] 1 90 4295139496 [ 2209.359055][ T3758] 2 90 4295139496 [ 2209.359064][ T3758] 24 90 4295139496 [ 2209.359072][ T3758] 1b 90 4295139496 [ 2209.359081][ T3758] ff 90 4295139496 [ 2209.359094][ T3758] 12 80 4295141312 [ 2209.388869][T21496] loop0: detected capacity change from 0 to 87 [ 2209.393662][ T3758] 3 90 4295141312 [ 2209.393685][ T3758] 13 80 4295141312 [ 2209.393700][ T3758] 0 90 4295141312 [ 2209.393716][ T3758] 1a 90 4295141312 [ 2209.393731][ T3758] 0 90 4295141312 [ 2209.393746][ T3758] 3 80 4295141312 [ 2209.437737][ T3758] a1 90 4295141312 [ 2209.442029][ T3758] 1e 90 4295141312 [ 2209.445728][ T3758] 7 80 4295141312 08:03:42 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(0x0, 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2209.451227][ T3758] 1 90 4295141312 [ 2209.455280][ T3758] 8 80 4295141312 [ 2209.459305][ T3758] 4 80 4295141312 [ 2209.463575][ T3758] 1 90 4295141312 [ 2209.468384][ T3758] last result at 4295141492 [ 2209.473604][ T3758] last redo_fd_request at 4295157776 [ 2209.480588][ T3758] status=80 [ 2209.483978][ T3758] fdc_busy=1 [ 2209.488565][ T3758] floppy_work.func=floppy_work_workfn [ 2209.494986][ T3758] cont=ffffffff8a1f4920 [ 2209.500045][ T3758] current_req=0000000000000000 [ 2209.505633][ T3758] command_status=-1 [ 2209.510585][ T3758] [ 2209.513590][ T3758] floppy1: floppy timeout called [ 2209.528415][T13101] [ 2209.531516][T13101] floppy driver state [ 2209.536737][T13101] ------------------- 08:03:43 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfcffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180), 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:43 executing program 2: getitimer(0x1, &(0x7f0000000000)) [ 2209.544748][T13101] now=4295157799 last interrupt=4295141312 diff=16487 last called handler=recal_interrupt [ 2209.574205][T13101] timeout_message=lock fdc [ 2209.576980][T21500] loop3: detected capacity change from 0 to 87 [ 2209.580166][T13101] last output bytes: [ 2209.605989][T21504] loop0: detected capacity change from 0 to 87 [ 2209.607987][T13101] 0 90 4295139496 [ 2209.616601][T13101] 1 90 4295139496 08:03:43 executing program 2: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x40000) [ 2209.644084][T13101] 2 90 4295139496 [ 2209.648451][T13101] 24 90 4295139496 [ 2209.653070][T13101] 1b 90 4295139496 [ 2209.658080][T13101] ff 90 4295139496 [ 2209.662993][T13101] 12 80 4295141312 08:03:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975169a02", 0x7, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2209.678351][T13101] 3 90 4295141312 08:03:43 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2209.695194][T13101] 13 80 4295141312 [ 2209.705333][T13101] 0 90 4295141312 [ 2209.710782][T13101] 1a 90 4295141312 [ 2209.715820][T13101] 0 90 4295141312 [ 2209.720729][T13101] 3 80 4295141312 [ 2209.721487][T21509] loop3: detected capacity change from 0 to 87 [ 2209.725405][T13101] a1 90 4295141312 [ 2209.736773][T13101] 1e 90 4295141312 [ 2209.741911][T13101] 7 80 4295141312 [ 2209.746756][T13101] 1 90 4295141312 [ 2209.751478][T13101] 8 80 4295141312 [ 2209.755883][T13101] 4 80 4295141312 [ 2209.761206][T13101] 1 90 4295141312 [ 2209.765922][T13101] last result at 4295141492 [ 2209.771813][T13101] last redo_fd_request at 4295157797 [ 2209.778927][T13101] status=80 [ 2209.782596][T13101] fdc_busy=1 [ 2209.786289][T13101] floppy_work.func=floppy_work_workfn [ 2209.793572][T13101] cont=ffffffff8a1f4920 [ 2209.798760][T13101] current_req=0000000000000000 [ 2209.804838][T13101] command_status=-1 [ 2209.810984][T21511] loop0: detected capacity change from 0 to 87 [ 2209.817962][T13101] 08:03:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975169a02", 0x7, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2209.828086][T13101] floppy1: floppy timeout called [ 2209.834166][T13101] [ 2209.836872][T13101] floppy driver state [ 2209.841519][T13101] ------------------- [ 2209.845731][T13101] now=4295157829 last interrupt=4295141312 diff=16517 last called handler=recal_interrupt [ 2209.856684][T13101] timeout_message=lock fdc [ 2209.862045][T13101] last output bytes: [ 2209.866360][T13101] 0 90 4295139496 08:03:43 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2209.868383][ T37] audit: type=1804 audit(1638173023.345:875): pid=21511 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1395/file1/bus" dev="loop0" ino=1048739 res=1 errno=0 [ 2209.870564][T13101] 1 90 4295139496 [ 2209.909390][T13101] 2 90 4295139496 [ 2209.912113][ T37] audit: type=1800 audit(1638173023.345:876): pid=21511 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048739 res=0 errno=0 [ 2209.917229][T13101] 24 90 4295139496 [ 2209.920222][T21513] loop3: detected capacity change from 0 to 87 [ 2209.950752][T13101] 1b 90 4295139496 [ 2209.955958][T13101] ff 90 4295139496 [ 2209.960815][T13101] 12 80 4295141312 [ 2209.965895][T13101] 3 90 4295141312 [ 2209.970950][T13101] 13 80 4295141312 [ 2209.976049][T13101] 0 90 4295141312 [ 2209.980888][T13101] 1a 90 4295141312 [ 2209.985395][T13101] 0 90 4295141312 [ 2209.993270][T13101] 3 80 4295141312 [ 2209.998489][T13101] a1 90 4295141312 [ 2210.003663][T13101] 1e 90 4295141312 [ 2210.008192][T13101] 7 80 4295141312 [ 2210.012997][T13101] 1 90 4295141312 [ 2210.018187][T13101] 8 80 4295141312 [ 2210.023148][T13101] 4 80 4295141312 [ 2210.029013][T13101] 1 90 4295141312 [ 2210.034604][T21515] loop0: detected capacity change from 0 to 87 [ 2210.043725][T13101] last result at 4295141492 [ 2210.054487][T13101] last redo_fd_request at 4295157828 [ 2210.073792][T13101] status=80 [ 2210.083819][T13101] fdc_busy=1 [ 2210.087436][T13101] floppy_work.func=floppy_work_workfn [ 2210.094533][T13101] cont=ffffffff8a1f4920 [ 2210.099651][ T37] audit: type=1804 audit(1638173023.565:877): pid=21515 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1396/file1/bus" dev="loop0" ino=1048740 res=1 errno=0 [ 2210.122257][T13101] current_req=0000000000000000 [ 2210.131937][ T37] audit: type=1800 audit(1638173023.565:878): pid=21515 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048740 res=0 errno=0 [ 2210.142813][T13101] command_status=-1 [ 2210.172517][T13101] [ 2210.175290][T13101] floppy1: floppy timeout called [ 2210.185476][T13101] [ 2210.188882][T13101] floppy driver state [ 2210.193213][T13101] ------------------- [ 2210.197222][T13101] now=4295157864 last interrupt=4295141312 diff=16552 last called handler=recal_interrupt 08:03:43 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975169a02", 0x7, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2210.208935][T13101] timeout_message=lock fdc [ 2210.214044][T13101] last output bytes: 08:03:43 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2210.218234][T13101] 0 90 4295139496 [ 2210.224558][T13101] 1 90 4295139496 [ 2210.229392][T13101] 2 90 4295139496 [ 2210.234050][T13101] 24 90 4295139496 [ 2210.239784][T21517] loop3: detected capacity change from 0 to 87 [ 2210.242584][T13101] 1b 90 4295139496 [ 2210.254513][T13101] ff 90 4295139496 [ 2210.265548][T13101] 12 80 4295141312 [ 2210.270883][T13101] 3 90 4295141312 [ 2210.275758][T13101] 13 80 4295141312 [ 2210.282750][T21521] loop0: detected capacity change from 0 to 87 [ 2210.286685][T13101] 0 90 4295141312 [ 2210.296011][T13101] 1a 90 4295141312 [ 2210.307376][T13101] 0 90 4295141312 [ 2210.312589][T13101] 3 80 4295141312 [ 2210.317601][T13101] a1 90 4295141312 [ 2210.328057][T13101] 1e 90 4295141312 [ 2210.332606][T13101] 7 80 4295141312 [ 2210.337179][T13101] 1 90 4295141312 [ 2210.341737][T13101] 8 80 4295141312 [ 2210.346947][T13101] 4 80 4295141312 [ 2210.352232][T13101] 1 90 4295141312 [ 2210.356880][T13101] last result at 4295141492 [ 2210.362378][ T37] audit: type=1804 audit(1638173023.825:879): pid=21521 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1397/file1/bus" dev="loop0" ino=1048741 res=1 errno=0 [ 2210.368102][T13101] last redo_fd_request at 4295157863 [ 2210.395528][ T37] audit: type=1800 audit(1638173023.825:880): pid=21521 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048741 res=0 errno=0 [ 2210.401414][T13101] status=80 [ 2210.432443][T13101] fdc_busy=1 [ 2210.436677][T13101] floppy_work.func=floppy_work_workfn [ 2210.443383][T13101] cont=ffffffff8a1f4920 [ 2210.447993][T13101] current_req=0000000000000000 [ 2210.454192][T13101] command_status=-1 [ 2210.459566][T13101] [ 2210.462829][T13101] floppy1: floppy timeout called [ 2210.483203][T13101] [ 2210.486383][T13101] floppy driver state 08:03:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975169a029d1e9a6b", 0xb, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:43 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 08:03:43 executing program 2: syz_open_dev$floppy(&(0x7f0000000400), 0x1, 0x40000) r0 = syz_open_procfs(0x0, 0x0) renameat(r0, &(0x7f0000000140)='./cgroup\x00', r0, &(0x7f0000000040)='./cgroup\x00') r1 = openat$full(0xffffff9c, &(0x7f0000000380), 0x448041, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f00000003c0)={0x0, 0xfffffffffffffffa}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f0000000100)={0x30148, &(0x7f0000000000)="9c5bc4cc111fd9c5c94edb89106d0576ac5ecd72e71148cd1a93ee2dad508a8c87b2d399ea044af02cd1dcfb10b89e05402454439e1a837c9143b7cae3683e56e1c7c302cb564c06e660f0b08874b2cf62959ec9241e9768132319ad8ef8c63c294c66644804aaaa201130b678907f967ac6ea6cfa520e29d4535c0cc932613a80a9aa64436534fac8c92c90db0b2d3e3136a232737042dbf5e9bf170eccb2", &(0x7f00000000c0), 0x0, 0x9f, 0x0, 0x0, 0x2, 0x0, "f550454290956aa32213227f3b78366d", 0x0, '\x00', 0x101}) r2 = openat$pfkey(0xffffff9c, &(0x7f0000000180), 0x4000, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x1409, 0x1, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x100408c4}, 0x4000001) [ 2210.500389][T13101] ------------------- [ 2210.504941][T13101] now=4295157895 last interrupt=4295141312 diff=16583 last called handler=recal_interrupt [ 2210.507266][T21524] loop3: detected capacity change from 0 to 87 [ 2210.516076][T13101] timeout_message=lock fdc [ 2210.530301][T21526] loop0: detected capacity change from 0 to 87 [ 2210.538541][T13101] last output bytes: [ 2210.542672][T13101] 0 90 4295139496 [ 2210.547150][T13101] 1 90 4295139496 [ 2210.554828][T13101] 2 90 4295139496 [ 2210.560240][T13101] 24 90 4295139496 [ 2210.565463][T13101] 1b 90 4295139496 [ 2210.571344][T13101] ff 90 4295139496 [ 2210.577240][T13101] 12 80 4295141312 [ 2210.582713][T13101] 3 90 4295141312 [ 2210.587669][T13101] 13 80 4295141312 [ 2210.593311][T13101] 0 90 4295141312 [ 2210.599256][T13101] 1a 90 4295141312 [ 2210.603902][T13101] 0 90 4295141312 [ 2210.608649][T13101] 3 80 4295141312 [ 2210.614095][T13101] a1 90 4295141312 [ 2210.618519][T13101] 1e 90 4295141312 [ 2210.622987][T13101] 7 80 4295141312 [ 2210.628780][T13101] 1 90 4295141312 [ 2210.636988][ T37] audit: type=1804 audit(1638173024.105:881): pid=21530 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1398/file1/bus" dev="sda1" ino=1199 res=1 errno=0 [ 2210.637164][T13101] 8 80 4295141312 [ 2210.674172][T13101] 4 80 4295141312 [ 2210.676360][ T37] audit: type=1800 audit(1638173024.105:882): pid=21530 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1199 res=0 errno=0 [ 2210.679007][T13101] 1 90 4295141312 [ 2210.709737][T13101] last result at 4295141492 08:03:44 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975169a029d", 0x8, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2210.716085][T13101] last redo_fd_request at 4295157893 [ 2210.722935][T13101] status=80 [ 2210.727008][T13101] fdc_busy=1 [ 2210.731557][T13101] floppy_work.func=floppy_work_workfn 08:03:44 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2210.738487][T13101] cont=ffffffff8a1f4920 [ 2210.744398][T13101] current_req=0000000000000000 [ 2210.750529][T13101] command_status=-1 [ 2210.755721][T13101] [ 2210.760850][T21532] loop3: detected capacity change from 0 to 87 [ 2210.763806][T13101] floppy1: floppy timeout called [ 2210.784794][T13101] [ 2210.788475][T13101] floppy driver state [ 2210.794237][T13101] ------------------- [ 2210.799856][T13101] now=4295157924 last interrupt=4295141312 diff=16612 last called handler=recal_interrupt [ 2210.813255][T13101] timeout_message=lock fdc [ 2210.819067][T13101] last output bytes: [ 2210.824128][T13101] 0 90 4295139496 [ 2210.842611][T13101] 1 90 4295139496 [ 2210.843233][T21534] loop0: detected capacity change from 0 to 87 [ 2210.847379][T13101] 2 90 4295139496 [ 2210.863186][T13101] 24 90 4295139496 [ 2210.869937][T13101] 1b 90 4295139496 [ 2210.876923][T13101] ff 90 4295139496 [ 2210.882449][T13101] 12 80 4295141312 [ 2210.889271][T13101] 3 90 4295141312 [ 2210.894239][T13101] 13 80 4295141312 [ 2210.898746][T13101] 0 90 4295141312 [ 2210.904033][T13101] 1a 90 4295141312 [ 2210.908829][T13101] 0 90 4295141312 [ 2210.913871][T13101] 3 80 4295141312 [ 2210.919082][T13101] a1 90 4295141312 [ 2210.923315][T13101] 1e 90 4295141312 [ 2210.929860][T13101] 7 80 4295141312 [ 2210.935068][T13101] 1 90 4295141312 [ 2210.940383][T13101] 8 80 4295141312 [ 2210.944925][T13101] 4 80 4295141312 [ 2210.949243][T13101] 1 90 4295141312 [ 2210.953096][T13101] last result at 4295141492 [ 2210.958053][T13101] last redo_fd_request at 4295157923 [ 2210.965195][T13101] status=80 [ 2210.968831][T13101] fdc_busy=1 [ 2210.972804][T13101] floppy_work.func=floppy_work_workfn [ 2210.980434][T13101] cont=ffffffff8a1f4920 [ 2210.986564][T13101] current_req=0000000000000000 [ 2210.993975][T13101] command_status=-1 [ 2210.998773][T13101] [ 2211.001925][T13101] floppy1: floppy timeout called [ 2211.010002][T13101] 08:03:44 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975169a029d", 0x8, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:44 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:44 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2211.013615][T13101] floppy driver state [ 2211.019303][T13101] ------------------- [ 2211.023819][T13101] now=4295157947 last interrupt=4295141312 diff=16635 last called handler=recal_interrupt [ 2211.027173][T21536] loop3: detected capacity change from 0 to 87 [ 2211.038103][T13101] timeout_message=lock fdc [ 2211.053010][T13101] last output bytes: [ 2211.058109][T13101] 0 90 4295139496 [ 2211.063148][T13101] 1 90 4295139496 [ 2211.069410][T13101] 2 90 4295139496 [ 2211.073909][T13101] 24 90 4295139496 [ 2211.078966][T13101] 1b 90 4295139496 [ 2211.083825][T13101] ff 90 4295139496 [ 2211.089322][T13101] 12 80 4295141312 [ 2211.094212][T13101] 3 90 4295141312 [ 2211.100174][T13101] 13 80 4295141312 [ 2211.105912][T13101] 0 90 4295141312 [ 2211.111120][T13101] 1a 90 4295141312 [ 2211.112785][T21542] loop0: detected capacity change from 0 to 87 [ 2211.115334][T13101] 0 90 4295141312 [ 2211.129327][T13101] 3 80 4295141312 [ 2211.135239][T13101] a1 90 4295141312 [ 2211.141902][T13101] 1e 90 4295141312 [ 2211.147647][T13101] 7 80 4295141312 [ 2211.153650][T13101] 1 90 4295141312 [ 2211.159478][T13101] 8 80 4295141312 [ 2211.164626][T13101] 4 80 4295141312 [ 2211.170464][T13101] 1 90 4295141312 [ 2211.176099][T13101] last result at 4295141492 08:03:44 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 08:03:44 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975169a029d", 0x8, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2211.184612][T13101] last redo_fd_request at 4295157946 [ 2211.193109][T13101] status=80 [ 2211.197368][T13101] fdc_busy=1 [ 2211.202046][T13101] floppy_work.func=floppy_work_workfn [ 2211.209702][T13101] cont=ffffffff8a1f4920 [ 2211.213222][T21544] loop3: detected capacity change from 0 to 87 [ 2211.215564][T13101] current_req=0000000000000000 [ 2211.230870][T13101] command_status=-1 [ 2211.235753][T13101] [ 2211.239387][T13101] floppy1: floppy timeout called [ 2211.259819][T13101] [ 2211.262871][T13101] floppy driver state [ 2211.267534][T13101] ------------------- [ 2211.273948][T13101] now=4295157972 last interrupt=4295141312 diff=16660 last called handler=recal_interrupt [ 2211.290220][T13101] timeout_message=lock fdc 08:03:44 executing program 2: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r1 = syz_mount_image$qnx4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3, 0x8, &(0x7f0000001540)=[{&(0x7f0000000080)="3f7c63dca887e27c760713d50dcbaf395d2d550f26e2a7db210fe2c7446660bd4c2d72701c697d50fe3bc030f5e189d94979be62fb30b1d7a456dee0ff6c2d3a3a2ef8a3dff8d2c462c730be933866cd07d578e431f70b1a422c59a4bd6adc07a5f0162c08bae22bdb9876b7fa35324d468b337542286c4cda207ff34f23f6fc8ffa29b830a483aae46cc33cf9ed2cf42b9f0ababa2cab88fbdf9f13371fbb346913c334753acf22dc38fd7df8d044e0738c4c9e3dbd881343bdb7f183bbe10127cefc2b3b4b4b71c1ebec2b559e2a92692edfddea23", 0xd6, 0x4}, {&(0x7f0000000200)="efaecf0686c32daafedbe5c13f846c99f5c48b5539ab172175d4b511f340b5a2ead388b116149a0a8ede5957b59f073586a07580a3bfc811a250aca807e31f024bfde5dc8fa1c55202d8919a381eaf795d47ebcd32ec22127da4a705bde5ef44e3cc7f2a8fbb4ff865d3d3eac7d61a5835da3c0ebba5239352e50942d69cc99e17d0aca696c76bbada268ec2f1b1a71d5da1af5bed2045aa9d1f666ead7fbc92d176cff646a5fee6958df9fb25d0dcf116560e8fe87ff7bbb6cae9f04e26b053645df2062b26f865ed7a06d1c07dfd589f7eac49", 0xd4, 0x80000001}, {&(0x7f0000000300)="565abf11a8ddf9ee8ef66bfa687dc00ac02624de0407f6c72d64f847117336dc593bbced06fd8b040e47bf24434e22a6df2825aa8b4fab2ab330e239ece536eeadc82ac895b7edef2b787362dc97", 0x4e, 0x3}, {&(0x7f0000000380)="5de6c2cee3533997fe631acbe750002bcb890841dcdb44b34da34929036b3bb3ba84eba2378d15a96a860e0bd74ab94b1c4de0a9b7d6b65ee16f29e13a4806ab7698718b1f59fe607ba9c09b223a240b1ab971974dab75cf5c1056aba9954d502dd9fca5ee4e61b5489ea4b9f60d7e1beeddcd5d3cae28ed1ea22fde759e1cabc048b4a9a02f976c3250da06cf481f51913d888b5fef8e7a2db0210dbae9ba3264c87f0f57ef7008bd322a653b6735a7239d6007b266054155a1690550", 0xbd, 0xfffffffc}, {&(0x7f0000000440)="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", 0x1000, 0x67}, {&(0x7f0000000180)="b54e43b516f3c5dcdc3ad458", 0xc, 0xd35}, {&(0x7f0000001440)="9c6d7ce169eb3c852cbff91ce10a3958c8783908ed9a94943ad1383f4d0864fbb2e33aa5d107320450b318bccebf167e57f8557e51482db5fea5814316c6a1481d4eb5aca593b35888eb215ac656178a82955e273b3e689a80709f6037f081ac146d666f51db24cb7e7db18d3eea0b8688", 0x71, 0x5}, {&(0x7f00000014c0)="11717dde3f3a29ff4584c24ad5c6a8c73ed71d7b73353a8d843f9b83ec06ad31f5e670a390c749c5dc0e25700ce7acf67cf19cfd5f3d4994b2a478f6efa96e64968aa8b9113ef80ba621216065a743114075deeed5e924f64ec7", 0x5a, 0x4127}], 0x2, &(0x7f00000015c0)={[{'/dev/fd#\x00'}, {'/dev/fd#\x00'}, {'/dev/fd#\x00'}, {'}#(-'}, {'/dev/fd#\x00'}], [{@fowner_gt={'fowner>', 0xee00}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/fd#\x00'}}, {@pcr={'pcr', 0x3d, 0xb}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x31, 0x36, 0x35, 0x33, 0x61, 0x39, 0x35], 0x2d, [0x32, 0x64, 0x61, 0x34], 0x2d, [0x79, 0x62, 0x66, 0x32], 0x2d, [0x35, 0x31, 0x36, 0x39], 0x2d, [0x64, 0x33, 0x31, 0x39, 0x62, 0x38, 0x32, 0x36]}}}, {@dont_appraise}]}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000001680), &(0x7f00000016c0), 0x2, 0x2) ioctl$FLOPPY_FDRAWCMD(r0, 0x258, &(0x7f0000001800)={0x80, &(0x7f0000001700)="a4608f13a491e41eddab74f3a87292d13976802ce7c972c7033cbc4dd751993ca1d83c7b404f360b02de1833502b77c28a759e2f01643dccab37b085ae32e1656d9a451e828c03c85eb2f28a7de8a53b75ed2c15561687ca04b3562fa8d801def775569ef54abae0bf1eb04a1ef61daf93ae40bfcb27ca69f62ec2427e08d41f5b464729a008808f345a110c07589c", &(0x7f00000017c0)=0x6, 0x0, 0x8f, 0x0, 0x0, 0x4, 0x3f, "d412380c0b2965ddcbe51c552676dba7", 0x0, '\x00', 0xd1}) [ 2211.299023][T13101] last output bytes: [ 2211.305732][T13101] 0 90 4295139496 08:03:44 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2211.311091][T13101] 1 90 4295139496 [ 2211.316803][T13101] 2 90 4295139496 08:03:44 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975169a029d1e9a", 0xa, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2211.324504][T21546] loop0: detected capacity change from 0 to 87 [ 2211.335756][T13101] 24 90 4295139496 [ 2211.347802][T13101] 1b 90 4295139496 [ 2211.355247][T13101] ff 90 4295139496 [ 2211.363475][T13101] 12 80 4295141312 [ 2211.371046][T13101] 3 90 4295141312 [ 2211.377095][T13101] 13 80 4295141312 [ 2211.382474][T13101] 0 90 4295141312 [ 2211.387158][T13101] 1a 90 4295141312 [ 2211.394340][T13101] 0 90 4295141312 [ 2211.400513][T13101] 3 80 4295141312 [ 2211.407128][T21553] loop2: detected capacity change from 0 to 264192 [ 2211.415209][T13101] a1 90 4295141312 [ 2211.416125][T21552] loop3: detected capacity change from 0 to 87 [ 2211.421060][T13101] 1e 90 4295141312 08:03:44 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2211.435099][T13101] 7 80 4295141312 [ 2211.449448][T13101] 1 90 4295141312 [ 2211.455030][T13101] 8 80 4295141312 [ 2211.468094][T13101] 4 80 4295141312 [ 2211.473627][T13101] 1 90 4295141312 [ 2211.478393][T21553] qnx4: no qnx4 filesystem (no root dir). [ 2211.479726][T13101] last result at 4295141492 [ 2211.495262][T13101] last redo_fd_request at 4295157971 [ 2211.503743][T13101] status=80 [ 2211.509106][T13101] fdc_busy=1 [ 2211.514126][T13101] floppy_work.func=floppy_work_workfn [ 2211.522156][T13101] cont=ffffffff8a1f4920 [ 2211.543983][T13101] current_req=0000000000000000 [ 2211.559644][T13101] command_status=-1 [ 2211.561590][T21557] loop0: detected capacity change from 0 to 87 [ 2211.565300][T13101] [ 2211.565381][T13101] floppy1: floppy timeout called [ 2211.567737][T17293] [ 2211.594355][T17293] floppy driver state 08:03:45 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975169a029d1e", 0x9, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2211.600120][T17293] ------------------- [ 2211.605860][T17293] now=4295158005 last interrupt=4295141312 diff=16693 last called handler=recal_interrupt [ 2211.624043][T17293] timeout_message=lock fdc [ 2211.630146][T17293] last output bytes: [ 2211.634809][T21559] loop3: detected capacity change from 0 to 87 [ 2211.635440][T17293] 0 90 4295139496 [ 2211.648581][T17293] 1 90 4295139496 [ 2211.653890][T17293] 2 90 4295139496 [ 2211.658993][T17293] 24 90 4295139496 [ 2211.663123][T17293] 1b 90 4295139496 [ 2211.666894][T17293] ff 90 4295139496 [ 2211.675117][T17293] 12 80 4295141312 [ 2211.682328][T17293] 3 90 4295141312 [ 2211.687728][T17293] 13 80 4295141312 08:03:45 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(0xffffffffffffffff, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2211.698184][T17293] 0 90 4295141312 [ 2211.703817][T17293] 1a 90 4295141312 [ 2211.710825][T17293] 0 90 4295141312 [ 2211.715759][T17293] 3 80 4295141312 [ 2211.721052][T17293] a1 90 4295141312 [ 2211.726759][T17293] 1e 90 4295141312 [ 2211.731764][T17293] 7 80 4295141312 [ 2211.737150][T17293] 1 90 4295141312 [ 2211.742215][T17293] 8 80 4295141312 [ 2211.747395][T17293] 4 80 4295141312 [ 2211.753050][T17293] 1 90 4295141312 [ 2211.758607][T17293] last result at 4295141492 [ 2211.764618][T17293] last redo_fd_request at 4295158001 [ 2211.771939][T17293] status=80 [ 2211.776330][T17293] fdc_busy=1 [ 2211.780677][T17293] floppy_work.func=floppy_work_workfn [ 2211.787529][T17293] cont=ffffffff8a1f4920 08:03:45 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975169a029d", 0x8, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2211.793987][T17293] current_req=0000000000000000 [ 2211.800715][T17293] command_status=-1 [ 2211.805804][T17293] [ 2211.807112][T21561] loop0: detected capacity change from 0 to 87 [ 2211.818617][T17293] floppy1: floppy timeout called [ 2211.829997][T17293] [ 2211.834188][T17293] floppy driver state [ 2211.839657][T17293] ------------------- [ 2211.844803][T17293] now=4295158029 last interrupt=4295141312 diff=16717 last called handler=recal_interrupt [ 2211.845869][T21563] loop3: detected capacity change from 0 to 87 [ 2211.857431][T17293] timeout_message=lock fdc [ 2211.872801][T17293] last output bytes: [ 2211.878142][T17293] 0 90 4295139496 [ 2211.883048][T17293] 1 90 4295139496 [ 2211.887998][T17293] 2 90 4295139496 [ 2211.892953][T17293] 24 90 4295139496 [ 2211.897452][T17293] 1b 90 4295139496 [ 2211.904386][T17293] ff 90 4295139496 [ 2211.911007][T17293] 12 80 4295141312 [ 2211.915830][T17293] 3 90 4295141312 [ 2211.924243][T17293] 13 80 4295141312 [ 2211.930686][T17293] 0 90 4295141312 [ 2211.936840][T17293] 1a 90 4295141312 [ 2211.948328][T17293] 0 90 4295141312 [ 2211.954380][T17293] 3 80 4295141312 08:03:45 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975169a029d", 0x8, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2211.969373][T17293] a1 90 4295141312 [ 2211.974082][T17293] 1e 90 4295141312 [ 2211.983936][T17293] 7 80 4295141312 [ 2211.990735][T17293] 1 90 4295141312 [ 2211.995969][T17293] 8 80 4295141312 [ 2212.001677][T17293] 4 80 4295141312 [ 2212.006535][T17293] 1 90 4295141312 [ 2212.013575][T17293] last result at 4295141492 [ 2212.019848][T21566] loop3: detected capacity change from 0 to 87 [ 2212.019870][T17293] last redo_fd_request at 4295158027 [ 2212.044618][T17293] status=80 [ 2212.047799][T17293] fdc_busy=1 [ 2212.052066][T17293] floppy_work.func=floppy_work_workfn [ 2212.059827][T17293] cont=ffffffff8a1f4920 [ 2212.065394][T17293] current_req=0000000000000000 [ 2212.071738][T17293] command_status=-1 [ 2212.076586][T17293] [ 2212.079720][T17293] floppy1: floppy timeout called [ 2212.102095][ T3758] [ 2212.105043][ T3758] floppy driver state 08:03:45 executing program 2: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) ioctl$FLOPPY_FDFMTEND(0xffffffffffffffff, 0x249) [ 2212.110651][ T3758] ------------------- 08:03:45 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:45 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2212.116003][ T3758] now=4295158056 last interrupt=4295141312 diff=16744 last called handler=recal_interrupt [ 2212.130803][ T3758] timeout_message=lock fdc [ 2212.136540][ T3758] last output bytes: [ 2212.142475][ T3758] 0 90 4295139496 [ 2212.143482][T21568] loop0: detected capacity change from 0 to 87 [ 2212.147025][ T3758] 1 90 4295139496 [ 2212.147047][ T3758] 2 90 4295139496 [ 2212.147063][ T3758] 24 90 4295139496 [ 2212.147079][ T3758] 1b 90 4295139496 [ 2212.147094][ T3758] ff 90 4295139496 [ 2212.147110][ T3758] 12 80 4295141312 [ 2212.147126][ T3758] 3 90 4295141312 08:03:45 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975169a029d", 0x8, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2212.147141][ T3758] 13 80 4295141312 [ 2212.147157][ T3758] 0 90 4295141312 [ 2212.202776][ T3758] 1a 90 4295141312 [ 2212.207548][ T3758] 0 90 4295141312 [ 2212.213441][ T3758] 3 80 4295141312 [ 2212.219032][ T3758] a1 90 4295141312 [ 2212.222617][T21574] loop3: detected capacity change from 0 to 87 [ 2212.224055][ T3758] 1e 90 4295141312 [ 2212.241151][ T3758] 7 80 4295141312 [ 2212.251054][ T3758] 1 90 4295141312 [ 2212.256125][ T3758] 8 80 4295141312 [ 2212.261222][ T3758] 4 80 4295141312 [ 2212.266087][ T3758] 1 90 4295141312 [ 2212.271731][ T3758] last result at 4295141492 [ 2212.277751][ T3758] last redo_fd_request at 4295158053 [ 2212.284667][ T3758] status=80 [ 2212.288940][ T3758] fdc_busy=1 08:03:45 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2212.293250][ T3758] floppy_work.func=floppy_work_workfn [ 2212.301679][ T3758] cont=ffffffff8a1f4920 [ 2212.307243][ T3758] current_req=0000000000000000 [ 2212.318331][ T3758] command_status=-1 [ 2212.324183][ T3758] [ 2212.327461][ T3758] floppy1: floppy timeout called [ 2212.334672][ T3758] [ 2212.337331][ T3758] floppy driver state [ 2212.343475][ T3758] ------------------- [ 2212.349038][ T3758] now=4295158080 last interrupt=4295141312 diff=16768 last called handler=recal_interrupt 08:03:45 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975169a029d1e", 0x9}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2212.387742][ T3758] timeout_message=lock fdc [ 2212.394631][ T3758] last output bytes: [ 2212.400509][ T3758] 0 90 4295139496 [ 2212.406085][ T3758] 1 90 4295139496 [ 2212.407022][T21580] loop3: detected capacity change from 0 to 87 [ 2212.414029][ T3758] 2 90 4295139496 [ 2212.419272][T21581] loop0: detected capacity change from 0 to 87 [ 2212.423151][ T3758] 24 90 4295139496 [ 2212.439539][ T3758] 1b 90 4295139496 [ 2212.446169][ T3758] ff 90 4295139496 [ 2212.452052][ T3758] 12 80 4295141312 [ 2212.456926][ T3758] 3 90 4295141312 [ 2212.462613][ T3758] 13 80 4295141312 [ 2212.467985][ T3758] 0 90 4295141312 [ 2212.473445][ T3758] 1a 90 4295141312 [ 2212.478124][ T3758] 0 90 4295141312 [ 2212.482578][ T3758] 3 80 4295141312 [ 2212.486931][ T3758] a1 90 4295141312 [ 2212.491491][ T3758] 1e 90 4295141312 [ 2212.495948][ T3758] 7 80 4295141312 [ 2212.511532][ T3758] 1 90 4295141312 08:03:45 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2212.515945][ T3758] 8 80 4295141312 [ 2212.521206][ T3758] 4 80 4295141312 [ 2212.525716][ T3758] 1 90 4295141312 [ 2212.530027][ T3758] last result at 4295141492 [ 2212.535609][ T3758] last redo_fd_request at 4295158078 [ 2212.541473][ T3758] status=80 08:03:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975169a029d1e", 0x9}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2212.544759][ T3758] fdc_busy=1 [ 2212.549338][ T3758] floppy_work.func=floppy_work_workfn [ 2212.556274][ T3758] cont=ffffffff8a1f4920 [ 2212.562357][ T3758] current_req=0000000000000000 [ 2212.569168][ T3758] command_status=-1 [ 2212.574774][ T3758] [ 2212.578358][ T3758] floppy1: floppy timeout called [ 2212.597086][T21583] loop3: detected capacity change from 0 to 87 [ 2212.606007][ T3758] [ 2212.609529][ T3758] floppy driver state [ 2212.615340][ T3758] ------------------- [ 2212.621732][ T3758] now=4295158107 last interrupt=4295141312 diff=16795 last called handler=recal_interrupt [ 2212.635277][ T3758] timeout_message=lock fdc [ 2212.642043][ T3758] last output bytes: [ 2212.647480][ T3758] 0 90 4295139496 [ 2212.653319][ T3758] 1 90 4295139496 [ 2212.658801][ T3758] 2 90 4295139496 [ 2212.663625][ T3758] 24 90 4295139496 [ 2212.666548][T21585] loop0: detected capacity change from 0 to 87 [ 2212.669036][ T3758] 1b 90 4295139496 [ 2212.683305][ T3758] ff 90 4295139496 [ 2212.688921][ T3758] 12 80 4295141312 [ 2212.694226][ T3758] 3 90 4295141312 [ 2212.698840][ T3758] 13 80 4295141312 [ 2212.703034][ T3758] 0 90 4295141312 [ 2212.707115][ T3758] 1a 90 4295141312 [ 2212.711686][ T3758] 0 90 4295141312 [ 2212.715822][ T3758] 3 80 4295141312 [ 2212.720255][ T3758] a1 90 4295141312 [ 2212.724711][ T3758] 1e 90 4295141312 [ 2212.728679][ T3758] 7 80 4295141312 [ 2212.759598][ T3758] 1 90 4295141312 [ 2212.764533][ T3758] 8 80 4295141312 [ 2212.770327][ T3758] 4 80 4295141312 [ 2212.775311][ T3758] 1 90 4295141312 [ 2212.780444][ T3758] last result at 4295141492 [ 2212.785137][ T3758] last redo_fd_request at 4295158103 [ 2212.791315][ T3758] status=80 [ 2212.794960][ T3758] fdc_busy=1 [ 2212.799617][ T3758] floppy_work.func=floppy_work_workfn [ 2212.807338][ T3758] cont=ffffffff8a1f4920 [ 2212.813420][ T3758] current_req=0000000000000000 [ 2212.819922][ T3758] command_status=-1 [ 2212.824788][ T3758] [ 2212.828836][ T3758] floppy1: floppy timeout called [ 2212.836526][T13101] [ 2212.840439][T13101] floppy driver state [ 2212.845818][T13101] ------------------- [ 2212.851141][T13101] now=4295158130 last interrupt=4295141312 diff=16818 last called handler=recal_interrupt [ 2212.863581][T13101] timeout_message=lock fdc [ 2212.869671][T13101] last output bytes: [ 2212.874734][T13101] 0 90 4295139496 [ 2212.879692][T13101] 1 90 4295139496 [ 2212.884639][T13101] 2 90 4295139496 [ 2212.889473][T13101] 24 90 4295139496 [ 2212.894207][T13101] 1b 90 4295139496 [ 2212.898926][T13101] ff 90 4295139496 [ 2212.903831][T13101] 12 80 4295141312 [ 2212.908723][T13101] 3 90 4295141312 [ 2212.913586][T13101] 13 80 4295141312 [ 2212.918677][T13101] 0 90 4295141312 [ 2212.923675][T13101] 1a 90 4295141312 [ 2212.930019][T13101] 0 90 4295141312 [ 2212.935447][T13101] 3 80 4295141312 [ 2212.940543][T13101] a1 90 4295141312 [ 2212.945307][T13101] 1e 90 4295141312 [ 2212.950377][T13101] 7 80 4295141312 [ 2212.955082][T13101] 1 90 4295141312 [ 2212.960325][T13101] 8 80 4295141312 [ 2212.965212][T13101] 4 80 4295141312 [ 2212.970005][T13101] 1 90 4295141312 [ 2212.974980][T13101] last result at 4295141492 [ 2212.981022][T13101] last redo_fd_request at 4295158128 [ 2212.987995][T13101] status=80 [ 2212.992226][T13101] fdc_busy=1 [ 2212.996435][T13101] floppy_work.func=floppy_work_workfn [ 2213.003547][T13101] cont=ffffffff8a1f4920 [ 2213.009106][T13101] current_req=0000000000000000 [ 2213.015236][T13101] command_status=-1 [ 2213.020339][T13101] [ 2213.025020][T13101] floppy1: floppy timeout called [ 2213.046341][T13101] 08:03:46 executing program 2: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x0) r0 = syz_open_procfs(0x0, 0x0) renameat(r0, &(0x7f0000000140)='./cgroup\x00', r0, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca", @ANYRES16, @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x2) ioctl$FLOPPY_FDFMTEND(r0, 0x249) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) pread64(r1, &(0x7f0000000200)=""/95, 0x5f, 0xff) r2 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4004) [ 2213.058135][T13101] floppy driver state 08:03:46 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(0x0, 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 08:03:46 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975169a029d1e", 0x9}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2213.064171][T13101] ------------------- [ 2213.084047][T21591] loop0: detected capacity change from 0 to 87 [ 2213.084545][T21590] loop3: detected capacity change from 0 to 87 [ 2213.088252][T13101] now=4295158153 last interrupt=4295141312 diff=16841 last called handler=recal_interrupt [ 2213.088313][T13101] timeout_message=lock fdc [ 2213.088324][T13101] last output bytes: [ 2213.088332][T13101] 0 90 4295139496 08:03:46 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(0x0, 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2213.088354][T13101] 1 90 4295139496 [ 2213.088368][T13101] 2 90 4295139496 [ 2213.088383][T13101] 24 90 4295139496 [ 2213.088399][T13101] 1b 90 4295139496 [ 2213.088413][T13101] ff 90 4295139496 [ 2213.088427][T13101] 12 80 4295141312 [ 2213.088442][T13101] 3 90 4295141312 [ 2213.088456][T13101] 13 80 4295141312 [ 2213.088470][T13101] 0 90 4295141312 [ 2213.088484][T13101] 1a 90 4295141312 [ 2213.088498][T13101] 0 90 4295141312 [ 2213.088511][T13101] 3 80 4295141312 [ 2213.088524][T13101] a1 90 4295141312 [ 2213.088539][T13101] 1e 90 4295141312 [ 2213.088553][T13101] 7 80 4295141312 [ 2213.088567][T13101] 1 90 4295141312 [ 2213.088581][T13101] 8 80 4295141312 [ 2213.088595][T13101] 4 80 4295141312 [ 2213.088609][T13101] 1 90 4295141312 [ 2213.088624][T13101] last result at 4295141492 [ 2213.088635][T13101] last redo_fd_request at 4295158148 [ 2213.088712][T13101] status=80 [ 2213.088726][T13101] fdc_busy=1 [ 2213.088736][T13101] floppy_work.func=floppy_work_workfn [ 2213.088760][T13101] cont=ffffffff8a1f4920 [ 2213.088809][T13101] current_req=0000000000000000 [ 2213.088822][T13101] command_status=-1 [ 2213.088832][T13101] [ 2213.088913][T13101] floppy1: floppy timeout called [ 2213.126824][T13101] [ 2213.285605][T13101] floppy driver state [ 2213.292911][T13101] ------------------- [ 2213.297618][T13101] now=4295158174 last interrupt=4295141312 diff=16862 last called handler=recal_interrupt [ 2213.316657][T13101] timeout_message=lock fdc [ 2213.321835][T13101] last output bytes: [ 2213.326454][T13101] 0 90 4295139496 [ 2213.331606][T13101] 1 90 4295139496 [ 2213.347953][T13101] 2 90 4295139496 [ 2213.352984][T13101] 24 90 4295139496 [ 2213.358317][T13101] 1b 90 4295139496 [ 2213.363404][T13101] ff 90 4295139496 [ 2213.368618][T13101] 12 80 4295141312 [ 2213.373225][T13101] 3 90 4295141312 [ 2213.378686][T13101] 13 80 4295141312 [ 2213.383196][T13101] 0 90 4295141312 [ 2213.395595][T13101] 1a 90 4295141312 08:03:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975169a029d1e", 0x9, 0x8}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2213.400586][T13101] 0 90 4295141312 [ 2213.406299][T13101] 3 80 4295141312 [ 2213.416986][T13101] a1 90 4295141312 [ 2213.422113][T13101] 1e 90 4295141312 [ 2213.423708][T21596] loop0: detected capacity change from 0 to 87 [ 2213.426824][T13101] 7 80 4295141312 [ 2213.446232][T13101] 1 90 4295141312 [ 2213.447080][T21598] loop3: detected capacity change from 0 to 87 [ 2213.451153][T13101] 8 80 4295141312 [ 2213.469558][T21598] FAT-fs (loop3): invalid media value (0x00) [ 2213.471463][T13101] 4 80 4295141312 [ 2213.477280][T21598] FAT-fs (loop3): Can't find a valid FAT filesystem 08:03:46 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(0x0, 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2213.484854][T13101] 1 90 4295141312 [ 2213.495306][T13101] last result at 4295141492 [ 2213.511036][T13101] last redo_fd_request at 4295158154 [ 2213.518573][T13101] status=80 [ 2213.522872][T13101] fdc_busy=1 [ 2213.526972][T13101] floppy_work.func=floppy_work_workfn [ 2213.533625][T13101] cont=ffffffff8a1f4920 [ 2213.538878][T13101] current_req=0000000000000000 [ 2213.544680][T13101] command_status=-1 [ 2213.549517][T13101] [ 2213.552462][T13101] floppy1: floppy timeout called [ 2213.563763][T17293] [ 2213.567192][T17293] floppy driver state [ 2213.583364][T17293] ------------------- [ 2213.589164][T17293] now=4295158204 last interrupt=4295141312 diff=16892 last called handler=recal_interrupt [ 2213.601065][T17293] timeout_message=lock fdc 08:03:47 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d", 0x8, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2213.605188][T17293] last output bytes: [ 2213.610719][T17293] 0 90 4295139496 [ 2213.615203][T17293] 1 90 4295139496 [ 2213.622538][T17293] 2 90 4295139496 [ 2213.626893][T17293] 24 90 4295139496 [ 2213.632509][T17293] 1b 90 4295139496 [ 2213.637626][T17293] ff 90 4295139496 08:03:47 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975169a029d1e", 0x9, 0x8}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2213.645653][T21602] loop2: detected capacity change from 0 to 87 [ 2213.649261][T21603] loop0: detected capacity change from 0 to 87 [ 2213.655172][T17293] 12 80 4295141312 [ 2213.667786][T17293] 3 90 4295141312 [ 2213.673034][T17293] 13 80 4295141312 [ 2213.675414][T21605] loop3: detected capacity change from 0 to 87 [ 2213.683566][T17293] 0 90 4295141312 [ 2213.690855][T17293] 1a 90 4295141312 [ 2213.692156][T21605] FAT-fs (loop3): invalid media value (0x00) [ 2213.695327][T17293] 0 90 4295141312 [ 2213.695340][T17293] 3 80 4295141312 [ 2213.695349][T17293] a1 90 4295141312 [ 2213.695357][T17293] 1e 90 4295141312 [ 2213.695366][T17293] 7 80 4295141312 [ 2213.695374][T17293] 1 90 4295141312 [ 2213.695382][T17293] 8 80 4295141312 [ 2213.695390][T17293] 4 80 4295141312 [ 2213.695399][T17293] 1 90 4295141312 [ 2213.695407][T17293] last result at 4295141492 [ 2213.695413][T17293] last redo_fd_request at 4295158201 08:03:47 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2213.695457][T17293] status=80 [ 2213.695467][T17293] fdc_busy=1 [ 2213.705938][T21605] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2213.718019][T17293] floppy_work.func=floppy_work_workfn [ 2213.786776][T17293] cont=ffffffff8a1f4920 [ 2213.792381][T17293] current_req=0000000000000000 [ 2213.798067][T17293] command_status=-1 [ 2213.803091][T17293] [ 2213.806087][T17293] floppy1: floppy timeout called [ 2213.845075][T17293] [ 2213.848748][T17293] floppy driver state [ 2213.853561][T17293] ------------------- [ 2213.858613][T17293] now=4295158231 last interrupt=4295141312 diff=16919 last called handler=recal_interrupt [ 2213.869418][T17293] timeout_message=lock fdc [ 2213.889164][T17293] last output bytes: [ 2213.892904][T17293] 0 90 4295139496 [ 2213.896315][T17293] 1 90 4295139496 [ 2213.913223][T17293] 2 90 4295139496 [ 2213.916961][T17293] 24 90 4295139496 [ 2213.922009][T17293] 1b 90 4295139496 [ 2213.926313][T17293] ff 90 4295139496 [ 2213.932431][T17293] 12 80 4295141312 [ 2213.957071][T17293] 3 90 4295141312 [ 2213.958401][T21607] loop0: detected capacity change from 0 to 87 [ 2213.964572][T17293] 13 80 4295141312 [ 2213.977041][T17293] 0 90 4295141312 [ 2214.005860][T21611] loop3: detected capacity change from 0 to 87 [ 2214.013324][T21613] loop2: detected capacity change from 0 to 87 08:03:47 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d", 0x8, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:47 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:47 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975169a029d1e", 0x9, 0x8}], 0x0, &(0x7f0000000080)=ANY=[]) [ 2214.018112][T17293] 1a 90 4295141312 [ 2214.028021][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 2214.028039][ T37] audit: type=1804 audit(1638173027.495:899): pid=21607 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1410/file1/bus" dev="loop0" ino=1048752 res=1 errno=0 [ 2214.042000][T17293] 0 90 4295141312 [ 2214.078506][T21611] FAT-fs (loop3): invalid media value (0x00) [ 2214.084794][T17293] 3 80 4295141312 [ 2214.086338][T21611] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2214.094989][T17293] a1 90 4295141312 [ 2214.111420][T17293] 1e 90 4295141312 [ 2214.116009][T17293] 7 80 4295141312 [ 2214.120770][T17293] 1 90 4295141312 [ 2214.125493][T17293] 8 80 4295141312 [ 2214.130794][T17293] 4 80 4295141312 [ 2214.135225][T17293] 1 90 4295141312 [ 2214.140803][T17293] last result at 4295141492 [ 2214.147099][T17293] last redo_fd_request at 4295158226 [ 2214.154610][T17293] status=80 [ 2214.158999][T17293] fdc_busy=1 [ 2214.163331][T17293] floppy_work.func=floppy_work_workfn [ 2214.170578][T17293] cont=ffffffff8a1f4920 [ 2214.175901][T17293] current_req=0000000000000000 [ 2214.181881][T17293] command_status=-1 [ 2214.186213][T17293] [ 2214.189491][T17293] floppy1: floppy timeout called [ 2214.212638][ T3758] [ 2214.215562][ T3758] floppy driver state [ 2214.221059][ T3758] ------------------- [ 2214.226208][ T3758] now=4295158267 last interrupt=4295141312 diff=16955 last called handler=recal_interrupt [ 2214.250106][ T3758] timeout_message=lock fdc [ 2214.262189][ T3758] last output bytes: [ 2214.268960][ T3758] 0 90 4295139496 [ 2214.275382][ T3758] 1 90 4295139496 [ 2214.281372][ T3758] 2 90 4295139496 [ 2214.287004][ T3758] 24 90 4295139496 [ 2214.295697][ T3758] 1b 90 4295139496 [ 2214.302262][ T3758] ff 90 4295139496 [ 2214.308469][ T3758] 12 80 4295141312 [ 2214.313973][ T3758] 3 90 4295141312 [ 2214.318482][ T3758] 13 80 4295141312 [ 2214.325034][ T3758] 0 90 4295141312 [ 2214.348006][ T3758] 1a 90 4295141312 [ 2214.361057][ T3758] 0 90 4295141312 [ 2214.368738][T21617] loop2: detected capacity change from 0 to 87 [ 2214.370173][T21619] loop3: detected capacity change from 0 to 87 [ 2214.379020][ T3758] 3 80 4295141312 08:03:47 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d", 0x8, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:47 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975169a029d1e", 0x9, 0x8}], 0x18000, 0x0) 08:03:47 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2214.399808][ T3758] a1 90 4295141312 [ 2214.405493][ T3758] 1e 90 4295141312 [ 2214.411437][ T3758] 7 80 4295141312 [ 2214.416681][ T3758] 1 90 4295141312 [ 2214.437300][ T3758] 8 80 4295141312 [ 2214.445823][ T3758] 4 80 4295141312 [ 2214.451357][ T3758] 1 90 4295141312 [ 2214.456639][ T3758] last result at 4295141492 [ 2214.463359][ T3758] last redo_fd_request at 4295158264 [ 2214.471079][ T3758] status=80 [ 2214.475513][ T3758] fdc_busy=1 [ 2214.481503][ T3758] floppy_work.func=floppy_work_workfn [ 2214.489639][ T3758] cont=ffffffff8a1f4960 [ 2214.496387][ T3758] current_req=0000000000000000 [ 2214.512007][ T3758] command_status=-1 [ 2214.520190][ T3758] [ 2214.525665][ T3758] floppy1: floppy timeout called [ 2214.534403][ T3758] floppy.c: no request in request_done [ 2214.562563][ T3758] [ 2214.567467][ T3758] floppy driver state [ 2214.576825][ T3758] ------------------- [ 2214.583274][ T3758] now=4295158303 last interrupt=4295141312 diff=16991 last called handler=recal_interrupt [ 2214.594997][ T3758] timeout_message=lock fdc [ 2214.601637][ T3758] last output bytes: [ 2214.610264][ T3758] 0 90 4295139496 [ 2214.616755][ T3758] 1 90 4295139496 [ 2214.624204][ T3758] 2 90 4295139496 [ 2214.630929][ T3758] 24 90 4295139496 [ 2214.635878][ T3758] 1b 90 4295139496 [ 2214.639997][ T3758] ff 90 4295139496 [ 2214.644485][ T3758] 12 80 4295141312 [ 2214.649534][ T3758] 3 90 4295141312 [ 2214.653785][ T3758] 13 80 4295141312 [ 2214.658501][ T3758] 0 90 4295141312 [ 2214.669926][ T3758] 1a 90 4295141312 08:03:48 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975169a029d1e", 0x9, 0x8}], 0x18000, 0x0) [ 2214.678344][T21623] loop3: detected capacity change from 0 to 87 [ 2214.688077][ T3758] 0 90 4295141312 [ 2214.693250][ T3758] 3 80 4295141312 [ 2214.698107][ T3758] a1 90 4295141312 [ 2214.702666][ T3758] 1e 90 4295141312 [ 2214.706503][ T3758] 7 80 4295141312 [ 2214.710583][ T3758] 1 90 4295141312 [ 2214.714953][ T3758] 8 80 4295141312 [ 2214.719504][ T3758] 4 80 4295141312 [ 2214.723772][ T3758] 1 90 4295141312 [ 2214.727556][ T3758] last result at 4295141492 08:03:48 executing program 2: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d", 0x8, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2214.734639][ T3758] last redo_fd_request at 4295158299 [ 2214.742324][ T3758] status=80 [ 2214.745419][ T3758] fdc_busy=1 [ 2214.750310][T21625] loop2: detected capacity change from 0 to 87 [ 2214.759084][ T3758] floppy_work.func=floppy_work_workfn [ 2214.767605][ T3758] cont=ffffffff8a1f4920 [ 2214.773766][ T3758] current_req=0000000000000000 [ 2214.779690][ T3758] command_status=-1 [ 2214.784461][ T3758] [ 2214.787760][ T3758] floppy1: floppy timeout called [ 2214.798169][ T3758] [ 2214.806878][ T3758] floppy driver state [ 2214.812402][ T3758] ------------------- [ 2214.830185][ T3758] now=4295158328 last interrupt=4295141312 diff=17016 last called handler=recal_interrupt [ 2214.870703][ T3758] timeout_message=lock fdc [ 2214.879576][ T3758] last output bytes: [ 2214.886309][ T3758] 0 90 4295139496 [ 2214.895584][ T3758] 1 90 4295139496 [ 2214.904735][ T3758] 2 90 4295139496 08:03:48 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 2214.938521][ T3758] 24 90 4295139496 [ 2214.968904][ T3758] 1b 90 4295139496 08:03:48 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2214.973757][ T3758] ff 90 4295139496 08:03:48 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975169a029d1e", 0x9, 0x8}], 0x18000, 0x0) 08:03:48 executing program 2: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d", 0x8, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2214.992055][ T3758] 12 80 4295141312 [ 2214.996914][ T3758] 3 90 4295141312 [ 2214.997386][T21630] loop2: detected capacity change from 0 to 87 [ 2214.998328][T21627] loop0: detected capacity change from 0 to 87 [ 2215.014381][T21632] loop3: detected capacity change from 0 to 87 [ 2215.038446][ T3758] 13 80 4295141312 [ 2215.044363][ T3758] 0 90 4295141312 [ 2215.053695][ T3758] 1a 90 4295141312 [ 2215.068729][ T3758] 0 90 4295141312 [ 2215.082596][ T3758] 3 80 4295141312 [ 2215.088976][ T3758] a1 90 4295141312 [ 2215.093375][ T37] audit: type=1804 audit(1638173028.565:900): pid=21627 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1411/file1/bus" dev="loop0" ino=1048753 res=1 errno=0 [ 2215.095162][ T3758] 1e 90 4295141312 [ 2215.129378][ T3758] 7 80 4295141312 [ 2215.152903][ T3758] 1 90 4295141312 [ 2215.167647][ T3758] 8 80 4295141312 [ 2215.180065][ T3758] 4 80 4295141312 [ 2215.201451][ T3758] 1 90 4295141312 [ 2215.249217][ T3758] last result at 4295141492 [ 2215.256102][ T3758] last redo_fd_request at 4295158324 [ 2215.276159][ T3758] status=80 [ 2215.281262][ T3758] fdc_busy=1 [ 2215.286518][ T3758] floppy_work.func=floppy_work_workfn [ 2215.307967][ T3758] cont=ffffffff8a1f4920 [ 2215.314759][ T3758] current_req=0000000000000000 [ 2215.338057][ T3758] command_status=-1 [ 2215.344097][ T3758] [ 2215.358026][ T3758] floppy1: floppy timeout called [ 2215.369602][ T3758] [ 2215.372759][ T3758] floppy driver state [ 2215.407175][ T3758] ------------------- [ 2215.419718][ T3758] now=4295158387 last interrupt=4295141312 diff=17075 last called handler=recal_interrupt [ 2215.453841][ T3758] timeout_message=lock fdc [ 2215.478614][ T3758] last output bytes: [ 2215.486721][ T3758] 0 90 4295139496 [ 2215.493227][ T3758] 1 90 4295139496 [ 2215.520154][ T3758] 2 90 4295139496 [ 2215.524494][ T3758] 24 90 4295139496 [ 2215.539725][ T3758] 1b 90 4295139496 [ 2215.574789][ T3758] ff 90 4295139496 [ 2215.598906][ T3758] 12 80 4295141312 [ 2215.607958][ T3758] 3 90 4295141312 [ 2215.614502][ T3758] 13 80 4295141312 [ 2215.639670][ T3758] 0 90 4295141312 [ 2215.648163][ T3758] 1a 90 4295141312 [ 2215.653821][ T3758] 0 90 4295141312 [ 2215.669608][ T3758] 3 80 4295141312 [ 2215.689757][ T3758] a1 90 4295141312 [ 2215.696589][ T3758] 1e 90 4295141312 [ 2215.720047][ T3758] 7 80 4295141312 [ 2215.727064][ T3758] 1 90 4295141312 [ 2215.733487][ T3758] 8 80 4295141312 08:03:48 executing program 2: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d", 0x8, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2215.759519][ T3758] 4 80 4295141312 [ 2215.765109][ T3758] 1 90 4295141312 [ 2215.789743][ T3758] last result at 4295141492 [ 2215.826441][ T3758] last redo_fd_request at 4295158381 [ 2215.840086][ T3758] status=80 [ 2215.847807][ T3758] fdc_busy=1 [ 2215.852452][ T3758] floppy_work.func=floppy_work_workfn [ 2215.861810][ T3758] cont=ffffffff8a1f4920 [ 2215.867211][ T3758] current_req=0000000000000000 [ 2215.873695][ T3758] command_status=-1 [ 2215.881889][ T3758] [ 2215.914381][ T3758] floppy1: floppy timeout called [ 2215.926240][T21636] loop2: detected capacity change from 0 to 87 [ 2215.950983][T17293] [ 2215.954853][T17293] floppy driver state [ 2215.977953][T17293] ------------------- [ 2215.986575][T17293] now=4295158443 last interrupt=4295141312 diff=17131 last called handler=recal_interrupt 08:03:49 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 08:03:49 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975169a029d1e", 0x9, 0x8}], 0x0, &(0x7f0000000080)=ANY=[]) 08:03:49 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2216.025627][T21639] loop3: detected capacity change from 0 to 87 [ 2216.038197][T17293] timeout_message=lock fdc [ 2216.044859][T17293] last output bytes: [ 2216.049103][T21640] loop0: detected capacity change from 0 to 87 [ 2216.058274][T17293] 0 90 4295139496 08:03:49 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d", 0x8, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2216.065391][T17293] 1 90 4295139496 [ 2216.079324][T21639] FAT-fs (loop3): invalid media value (0x00) [ 2216.098201][T21639] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2216.107974][T17293] 2 90 4295139496 [ 2216.114044][T17293] 24 90 4295139496 [ 2216.120368][T17293] 1b 90 4295139496 [ 2216.125707][T17293] ff 90 4295139496 [ 2216.130508][T17293] 12 80 4295141312 [ 2216.135370][T17293] 3 90 4295141312 [ 2216.136648][ T37] audit: type=1804 audit(1638173029.605:901): pid=21640 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1412/file1/bus" dev="loop0" ino=1048754 res=1 errno=0 [ 2216.168172][T17293] 13 80 4295141312 [ 2216.188216][T17293] 0 90 4295141312 [ 2216.193201][T17293] 1a 90 4295141312 [ 2216.194720][T21645] loop2: detected capacity change from 0 to 87 [ 2216.207052][T17293] 0 90 4295141312 [ 2216.212549][T17293] 3 80 4295141312 [ 2216.217621][T17293] a1 90 4295141312 [ 2216.223187][T17293] 1e 90 4295141312 [ 2216.228981][T17293] 7 80 4295141312 [ 2216.240771][T17293] 1 90 4295141312 [ 2216.261018][T17293] 8 80 4295141312 [ 2216.266575][T17293] 4 80 4295141312 [ 2216.271872][T17293] 1 90 4295141312 [ 2216.276869][T17293] last result at 4295141492 [ 2216.283271][T17293] last redo_fd_request at 4295158437 [ 2216.290882][T17293] status=80 [ 2216.295139][T17293] fdc_busy=1 [ 2216.300246][T17293] floppy_work.func=floppy_work_workfn [ 2216.335182][T17293] cont=ffffffff8a1f4920 [ 2216.357969][T17293] current_req=0000000000000000 [ 2216.365070][T17293] command_status=-1 [ 2216.381459][T17293] [ 2216.384956][T17293] floppy1: floppy timeout called [ 2216.409471][T17293] [ 2216.412725][T17293] floppy driver state [ 2216.417626][T17293] ------------------- [ 2216.442671][T17293] now=4295158489 last interrupt=4295141312 diff=17177 last called handler=recal_interrupt [ 2216.447280][T21648] loop3: detected capacity change from 0 to 87 08:03:49 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d", 0x8, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:49 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:49 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)='m', 0x1, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2216.467292][T21649] loop2: detected capacity change from 0 to 87 [ 2216.477348][T17293] timeout_message=lock fdc [ 2216.514596][T17293] last output bytes: [ 2216.520118][T17293] 0 90 4295139496 [ 2216.524586][T17293] 1 90 4295139496 [ 2216.537475][T17293] 2 90 4295139496 [ 2216.545625][T17293] 24 90 4295139496 [ 2216.558230][T17293] 1b 90 4295139496 [ 2216.575502][T17293] ff 90 4295139496 [ 2216.584223][T17293] 12 80 4295141312 [ 2216.591416][T17293] 3 90 4295141312 [ 2216.597028][T17293] 13 80 4295141312 [ 2216.602743][T17293] 0 90 4295141312 [ 2216.607447][T17293] 1a 90 4295141312 [ 2216.613114][T17293] 0 90 4295141312 [ 2216.619013][T17293] 3 80 4295141312 [ 2216.624100][T17293] a1 90 4295141312 [ 2216.630829][T17293] 1e 90 4295141312 [ 2216.635817][T17293] 7 80 4295141312 [ 2216.640852][T17293] 1 90 4295141312 [ 2216.646678][T17293] 8 80 4295141312 [ 2216.651541][T17293] 4 80 4295141312 [ 2216.657490][T17293] 1 90 4295141312 [ 2216.664165][T17293] last result at 4295141492 [ 2216.672516][T17293] last redo_fd_request at 4295158484 [ 2216.680905][T17293] status=80 [ 2216.685449][T17293] fdc_busy=1 [ 2216.692591][T17293] floppy_work.func=floppy_work_workfn [ 2216.703382][T17293] cont=ffffffff8a1f4920 [ 2216.711972][T17293] current_req=0000000000000000 [ 2216.724882][T17293] command_status=-1 [ 2216.737650][T17293] [ 2216.741799][T17293] floppy1: floppy timeout called [ 2216.756088][T17293] [ 2216.772417][T17293] floppy driver state [ 2216.780870][T17293] ------------------- [ 2216.788475][T17293] now=4295158524 last interrupt=4295141312 diff=17212 last called handler=recal_interrupt [ 2216.805467][T17293] timeout_message=lock fdc [ 2216.816061][T17293] last output bytes: [ 2216.824401][T17293] 0 90 4295139496 [ 2216.829405][T17293] 1 90 4295139496 [ 2216.835309][T17293] 2 90 4295139496 [ 2216.847536][T17293] 24 90 4295139496 [ 2216.853750][T17293] 1b 90 4295139496 [ 2216.862368][T17293] ff 90 4295139496 [ 2216.872154][T17293] 12 80 4295141312 [ 2216.886532][T17293] 3 90 4295141312 [ 2216.896972][T17293] 13 80 4295141312 [ 2216.906951][T17293] 0 90 4295141312 [ 2216.916576][T17293] 1a 90 4295141312 08:03:50 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2216.931579][T17293] 0 90 4295141312 [ 2216.936995][T17293] 3 80 4295141312 [ 2216.946242][T17293] a1 90 4295141312 [ 2216.957145][T17293] 1e 90 4295141312 [ 2216.972952][T17293] 7 80 4295141312 [ 2216.998110][T17293] 1 90 4295141312 [ 2217.018032][T17293] 8 80 4295141312 08:03:50 executing program 3: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2217.023603][T17293] 4 80 4295141312 08:03:50 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), 0x0, 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d", 0x8, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2217.036453][T17293] 1 90 4295141312 [ 2217.058107][T17293] last result at 4295141492 [ 2217.065588][T21659] loop2: detected capacity change from 0 to 87 [ 2217.074741][T17293] last redo_fd_request at 4295158520 [ 2217.081431][T17293] status=80 08:03:50 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) [ 2217.085546][T17293] fdc_busy=1 [ 2217.089877][T17293] floppy_work.func=floppy_work_workfn [ 2217.115689][T17293] cont=ffffffff8a1f4920 [ 2217.116177][T21662] loop0: detected capacity change from 0 to 87 [ 2217.127121][T17293] current_req=0000000000000000 [ 2217.152856][T17293] command_status=-1 [ 2217.160997][T17293] [ 2217.164430][T17293] floppy1: floppy timeout called [ 2217.174860][ T37] audit: type=1804 audit(1638173030.645:902): pid=21662 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1413/file1/bus" dev="loop0" ino=1048755 res=1 errno=0 [ 2217.227482][ T37] audit: type=1800 audit(1638173030.645:903): pid=21662 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048755 res=0 errno=0 [ 2217.245520][T13101] [ 2217.316195][T13101] floppy driver state [ 2217.339890][T13101] ------------------- [ 2217.351741][T13101] now=4295158580 last interrupt=4295141312 diff=17268 last called handler=recal_interrupt [ 2217.375760][T13101] timeout_message=lock fdc 08:03:50 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:50 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d", 0x8, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:50 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) 08:03:50 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) [ 2217.381831][T13101] last output bytes: [ 2217.390136][T13101] 0 90 4295139496 [ 2217.395026][T13101] 1 90 4295139496 [ 2217.400192][T13101] 2 90 4295139496 [ 2217.405286][T13101] 24 90 4295139496 [ 2217.418936][T13101] 1b 90 4295139496 [ 2217.424487][T13101] ff 90 4295139496 [ 2217.434374][T21667] loop3: detected capacity change from 0 to 87 [ 2217.438680][T21669] loop0: detected capacity change from 0 to 87 [ 2217.444466][T13101] 12 80 4295141312 [ 2217.444486][T13101] 3 90 4295141312 [ 2217.444555][T13101] 13 80 4295141312 [ 2217.444572][T13101] 0 90 4295141312 [ 2217.444586][T13101] 1a 90 4295141312 [ 2217.489859][T13101] 0 90 4295141312 [ 2217.493552][T13101] 3 80 4295141312 [ 2217.499593][T13101] a1 90 4295141312 [ 2217.503862][T13101] 1e 90 4295141312 [ 2217.517186][T13101] 7 80 4295141312 [ 2217.535235][T13101] 1 90 4295141312 [ 2217.542840][T13101] 8 80 4295141312 [ 2217.549058][T13101] 4 80 4295141312 [ 2217.557027][T13101] 1 90 4295141312 [ 2217.568578][T13101] last result at 4295141492 [ 2217.576285][T13101] last redo_fd_request at 4295158567 [ 2217.578960][ T37] audit: type=1804 audit(1638173031.055:904): pid=21669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1414/file1/bus" dev="sda1" ino=1184 res=1 errno=0 [ 2217.590952][T13101] status=80 [ 2217.626697][T13101] fdc_busy=1 [ 2217.638575][T13101] floppy_work.func=floppy_work_workfn [ 2217.644883][T13101] cont=ffffffff8a1f4920 [ 2217.658973][T13101] current_req=0000000000000000 [ 2217.665858][T13101] command_status=-1 [ 2217.677543][T13101] [ 2217.681324][ T37] audit: type=1800 audit(1638173031.055:905): pid=21669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1184 res=0 errno=0 [ 2217.718003][T13101] floppy1: floppy timeout called [ 2217.736411][ T3758] [ 2217.741521][ T3758] floppy driver state [ 2217.746881][ T3758] ------------------- [ 2217.751898][ T3758] now=4295158620 last interrupt=4295141312 diff=17308 last called handler=recal_interrupt [ 2217.762656][ T3758] timeout_message=lock fdc 08:03:51 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffa) 08:03:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d", 0x8, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:51 executing program 3: r0 = syz_open_procfs(0x0, 0x0) renameat(r0, &(0x7f0000000140)='./cgroup\x00', r0, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$NBD_DO_IT(r0, 0xab03) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x0, &(0x7f0000000300), 0x200008, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) open(&(0x7f0000000080)='./file1\x00', 0x64002, 0xc5) unlink(&(0x7f0000000180)='./cgroup\x00') r2 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 2217.778337][ T3758] last output bytes: [ 2217.782585][ T3758] 0 90 4295139496 [ 2217.786899][ T3758] 1 90 4295139496 [ 2217.791491][ T3758] 2 90 4295139496 [ 2217.796787][ T3758] 24 90 4295139496 [ 2217.801261][ T3758] 1b 90 4295139496 [ 2217.805208][ T3758] ff 90 4295139496 [ 2217.809419][ T3758] 12 80 4295141312 [ 2217.814005][ T3758] 3 90 4295141312 [ 2217.818711][ T3758] 13 80 4295141312 [ 2217.823246][ T3758] 0 90 4295141312 [ 2217.829249][ T3758] 1a 90 4295141312 [ 2217.832314][T21677] loop3: detected capacity change from 0 to 87 [ 2217.833633][ T3758] 0 90 4295141312 [ 2217.833652][ T3758] 3 80 4295141312 [ 2217.833664][ T3758] a1 90 4295141312 [ 2217.833684][ T3758] 1e 90 4295141312 [ 2217.833696][ T3758] 7 80 4295141312 [ 2217.833708][ T3758] 1 90 4295141312 [ 2217.833720][ T3758] 8 80 4295141312 [ 2217.833732][ T3758] 4 80 4295141312 [ 2217.833744][ T3758] 1 90 4295141312 [ 2217.879596][T21679] loop0: detected capacity change from 0 to 87 [ 2217.882317][T21677] FAT-fs (loop3): bogus number of reserved sectors [ 2217.909262][T21677] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2217.930609][ T37] audit: type=1804 audit(1638173031.405:906): pid=21679 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1415/file1/bus" dev="loop0" ino=1048756 res=1 errno=0 [ 2217.958040][ T3758] last result at 4295141492 [ 2217.974060][ T37] audit: type=1800 audit(1638173031.405:907): pid=21679 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048756 res=0 errno=0 [ 2217.980406][ T3758] last redo_fd_request at 4295158618 [ 2218.015289][ T37] audit: type=1804 audit(1638173031.485:908): pid=21680 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir938124162/syzkaller.1iDaaV/1457/file1/bus" dev="sda1" ino=1185 res=1 errno=0 [ 2218.054336][ T3758] status=80 [ 2218.058859][ T3758] fdc_busy=1 [ 2218.070099][ T3758] floppy_work.func=floppy_work_workfn [ 2218.077358][ T3758] cont=ffffffff8a1f4920 [ 2218.084473][ T3758] current_req=0000000000000000 [ 2218.096843][ T3758] command_status=-1 [ 2218.104191][ T3758] [ 2218.111290][ T3758] floppy1: floppy timeout called [ 2218.144014][T13101] [ 2218.146936][T13101] floppy driver state [ 2218.176581][T13101] ------------------- [ 2218.183992][T13101] now=4295158663 last interrupt=4295141312 diff=17351 last called handler=recal_interrupt 08:03:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975169a029d", 0x8, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:51 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) 08:03:51 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2218.212819][T21682] loop0: detected capacity change from 0 to 87 [ 2218.236010][T13101] timeout_message=lock fdc [ 2218.242644][T13101] last output bytes: [ 2218.248791][T13101] 0 90 4295139496 [ 2218.264699][T13101] 1 90 4295139496 [ 2218.287962][T13101] 2 90 4295139496 [ 2218.291792][T13101] 24 90 4295139496 [ 2218.295194][T13101] 1b 90 4295139496 [ 2218.299537][T13101] ff 90 4295139496 [ 2218.303317][T13101] 12 80 4295141312 [ 2218.307364][T13101] 3 90 4295141312 [ 2218.330050][T13101] 13 80 4295141312 [ 2218.335234][T13101] 0 90 4295141312 [ 2218.341197][T13101] 1a 90 4295141312 [ 2218.352962][T13101] 0 90 4295141312 [ 2218.358933][T13101] 3 80 4295141312 [ 2218.365134][T13101] a1 90 4295141312 [ 2218.375953][T13101] 1e 90 4295141312 [ 2218.383600][T13101] 7 80 4295141312 [ 2218.423546][T13101] 1 90 4295141312 [ 2218.427713][T13101] 8 80 4295141312 [ 2218.448113][T13101] 4 80 4295141312 [ 2218.452587][T13101] 1 90 4295141312 [ 2218.456727][T13101] last result at 4295141492 [ 2218.463669][T13101] last redo_fd_request at 4295158657 [ 2218.465225][T21690] loop0: detected capacity change from 0 to 87 [ 2218.469963][T13101] status=80 08:03:51 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) 08:03:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x0, 0x0, 0x18000, &(0x7f0000000080)=ANY=[]) [ 2218.511393][T13101] fdc_busy=1 [ 2218.516339][T13101] floppy_work.func=floppy_work_workfn [ 2218.526511][T13101] cont=ffffffff8a1f4920 [ 2218.533300][T13101] current_req=0000000000000000 [ 2218.540824][T13101] command_status=-1 [ 2218.556661][T13101] [ 2218.563106][T13101] floppy1: floppy timeout called [ 2218.580739][T13101] [ 2218.584596][T13101] floppy driver state [ 2218.625663][T13101] ------------------- [ 2218.641921][T13101] now=4295158709 last interrupt=4295141312 diff=17397 last called handler=recal_interrupt [ 2218.666104][T13101] timeout_message=lock fdc [ 2218.690632][T13101] last output bytes: [ 2218.715458][T13101] 0 90 4295139496 [ 2218.721434][T13101] 1 90 4295139496 [ 2218.726694][T13101] 2 90 4295139496 [ 2218.748054][T13101] 24 90 4295139496 [ 2218.753989][T13101] 1b 90 4295139496 [ 2218.763914][T13101] ff 90 4295139496 [ 2218.769534][T13101] 12 80 4295141312 [ 2218.773930][T13101] 3 90 4295141312 [ 2218.779826][T13101] 13 80 4295141312 [ 2218.784705][T13101] 0 90 4295141312 [ 2218.791916][T13101] 1a 90 4295141312 08:03:52 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffa) 08:03:52 executing program 3: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x0, 0x0, 0x18000, &(0x7f0000000080)=ANY=[]) [ 2218.796665][T13101] 0 90 4295141312 [ 2218.802371][T21694] loop0: detected capacity change from 0 to 87 [ 2218.810463][T13101] 3 80 4295141312 [ 2218.814374][T13101] a1 90 4295141312 [ 2218.818683][T13101] 1e 90 4295141312 [ 2218.823692][T13101] 7 80 4295141312 [ 2218.833781][T13101] 1 90 4295141312 [ 2218.842254][T13101] 8 80 4295141312 08:03:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x0, 0x0, 0x18000, &(0x7f0000000080)=ANY=[]) [ 2218.847552][T13101] 4 80 4295141312 [ 2218.854336][T13101] 1 90 4295141312 [ 2218.858666][T13101] last result at 4295141492 [ 2218.865273][T13101] last redo_fd_request at 4295158703 [ 2218.872778][T13101] status=80 [ 2218.876661][T13101] fdc_busy=1 [ 2218.888173][T13101] floppy_work.func=floppy_work_workfn [ 2218.894135][T13101] cont=ffffffff8a1f4920 [ 2218.905772][T13101] current_req=0000000000000000 [ 2218.911383][T13101] command_status=-1 [ 2218.915351][T13101] [ 2218.924460][T13101] floppy1: floppy timeout called [ 2218.941902][T13101] [ 2218.949628][T13101] floppy driver state 08:03:52 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:52 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 2218.965956][T13101] ------------------- [ 2218.981424][T13101] now=4295158743 last interrupt=4295141312 diff=17431 last called handler=recal_interrupt [ 2219.008078][T13101] timeout_message=lock fdc [ 2219.013661][T13101] last output bytes: [ 2219.023046][T21703] loop2: detected capacity change from 0 to 87 [ 2219.035819][T13101] 0 90 4295139496 [ 2219.049868][T13101] 1 90 4295139496 [ 2219.055183][T13101] 2 90 4295139496 [ 2219.078636][T21706] loop0: detected capacity change from 0 to 87 [ 2219.083462][T13101] 24 90 4295139496 [ 2219.107949][T13101] 1b 90 4295139496 [ 2219.113958][T13101] ff 90 4295139496 [ 2219.137984][T13101] 12 80 4295141312 [ 2219.142738][T13101] 3 90 4295141312 [ 2219.148960][T13101] 13 80 4295141312 [ 2219.153989][T13101] 0 90 4295141312 [ 2219.175414][T13101] 1a 90 4295141312 [ 2219.180437][T13101] 0 90 4295141312 [ 2219.186027][T13101] 3 80 4295141312 [ 2219.192289][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 2219.192302][ T37] audit: type=1804 audit(1638173032.665:916): pid=21706 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1419/file1/bus" dev="loop0" ino=1048760 res=1 errno=0 [ 2219.213010][T13101] a1 90 4295141312 [ 2219.241847][T13101] 1e 90 4295141312 [ 2219.247780][T13101] 7 80 4295141312 [ 2219.253380][T13101] 1 90 4295141312 [ 2219.258732][T13101] 8 80 4295141312 08:03:52 executing program 3: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) creat(&(0x7f0000000240)='./file1\x00', 0x101) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) rmdir(&(0x7f0000000080)='./bus\x00') sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = syz_open_procfs(0x0, 0x0) renameat(r3, &(0x7f0000000140)='./cgroup\x00', r3, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r4 = syz_io_uring_complete(0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000280)={0xc7, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './bus\x00'}) [ 2219.267644][ T37] audit: type=1800 audit(1638173032.715:917): pid=21706 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048760 res=0 errno=0 [ 2219.278021][T13101] 4 80 4295141312 08:03:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2219.313664][T21711] loop3: detected capacity change from 0 to 87 [ 2219.326450][T13101] 1 90 4295141312 [ 2219.327779][T21712] loop2: detected capacity change from 0 to 87 [ 2219.331938][T13101] last result at 4295141492 [ 2219.344568][T13101] last redo_fd_request at 4295158738 08:03:52 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 2219.352403][T13101] status=80 [ 2219.356513][T13101] fdc_busy=1 [ 2219.360604][T13101] floppy_work.func=floppy_work_workfn [ 2219.366868][T13101] cont=ffffffff8a1f4920 [ 2219.372472][T13101] current_req=0000000000000000 [ 2219.380225][T13101] command_status=-1 [ 2219.385168][T13101] [ 2219.388885][T13101] floppy1: floppy timeout called [ 2219.449500][T13101] [ 2219.452362][T13101] floppy driver state [ 2219.458508][T21714] loop0: detected capacity change from 0 to 87 [ 2219.469761][ T37] audit: type=1804 audit(1638173032.925:918): pid=21711 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir938124162/syzkaller.1iDaaV/1459/file1/bus" dev="loop3" ino=1048761 res=1 errno=0 [ 2219.478222][T13101] ------------------- [ 2219.515562][ T37] audit: type=1800 audit(1638173032.925:919): pid=21711 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048761 res=0 errno=0 [ 2219.540944][T13101] now=4295158797 last interrupt=4295141312 diff=17485 last called handler=recal_interrupt [ 2219.561483][T21711] syz-executor.3: attempt to access beyond end of device [ 2219.561483][T21711] loop3: rw=0, want=90, limit=87 [ 2219.566210][T13101] timeout_message=lock fdc [ 2219.588047][ T37] audit: type=1804 audit(1638173033.025:920): pid=21714 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1420/file1/bus" dev="loop0" ino=1048763 res=1 errno=0 [ 2219.597386][T13101] last output bytes: [ 2219.624688][ T37] audit: type=1800 audit(1638173033.025:921): pid=21714 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048763 res=0 errno=0 [ 2219.675838][T13101] 0 90 4295139496 [ 2219.693515][T13101] 1 90 4295139496 [ 2219.724431][T13101] 2 90 4295139496 [ 2219.735673][T13101] 24 90 4295139496 [ 2219.744043][T13101] 1b 90 4295139496 [ 2219.748425][T13101] ff 90 4295139496 [ 2219.760972][T13101] 12 80 4295141312 [ 2219.772789][T13101] 3 90 4295141312 [ 2219.779592][T13101] 13 80 4295141312 [ 2219.797961][T13101] 0 90 4295141312 [ 2219.803341][T13101] 1a 90 4295141312 [ 2219.820364][T13101] 0 90 4295141312 [ 2219.826294][T13101] 3 80 4295141312 [ 2219.833495][T13101] a1 90 4295141312 [ 2219.851794][T13101] 1e 90 4295141312 [ 2219.868537][T13101] 7 80 4295141312 [ 2219.876278][T13101] 1 90 4295141312 [ 2219.882859][T13101] 8 80 4295141312 [ 2219.888795][T13101] 4 80 4295141312 [ 2219.894298][T13101] 1 90 4295141312 [ 2219.900016][T13101] last result at 4295141492 [ 2219.907447][T13101] last redo_fd_request at 4295158785 [ 2219.916129][T13101] status=80 [ 2219.934341][T13101] fdc_busy=1 [ 2219.944028][T13101] floppy_work.func=floppy_work_workfn [ 2219.949494][T21718] loop2: detected capacity change from 0 to 87 08:03:53 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:53 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 2219.950350][T13101] cont=ffffffff8a1f4920 [ 2219.964440][T21719] loop0: detected capacity change from 0 to 87 [ 2219.969779][T13101] current_req=0000000000000000 [ 2219.984270][T13101] command_status=-1 [ 2219.990145][T13101] [ 2219.996799][T13101] floppy1: floppy timeout called [ 2220.040745][T13101] [ 2220.042501][ T37] audit: type=1804 audit(1638173033.515:922): pid=21719 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir940302294/syzkaller.srXu7o/1421/file1/bus" dev="loop0" ino=1048764 res=1 errno=0 [ 2220.043774][T13101] floppy driver state [ 2220.091431][ T37] audit: type=1800 audit(1638173033.515:923): pid=21719 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048764 res=0 errno=0 [ 2220.104976][T13101] ------------------- [ 2220.128544][T13101] now=4295158858 last interrupt=4295141312 diff=17546 last called handler=recal_interrupt [ 2220.144016][T13101] timeout_message=lock fdc [ 2220.150083][T13101] last output bytes: [ 2220.156023][T13101] 0 90 4295139496 [ 2220.162084][T13101] 1 90 4295139496 [ 2220.167206][T13101] 2 90 4295139496 [ 2220.172648][T13101] 24 90 4295139496 [ 2220.179970][T13101] 1b 90 4295139496 [ 2220.186257][T13101] ff 90 4295139496 [ 2220.194375][T13101] 12 80 4295141312 [ 2220.201149][T13101] 3 90 4295141312 [ 2220.205720][T13101] 13 80 4295141312 [ 2220.211302][T13101] 0 90 4295141312 [ 2220.216475][T13101] 1a 90 4295141312 [ 2220.236541][T13101] 0 90 4295141312 [ 2220.254845][T13101] 3 80 4295141312 [ 2220.256404][T21723] loop3: detected capacity change from 0 to 87 [ 2220.260775][T13101] a1 90 4295141312 [ 2220.275372][T13101] 1e 90 4295141312 [ 2220.277446][T21721] loop2: detected capacity change from 0 to 87 [ 2220.291128][T13101] 7 80 4295141312 [ 2220.298096][T13101] 1 90 4295141312 [ 2220.302988][T13101] 8 80 4295141312 08:03:53 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {0x0, 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:53 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 08:03:53 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2220.342944][T13101] 4 80 4295141312 [ 2220.358122][T13101] 1 90 4295141312 [ 2220.363675][T13101] last result at 4295141492 [ 2220.384760][T13101] last redo_fd_request at 4295158845 [ 2220.393196][T13101] status=80 [ 2220.402225][T13101] fdc_busy=1 [ 2220.406631][T13101] floppy_work.func=floppy_work_workfn [ 2220.414942][T13101] cont=ffffffff8a1f4920 [ 2220.434332][T13101] current_req=0000000000000000 [ 2220.451326][T13101] command_status=-1 [ 2220.456264][T13101] [ 2220.464425][ T37] audit: type=1804 audit(1638173033.935:924): pid=21723 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir938124162/syzkaller.1iDaaV/1460/file1/bus" dev="loop3" ino=1048765 res=1 errno=0 [ 2220.527136][T13101] floppy1: floppy timeout called [ 2220.534860][ T37] audit: type=1800 audit(1638173033.995:925): pid=21723 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048765 res=0 errno=0 [ 2220.564637][T17293] [ 2220.588245][T17293] floppy driver state [ 2220.594496][T21723] syz-executor.3: attempt to access beyond end of device [ 2220.594496][T21723] loop3: rw=0, want=90, limit=87 [ 2220.617078][T17293] ------------------- [ 2220.624695][T17293] now=4295158907 last interrupt=4295141312 diff=17595 last called handler=recal_interrupt [ 2220.641572][T17293] timeout_message=lock fdc [ 2220.659142][T17293] last output bytes: [ 2220.675430][T17293] 0 90 4295139496 [ 2220.682474][T17293] 1 90 4295139496 [ 2220.691472][T17293] 2 90 4295139496 [ 2220.696319][T17293] 24 90 4295139496 [ 2220.701867][T17293] 1b 90 4295139496 [ 2220.706615][T17293] ff 90 4295139496 [ 2220.711521][T17293] 12 80 4295141312 08:03:54 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {0x0, 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2220.716203][T17293] 3 90 4295141312 [ 2220.733968][T17293] 13 80 4295141312 [ 2220.755507][T17293] 0 90 4295141312 [ 2220.767033][T17293] 1a 90 4295141312 08:03:54 executing program 0: syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x8) [ 2220.778255][T17293] 0 90 4295141312 [ 2220.796746][T21729] loop2: detected capacity change from 0 to 87 [ 2220.799352][T17293] 3 80 4295141312 [ 2220.812506][T17293] a1 90 4295141312 [ 2220.822478][T17293] 1e 90 4295141312 [ 2220.829017][T17293] 7 80 4295141312 [ 2220.833708][T17293] 1 90 4295141312 [ 2220.839031][T17293] 8 80 4295141312 [ 2220.848537][T17293] 4 80 4295141312 [ 2220.854741][T17293] 1 90 4295141312 [ 2220.860903][T17293] last result at 4295141492 [ 2220.870196][T17293] last redo_fd_request at 4295158901 [ 2220.877156][T17293] status=80 [ 2220.882844][T17293] fdc_busy=1 [ 2220.890253][T17293] floppy_work.func=floppy_work_workfn [ 2220.896671][T17293] cont=ffffffff8a1f4920 [ 2220.907310][T17293] current_req=0000000000000000 [ 2220.917186][T17293] command_status=-1 [ 2220.922897][T17293] [ 2220.926619][T17293] floppy1: floppy timeout called [ 2220.944409][T17293] [ 2220.947931][T17293] floppy driver state [ 2220.952531][T17293] ------------------- [ 2220.958556][T17293] now=4295158941 last interrupt=4295141312 diff=17629 last called handler=recal_interrupt [ 2220.974920][T17293] timeout_message=lock fdc [ 2221.012076][T17293] last output bytes: [ 2221.034572][T17293] 0 90 4295139496 [ 2221.035846][T21732] loop3: detected capacity change from 0 to 87 [ 2221.040545][T17293] 1 90 4295139496 08:03:54 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') syz_io_uring_setup(0x852, &(0x7f00000001c0)={0x0, 0x758b, 0x8, 0x2, 0x337}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r2, &(0x7f00000002c0)={0x202, 0x1, 0x6}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}, 0xffffadc2) lseek(r0, 0x0, 0x2) r3 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) 08:03:54 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {0x0, 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2221.053231][T17293] 2 90 4295139496 [ 2221.058518][T21734] loop2: detected capacity change from 0 to 87 [ 2221.059099][T17293] 24 90 4295139496 [ 2221.070950][T17293] 1b 90 4295139496 [ 2221.083046][T17293] ff 90 4295139496 [ 2221.089836][T17293] 12 80 4295141312 [ 2221.095198][T17293] 3 90 4295141312 [ 2221.101065][T17293] 13 80 4295141312 [ 2221.105346][T17293] 0 90 4295141312 [ 2221.111408][T17293] 1a 90 4295141312 [ 2221.116210][T17293] 0 90 4295141312 [ 2221.121830][T17293] 3 80 4295141312 [ 2221.126444][T17293] a1 90 4295141312 [ 2221.132082][T17293] 1e 90 4295141312 [ 2221.137787][T17293] 7 80 4295141312 [ 2221.143755][T17293] 1 90 4295141312 [ 2221.150025][T17293] 8 80 4295141312 [ 2221.155851][T17293] 4 80 4295141312 [ 2221.175147][T17293] 1 90 4295141312 [ 2221.185231][T17293] last result at 4295141492 [ 2221.192616][T17293] last redo_fd_request at 4295158939 [ 2221.203219][T17293] status=80 [ 2221.208651][T17293] fdc_busy=1 [ 2221.214407][T17293] floppy_work.func=floppy_work_workfn [ 2221.222338][T17293] cont=ffffffff8a1f4920 [ 2221.228126][T17293] current_req=0000000000000000 [ 2221.234662][T17293] command_status=-1 [ 2221.240657][T17293] [ 2221.245349][T17293] floppy1: floppy timeout called [ 2221.258198][T17293] [ 2221.261473][T17293] floppy driver state [ 2221.267079][T17293] ------------------- [ 2221.307958][T17293] now=4295158976 last interrupt=4295141312 diff=17664 last called handler=recal_interrupt [ 2221.331593][T17293] timeout_message=lock fdc [ 2221.339595][T17293] last output bytes: [ 2221.344821][T17293] 0 90 4295139496 [ 2221.350291][T17293] 1 90 4295139496 [ 2221.354326][T17293] 2 90 4295139496 [ 2221.358967][T17293] 24 90 4295139496 [ 2221.365087][T17293] 1b 90 4295139496 [ 2221.371114][T17293] ff 90 4295139496 [ 2221.376544][T17293] 12 80 4295141312 [ 2221.382736][T17293] 3 90 4295141312 [ 2221.399189][T17293] 13 80 4295141312 [ 2221.407198][T17293] 0 90 4295141312 [ 2221.412544][T17293] 1a 90 4295141312 [ 2221.418546][T17293] 0 90 4295141312 [ 2221.424925][T17293] 3 80 4295141312 [ 2221.431222][T17293] a1 90 4295141312 [ 2221.435219][T17293] 1e 90 4295141312 [ 2221.439899][T17293] 7 80 4295141312 [ 2221.444944][T17293] 1 90 4295141312 [ 2221.451129][T17293] 8 80 4295141312 [ 2221.456889][T17293] 4 80 4295141312 [ 2221.463054][T17293] 1 90 4295141312 [ 2221.470541][T17293] last result at 4295141492 [ 2221.480100][T17293] last redo_fd_request at 4295158970 [ 2221.488121][T17293] status=80 [ 2221.493477][T17293] fdc_busy=1 [ 2221.497677][T17293] floppy_work.func=floppy_work_workfn [ 2221.510344][T17293] cont=ffffffff8a1f4920 [ 2221.522630][T17293] current_req=0000000000000000 [ 2221.541763][T17293] command_status=-1 [ 2221.559260][T17293] [ 2221.565656][T17293] floppy1: floppy timeout called [ 2221.583702][T17293] [ 2221.598124][T17293] floppy driver state 08:03:54 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:55 executing program 3: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './bus\x00'}) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="00f3743c0700fcdb2195bfb52a5d42d10ecaebfd8ddfa8968b1537b5b0bc626f070613b7933ff9cb54e274e200db95bf80ea33f39f93dfd6a3c6d915205b7ba3b31dc4d9a93d10265fb93de2efbbaafc3c0bcda52b19fe770c2dcf155703d09e0dd686ee823108ecf455c9765f6bcb54673d599a39594a057ba25458971e0f52a305518c69239ef37d195a26489da7e61aaca729acbd5cf20eed5560157585d13b3649de78d297fd0d7a6fb86e98afc06e3474499cdcdceec304"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000340)={{r2}, "68ca208348a877598285584428f1a88736e78addfd13d780cf5b833db45ad5508b50d5004acb0565bfad0bd9d616cc26a3b27af9b5139083caee384fb749f35e58c843c8676148860631edf862740177d873225701b65e4d8ae35b38de537b8215cfc418a29dcadea74ae6d93752a06649e3b0f3e3c82b3d0df2600fa375f1c426b3303048bf837b5d01c4fec9d6bb0f56fb095d79cc28138cc24c12a7070da2e2503008c3c63e59a8940659010a51f3a478728957859c482697964e3adf24c110d94ad7ba741ffb5337a29b5c15c1ee1bc343538b892c2926950c8bded6c326c7ac4edda397c590c99d7ab978583b61dcca9a91276a0f0e1a7e8b41b80b5ed1e5027e496356796a4d175937dac70f6fd2d9190a856bb260a38284768842b610f9730dfe5ce618808082b1edb0c26c42bd17d623a7952a6f19392798f2378a6fa5d2fd2047bb9b6f8695509b40679496d1284c6059be7515a37efda387f5b15c305c3d0c6eb0a14c114e98f9825a84589305171edcd337265314ecf18c1d2e18468cac35ada0eae7186488e911869dbe894955f1aeb766a3d13b315e666de825aad4f37d75dc8eb9d9097634e29cfa31bb2eff680c1ef45566b14efa983cd89c0bee23f5aa877501ca49f0b4197e574edbb7e9da235bda000ce658ac89fd4c8473e008529f4fb61f594f40ddbc197c881f7178549d8e04c289c6284df31b96b36204c1a22a5d7d0494372551a79d3084521740a982033f19a60044470a4f80930be3b1dee19e56fa7638223a86e44585c46124a95af92d75bd8c2f6643793d0e03cd10f33c6259b2790a751e56002844a73708c8b6c6418b38024351fd6780fc61f2ab9509d117f89bfcc225952f7de844bb393b20453071a7958b4d5357aa0fa8680661eae138f6d35eedc2075943d1cac18661483d24b5d650b3403305e5f587cd12bd52f73e6cd4bf3493d268e4c098cd2bf434d429199c344255885d1e10018046a106d7fd9b9f4c8b854c38a22180bbe106bed5c482f32a5893290b437d020be73299a7d63702d1e52283440da2807c3d811fc86243e1a661e7e4cabb5ed94f7a3c1adce8ad568f1f2958440e3b2bd48e1928c7a5a39c2b866030cb5e405d9deffa1ea1fe9250499ba15ccc3d9b574e373d680dc87c8f82c301114a0b0d31123ec8412089f7133746a8be7edb19d89d5f375e4b717330044b2d29b5d20d4726806c1f30318ea391391d180cd652d67afc3000bb31ba7a20724b684b40775c51ba952239c6b1f458823c10c09a68277f8caef614515230faf6e0f991c8e9a3c8e2cd1de4adaa4a26ecf4a7c79bb71dd42e6c7bc80de2ead262bb8984c5151cd6da9aa5d5203b67352dc4af0cb6b216189e23753efd50b08b3d18a27a50e9ae2df18fa7a8bddde67c146a1ac6cacdc758fd96eaff4aa87333304b8f6b6ab77773fab35eae813b4c58db4383dffc778cd9b8865a0e314e5ea48ab76630e11a2a4fca38a09dc870ed8cdfa0df881a3af747781256f8a20b79a9f6259ea950b07b60a1d78c1f2d22cbcf60801b8dd22a7eaa66dc5645e212bd3b8439c355323d1e9a408a95db5005ab5655f3cb5a3a252588cf02705e49d88fe7d9436c99a0e2358859decf57b5a7f39d5bf92faed005d880fb148e4fae833d23bfc5b54dce9e363773c81150c6ca5ca5184de122d57020ac9198945e70e6ac8e78e95b27c4fca9c969373e93c0a8deadf8f7ea076c09d05512fae0d647c7d1f383811b591c5e1b1d7a8904ad34d1af9d4e4471e64c1baa348e3acdcb5e932e9abc4870ffbc519ad9154f8d296c1f68a7c702b4742b0384a2682e8788c81e708fad63a1a2effdf7d37bbf5e58aad19bea2ad7f0095162d60b56880d6520bc9b452008ab22061c46de7912ba2c30a4dd5ecb7969ab4cd12db9e2c19fef620fc82db6454ad7ecac7af9e680b83ff238a2dc65dc7dd2915e12acb368513b7fec3131b686bf2a9a98c31482eea46ff19a212a883610aa34f8316dc5c1ec98d3452ab79e6c433bbb021717483c341847c2bb83cb7d449166a73b956fd11382c4f7cfa8d34203b32f1d96a119b0c8c5ed1378e5ab91f632799a77a6fa69f26f4e3bc951f860432b7ec85b8aeb3433a7873b1f532f9341b6c143dda7cb719d55ff64cba67e47d63ad0f0e38c02ab1f7a76a9ba1a8e630f0bb7d925c84691189a0b57f1ca625186798948da5e3d0d04a8c330539e535c705755061696f6f0fd5ba85a5dd803cd5141f2ff8fc79bfe31ca430738b0b03acf75efce744374641104d5a3d80daa5be4d463c344276c406f202baf67a4713a24464e7885337f418fea8e51dd2c94cb0c5fecbbaddce5540619ab6c7910d2950fd96492df3b27d8e6477a6a43184f27df605bb058d24452e019ba9f158b37bafa15653aac7ef39f81172a04fd3fbd8ed376cf85427c1f04ad6488704e259b9f9d3ed855a565a4890f119d7cfb5129182a9714af23d084c9c0a81741d8244a280e14305749569f7984e22ac55fde19e5e01054f77b5070ddc264205c0ae4f45f69abaaf09d7424960a8f6122373204ea8bd30860a28eff8424d843ea05e9c24d58f3835a9eec591ee44b6f9423d61f6fb68db67023911ffa9d322c57f7ab1d74b49e5d9d341e0268c9905e71a1f5f8203a8bc689a88a92028d7e233d4aa0105ecf10d7e866ac56f4c8373e9b3e150712dc1444454c00f2dd9939bb2a3c080385d45ec1c2c70365f3ba26d546b299197db816f6aa71594de10516ec58c80f91b9d32b3188693a94e341422983cdccd18191e6c2e03393ffacdf744fcce1621c3a6064d4e131f5e4713f2d50b9a205ab5ac938d69c69285449f800acbfa7838739c25f8f451ce992706294ee42f977918d64c916486e9293d491cba4e5492a5c5e7647b8908deb228460865cef05de27f71299c94092b625ed5bf8a3d908e3c3fb1d046e80069df8f2f472130c3cfe4a0678d7bcdfe589208cc56c868fe8536a612578d19418ef03bc509d97f8fd76f3f3af848f402a36ca21e33f39188c3059082cf165ec52ee1baa9c98d51508acf296d75958b147a3ba5a9c8c6792399172786a311b5adb42f1f039429318033fd555c7c75e518a620197bdfd2e0ef663d4e8f3a7e46bede6bd5fe6dbbac566726a768e36ee76b0d57b03046cf191273e06f5c8df5f4713b3d48e966ec52df9762e289a4d1f82be164aeb8aeb9acaca749abb342dcab6d891003a91736aefd7f7ab679a1e0fe818603b728a1c3403ce30318ba3ca04c3c7623214ebbccfa22506b930d546ccfa0cadefd0e8e8f7aa14a07dc535ebee6ea6363f34fff9749e2a31fbee9332b491518b66b89b0bb4ec318727581aa92e05358503a56eef31e56e02394a7179704ce588ccc52171faa2ddf2d55c9f5a752cb54fccd4b14462714b911be4db3551087a52724083df83daffcbf94a8a5ab4f69ea0c19ea50c218b695900280521a23eecfb3d8f2366998bc420b48af42465926f8ccbcb271c6fd003ef830e74ba318cf580e84ade0919046576d03986651f542306ca433b430830a62f51e30a0c25ab4806916ec852980135fdfb02875b10e7862309041260314d63e3f153d12bd83c10257206517dcb33fe69b17e92cca77822ac447db4b3a001cf9fb2c27165aa3756c60e11883b89b10541411a94aa27fef0f11e2ffe38a299afc0fb46fd0c875896fa803834abb91c22b26bbe4d2278d07ae3fbc84d894ead63c2158b2231f19c98c859957013d57b10ca60b0922a0afd37080c2c4c7d60ff8005e9e8f6699b07e3da3c28cc541d6a550f8d38e94ab558a5724566b297ecbfd849d1712246399a80bf2c860a2c9b09dfd3ba26a1d6b5ba2eefb78e2dba5f9701b714630e83658fc939aeae0b6134fc005df7b000daa6847b112b84e3b31f21b0570da893df1766f8de6166d0a3d641c118a7bc14266701ee3af6cab05c6b9b410b52c2cae5ac9a4988bbc702406f28b038cce4fbb696c522cd8558e10b4331a569df40b58142574d9db049e9a644c840d6957aa2d1adbdea2a55a5804e698327336adb68b42ce5153adca91b98026c0d4a7c3074c8c25fe9973511ab9f9b9014ce1905dc5c0b9031b65686e5828c1dde954eb85526f4b8fecadd455140b5fb81cafa35f65f2416ab27d8f415432875a0feca1fd3e4d7413e230f3b2241f3489c50fd206a9ddb07e40c2be07267831e46ffa2ec1a504c6f1f83649b763c11090b181e2ca011239a43fab4d900275c3d89d713b4bd83b01adf960e5ff36dd3808e1c41d2e551e220d6ed51ae64668e1eeca9a2970347d5b506ba7d0673f12f3f9bc241adddb66453fc2cc9193149e82fbcf59547e62f781c271454e3e3711073173446419f2c428c450a186362fa0fa8a876a265a5d4d6665e18e1ec8df1d6ebf791b9a087c87cf6c37b991ef818509e802236f136789bb3091f3fee0a4ce66650fe9d4d5b4c04d3855c9e878e77d29af9c64cacd283d42d3d76330a3986835bbc9058c01eff5e4a7f0ddc6681dbf1bb3dc2e58fdf1d5d1407c957d72db7dcd8369b44c82c5b3d6e3cbe5b44e7db5e16fb080f4a43e26e56ebdfd57969c115e7e15b8bc41d0cede5387918d5ae4cb722d46cc9b056aa0e5aa2502701576026dd4373bf0a1d588b94f51bbfdbb410d8288f1b542b1d9baa88931b54044651266767be1bc5de3de15574334188330efb0e1256e8e28392719343b4bbf6d490e1eae6d059a3ca4bbe4156d5c35f45186e11d00ee5461b45b1be9e708efc17811cc000b51e3645bd3bcf44bf7fb28f633398039f4dcdc6eec96b30ba46497a63b491a9d3e500d6e313e53bc5e7422f7975979e1de39804f21126a10bb47f92d1a87803d906022e14db22cbeec01db17e4ec331520bfa91ccbd4875d4b35cb5ea5e18eea79e4d430c03724fe47372703024e922b2ccb990efbb260672cf07e3826c73e4140eeca64e73a00c4166bbfbf5def37c2f14e0eb11c4ebaf16be6a15644839eccfa1bf0f7bc0b9827b453c447fd6c6db0e9393eff59ac9b70457e11da75975798c3bbfc9f9a28e94bffbc76cca6f6d6709aa36152aad01d9d9ceb8c445180627308289f3a72db58df88dbb1d31ce6bc1fa8417277b669dd76535b6cd1898fc2e12e1ca98fe6688abef1ff362a69f096aa34c227e1a734189c1c6f2a3bfa2cf5b454c2a842b42c698fad47793629370873f1acb2f4e003bf98fa8cbb440ec8ccbe55e82c5477f5730b96e177aa27a51efa63eacd7047a3a3aadda4d0e88694655ebf292c30ec380c40ef2ab750588de3b2598d4c6dfbf0d928fd37ebf569775e8c0ff280594c24183a4f95e7eb61c663931c1e0707b7cb117404c9f417f519b84d5ef33df495c43f98c7d4045071f85fcd25e81dd6d90c883da5272f421570c6220d6bfee2c63d78813493ebd7bbd547d88d77ea2384f8e6e6938658981b150c9f2cec742020fe57af2ae7c057c67ed72f0e1d9330202cf05b4f9e41c440e11df8004a270b3105bb99740e9c7a6402817823dfe654386f9a300f46544890d07c785682a5f6070e774cb49f9019eceb5254427d0bdf6be857a53f0a808744c7941e1e3e517ee905611bdefede32252bd9bb02c7ac877051dc8bfb5869897637b060edc836912d4bef9b95f6ab042206de6a2b8b8818c79f33b0b576d0e299732b220256fb8dac4fbd279d102f734ed3593cc59041a17ba634c38248c30272f1f3f3f33eff54b9d47a0d75dfd1e904383ed90d080009c92d118ace9322aa41f0e"}) r3 = syz_open_procfs(0x0, 0x0) renameat(r3, &(0x7f0000000140)='./cgroup\x00', r3, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) openat(r3, &(0x7f0000000240)='./cgroup\x00', 0x80, 0x40) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x23da2df0996f4aa4}, 0x40001) inotify_add_watch(r1, &(0x7f0000000180)='./bus\x00', 0x101) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x800) lseek(r5, 0x0, 0x2) setxattr$security_evm(&(0x7f0000001400)='./file1/file0\x00', &(0x7f0000001440), &(0x7f0000001480)=@v2={0x5, 0x3, 0x7, 0x8001, 0x6b, "47e2dfdfd91fab2f0150ecb91f6c250c93651fdc2b971af320471bf5cc5d190fcc1bb0fd5d920f89d157424cbf887c599363c02c77b67fe58dc457cee122bf437373519c5efb760f0496ee55b90a6db0a884cf8c28bffdd459f486c3e3072eea7c056b6c3545abccb458b9"}, 0x74, 0x0) r6 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) 08:03:55 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') syz_io_uring_setup(0x852, &(0x7f00000001c0)={0x0, 0x758b, 0x8, 0x2, 0x337}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r2, &(0x7f00000002c0)={0x202, 0x1, 0x6}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}, 0xffffadc2) lseek(r0, 0x0, 0x2) r3 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) [ 2221.615339][T17293] ------------------- [ 2221.629534][T17293] now=4295159008 last interrupt=4295141312 diff=17696 last called handler=recal_interrupt [ 2221.640233][T17293] timeout_message=lock fdc [ 2221.645011][T17293] last output bytes: [ 2221.649617][T17293] 0 90 4295139496 [ 2221.650995][T21739] loop0: detected capacity change from 0 to 87 [ 2221.654788][T17293] 1 90 4295139496 [ 2221.668400][T17293] 2 90 4295139496 [ 2221.674443][T17293] 24 90 4295139496 [ 2221.682956][T21741] loop3: detected capacity change from 0 to 87 [ 2221.688778][T17293] 1b 90 4295139496 [ 2221.697561][T17293] ff 90 4295139496 [ 2221.702394][T17293] 12 80 4295141312 [ 2221.708023][T17293] 3 90 4295141312 [ 2221.712700][T17293] 13 80 4295141312 [ 2221.724291][T17293] 0 90 4295141312 [ 2221.729246][T17293] 1a 90 4295141312 [ 2221.735645][T17293] 0 90 4295141312 [ 2221.741294][T17293] 3 80 4295141312 [ 2221.745716][T17293] a1 90 4295141312 [ 2221.753365][T17293] 1e 90 4295141312 [ 2221.762346][T17293] 7 80 4295141312 [ 2221.768379][T17293] 1 90 4295141312 08:03:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180), 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2221.783071][T17293] 8 80 4295141312 [ 2221.787134][T17293] 4 80 4295141312 [ 2221.795216][T21741] syz-executor.3: attempt to access beyond end of device [ 2221.795216][T21741] loop3: rw=0, want=90, limit=87 [ 2221.797386][T21743] loop2: detected capacity change from 0 to 87 [ 2221.810600][T17293] 1 90 4295141312 [ 2221.810616][T17293] last result at 4295141492 [ 2221.810623][T17293] last redo_fd_request at 4295159003 [ 2221.810668][T17293] status=80 [ 2221.810678][T17293] fdc_busy=1 [ 2221.810684][T17293] floppy_work.func=floppy_work_workfn [ 2221.810705][T17293] cont=ffffffff8a1f4920 [ 2221.810712][T17293] current_req=0000000000000000 [ 2221.810718][T17293] command_status=-1 [ 2221.810725][T17293] [ 2221.810783][T17293] floppy1: floppy timeout called [ 2221.890370][T17293] [ 2221.893046][T17293] floppy driver state [ 2221.902289][T17293] ------------------- [ 2221.908987][T17293] now=4295159036 last interrupt=4295141312 diff=17724 last called handler=recal_interrupt [ 2221.947288][T17293] timeout_message=lock fdc [ 2221.959206][T17293] last output bytes: [ 2221.965734][T17293] 0 90 4295139496 [ 2221.977615][T17293] 1 90 4295139496 [ 2221.986377][T17293] 2 90 4295139496 [ 2221.993223][T17293] 24 90 4295139496 [ 2222.000507][T17293] 1b 90 4295139496 [ 2222.011913][T17293] ff 90 4295139496 [ 2222.019328][T17293] 12 80 4295141312 [ 2222.024819][T17293] 3 90 4295141312 [ 2222.034093][T17293] 13 80 4295141312 [ 2222.040560][T17293] 0 90 4295141312 [ 2222.047650][T17293] 1a 90 4295141312 [ 2222.053974][T17293] 0 90 4295141312 [ 2222.061891][T17293] 3 80 4295141312 [ 2222.069374][T17293] a1 90 4295141312 [ 2222.074059][T17293] 1e 90 4295141312 [ 2222.077246][T21745] loop3: detected capacity change from 0 to 87 [ 2222.079095][T17293] 7 80 4295141312 [ 2222.094075][T17293] 1 90 4295141312 [ 2222.094183][T21745] FAT-fs (loop3): Unrecognized mount option "01777777777777777777777184467440737095516150xffffffffffffffffäZ#Á2‘é¿f·'n°37'X;ÀÜ…ÏŸ=.ˆƒüät2ëÌÂY4äØzr:˜ŠÒQ'1Rò™0YN¤µ•‚« ˜Íº¹¨8‘©° w³(»[ý÷šÄ<$«F" or missing value [ 2222.099845][T17293] 8 80 4295141312 [ 2222.131380][T17293] 4 80 4295141312 [ 2222.136640][T17293] 1 90 4295141312 [ 2222.142370][T17293] last result at 4295141492 08:03:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180), 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:55 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') syz_io_uring_setup(0x852, &(0x7f00000001c0)={0x0, 0x758b, 0x8, 0x2, 0x337}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r2, &(0x7f00000002c0)={0x202, 0x1, 0x6}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}, 0xffffadc2) lseek(r0, 0x0, 0x2) r3 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) 08:03:55 executing program 3: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRESHEX, @ANYBLOB="e45a23c132910190e9bf66b7276eb0333727583bc0dc85cf9f3d2e81888318fce47432ebcc12c25934e4d87a723a988a14d251273152f29930594ea4b59582ab2098cdbab9a83891a9b00b77b328bb5bfdf79ac43c24ab46"]) chdir(&(0x7f0000000000)='./file1\x00') openat(r0, &(0x7f0000000080)='./file1\x00', 0x0, 0x4) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 2222.154179][T17293] last redo_fd_request at 4295159033 [ 2222.154905][T21748] loop0: detected capacity change from 0 to 87 [ 2222.162335][T17293] status=80 [ 2222.166230][T21749] loop2: detected capacity change from 0 to 87 [ 2222.184598][T17293] fdc_busy=1 [ 2222.189237][T17293] floppy_work.func=floppy_work_workfn [ 2222.196931][T17293] cont=ffffffff8a1f4920 [ 2222.203799][T17293] current_req=0000000000000000 [ 2222.208846][T17293] command_status=-1 [ 2222.213708][T17293] [ 2222.216704][T17293] floppy1: floppy timeout called [ 2222.278823][T17293] [ 2222.282097][T17293] floppy driver state [ 2222.287588][T17293] ------------------- [ 2222.314412][T17293] now=4295159076 last interrupt=4295141312 diff=17764 last called handler=recal_interrupt [ 2222.366327][T17293] timeout_message=lock fdc [ 2222.373211][T17293] last output bytes: [ 2222.381171][T17293] 0 90 4295139496 [ 2222.386853][T17293] 1 90 4295139496 [ 2222.397347][T17293] 2 90 4295139496 [ 2222.406959][T17293] 24 90 4295139496 [ 2222.417312][T17293] 1b 90 4295139496 [ 2222.450678][T17293] ff 90 4295139496 [ 2222.456464][T17293] 12 80 4295141312 [ 2222.469950][T17293] 3 90 4295141312 [ 2222.475985][T17293] 13 80 4295141312 [ 2222.484509][T17293] 0 90 4295141312 [ 2222.497505][T21753] loop2: detected capacity change from 0 to 87 [ 2222.506753][T21756] loop0: detected capacity change from 0 to 87 [ 2222.506801][T17293] 1a 90 4295141312 08:03:55 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180), 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:55 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') syz_io_uring_setup(0x852, &(0x7f00000001c0)={0x0, 0x758b, 0x8, 0x2, 0x337}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r2, &(0x7f00000002c0)={0x202, 0x1, 0x6}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}, 0xffffadc2) lseek(r0, 0x0, 0x2) r3 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) [ 2222.533564][T17293] 0 90 4295141312 [ 2222.538818][T17293] 3 80 4295141312 [ 2222.543990][T17293] a1 90 4295141312 [ 2222.559826][T17293] 1e 90 4295141312 [ 2222.568199][T17293] 7 80 4295141312 [ 2222.587599][T17293] 1 90 4295141312 [ 2222.603168][T17293] 8 80 4295141312 [ 2222.620056][T17293] 4 80 4295141312 [ 2222.626743][T17293] 1 90 4295141312 [ 2222.631498][T17293] last result at 4295141492 [ 2222.641939][T17293] last redo_fd_request at 4295159068 [ 2222.649912][T17293] status=80 [ 2222.653796][T17293] fdc_busy=1 [ 2222.657744][T17293] floppy_work.func=floppy_work_workfn [ 2222.675407][T17293] cont=ffffffff8a1f4920 [ 2222.680417][T17293] current_req=0000000000000000 [ 2222.686046][T17293] command_status=-1 [ 2222.692550][T17293] [ 2222.696490][T17293] floppy1: floppy timeout called [ 2222.712868][T17293] [ 2222.719717][T17293] floppy driver state [ 2222.724724][T17293] ------------------- [ 2222.739362][T17293] now=4295159119 last interrupt=4295141312 diff=17807 last called handler=recal_interrupt [ 2222.782892][T17293] timeout_message=lock fdc [ 2222.792338][T17293] last output bytes: [ 2222.798843][T17293] 0 90 4295139496 [ 2222.807542][T17293] 1 90 4295139496 [ 2222.817790][T17293] 2 90 4295139496 [ 2222.837172][T17293] 24 90 4295139496 [ 2222.847069][T17293] 1b 90 4295139496 08:03:56 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975", 0x4, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:56 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') syz_io_uring_setup(0x852, &(0x7f00000001c0)={0x0, 0x758b, 0x8, 0x2, 0x337}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r2, &(0x7f00000002c0)={0x202, 0x1, 0x6}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}, 0xffffadc2) lseek(r0, 0x0, 0x2) open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) 08:03:56 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2222.858503][T21759] loop2: detected capacity change from 0 to 87 [ 2222.858976][T17293] ff 90 4295139496 [ 2222.903129][T17293] 12 80 4295141312 [ 2222.911289][T17293] 3 90 4295141312 [ 2222.928859][T21763] loop0: detected capacity change from 0 to 87 [ 2222.929045][T17293] 13 80 4295141312 [ 2222.943088][T17293] 0 90 4295141312 [ 2222.948288][T17293] 1a 90 4295141312 [ 2222.966877][T17293] 0 90 4295141312 [ 2222.976211][T17293] 3 80 4295141312 [ 2223.008162][T17293] a1 90 4295141312 [ 2223.015264][T17293] 1e 90 4295141312 [ 2223.035262][T17293] 7 80 4295141312 [ 2223.043551][T17293] 1 90 4295141312 [ 2223.051121][T17293] 8 80 4295141312 [ 2223.055975][T17293] 4 80 4295141312 [ 2223.065681][T17293] 1 90 4295141312 [ 2223.073107][T17293] last result at 4295141492 [ 2223.083251][T17293] last redo_fd_request at 4295159115 [ 2223.091448][T17293] status=80 [ 2223.094740][T17293] fdc_busy=1 [ 2223.103695][T17293] floppy_work.func=floppy_work_workfn [ 2223.113970][T17293] cont=ffffffff8a1f4920 [ 2223.125985][T17293] current_req=0000000000000000 [ 2223.140985][T17293] command_status=-1 [ 2223.152996][T17293] [ 2223.156674][T17293] floppy1: floppy timeout called [ 2223.172133][T17293] [ 2223.186719][T17293] floppy driver state [ 2223.193745][T17293] ------------------- [ 2223.207706][T17293] now=4295159165 last interrupt=4295141312 diff=17853 last called handler=recal_interrupt [ 2223.230008][T17293] timeout_message=lock fdc [ 2223.241234][T17293] last output bytes: [ 2223.247357][T17293] 0 90 4295139496 [ 2223.274823][T17293] 1 90 4295139496 [ 2223.284201][T17293] 2 90 4295139496 [ 2223.294211][T17293] 24 90 4295139496 08:03:56 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180), 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:56 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:03:56 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') syz_io_uring_setup(0x852, &(0x7f00000001c0)={0x0, 0x758b, 0x8, 0x2, 0x337}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r2, &(0x7f00000002c0)={0x202, 0x1, 0x6}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}, 0xffffadc2) lseek(r0, 0x0, 0x2) open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) [ 2223.296617][T21767] loop2: detected capacity change from 0 to 87 [ 2223.310707][T17293] 1b 90 4295139496 08:03:56 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') syz_io_uring_setup(0x852, &(0x7f00000001c0)={0x0, 0x758b, 0x8, 0x2, 0x337}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r2, &(0x7f00000002c0)={0x202, 0x1, 0x6}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}, 0xffffadc2) lseek(r0, 0x0, 0x2) open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) [ 2223.312544][T21771] loop0: detected capacity change from 0 to 87 [ 2223.316708][T17293] ff 90 4295139496 [ 2223.332385][T21773] loop3: detected capacity change from 0 to 87 [ 2223.336928][T17293] 12 80 4295141312 [ 2223.347625][T17293] 3 90 4295141312 [ 2223.374720][T17293] 13 80 4295141312 [ 2223.397937][T17293] 0 90 4295141312 [ 2223.403285][T17293] 1a 90 4295141312 [ 2223.407122][T17293] 0 90 4295141312 [ 2223.419581][T17293] 3 80 4295141312 [ 2223.424268][T17293] a1 90 4295141312 [ 2223.437503][T17293] 1e 90 4295141312 [ 2223.462913][T17293] 7 80 4295141312 [ 2223.474545][T17293] 1 90 4295141312 [ 2223.487446][T17293] 8 80 4295141312 [ 2223.494872][T17293] 4 80 4295141312 [ 2223.517988][T17293] 1 90 4295141312 [ 2223.522248][T17293] last result at 4295141492 [ 2223.561017][T17293] last redo_fd_request at 4295159162 [ 2223.578973][T17293] status=80 [ 2223.583066][T17293] fdc_busy=1 [ 2223.590754][T17293] floppy_work.func=floppy_work_workfn [ 2223.616560][T17293] cont=ffffffff8a1f4920 [ 2223.629531][T17293] current_req=0000000000000000 [ 2223.661438][T17293] command_status=-1 [ 2223.679068][T17293] [ 2223.682574][T21778] loop2: detected capacity change from 0 to 87 [ 2223.682621][T17293] floppy1: floppy timeout called 08:03:57 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180), 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:57 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') syz_io_uring_setup(0x852, &(0x7f00000001c0)={0x0, 0x758b, 0x8, 0x2, 0x337}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r2, &(0x7f00000002c0)={0x202, 0x1, 0x6}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}, 0xffffadc2) lseek(r0, 0x0, 0x2) 08:03:57 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002880)={{{@in6=@private2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000002980)=0xe4) syz_mount_image$jfs(&(0x7f0000001580), &(0x7f00000015c0)='./cgroup\x00', 0x3, 0x5, &(0x7f0000002840)=[{&(0x7f0000001600)="b8b8b6cad55e70b7cab16603e2583802e7613f40b64ce3af1c5310aabf7c76085edb5c8c95fcb4b8a25b575362ea7e21a93d1bf0790e7fd456598ee1e2c7e34af5b338cd5ab2b29fd45c4f7cfdf5d3b667fd30a408139d0360cbfcc802a03e2845717ed2f6be693514decc6c90e43e4db4746a6bca33c40b34755acea9887bc3691230d3b052fb92df2d3a7b7a815b80c2f15f46b66ab5ddba8992be2db88b341d859f102e4be07010ba956592f4b67aa3b330e038851de1e02d1dba68269000ff2e2de1148335b453f172ff9420942210781ef227306b66b423cad46d8ca7a03925d523e1ba87b25f00f8def037e6620cf5a27d57e370c7b6673e63163f8e00fc8216ee208da77768d53eec7a12444afb6c65ae53121bae5b118971d730ba55b5538863a3bf963e08adfa7131488103a80644f28acdc842aac5b0ecaa3841eec7bae2b1ab0f9e3d05a8b07cf05041a592a82cf3c9c5cb26845ea696397be51b3a709b455c1852fb85658d12e366f2ee3cbab4a835af74169e8bd89a0d6efe976c96c0e83dbcc9e2ff2158b133aa223fc24d0cc5638f22f739e3b06d115f9cc4a566d0c6ff26b7b59de00328f55bcd30d2bdcd515ab35909482686746b99899a64f3f30d46cd4629bd511e85b56989026aedea79e8dfe8581819723e57ce27925ddf8171a80a609337952589025c3f7fcce4694d0d1a1e907735f7b5c585e34c15806a0b1cef1f5959660f94526326dd8e78069df506b956579db1fb71c5f1b319425e7d794ff86f33161799d5c077d99e95921cd57e5fcf9adb9797ede82ace6df8fd17c3bf1a1c4eca306ef864576201a19e1522c6d160362a33d7cd77bbf95d48730151397d96d7eb6289ef727ecc7d79b052913fc86f4f960f4d8f596e50ca98474aa5ea681672f5de3a858b8fa8d488873af6bc91203b8d033b7917f418f3fb1a6777162ff753885fae63e41503c1d60bd8da9c29188199a905c9338313a1518fc310c4e86de815931758a9e73d0fce5fbd410ad87a9f171fc70d312cf2159ac09acce472c7855295edbfb34fea83bc2537db5ee81b1cc95353428e915c056cf49899ed8a2f4a0d9a8aa97bff86004560a29139d10086772077bae364250bbb5a1b202bba0d47ca9d461b06e7022c373586ade5b6ad93fdeb84267c61b1ff74b873d75d31bfd092ba87cfd34a36c3107655fb3387d1848d2e47ae876553e51890bfa3ca3e3a367516ade912c1b665c3f6c6136de8d8a8615c39b9a9c7341f05dd5411287dd11d49084195105d16560e8bd1186d2c13dc22e18872c67a5762b73a324a94fa96c9eb0af38bbabc86c120eee42d423cb355fa1f992a480050735d1b67f12d98af7d0fac8c6bbb22bfce56fac47384da86f8c0afa085574153d4d0b79c7a0aecd89cf7c853722f71ef40225f242aefdbacaa36c0a64c5c77f5515483245d921385fc20f249af10be6319d2be4f4bf2f6d256d18106233216647af453a670d7628e51a5fcd6e044e6cf13f63543fb0883d326ba08f414439945e1ada8dd910e78ed42b887ede065fc2d9569c1c68ef6eea8f4c8487f0db22060b72d1c92441b8ce037932281abd564f3ccebb586c55c2096d8e7718873dbc6dbf9c44070160cdc1befbffb31fa308365c9b222b2d371f717adb4e1f529bfdeca0f54254e90328a7bdd0d91daedca297cf901cd5cf91cf531c1fcc3d86b47b319cf3421401daad9149fb8830e0ba8147eca24b0ada7b99ce7468d5c3be6da0cec5815a09faedb9b4c7cd7fa342c15ff16db5b0aad590b2a2866a032416a664865ea5b8ad63a59e62f350ae4238b625f39cb5d2d5dc187aa951fa625bb7c332460b4a896ce13345fdee7e9e8daaf0a702532d9b194b1495202a6716c0a080d37fb69d49101276ed00926bba7c8a7642e1c0106e5843b792994b7960cc97c72c2019a89015ab3182538b68f52f1fb0d3821a617d0adcb151b1357580bdc6410fb70af2707d6b180696760752d8d8f5adef3132e4bed55ccba7019da4321ae5ce183d98226f9100431c8aa673cb0c973f6a2da86a9208217030e090c554062521d0e9489c0702738562ba7d7a9aceb2dfd19ddc5fa35ad06838175fbf23cb8d2dd3483a779c1d5258aba314ecff24c43f163fae4e6b80ddbee776f5e606dfba66d62cd158e554253a2f4147193befb27ed0985d93fb719770d3c2954a30e6b8bb2d397e7c41e8a593728a4cc3291779ff3f2b6af6d0953eebb589f97896e31f05e44f5ea762c9f9d22eff96ec5df3979fd771ec9f8bbf0031a7b3fe662f3241f598071842b43174fff26b5a9dfbbda3ad5dcd458d94d4daaeb7b0a389575241171b215f9be41842ea46db8542fec214adf0e67e46a03df35539021696a42d128a0bfa1bc0cdcfbcdb9fc28a0c82487aa8a77ec9b48b4f0fead2690f2e74a62ead3add0f618ee3b0ff83ba22b8d0015c746eafa4a1086cd47ce2e1318601c87b208f7dd1d3511428a227340702dec6d3b38a6e6a65a4c33cd3d376e1244f8b12b0e01b8203377eb9757cc8401394e37242267639b728871378463f0d74aff05af41bd3da7195d62f28cacf4ad63afb77f097cf847946bd827407db60008196c848b4c07574f1ce4ee3b372f99cbb584310639a00097cf38cac6898f2bb0304682dee8d2a8a03315d7334f852409ed56845924dd9ee2eccbc2e41fccdb655beefe9b8a856a27ed82ad89d364f312457f9437a48cc78e6f8bd6304adf255e37fa584649e2f8e69271af3f794cc93212a6ff44a1c68740485525627192356a44964aab2401eef6fbcd153763b5e2e4e2579b0c79c5a1a3e40457224f93ad07f1111038f6110220c20637af2fa440a5ef7765a51c26280b8bddfcfa3b4d8392dc484fbf12290da06a516495e79fabc20e6ca8cde8876141b58feea660d9d9419ba15533b7f0240b99c0c7632b3b9a84352c02c81e8238dcc663e67301a8e6ea1c8295b48d2472096a9163e171cc85f3545d5de78630ee105cf7d366ab969007c65cf293d44f2e56d922dbbedbfa23e9ac57338b64c1125fbaaa23135ca4293374790858f00ba1bd6d4602eb89ebff6cddfae2f05239f2747bdb3d05286aed624436ddd92c8e02f42d0dadc52ab9a40498b0f7cf6413dbb4d7958c2a7e60afbc5732ff7fb626f2ca5897554b181a71f1447f6c26807dda3c43a5b891419b4b5809f4c94d227384e32813a8c5dba4c399293cf11e9fdb7c05fff75ac7d1990e837617172546d83205075997f923db15a81986d3c6abad71c29069fe8a26da87f525f840569ddfa0507dc48729488b66da5663e73f2d0101abd8e18ef676439bb60ce735faa63cb8491f518559b472d6d35758ba3c9b347ebe3c37ce9b5084107ea57f6b5f9fa66366fbf44fa0ebaccfde3feb7e59f76fc2b6c710a63faeb24422ef5b99f0c90bdb6fc2ac36cf070a08d9ebf482855037a00d9595877fa18af418d961862ef8a9890f596a177435c235a3e6753d17792d25d12cf7d43655556ad44a1a8fe0a20db30ec9aec8dbb0a36a9c12db8b245c5409df961a7c7417f37fcddf421af7aceba4c7bef02e8bf534ae91d89d2b6dd9e901f46eff43f3a50102fa9381823b0198c10e76af36d4149acb2129765cb9eccd197a5a2cbc088b58465a3f6331f7c79aa46d8fa5a0614009bf694cc004ba1b3f838454d5e7d7bdf59358ec669cde512f22c3b10f91be9ab6e98b2e718d5120cf4843271b4bc0a63805b21ca717cc65a8d4e90fa1cdb63afb471eea4d4d54e601e819f6e99aaf79c4ed6b7f941e354a1b7b5c768f73d27a48377a4ff224b87301e8a2d3a8203878eef4245b80a910aac2400a9ff876f94c267d487637490c5fe7b9e5062dd0c20bc5c9fcffd8081267a883fff307b6af31783f162c7ea5f3a2b56d6eb9edc22580dad6de151b347b30fe1176259805056017605cc8c2336d319e5f1fa3fbf657f5e396f2c8b67758fbdbde2e011cc56dad49059aab8b51e74edc4c99a402d9b534c357235329f612e0de987112b078d423fd498ad9ab8ab274a2d7e7134836e2fc8c61c85e160e262d9f22ac97fd9ac37b808fbc95de853cb9cd3422ba0cd76257a93960a24697d42a52d44f9dbf146f9cbce01e38ef6dc37ad76a64520e2bf390c2f16c172ba3ea34865166dd7e13e23be09f44ce67d44b374bc7543d0585ea1616ff436284eccaf42b4b07f35801d4ab4fc24c7c15bc444428817d426d93c77d5ca522c8e196e9b3c24eb5da56cdbb6fdaa309e77e31ff812a5f4b0f9a466462769a2e72c66f6eff7d242f1af0bdca3088b3c1d398a184b3d00ca70bad18a68f543039be4ef02b17baadb989bb702b192b877d6705cdf08521ad0a26d6531ac3181e50b43a6bf4f402eb16486dde8a599e5f6afede4d5367e9be2e8c8e2490c7a3cb29cdf4a3369d196995d842d32c17ab1d39668983e7102e9390abdbf140c47e7b233e171987d47bdcabd1f1e0ebfd23ca63d6ff0084a144cd2f7c59c8a0c7e2161f826ae6355d1e44fa0af36f6bfd4f2b3e2d1ce5bf2ab70ba63bc555d1d8cf398bab6a45267b5a0e7863cec31fa0ffa12eb5f0d60c993c6f73223e19a70cb001def394e221ed1912911e1023cec3c47b8f6f15367ceb9cdc449e740547805c45229e06b47c1bfc86d5da836cc1ad99f1e920977ee270e71ff7d73b2835b824ad0e427da94b47f4dbab9f82a764cd0c9ca670075b4f13d1a0b4e65a7d7cf0e3288656701735990920a112dc858492032e4bce5a2e0da96270a4040a925e642f7d7586335a7d51785fe4c7929484a727ff93eb0062d4d5fd380d91ce99c90fae9de5efdde27fc3ee5d95ad71499e8aca1826ae8fff6864211480aeaba615af54461d8ccd11e0633ab5e0dff42deb9e116df0cb0d1d5bd73406584241d56cf75e188a543b42125f4c63a3a3d688d152688cce6a31a6fff3b07cc8853b311ac8da6044744cc4015f6e8c0c3337aeb564edcf3acd60575cf8587d659f4903b490b43192ba13006a033d02b9c2b25741271fa0148a7352ebc7e250c4db5f6d82d8addc546e0c61730ebcee1250d910d4847a702a23fec1ed74c9711e19334924c1722e648807f10f1261867a0ab315ed5694ec10048870995ff854303b5841e8fb2d31a1113ec92d8acd918b94c1d4c3e717f1510e27b70d4e5e1f6a91df3823d8d761bee2dc2c798e83b6c2c802fab3f5962b05eabdce68a071f9836b008b0db7a81acd611a83f46a4f385ced8c35ffb40fbf45fcda2078c92168426f0385f58e693b3ae56e43ba7441cade9a166ded1715987e13d7225341f3dd0f7f95164c4fcd8bcae683b87b7acf5b4eb965272e3e933e374374d165452c9d0866fbd776987a0d52a5b496b57a3d5288580fb50103bcf25eaea0d22a220ee33d7f1883301060ab4c7fcf99cd46d55bb4939e7f0e8279db91444519fbaf7e2f115169801d84865963be0520ae07865a8f2e3c020ce93c029e79be84dcabeea524ee10fa96499cb78b16b8048c96e6ce2fb3a81aef81ec1752388f203915aac569c7bdf68de7952633ceb772ff01290abfed38440630757dd2c53e2b3f4a2e389c1c467eea961d1d817602f36771c0120b60f1851e10e6f4e92790282c56dbf33c6680eb9a2f31844578565771f1290630d403882c1d8efd273b474219b8ad4f5cad34df7d9bb5fa875bf556e6429e888a80c934a01768f43a5ae5eb1d9c8f5009fa607bd68384b0cb04555534a0fb0d7cfd94e77587066bd85fc20f6de9809594c92e7bad5f1b464699f1b23176", 0x1000, 0x100}, {&(0x7f0000002600)="2e157d26cf8d7dc39ee0f0c4b948e9e3be50de084678693b8b6248ff1fe50a54c126c41562190684ebfad931f092c01bcfbdb179288719ada867d7465222b5eab041fe68a4cb6fe7aaa98e212bf29c5e40855e9a032ff503bc1542d7917b0758bf4a3290a5e6c8734723f3365d05795fd905d9b64d3ea1d0a843503233d57e832e220ae69b535fc6f14d64a1d9804b42870627f1beb2fae76788fd3b43", 0x9d, 0xe41}, {&(0x7f00000026c0)="119497100d2760047e4de00368c0d19c6e70175ea7e7d514c6bae545295df7573b22f48a0cd6eb4931365554ddda566cd5eb3d96305f2fe543c9aca524cd1e56093d7c7f828a76dfc3415047a37d84aeb45f30aa371c93c2f79a5a1dbc45f4245395301c2a5439a42467159935a1495dd911584617f3f7db271a02c5af6e8ca50644f15e2075b76018a666db5acbdc56590c44098e32f44fb3797d5d84a34a95fceb27805b766382613630119835eaa1cb9c3d480e30ad6c78ef84ca7896b2ad25150e7ec3f4160261bc7e50523fac6d", 0xd0, 0x8}, {&(0x7f00000027c0), 0x0, 0x80000001}, {&(0x7f0000002800)="46f597534bc87d71360f44db0e7332392df5a5f67e915b6d6394c096482bd35dbf512e45f4c82b68d855524a", 0x2c, 0x6}], 0x80, &(0x7f00000029c0)={[{@grpquota}, {@uid={'uid', 0x3d, 0xee01}}, {@quota}, {@uid={'uid', 0x3d, r1}}], [{@subj_role={'subj_role', 0x3d, 'obj_type'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}]}) lseek(r0, 0x0, 0x2) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x41) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f00000027c0)=0xffeffffd) r3 = syz_open_procfs(0x0, 0x0) renameat(r3, &(0x7f0000000140)='./cgroup\x00', r3, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="9f47b14a840d29d816ccde060694e4ea503fdd6695c00cdb70f067fb01637269eebb4c06ca642263c581cb573907fe3bce0852b6e23027d1e002bf2defb2d82baa4378e9386409c5d6f6bce695ab66b37375699e983ce891afa755ee4de74e8e7c848607e52caedf35dbbc854bdf6fcf47f217cbfce65384ba051063e9471f49df3f9472daa0395bd2", @ANYBLOB="00048116d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) dup3(r3, r2, 0x80000) r4 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0xf8349000) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x2, 0x3, &(0x7f0000001340)=[{&(0x7f00000001c0)="332e1277c5380c339a473e8fa34ea4d5e4fa9f1ad7137c66756ee4c0c3d149bd2851bbd372135cabd0afdd00f63e97fe3f51912fffa84d34ec6232eb17f55b8f7c37ce7bbc7f620cd57d7bca3ca477aea53fbcc19209065773b3e9a836f9d282047a5e1641f856b22a2161e1b0090a857795b40c8361058e7f5b5004d6c30a9c7b375e3a553b0b9261f274fbba97f5017cbeaaa93666391bd71e2461bcbf0f257605d38d4b9994132060de692d42a785bc2472cbb461e95a18ba2d1f6d72751c7ceaa012f5f48a0df07ac02d447bd8612f316c56bfa13a2c6f17d5c976a83eb4", 0xe0, 0x10001}, {&(0x7f0000000340)="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", 0x1000, 0x4}, {&(0x7f00000002c0)="dc326f340bd0f750a8900600f209", 0xe, 0xb9}], 0x2, &(0x7f0000002a40)=ANY=[@ANYBLOB='huge=never,huge=never,size=0ck,uid=', @ANYRESHEX, @ANYBLOB="2c687567653d616c776179732c6f626a5f726f6c653d2c4c2c646f6e745f61707072616973652c736d61636b66736465663d275e2c2c25252e5d233a2d2d2d295d7b2c736d61636b66736465663d6d73646f730008000000636b66736465663d6d73646f7b002c7063723d303030303030a47c88aca0e530303030a5d530303030303032332c6f626a5f747970653d273a7d2e3a402c00b285a4c2caf4c5275b349ecb43e1f201d7e7bd54832b9d9bbb807f807d42edbae9113612fc06c677d228c6a23336ea0beee14eeb6e08ce071c048d7f7b05eb3eb45c0883db682feadbc280c4ef98754b53d1bb0464d7419287c86a3709492624a4518b8144076105569cdcedcb3d599d5b4d1affb2464f2f70a4169861ca84b9424a466824b1391e2fa2c1f320472fcf5c23761f14ac6cddb16fa6285c3fc4dc55206150bef666cfe2af24a4d442"]) sendfile(r0, r4, 0x0, 0x8400fffffffa) [ 2223.710319][T21777] loop0: detected capacity change from 0 to 87 [ 2223.713321][T21780] loop3: detected capacity change from 0 to 87 [ 2223.734898][T13101] [ 2223.742025][T13101] floppy driver state [ 2223.765067][T13101] ------------------- [ 2223.787453][T13101] now=4295159223 last interrupt=4295141312 diff=17911 last called handler=recal_interrupt [ 2223.807458][T13101] timeout_message=lock fdc [ 2223.814689][T13101] last output bytes: [ 2223.821084][T13101] 0 90 4295139496 [ 2223.828432][T13101] 1 90 4295139496 [ 2223.833877][T13101] 2 90 4295139496 [ 2223.839497][T13101] 24 90 4295139496 [ 2223.847085][T13101] 1b 90 4295139496 [ 2223.862813][T13101] ff 90 4295139496 [ 2223.871985][T13101] 12 80 4295141312 [ 2223.893338][T13101] 3 90 4295141312 [ 2223.904995][T13101] 13 80 4295141312 [ 2223.946361][T13101] 0 90 4295141312 [ 2223.949299][T21780] syz-executor.3: attempt to access beyond end of device [ 2223.949299][T21780] loop3: rw=0, want=90, limit=87 [ 2223.953981][T13101] 1a 90 4295141312 [ 2223.982651][T13101] 0 90 4295141312 [ 2223.987551][T13101] 3 80 4295141312 [ 2223.991533][T13101] a1 90 4295141312 [ 2224.002383][T13101] 1e 90 4295141312 [ 2224.010063][T13101] 7 80 4295141312 [ 2224.025212][T13101] 1 90 4295141312 [ 2224.036009][T13101] 8 80 4295141312 [ 2224.045225][T13101] 4 80 4295141312 [ 2224.052305][T13101] 1 90 4295141312 [ 2224.056941][T13101] last result at 4295141492 [ 2224.070178][T13101] last redo_fd_request at 4295159218 [ 2224.078640][T13101] status=80 [ 2224.082660][T13101] fdc_busy=1 [ 2224.086446][T13101] floppy_work.func=floppy_work_workfn [ 2224.098217][T13101] cont=ffffffff8a1f4920 [ 2224.106931][T13101] current_req=0000000000000000 [ 2224.115117][T13101] command_status=-1 [ 2224.121271][T13101] [ 2224.126184][T13101] floppy1: floppy timeout called [ 2224.177341][T11777] [ 2224.204917][T11777] floppy driver state [ 2224.230932][T11777] ------------------- [ 2224.237240][T11777] now=4295159268 last interrupt=4295141312 diff=17956 last called handler=recal_interrupt [ 2224.260374][T11777] timeout_message=lock fdc [ 2224.271831][T11777] last output bytes: [ 2224.286948][T21785] loop2: detected capacity change from 0 to 87 08:03:57 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 1) 08:03:57 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') syz_io_uring_setup(0x852, &(0x7f00000001c0)={0x0, 0x758b, 0x8, 0x2, 0x337}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r2 = syz_open_procfs(0x0, 0x0) renameat(r2, &(0x7f0000000140)='./cgroup\x00', r2, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r2, &(0x7f00000002c0)={0x202, 0x1, 0x6}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}, 0xffffadc2) 08:03:57 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180), 0x0, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:57 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2224.299258][T11777] 0 90 4295139496 [ 2224.310448][T21786] loop3: detected capacity change from 0 to 87 [ 2224.314880][T21789] loop0: detected capacity change from 0 to 87 [ 2224.318310][T11777] 1 90 4295139496 [ 2224.340273][T11777] 2 90 4295139496 [ 2224.352292][T11777] 24 90 4295139496 [ 2224.368037][T11777] 1b 90 4295139496 [ 2224.372913][T11777] ff 90 4295139496 [ 2224.378467][T11777] 12 80 4295141312 [ 2224.379639][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 2224.379661][ T37] audit: type=1804 audit(1638173037.855:932): pid=21786 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir938124162/syzkaller.1iDaaV/1466/file1/bus" dev="loop3" ino=1048776 res=1 errno=0 [ 2224.382004][T21786] FAULT_INJECTION: forcing a failure. [ 2224.382004][T21786] name failslab, interval 1, probability 0, space 0, times 0 [ 2224.382085][T21786] CPU: 0 PID: 21786 Comm: syz-executor.3 Not tainted 5.16.0-rc2-syzkaller #0 [ 2224.382125][T21786] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2224.382152][T21786] Call Trace: [ 2224.382212][T21786] [ 2224.382235][T21786] dump_stack_lvl+0xcd/0x134 [ 2224.382410][T21786] should_fail.cold+0x5/0xa [ 2224.382460][T21786] ? alloc_pipe_info+0x105/0x590 [ 2224.382603][T21786] should_failslab+0x5/0x10 [ 2224.382685][T21786] kmem_cache_alloc_trace+0x55/0x2c0 [ 2224.382734][T21786] alloc_pipe_info+0x105/0x590 [ 2224.382766][T21786] splice_direct_to_actor+0x6f1/0x8c0 [ 2224.382834][T21786] ? generic_file_splice_read+0x6d0/0x6d0 [ 2224.382884][T21786] ? apparmor_file_permission+0x264/0x4e0 [ 2224.386401][T11777] 3 90 4295141312 [ 2224.386415][T11777] 13 80 4295141312 [ 2224.386424][T11777] 0 90 4295141312 [ 2224.386433][T11777] 1a 90 4295141312 [ 2224.386441][T11777] 0 90 4295141312 [ 2224.386450][T11777] 3 80 4295141312 [ 2224.386458][T11777] a1 90 4295141312 [ 2224.386466][T11777] 1e 90 4295141312 [ 2224.386475][T11777] 7 80 4295141312 [ 2224.386483][T11777] 1 90 4295141312 [ 2224.386491][T11777] 8 80 4295141312 [ 2224.386499][T11777] 4 80 4295141312 [ 2224.386507][T11777] 1 90 4295141312 [ 2224.386516][T11777] last result at 4295141492 [ 2224.386522][T11777] last redo_fd_request at 4295159258 [ 2224.386613][T11777] status=80 [ 2224.386623][T11777] fdc_busy=1 [ 2224.386630][T11777] floppy_work.func=floppy_work_workfn [ 2224.386660][T11777] cont=ffffffff8a1f4920 [ 2224.386667][T11777] current_req=0000000000000000 [ 2224.386674][T11777] command_status=-1 [ 2224.386680][T11777] [ 2224.386740][T11777] floppy1: floppy timeout called [ 2224.390996][ T37] audit: type=1800 audit(1638173037.855:933): pid=21786 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048776 res=0 errno=0 [ 2224.422527][T21786] ? do_splice_to+0x250/0x250 [ 2224.422582][T21786] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2224.422662][T21786] ? security_file_permission+0xab/0xd0 [ 2224.422736][T21786] do_splice_direct+0x1b3/0x280 [ 2224.422774][T21786] ? splice_direct_to_actor+0x8c0/0x8c0 [ 2224.676929][T21786] do_sendfile+0xaf2/0x1250 [ 2224.681707][T21786] ? do_pwritev+0x270/0x270 [ 2224.687388][T21786] ? __context_tracking_exit+0xb8/0xe0 [ 2224.693604][T21786] ? lock_downgrade+0x6e0/0x6e0 [ 2224.698705][T21786] ? lock_downgrade+0x6e0/0x6e0 [ 2224.703890][T21786] __ia32_compat_sys_sendfile+0x1dd/0x220 [ 2224.709636][T21786] ? __ia32_sys_sendfile64+0x210/0x210 [ 2224.715400][T21786] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2224.721057][T21786] __do_fast_syscall_32+0x65/0xf0 [ 2224.726580][T21786] do_fast_syscall_32+0x2f/0x70 [ 2224.731829][T21786] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2224.738336][T21786] RIP: 0023:0xf6edb549 [ 2224.742753][T21786] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2224.765030][T21786] RSP: 002b:00000000f44d55fc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2224.775266][T21786] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 2224.785807][T21786] RDX: 0000000000000000 RSI: 00000000fffffffa RDI: 0000000000000000 [ 2224.794824][T21786] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2224.803998][T21786] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2224.813378][T21786] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2224.823633][T21786] [ 2224.838044][T11777] [ 2224.844244][T11777] floppy driver state [ 2224.850882][T11777] ------------------- [ 2224.856108][T11777] now=4295159330 last interrupt=4295141312 diff=18018 last called handler=recal_interrupt [ 2224.869371][T11777] timeout_message=lock fdc [ 2224.875488][T11777] last output bytes: [ 2224.886444][T11777] 0 90 4295139496 [ 2224.892774][T11777] 1 90 4295139496 [ 2224.898436][T11777] 2 90 4295139496 [ 2224.903015][T11777] 24 90 4295139496 [ 2224.917965][T11777] 1b 90 4295139496 [ 2224.923766][T11777] ff 90 4295139496 [ 2224.937349][T11777] 12 80 4295141312 [ 2224.945552][T11777] 3 90 4295141312 [ 2224.953151][T11777] 13 80 4295141312 [ 2224.956918][T11777] 0 90 4295141312 [ 2224.962614][T11777] 1a 90 4295141312 [ 2224.965879][T11777] 0 90 4295141312 [ 2224.969763][T11777] 3 80 4295141312 [ 2224.973252][T11777] a1 90 4295141312 [ 2224.977414][T11777] 1e 90 4295141312 [ 2224.985121][T11777] 7 80 4295141312 [ 2224.989694][T11777] 1 90 4295141312 08:03:58 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)='mM', 0x2, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:03:58 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 2) 08:03:58 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') syz_io_uring_setup(0x852, &(0x7f00000001c0)={0x0, 0x758b, 0x8, 0x2, 0x337}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00', @ANYBLOB="000400000000fcdb2195bfb52a5d42d10eca"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) [ 2224.998173][T11777] 8 80 4295141312 [ 2225.004606][T11777] 4 80 4295141312 [ 2225.012867][T21793] loop2: detected capacity change from 0 to 87 [ 2225.019191][T21794] loop0: detected capacity change from 0 to 87 [ 2225.021209][T11777] 1 90 4295141312 [ 2225.038717][T21796] loop3: detected capacity change from 0 to 87 [ 2225.038909][T11777] last result at 4295141492 [ 2225.055555][T11777] last redo_fd_request at 4295159328 [ 2225.064193][T11777] status=80 [ 2225.068535][T11777] fdc_busy=1 [ 2225.073023][T11777] floppy_work.func=floppy_work_workfn 08:03:58 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 3) [ 2225.086418][ T37] audit: type=1804 audit(1638173038.555:934): pid=21796 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir938124162/syzkaller.1iDaaV/1467/file1/bus" dev="loop3" ino=1048777 res=1 errno=0 [ 2225.097946][T11777] cont=ffffffff8a1f4920 08:03:58 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') syz_io_uring_setup(0x852, &(0x7f00000001c0)={0x0, 0x758b, 0x8, 0x2, 0x337}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r1 = syz_open_procfs(0x0, 0x0) renameat(r1, &(0x7f0000000140)='./cgroup\x00', r1, &(0x7f0000000040)='./cgroup\x00') [ 2225.100122][T21796] FAULT_INJECTION: forcing a failure. [ 2225.100122][T21796] name failslab, interval 1, probability 0, space 0, times 0 [ 2225.100147][T21796] CPU: 0 PID: 21796 Comm: syz-executor.3 Not tainted 5.16.0-rc2-syzkaller #0 [ 2225.100164][T21796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 08:03:58 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)='mM', 0x2, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2225.100174][T21796] Call Trace: [ 2225.100180][T21796] [ 2225.100186][T21796] dump_stack_lvl+0xcd/0x134 [ 2225.100208][T21796] should_fail.cold+0x5/0xa [ 2225.100231][T21796] ? alloc_pipe_info+0x1e0/0x590 [ 2225.100247][T21796] should_failslab+0x5/0x10 [ 2225.100263][T21796] __kmalloc+0x72/0x340 [ 2225.100282][T21796] alloc_pipe_info+0x1e0/0x590 [ 2225.100299][T21796] splice_direct_to_actor+0x6f1/0x8c0 [ 2225.100322][T21796] ? generic_file_splice_read+0x6d0/0x6d0 [ 2225.100343][T21796] ? apparmor_file_permission+0x264/0x4e0 [ 2225.100363][T21796] ? do_splice_to+0x250/0x250 [ 2225.100380][T21796] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2225.100399][T21796] ? security_file_permission+0xab/0xd0 [ 2225.100422][T21796] do_splice_direct+0x1b3/0x280 [ 2225.100441][T21796] ? splice_direct_to_actor+0x8c0/0x8c0 [ 2225.100470][T21796] do_sendfile+0xaf2/0x1250 [ 2225.100496][T21796] ? do_pwritev+0x270/0x270 [ 2225.100528][T21796] ? __context_tracking_exit+0xb8/0xe0 [ 2225.100560][T21796] ? lock_downgrade+0x6e0/0x6e0 [ 2225.100598][T21796] ? lock_downgrade+0x6e0/0x6e0 [ 2225.100633][T21796] __ia32_compat_sys_sendfile+0x1dd/0x220 [ 2225.100662][T21796] ? __ia32_sys_sendfile64+0x210/0x210 [ 2225.100711][T21796] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2225.100744][T21796] __do_fast_syscall_32+0x65/0xf0 [ 2225.100780][T21796] do_fast_syscall_32+0x2f/0x70 [ 2225.100811][T21796] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2225.100842][T21796] RIP: 0023:0xf6edb549 [ 2225.100863][T21796] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2225.100903][T21796] RSP: 002b:00000000f44d55fc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2225.100932][T21796] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 2225.100963][T21796] RDX: 0000000000000000 RSI: 00000000fffffffa RDI: 0000000000000000 [ 2225.100981][T21796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2225.100998][T21796] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2225.101014][T21796] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2225.101050][T21796] [ 2225.143988][ T37] audit: type=1800 audit(1638173038.555:935): pid=21796 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048777 res=0 errno=0 [ 2225.204517][T11777] current_req=0000000000000000 [ 2225.488070][T11777] command_status=-1 [ 2225.493008][T11777] [ 2225.496037][T11777] floppy1: floppy timeout called [ 2225.557012][T11777] [ 2225.567801][T21798] loop3: detected capacity change from 0 to 87 08:03:59 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2225.590936][T11777] floppy driver state [ 2225.596086][T11777] ------------------- [ 2225.600931][T11777] now=4295159405 last interrupt=4295141312 diff=18093 last called handler=recal_interrupt [ 2225.614586][T21803] loop0: detected capacity change from 0 to 87 [ 2225.620522][T11777] timeout_message=lock fdc [ 2225.623865][T21804] loop2: detected capacity change from 0 to 87 [ 2225.628548][T11777] last output bytes: [ 2225.628561][T11777] 0 90 4295139496 [ 2225.628579][T11777] 1 90 4295139496 [ 2225.628595][T11777] 2 90 4295139496 [ 2225.636083][ T37] audit: type=1804 audit(1638173039.105:936): pid=21798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir938124162/syzkaller.1iDaaV/1468/file1/bus" dev="loop3" ino=1048779 res=1 errno=0 [ 2225.638337][T21798] FAULT_INJECTION: forcing a failure. [ 2225.638337][T21798] name failslab, interval 1, probability 0, space 0, times 0 [ 2225.638383][T21798] CPU: 1 PID: 21798 Comm: syz-executor.3 Not tainted 5.16.0-rc2-syzkaller #0 [ 2225.638414][T21798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2225.638431][T21798] Call Trace: [ 2225.638440][T21798] [ 2225.638451][T21798] dump_stack_lvl+0xcd/0x134 [ 2225.638488][T21798] should_fail.cold+0x5/0xa [ 2225.638523][T21798] ? mempool_alloc+0x146/0x350 [ 2225.638573][T21798] should_failslab+0x5/0x10 [ 2225.638603][T21798] kmem_cache_alloc+0x5e/0x3a0 [ 2225.638637][T21798] ? mempool_free_pages+0x20/0x20 [ 2225.638669][T21798] mempool_alloc+0x146/0x350 [ 2225.638707][T21798] ? mempool_resize+0x7d0/0x7d0 [ 2225.638735][T21798] ? lock_chain_count+0x20/0x20 [ 2225.638768][T21798] ? mark_lock+0xef/0x17b0 [ 2225.638814][T21798] ? mark_lock+0xef/0x17b0 [ 2225.638844][T21798] ? lock_chain_count+0x20/0x20 [ 2225.638881][T21798] bio_alloc_bioset+0x2ff/0x4a0 [ 2225.638986][T21798] ? bvec_alloc+0x200/0x200 [ 2225.639033][T21798] mpage_alloc+0x2f/0x1b0 [ 2225.639084][T21798] __mpage_writepage+0x126d/0x1960 08:03:59 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') syz_io_uring_setup(0x852, &(0x7f00000001c0)={0x0, 0x758b, 0x8, 0x2, 0x337}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_open_procfs(0x0, 0x0) [ 2225.639135][T21798] ? clean_buffers+0x360/0x360 [ 2225.639160][T21798] ? check_path.constprop.0+0x50/0x50 [ 2225.639202][T21798] ? find_held_lock+0x2d/0x110 [ 2225.639238][T21798] ? folio_clear_dirty_for_io+0x28c/0x790 [ 2225.639278][T21798] ? lock_downgrade+0x6e0/0x6e0 08:03:59 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 4) [ 2225.639317][T21798] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 08:03:59 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)='mM', 0x2, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2225.639352][T21798] ? percpu_counter_add_batch+0xbd/0x180 [ 2225.639435][T21798] write_cache_pages+0x6f4/0x10c0 [ 2225.639480][T21798] ? clean_buffers+0x360/0x360 [ 2225.639514][T21798] ? __wb_update_bandwidth+0x5a0/0x5a0 [ 2225.639556][T21798] ? mark_lock+0xef/0x17b0 [ 2225.639641][T21798] ? lock_chain_count+0x20/0x20 [ 2225.639686][T21798] ? mark_lock+0xef/0x17b0 [ 2225.639718][T21798] ? fat_add_cluster+0xf0/0xf0 [ 2225.639809][T21798] ? fat_readahead+0x20/0x20 [ 2225.639839][T21798] mpage_writepages+0xd8/0x230 [ 2225.639868][T21798] ? mpage_end_io+0x2d0/0x2d0 [ 2225.639907][T21798] ? fat_add_cluster+0xf0/0xf0 [ 2225.639940][T21798] ? __lock_acquire+0x162f/0x54a0 [ 2225.640003][T21798] do_writepages+0x1ab/0x690 [ 2225.640038][T21798] ? writeback_set_ratelimit+0x150/0x150 [ 2225.640073][T21798] ? wbc_attach_and_unlock_inode+0x8a/0x8d0 [ 2225.640111][T21798] ? lock_downgrade+0x6e0/0x6e0 [ 2225.640143][T21798] ? lock_release+0x720/0x720 [ 2225.640182][T21798] ? do_raw_spin_lock+0x120/0x2b0 [ 2225.640231][T21798] ? do_raw_spin_unlock+0x171/0x230 [ 2225.640265][T21798] ? _raw_spin_unlock+0x24/0x40 [ 2225.640296][T21798] ? wbc_attach_and_unlock_inode+0x8a/0x8d0 [ 2225.640336][T21798] filemap_fdatawrite_wbc+0x143/0x1b0 [ 2225.640368][T21798] ? lock_downgrade+0x6e0/0x6e0 [ 2225.646978][ T37] audit: type=1800 audit(1638173039.105:937): pid=21798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048779 res=0 errno=0 [ 2225.647275][T11777] 24 90 4295139496 [ 2225.647297][T11777] 1b 90 4295139496 [ 2225.647312][T11777] ff 90 4295139496 [ 2225.647327][T11777] 12 80 4295141312 [ 2225.647343][T11777] 3 90 4295141312 [ 2225.647356][T11777] 13 80 4295141312 [ 2225.647369][T11777] 0 90 4295141312 [ 2225.647383][T11777] 1a 90 4295141312 [ 2225.647398][T11777] 0 90 4295141312 [ 2225.647412][T11777] 3 80 4295141312 [ 2225.647445][T11777] a1 90 4295141312 [ 2225.647459][T11777] 1e 90 4295141312 [ 2225.647473][T11777] 7 80 4295141312 [ 2225.647487][T11777] 1 90 4295141312 [ 2225.647502][T11777] 8 80 4295141312 [ 2225.647517][T11777] 4 80 4295141312 [ 2225.647540][T11777] 1 90 4295141312 [ 2225.647557][T11777] last result at 4295141492 [ 2225.647568][T11777] last redo_fd_request at 4295159398 [ 2225.647661][T11777] status=80 [ 2225.647675][T11777] fdc_busy=1 [ 2225.647685][T11777] floppy_work.func=floppy_work_workfn [ 2225.647713][T11777] cont=ffffffff8a1f4920 [ 2225.647725][T11777] current_req=0000000000000000 [ 2225.647737][T11777] command_status=-1 [ 2225.647748][T11777] [ 2225.647919][T11777] floppy1: floppy timeout called [ 2225.650416][T21798] filemap_write_and_wait_range+0xe1/0x1a0 [ 2225.650463][T21798] ? xas_reload+0x440/0x440 [ 2225.650518][T21798] generic_file_read_iter+0x4a8/0x5a0 [ 2225.705778][T11777] [ 2225.712739][T21798] generic_file_splice_read+0x453/0x6d0 [ 2225.712790][T21798] ? folio_flags.constprop.0+0x70/0x70 [ 2225.712830][T21798] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2225.712870][T21798] ? security_file_permission+0xab/0xd0 [ 2225.712906][T21798] ? folio_flags.constprop.0+0x70/0x70 [ 2225.712939][T21798] do_splice_to+0x1bf/0x250 [ 2225.746628][T11777] floppy driver state [ 2225.750300][T21798] splice_direct_to_actor+0x2c2/0x8c0 [ 2225.750350][T21798] ? generic_file_splice_read+0x6d0/0x6d0 [ 2225.750389][T21798] ? do_splice_to+0x250/0x250 [ 2225.750418][T21798] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2225.750450][T21798] ? security_file_permission+0xab/0xd0 [ 2225.750490][T21798] do_splice_direct+0x1b3/0x280 [ 2225.750522][T21798] ? splice_direct_to_actor+0x8c0/0x8c0 [ 2225.750572][T21798] do_sendfile+0xaf2/0x1250 [ 2225.760500][T11777] ------------------- [ 2225.762380][T21798] ? do_pwritev+0x270/0x270 [ 2225.762446][T21798] ? __context_tracking_exit+0xb8/0xe0 [ 2225.762477][T21798] ? lock_downgrade+0x6e0/0x6e0 [ 2225.772379][T11777] now=4295159422 last interrupt=4295141312 diff=18110 last called handler=recal_interrupt [ 2225.774088][T21798] ? lock_downgrade+0x6e0/0x6e0 [ 2225.774133][T21798] __ia32_compat_sys_sendfile+0x1dd/0x220 [ 2225.774166][T21798] ? __ia32_sys_sendfile64+0x210/0x210 [ 2225.774197][T21798] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2225.783190][T11777] timeout_message=lock fdc [ 2225.786598][T21798] __do_fast_syscall_32+0x65/0xf0 [ 2225.786644][T21798] do_fast_syscall_32+0x2f/0x70 [ 2225.786677][T21798] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2225.786710][T21798] RIP: 0023:0xf6edb549 [ 2225.792695][T11777] last output bytes: [ 2225.798629][T21798] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2225.798663][T21798] RSP: 002b:00000000f44d55fc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2225.798691][T21798] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 2225.798709][T21798] RDX: 0000000000000000 RSI: 00000000fffffffa RDI: 0000000000000000 [ 2225.798726][T21798] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2225.798743][T21798] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2225.798759][T21798] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2225.798795][T21798] [ 2226.522058][T11777] 0 90 4295139496 [ 2226.537103][T11777] 1 90 4295139496 [ 2226.547417][T11777] 2 90 4295139496 [ 2226.554560][T11777] 24 90 4295139496 [ 2226.560837][T11777] 1b 90 4295139496 [ 2226.565658][T11777] ff 90 4295139496 [ 2226.573216][T11777] 12 80 4295141312 [ 2226.614274][T11777] 3 90 4295141312 [ 2226.622070][T11777] 13 80 4295141312 [ 2226.637517][T21807] loop0: detected capacity change from 0 to 87 [ 2226.658573][T11777] 0 90 4295141312 [ 2226.666686][T21809] loop3: detected capacity change from 0 to 87 [ 2226.672957][T11777] 1a 90 4295141312 [ 2226.680779][T11777] 0 90 4295141312 [ 2226.687770][T21811] loop2: detected capacity change from 0 to 87 [ 2226.696464][T11777] 3 80 4295141312 [ 2226.702094][T11777] a1 90 4295141312 [ 2226.707104][T11777] 1e 90 4295141312 [ 2226.715482][T11777] 7 80 4295141312 [ 2226.724028][T11777] 1 90 4295141312 [ 2226.729779][T11777] 8 80 4295141312 [ 2226.734578][T11777] 4 80 4295141312 [ 2226.737770][ T37] audit: type=1804 audit(1638173040.205:938): pid=21809 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir938124162/syzkaller.1iDaaV/1469/file1/bus" dev="loop3" ino=1048782 res=1 errno=0 [ 2226.740987][T11777] 1 90 4295141312 [ 2226.741340][T21809] FAULT_INJECTION: forcing a failure. [ 2226.741340][T21809] name failslab, interval 1, probability 0, space 0, times 0 [ 2226.741398][T21809] CPU: 2 PID: 21809 Comm: syz-executor.3 Not tainted 5.16.0-rc2-syzkaller #0 [ 2226.741427][T21809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2226.741443][T21809] Call Trace: 08:04:00 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db9", 0x3, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2226.741452][T21809] [ 2226.741462][T21809] dump_stack_lvl+0xcd/0x134 08:04:00 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') syz_io_uring_setup(0x852, &(0x7f00000001c0)={0x0, 0x758b, 0x8, 0x2, 0x337}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) [ 2226.741499][T21809] should_fail.cold+0x5/0xa [ 2226.741536][T21809] ? mempool_alloc+0x146/0x350 08:04:00 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 5) [ 2226.741568][T21809] should_failslab+0x5/0x10 [ 2226.741597][T21809] kmem_cache_alloc+0x5e/0x3a0 [ 2226.741644][T21809] ? mempool_free_pages+0x20/0x20 [ 2226.741675][T21809] mempool_alloc+0x146/0x350 [ 2226.741711][T21809] ? mempool_resize+0x7d0/0x7d0 [ 2226.741744][T21809] ? mempool_resize+0x7d0/0x7d0 [ 2226.741772][T21809] ? lock_chain_count+0x20/0x20 [ 2226.741801][T21809] ? mark_lock+0xef/0x17b0 [ 2226.741833][T21809] bvec_alloc+0x16b/0x200 [ 2226.741863][T21809] bio_alloc_bioset+0x376/0x4a0 [ 2226.741895][T21809] ? bvec_alloc+0x200/0x200 [ 2226.741938][T21809] mpage_alloc+0x2f/0x1b0 [ 2226.741978][T21809] __mpage_writepage+0x126d/0x1960 [ 2226.742029][T21809] ? clean_buffers+0x360/0x360 [ 2226.742054][T21809] ? check_path.constprop.0+0x50/0x50 [ 2226.742096][T21809] ? find_held_lock+0x2d/0x110 [ 2226.742132][T21809] ? folio_clear_dirty_for_io+0x28c/0x790 [ 2226.742161][T21809] ? lock_downgrade+0x6e0/0x6e0 [ 2226.742199][T21809] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2226.742233][T21809] ? percpu_counter_add_batch+0xbd/0x180 [ 2226.742282][T21809] write_cache_pages+0x6f4/0x10c0 [ 2226.742324][T21809] ? clean_buffers+0x360/0x360 [ 2226.742357][T21809] ? __wb_update_bandwidth+0x5a0/0x5a0 [ 2226.742393][T21809] ? mark_lock+0xef/0x17b0 [ 2226.742429][T21809] ? lock_chain_count+0x20/0x20 [ 2226.742470][T21809] ? mark_lock+0xef/0x17b0 [ 2226.742496][T21809] ? fat_add_cluster+0xf0/0xf0 [ 2226.742524][T21809] ? fat_readahead+0x20/0x20 [ 2226.742550][T21809] mpage_writepages+0xd8/0x230 [ 2226.742572][T21809] ? mpage_end_io+0x2d0/0x2d0 [ 2226.742604][T21809] ? fat_add_cluster+0xf0/0xf0 [ 2226.742630][T21809] ? __lock_acquire+0x162f/0x54a0 [ 2226.742690][T21809] do_writepages+0x1ab/0x690 [ 2226.742726][T21809] ? writeback_set_ratelimit+0x150/0x150 [ 2226.742761][T21809] ? wbc_attach_and_unlock_inode+0x8a/0x8d0 [ 2226.742796][T21809] ? lock_downgrade+0x6e0/0x6e0 [ 2226.742826][T21809] ? lock_release+0x720/0x720 [ 2226.742862][T21809] ? do_raw_spin_lock+0x120/0x2b0 [ 2226.742897][T21809] ? do_raw_spin_unlock+0x171/0x230 [ 2226.742937][T21809] ? _raw_spin_unlock+0x24/0x40 [ 2226.742969][T21809] ? wbc_attach_and_unlock_inode+0x8a/0x8d0 [ 2226.743009][T21809] filemap_fdatawrite_wbc+0x143/0x1b0 [ 2226.743038][T21809] ? lock_downgrade+0x6e0/0x6e0 [ 2226.743072][T21809] filemap_write_and_wait_range+0xe1/0x1a0 [ 2226.743104][T21809] ? xas_reload+0x440/0x440 [ 2226.743158][T21809] generic_file_read_iter+0x4a8/0x5a0 [ 2226.743199][T21809] generic_file_splice_read+0x453/0x6d0 [ 2226.743237][T21809] ? folio_flags.constprop.0+0x70/0x70 [ 2226.743280][T21809] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2226.743341][T21809] ? security_file_permission+0xab/0xd0 [ 2226.743384][T21809] ? folio_flags.constprop.0+0x70/0x70 [ 2226.743422][T21809] do_splice_to+0x1bf/0x250 [ 2226.743460][T21809] splice_direct_to_actor+0x2c2/0x8c0 [ 2226.743535][T21809] ? generic_file_splice_read+0x6d0/0x6d0 [ 2226.743580][T21809] ? do_splice_to+0x250/0x250 [ 2226.743612][T21809] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2226.743647][T21809] ? security_file_permission+0xab/0xd0 [ 2226.743692][T21809] do_splice_direct+0x1b3/0x280 [ 2226.743727][T21809] ? splice_direct_to_actor+0x8c0/0x8c0 [ 2226.743784][T21809] do_sendfile+0xaf2/0x1250 [ 2226.743831][T21809] ? do_pwritev+0x270/0x270 [ 2226.743868][T21809] ? __context_tracking_exit+0xb8/0xe0 [ 2226.743899][T21809] ? lock_downgrade+0x6e0/0x6e0 [ 2226.743936][T21809] ? lock_downgrade+0x6e0/0x6e0 [ 2226.743974][T21809] __ia32_compat_sys_sendfile+0x1dd/0x220 [ 2226.744003][T21809] ? __ia32_sys_sendfile64+0x210/0x210 [ 2226.744039][T21809] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2226.744077][T21809] __do_fast_syscall_32+0x65/0xf0 [ 2226.744127][T21809] do_fast_syscall_32+0x2f/0x70 [ 2226.744160][T21809] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2226.744194][T21809] RIP: 0023:0xf6edb549 [ 2226.744218][T21809] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2226.744248][T21809] RSP: 002b:00000000f44d55fc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2226.744277][T21809] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 2226.744296][T21809] RDX: 0000000000000000 RSI: 00000000fffffffa RDI: 0000000000000000 [ 2226.744314][T21809] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2226.744332][T21809] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2226.744349][T21809] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2226.744389][T21809] [ 2226.817982][ T37] audit: type=1800 audit(1638173040.215:939): pid=21809 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048782 res=0 errno=0 [ 2226.822354][T11777] last result at 4295141492 [ 2227.528008][T11777] last redo_fd_request at 4295159410 [ 2227.535117][T11777] status=80 [ 2227.539817][T11777] fdc_busy=1 [ 2227.543943][T11777] floppy_work.func=floppy_work_workfn [ 2227.552858][T11777] cont=ffffffff8a1f4960 [ 2227.581408][T11777] current_req=0000000000000000 [ 2227.590950][T11777] command_status=-1 [ 2227.598777][T11777] [ 2227.603724][T11777] floppy1: floppy timeout called [ 2227.612676][T11777] floppy.c: no request in request_done [ 2227.632111][T11777] [ 2227.636022][T11777] floppy driver state [ 2227.646932][T21813] loop3: detected capacity change from 0 to 87 [ 2227.649592][T21815] loop0: detected capacity change from 0 to 87 [ 2227.654872][T11777] ------------------- [ 2227.675080][T11777] now=4295159612 last interrupt=4295141312 diff=18300 last called handler=recal_interrupt [ 2227.675348][T21817] loop2: detected capacity change from 0 to 87 [ 2227.695113][T11777] timeout_message=lock fdc [ 2227.704713][T11777] last output bytes: [ 2227.710457][T11777] 0 90 4295139496 [ 2227.716022][T11777] 1 90 4295139496 [ 2227.728465][T11777] 2 90 4295139496 [ 2227.733032][ T37] audit: type=1804 audit(1638173041.205:940): pid=21813 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir938124162/syzkaller.1iDaaV/1470/file1/bus" dev="loop3" ino=1048783 res=1 errno=0 [ 2227.733962][T11777] 24 90 4295139496 [ 2227.733984][T11777] 1b 90 4295139496 [ 2227.734001][T11777] ff 90 4295139496 [ 2227.734017][T11777] 12 80 4295141312 [ 2227.734033][T11777] 3 90 4295141312 [ 2227.734048][T11777] 13 80 4295141312 [ 2227.734064][T11777] 0 90 4295141312 08:04:01 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') [ 2227.734079][T11777] 1a 90 4295141312 [ 2227.766345][T21813] FAULT_INJECTION: forcing a failure. [ 2227.766345][T21813] name failslab, interval 1, probability 0, space 0, times 0 [ 2227.766386][T21813] CPU: 2 PID: 21813 Comm: syz-executor.3 Not tainted 5.16.0-rc2-syzkaller #0 [ 2227.766415][T21813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2227.766430][T21813] Call Trace: [ 2227.766438][T21813] [ 2227.766448][T21813] dump_stack_lvl+0xcd/0x134 [ 2227.766480][T21813] should_fail.cold+0x5/0xa [ 2227.766512][T21813] ? do_blockdev_direct_IO+0x23b/0x4380 [ 2227.766546][T21813] should_failslab+0x5/0x10 [ 2227.766573][T21813] kmem_cache_alloc+0x5e/0x3a0 [ 2227.766607][T21813] do_blockdev_direct_IO+0x23b/0x4380 [ 2227.778130][T11777] 0 90 4295141312 [ 2227.780857][ T37] audit: type=1800 audit(1638173041.205:941): pid=21813 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048783 res=0 errno=0 [ 2227.781206][T21813] ? fat_add_cluster+0xf0/0xf0 [ 2227.781260][T21813] ? lock_downgrade+0x6e0/0x6e0 [ 2227.785229][T11777] 3 80 4295141312 [ 2227.785244][T11777] a1 90 4295141312 [ 2227.785253][T11777] 1e 90 4295141312 [ 2227.785262][T11777] 7 80 4295141312 [ 2227.789494][T21813] ? pagevec_move_tail_fn+0xcc0/0xcc0 [ 2227.789534][T21813] ? sb_init_dio_done_wq+0x80/0x80 [ 2227.789597][T21813] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2227.793623][T11777] 1 90 4295141312 [ 2227.793638][T11777] 8 80 4295141312 [ 2227.797991][T21813] ? map_id_range_down+0x1c4/0x340 [ 2227.798061][T21813] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2227.798088][T21813] ? atime_needs_update+0x65/0x640 [ 2227.798185][T21813] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2227.798212][T21813] ? __blockdev_direct_IO+0x32/0x100 [ 2227.798239][T21813] ? fat_add_cluster+0xf0/0xf0 [ 2227.798280][T21813] fat_direct_IO+0x1e0/0x390 [ 2227.798312][T21813] generic_file_read_iter+0x251/0x5a0 [ 2227.798343][T21813] generic_file_splice_read+0x453/0x6d0 [ 2227.798374][T21813] ? folio_flags.constprop.0+0x70/0x70 [ 2227.798406][T21813] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2227.798438][T21813] ? security_file_permission+0xab/0xd0 [ 2227.798467][T21813] ? folio_flags.constprop.0+0x70/0x70 [ 2227.798496][T21813] do_splice_to+0x1bf/0x250 [ 2227.798523][T21813] splice_direct_to_actor+0x2c2/0x8c0 [ 2227.798552][T21813] ? generic_file_splice_read+0x6d0/0x6d0 [ 2227.798583][T21813] ? do_splice_to+0x250/0x250 [ 2227.798607][T21813] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2227.798632][T21813] ? security_file_permission+0xab/0xd0 [ 2227.798664][T21813] do_splice_direct+0x1b3/0x280 [ 2227.798691][T21813] ? splice_direct_to_actor+0x8c0/0x8c0 [ 2227.798737][T21813] do_sendfile+0xaf2/0x1250 [ 2227.798779][T21813] ? do_pwritev+0x270/0x270 [ 2227.798813][T21813] ? __context_tracking_exit+0xb8/0xe0 [ 2227.798839][T21813] ? lock_downgrade+0x6e0/0x6e0 [ 2227.798862][T21813] ? lock_downgrade+0x6e0/0x6e0 [ 2227.798890][T21813] __ia32_compat_sys_sendfile+0x1dd/0x220 [ 2227.798922][T21813] ? __ia32_sys_sendfile64+0x210/0x210 [ 2227.798963][T21813] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2227.798991][T21813] __do_fast_syscall_32+0x65/0xf0 [ 2227.799019][T21813] do_fast_syscall_32+0x2f/0x70 [ 2227.799046][T21813] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2227.799074][T21813] RIP: 0023:0xf6edb549 [ 2227.799093][T21813] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2227.799115][T21813] RSP: 002b:00000000f44d55fc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2227.799141][T21813] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 2227.799159][T21813] RDX: 0000000000000000 RSI: 00000000fffffffa RDI: 0000000000000000 [ 2227.799176][T21813] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2227.799193][T21813] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2227.799224][T21813] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2227.799261][T21813] [ 2228.288979][T11777] 4 80 4295141312 [ 2228.293560][T11777] 1 90 4295141312 [ 2228.297758][T11777] last result at 4295141492 [ 2228.303058][T11777] last redo_fd_request at 4295159608 [ 2228.313144][T11777] status=80 [ 2228.319591][T11777] fdc_busy=1 [ 2228.324161][T11777] floppy_work.func=floppy_work_workfn [ 2228.333375][T11777] cont=ffffffff8a1f4920 [ 2228.340646][T11777] current_req=0000000000000000 [ 2228.346740][T11777] command_status=-1 [ 2228.352257][T11777] [ 2228.355568][T11777] floppy1: floppy timeout called 08:04:01 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:04:01 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db9", 0x3, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:04:01 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 6) [ 2228.398077][T17293] [ 2228.401781][T17293] floppy driver state [ 2228.411072][T17293] ------------------- [ 2228.417682][T17293] now=4295159686 last interrupt=4295141312 diff=18374 last called handler=recal_interrupt [ 2228.451556][T17293] timeout_message=lock fdc [ 2228.460287][T21821] loop2: detected capacity change from 0 to 87 [ 2228.464029][T21823] loop0: detected capacity change from 0 to 87 [ 2228.471522][T17293] last output bytes: [ 2228.471535][T17293] 0 90 4295139496 [ 2228.471550][T17293] 1 90 4295139496 [ 2228.471561][T17293] 2 90 4295139496 [ 2228.471573][T17293] 24 90 4295139496 [ 2228.471584][T17293] 1b 90 4295139496 [ 2228.471595][T17293] ff 90 4295139496 [ 2228.471606][T17293] 12 80 4295141312 [ 2228.471618][T17293] 3 90 4295141312 [ 2228.471629][T17293] 13 80 4295141312 [ 2228.489954][T21826] loop3: detected capacity change from 0 to 87 [ 2228.493084][T17293] 0 90 4295141312 08:04:02 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') [ 2228.554971][T17293] 1a 90 4295141312 [ 2228.558902][T21826] FAULT_INJECTION: forcing a failure. [ 2228.558902][T21826] name fail_page_alloc, interval 1, probability 0, space 0, times 0 08:04:02 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db9", 0x3, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2228.559436][T17293] 0 90 4295141312 [ 2228.582746][T21826] CPU: 1 PID: 21826 Comm: syz-executor.3 Not tainted 5.16.0-rc2-syzkaller #0 [ 2228.582770][T21826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2228.582781][T21826] Call Trace: [ 2228.582788][T21826] [ 2228.582795][T21826] dump_stack_lvl+0xcd/0x134 [ 2228.603690][T17293] 3 80 4295141312 [ 2228.615493][T21826] should_fail.cold+0x5/0xa [ 2228.615530][T21826] prepare_alloc_pages+0x17b/0x570 [ 2228.615585][T21826] __alloc_pages+0x12f/0x500 [ 2228.615602][T21826] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 2228.615632][T21826] ? __filemap_fdatawait_range+0x281/0x3a0 [ 2228.615683][T21826] alloc_pages+0x1a7/0x300 [ 2228.620123][T17293] a1 90 4295141312 [ 2228.623265][T21826] push_pipe+0x2a4/0x680 [ 2228.629427][T17293] 1e 90 4295141312 [ 2228.634500][T21826] iov_iter_get_pages+0x9ec/0xea0 [ 2228.640876][T17293] 7 80 4295141312 [ 2228.648145][T21826] ? iter_xarray_populate_pages+0xaa0/0xaa0 [ 2228.648196][T21826] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2228.648231][T21826] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2228.648268][T21826] ? iov_iter_npages+0x2c1/0x690 [ 2228.648299][T21826] do_blockdev_direct_IO+0x2516/0x4380 [ 2228.654830][T17293] 1 90 4295141312 [ 2228.663736][T21826] ? fat_add_cluster+0xf0/0xf0 [ 2228.663823][T21826] ? sb_init_dio_done_wq+0x80/0x80 [ 2228.663877][T21826] ? fat_add_cluster+0xf0/0xf0 [ 2228.663926][T21826] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2228.671853][T17293] 8 80 4295141312 [ 2228.677965][T21826] ? map_id_range_down+0x1c4/0x340 [ 2228.678013][T21826] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 08:04:02 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 7) [ 2228.678033][T21826] ? atime_needs_update+0x65/0x640 [ 2228.678053][T21826] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2228.678072][T21826] ? __blockdev_direct_IO+0x32/0x100 [ 2228.678093][T21826] ? fat_add_cluster+0xf0/0xf0 [ 2228.678114][T21826] fat_direct_IO+0x1e0/0x390 [ 2228.678138][T21826] generic_file_read_iter+0x251/0x5a0 [ 2228.678162][T21826] generic_file_splice_read+0x453/0x6d0 [ 2228.685092][T17293] 4 80 4295141312 [ 2228.688704][T21826] ? folio_flags.constprop.0+0x70/0x70 [ 2228.688761][T21826] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2228.688801][T21826] ? security_file_permission+0xab/0xd0 [ 2228.688830][T21826] ? folio_flags.constprop.0+0x70/0x70 [ 2228.688851][T21826] do_splice_to+0x1bf/0x250 [ 2228.695035][T17293] 1 90 4295141312 [ 2228.700815][T21826] splice_direct_to_actor+0x2c2/0x8c0 [ 2228.700864][T21826] ? generic_file_splice_read+0x6d0/0x6d0 [ 2228.700902][T21826] ? do_splice_to+0x250/0x250 [ 2228.700931][T21826] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2228.700963][T21826] ? security_file_permission+0xab/0xd0 [ 2228.701004][T21826] do_splice_direct+0x1b3/0x280 [ 2228.701037][T21826] ? splice_direct_to_actor+0x8c0/0x8c0 [ 2228.701091][T21826] do_sendfile+0xaf2/0x1250 [ 2228.707473][T17293] last result at 4295141492 [ 2228.712683][T21826] ? do_pwritev+0x270/0x270 [ 2228.712728][T21826] ? __context_tracking_exit+0xb8/0xe0 [ 2228.712761][T21826] ? lock_downgrade+0x6e0/0x6e0 [ 2228.712790][T21826] ? lock_downgrade+0x6e0/0x6e0 [ 2228.712823][T21826] __ia32_compat_sys_sendfile+0x1dd/0x220 [ 2228.712855][T21826] ? __ia32_sys_sendfile64+0x210/0x210 [ 2228.722211][T17293] last redo_fd_request at 4295159681 [ 2228.728467][T21826] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2228.728512][T21826] __do_fast_syscall_32+0x65/0xf0 [ 2228.728551][T21826] do_fast_syscall_32+0x2f/0x70 [ 2228.728583][T21826] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2228.734861][T17293] status=80 [ 2228.740015][T21826] RIP: 0023:0xf6edb549 [ 2228.740037][T21826] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2228.740053][T21826] RSP: 002b:00000000f44d55fc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2228.740071][T21826] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 2228.740082][T21826] RDX: 0000000000000000 RSI: 00000000fffffffa RDI: 0000000000000000 [ 2228.740109][T21826] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2228.740125][T21826] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2228.740142][T21826] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2228.740182][T21826] [ 2228.745275][T17293] fdc_busy=1 [ 2229.115447][T17293] floppy_work.func=floppy_work_workfn [ 2229.122671][T17293] cont=ffffffff8a1f4920 [ 2229.127957][T17293] current_req=0000000000000000 [ 2229.133910][T17293] command_status=-1 [ 2229.138813][T17293] [ 2229.141764][T17293] floppy1: floppy timeout called [ 2229.171106][T17293] [ 2229.174378][T17293] floppy driver state [ 2229.181930][T17293] ------------------- [ 2229.185917][T17293] now=4295159763 last interrupt=4295141312 diff=18451 last called handler=recal_interrupt [ 2229.189422][T21829] loop2: detected capacity change from 0 to 87 [ 2229.197230][T17293] timeout_message=lock fdc [ 2229.213278][T17293] last output bytes: [ 2229.218110][T17293] 0 90 4295139496 [ 2229.224766][T21830] loop0: detected capacity change from 0 to 87 [ 2229.229123][T17293] 1 90 4295139496 [ 2229.238896][T17293] 2 90 4295139496 [ 2229.243801][T17293] 24 90 4295139496 [ 2229.248490][T17293] 1b 90 4295139496 [ 2229.255227][T21832] loop3: detected capacity change from 0 to 87 [ 2229.262966][T17293] ff 90 4295139496 08:04:02 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975", 0x4}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2229.269012][T17293] 12 80 4295141312 [ 2229.273520][T17293] 3 90 4295141312 [ 2229.277401][T17293] 13 80 4295141312 [ 2229.285525][T17293] 0 90 4295141312 [ 2229.290758][T17293] 1a 90 4295141312 [ 2229.295207][T17293] 0 90 4295141312 [ 2229.303609][T17293] 3 80 4295141312 [ 2229.303630][T21832] FAULT_INJECTION: forcing a failure. [ 2229.303630][T21832] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2229.307737][T17293] a1 90 4295141312 [ 2229.331337][T21832] CPU: 1 PID: 21832 Comm: syz-executor.3 Not tainted 5.16.0-rc2-syzkaller #0 [ 2229.342634][T17293] 1e 90 4295141312 [ 2229.343668][T21832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2229.349224][T17293] 7 80 4295141312 [ 2229.361495][T21832] Call Trace: [ 2229.361512][T21832] [ 2229.361525][T21832] dump_stack_lvl+0xcd/0x134 [ 2229.361565][T21832] should_fail.cold+0x5/0xa [ 2229.361606][T21832] prepare_alloc_pages+0x17b/0x570 [ 2229.361652][T21832] __alloc_pages+0x12f/0x500 [ 2229.361682][T21832] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 2229.361717][T21832] ? __filemap_fdatawait_range+0x281/0x3a0 [ 2229.361796][T21832] alloc_pages+0x1a7/0x300 [ 2229.361833][T21832] push_pipe+0x2a4/0x680 [ 2229.372669][T17293] 1 90 4295141312 [ 2229.375046][T21832] iov_iter_get_pages+0x9ec/0xea0 [ 2229.380777][T17293] 8 80 4295141312 [ 2229.387350][T21832] ? iter_xarray_populate_pages+0xaa0/0xaa0 [ 2229.406817][T17293] 4 80 4295141312 [ 2229.410483][T21832] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2229.410530][T21832] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2229.410559][T21832] ? iov_iter_npages+0x2c1/0x690 [ 2229.410593][T21832] do_blockdev_direct_IO+0x2516/0x4380 [ 2229.410635][T21832] ? fat_add_cluster+0xf0/0xf0 [ 2229.410685][T21832] ? sb_init_dio_done_wq+0x80/0x80 [ 2229.424507][T17293] 1 90 4295141312 [ 2229.430254][T21832] ? fat_add_cluster+0xf0/0xf0 [ 2229.430311][T21832] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2229.430343][T21832] ? map_id_range_down+0x1c4/0x340 [ 2229.430391][T21832] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2229.434796][T17293] last result at 4295141492 [ 2229.440218][T21832] ? atime_needs_update+0x65/0x640 [ 2229.440268][T21832] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2229.440304][T21832] ? __blockdev_direct_IO+0x32/0x100 [ 2229.440337][T21832] ? fat_add_cluster+0xf0/0xf0 [ 2229.440375][T21832] fat_direct_IO+0x1e0/0x390 [ 2229.440418][T21832] generic_file_read_iter+0x251/0x5a0 [ 2229.440460][T21832] generic_file_splice_read+0x453/0x6d0 [ 2229.440499][T21832] ? folio_flags.constprop.0+0x70/0x70 [ 2229.440543][T21832] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2229.454366][T17293] last redo_fd_request at 4295159760 [ 2229.457543][T21832] ? security_file_permission+0xab/0xd0 [ 2229.457594][T21832] ? folio_flags.constprop.0+0x70/0x70 [ 2229.457634][T21832] do_splice_to+0x1bf/0x250 [ 2229.485903][T17293] status=80 [ 2229.487033][T21832] splice_direct_to_actor+0x2c2/0x8c0 08:04:03 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') [ 2229.487083][T21832] ? generic_file_splice_read+0x6d0/0x6d0 [ 2229.487122][T21832] ? do_splice_to+0x250/0x250 [ 2229.512092][T17293] fdc_busy=1 [ 2229.519111][T21832] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2229.519159][T21832] ? security_file_permission+0xab/0xd0 [ 2229.519201][T21832] do_splice_direct+0x1b3/0x280 [ 2229.519276][T21832] ? splice_direct_to_actor+0x8c0/0x8c0 [ 2229.519330][T21832] do_sendfile+0xaf2/0x1250 [ 2229.519372][T21832] ? do_pwritev+0x270/0x270 [ 2229.519406][T21832] ? __context_tracking_exit+0xb8/0xe0 [ 2229.540396][T17293] floppy_work.func=floppy_work_workfn [ 2229.546478][T21832] ? lock_downgrade+0x6e0/0x6e0 [ 2229.546525][T21832] ? lock_downgrade+0x6e0/0x6e0 [ 2229.546546][T21832] __ia32_compat_sys_sendfile+0x1dd/0x220 [ 2229.546567][T21832] ? __ia32_sys_sendfile64+0x210/0x210 [ 2229.546586][T21832] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2229.582176][T17293] cont=ffffffff8a1f4920 [ 2229.583034][T21832] __do_fast_syscall_32+0x65/0xf0 [ 2229.620948][T17293] current_req=0000000000000000 [ 2229.628474][T21832] do_fast_syscall_32+0x2f/0x70 [ 2229.628527][T21832] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2229.628565][T21832] RIP: 0023:0xf6edb549 [ 2229.628587][T21832] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2229.628614][T21832] RSP: 002b:00000000f44d55fc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2229.628647][T21832] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 2229.628666][T21832] RDX: 0000000000000000 RSI: 00000000fffffffa RDI: 0000000000000000 [ 2229.628685][T21832] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2229.628702][T21832] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2229.628720][T21832] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2229.628758][T21832] [ 2229.634292][T21834] loop2: detected capacity change from 0 to 87 [ 2229.656184][T17293] command_status=-1 [ 2229.934486][T17293] [ 2229.937611][T17293] floppy1: floppy timeout called [ 2229.965646][T17293] 08:04:03 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:04:03 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 8) 08:04:03 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975", 0x4}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2229.971793][T17293] floppy driver state [ 2229.976514][T17293] ------------------- [ 2229.981465][T17293] now=4295159843 last interrupt=4295141312 diff=18531 last called handler=recal_interrupt [ 2230.026731][T17293] timeout_message=lock fdc [ 2230.033384][T17293] last output bytes: [ 2230.039100][T17293] 0 90 4295139496 [ 2230.044064][T17293] 1 90 4295139496 [ 2230.068042][T17293] 2 90 4295139496 [ 2230.072967][T17293] 24 90 4295139496 [ 2230.078850][T21841] loop0: detected capacity change from 0 to 87 [ 2230.084019][T21842] loop3: detected capacity change from 0 to 87 [ 2230.085696][T21843] loop2: detected capacity change from 0 to 87 [ 2230.088097][T17293] 1b 90 4295139496 [ 2230.088117][T17293] ff 90 4295139496 [ 2230.088132][T17293] 12 80 4295141312 [ 2230.088147][T17293] 3 90 4295141312 [ 2230.088160][T17293] 13 80 4295141312 [ 2230.088174][T17293] 0 90 4295141312 [ 2230.088187][T17293] 1a 90 4295141312 [ 2230.088202][T17293] 0 90 4295141312 [ 2230.088215][T17293] 3 80 4295141312 08:04:03 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') [ 2230.088228][T17293] a1 90 4295141312 [ 2230.088241][T17293] 1e 90 4295141312 08:04:03 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}, {&(0x7f0000000180)="6d4db975", 0x4}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2230.088254][T17293] 7 80 4295141312 [ 2230.088286][T17293] 1 90 4295141312 [ 2230.088299][T17293] 8 80 4295141312 [ 2230.088312][T17293] 4 80 4295141312 [ 2230.144431][T21842] FAULT_INJECTION: forcing a failure. [ 2230.144431][T21842] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2230.145531][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 2230.145550][ T37] audit: type=1804 audit(1638173043.615:946): pid=21842 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir938124162/syzkaller.1iDaaV/1473/file1/bus" dev="loop3" ino=1048790 res=1 errno=0 [ 2230.163369][T21842] CPU: 2 PID: 21842 Comm: syz-executor.3 Not tainted 5.16.0-rc2-syzkaller #0 [ 2230.169782][ T37] audit: type=1800 audit(1638173043.615:947): pid=21842 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048790 res=0 errno=0 [ 2230.174539][T21842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2230.180395][T17293] 1 90 4295141312 [ 2230.184556][T21842] Call Trace: [ 2230.184572][T21842] [ 2230.190503][T17293] last result at 4295141492 [ 2230.208317][T21842] dump_stack_lvl+0xcd/0x134 [ 2230.208362][T21842] should_fail.cold+0x5/0xa [ 2230.208400][T21842] prepare_alloc_pages+0x17b/0x570 [ 2230.208445][T21842] __alloc_pages+0x12f/0x500 [ 2230.217111][T17293] last redo_fd_request at 4295159839 [ 2230.248689][T21842] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 2230.248739][T21842] ? __filemap_fdatawait_range+0x281/0x3a0 [ 2230.248788][T21842] alloc_pages+0x1a7/0x300 [ 2230.261249][T17293] status=80 [ 2230.287497][T21842] push_pipe+0x2a4/0x680 [ 2230.287551][T21842] iov_iter_get_pages+0x9ec/0xea0 [ 2230.287589][T21842] ? iter_xarray_populate_pages+0xaa0/0xaa0 [ 2230.287628][T21842] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2230.287663][T21842] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2230.298944][T17293] fdc_busy=1 [ 2230.304104][T21842] ? iov_iter_npages+0x2c1/0x690 [ 2230.308544][T17293] floppy_work.func=floppy_work_workfn [ 2230.312551][T21842] do_blockdev_direct_IO+0x2516/0x4380 [ 2230.318657][T17293] cont=ffffffff8a1f4920 [ 2230.324640][T21842] ? fat_add_cluster+0xf0/0xf0 [ 2230.331228][T17293] current_req=0000000000000000 [ 2230.349915][T21842] ? sb_init_dio_done_wq+0x80/0x80 [ 2230.349981][T21842] ? fat_add_cluster+0xf0/0xf0 [ 2230.355425][T17293] command_status=-1 [ 2230.355442][T17293] [ 2230.361394][T21842] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2230.361440][T21842] ? map_id_range_down+0x1c4/0x340 [ 2230.361499][T21842] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2230.361533][T21842] ? atime_needs_update+0x65/0x640 [ 2230.370671][T17293] floppy1: floppy timeout called [ 2230.378541][T21842] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2230.378591][T21842] ? __blockdev_direct_IO+0x32/0x100 [ 2230.378627][T21842] ? fat_add_cluster+0xf0/0xf0 [ 2230.378683][T21842] fat_direct_IO+0x1e0/0x390 [ 2230.389020][T17293] [ 2230.393520][T21842] generic_file_read_iter+0x251/0x5a0 [ 2230.393575][T21842] generic_file_splice_read+0x453/0x6d0 [ 2230.393613][T21842] ? folio_flags.constprop.0+0x70/0x70 [ 2230.398737][T17293] floppy driver state [ 2230.405844][T21842] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2230.405895][T21842] ? security_file_permission+0xab/0xd0 [ 2230.413154][T17293] ------------------- 08:04:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 9) [ 2230.418653][T21842] ? folio_flags.constprop.0+0x70/0x70 [ 2230.418699][T21842] do_splice_to+0x1bf/0x250 [ 2230.418734][T21842] splice_direct_to_actor+0x2c2/0x8c0 [ 2230.418768][T21842] ? generic_file_splice_read+0x6d0/0x6d0 [ 2230.422892][T17293] now=4295159861 last interrupt=4295141312 diff=18549 last called handler=recal_interrupt [ 2230.427627][T21842] ? do_splice_to+0x250/0x250 [ 2230.427664][T21842] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2230.427696][T21842] ? security_file_permission+0xab/0xd0 [ 2230.427735][T21842] do_splice_direct+0x1b3/0x280 [ 2230.434860][T17293] timeout_message=lock fdc [ 2230.441680][T21842] ? splice_direct_to_actor+0x8c0/0x8c0 [ 2230.441752][T21842] do_sendfile+0xaf2/0x1250 [ 2230.441800][T21842] ? do_pwritev+0x270/0x270 [ 2230.447690][T17293] last output bytes: [ 2230.453225][T21842] ? __context_tracking_exit+0xb8/0xe0 [ 2230.453268][T21842] ? lock_downgrade+0x6e0/0x6e0 [ 2230.453297][T21842] ? lock_downgrade+0x6e0/0x6e0 [ 2230.453327][T21842] __ia32_compat_sys_sendfile+0x1dd/0x220 [ 2230.453366][T21842] ? __ia32_sys_sendfile64+0x210/0x210 [ 2230.460256][T17293] 0 90 4295139496 [ 2230.464926][T21842] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2230.464959][T21842] __do_fast_syscall_32+0x65/0xf0 [ 2230.464990][T21842] do_fast_syscall_32+0x2f/0x70 [ 2230.465022][T21842] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2230.470903][T17293] 1 90 4295139496 [ 2230.475652][T21842] RIP: 0023:0xf6edb549 [ 2230.475684][T21842] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2230.475706][T21842] RSP: 002b:00000000f44d55fc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2230.475733][T21842] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 2230.475751][T21842] RDX: 0000000000000000 RSI: 00000000fffffffa RDI: 0000000000000000 [ 2230.478346][T17293] 2 90 4295139496 [ 2230.484040][T21842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2230.490502][T17293] 24 90 4295139496 [ 2230.496413][T21842] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2230.502634][T17293] 1b 90 4295139496 [ 2230.506778][T21842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2230.514034][T17293] ff 90 4295139496 [ 2230.519660][T21842] [ 2230.858659][T17293] 12 80 4295141312 [ 2230.862919][T17293] 3 90 4295141312 [ 2230.866595][T17293] 13 80 4295141312 [ 2230.882752][T17293] 0 90 4295141312 [ 2230.888859][T17293] 1a 90 4295141312 [ 2230.893043][T17293] 0 90 4295141312 [ 2230.897118][T17293] 3 80 4295141312 [ 2230.902944][T17293] a1 90 4295141312 [ 2230.908640][T17293] 1e 90 4295141312 [ 2230.913215][T17293] 7 80 4295141312 [ 2230.914268][T21845] loop0: detected capacity change from 0 to 87 [ 2230.917436][T17293] 1 90 4295141312 [ 2230.917450][T17293] 8 80 4295141312 [ 2230.935642][T17293] 4 80 4295141312 [ 2230.940111][T17293] 1 90 4295141312 [ 2230.945582][T17293] last result at 4295141492 [ 2230.952314][T17293] last redo_fd_request at 4295159861 [ 2230.959186][T17293] status=80 [ 2230.963584][T17293] fdc_busy=1 [ 2230.967543][T17293] floppy_work.func=floppy_work_workfn [ 2230.975812][T17293] cont=ffffffff8a1f4920 [ 2230.975850][T21847] loop2: detected capacity change from 0 to 87 [ 2230.981472][T17293] current_req=0000000000000000 [ 2230.981488][T17293] command_status=-1 [ 2230.981507][T17293] [ 2230.981582][T17293] floppy1: floppy timeout called [ 2231.001707][T21849] loop3: detected capacity change from 0 to 87 08:04:04 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') ftruncate(0xffffffffffffffff, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') [ 2231.032491][ T3758] [ 2231.036210][ T3758] floppy driver state [ 2231.050447][T21849] FAULT_INJECTION: forcing a failure. [ 2231.050447][T21849] name fail_page_alloc, interval 1, probability 0, space 0, times 0 08:04:04 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2231.055941][ T37] audit: type=1804 audit(1638173044.515:948): pid=21849 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir938124162/syzkaller.1iDaaV/1474/file1/bus" dev="loop3" ino=1048792 res=1 errno=0 [ 2231.094198][T21849] CPU: 2 PID: 21849 Comm: syz-executor.3 Not tainted 5.16.0-rc2-syzkaller #0 [ 2231.098013][ T3758] ------------------- [ 2231.098027][ T3758] now=4295159954 last interrupt=4295141312 diff=18642 last called handler=recal_interrupt [ 2231.098079][ T3758] timeout_message=lock fdc 08:04:04 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2231.098089][ T3758] last output bytes: [ 2231.098096][ T3758] 0 90 4295139496 [ 2231.098110][ T3758] 1 90 4295139496 [ 2231.098123][ T3758] 2 90 4295139496 [ 2231.098135][ T3758] 24 90 4295139496 [ 2231.098147][ T3758] 1b 90 4295139496 [ 2231.098160][ T3758] ff 90 4295139496 [ 2231.098173][ T3758] 12 80 4295141312 [ 2231.098185][ T3758] 3 90 4295141312 [ 2231.098198][ T3758] 13 80 4295141312 [ 2231.098211][ T3758] 0 90 4295141312 [ 2231.098223][ T3758] 1a 90 4295141312 [ 2231.098249][ T3758] 0 90 4295141312 [ 2231.098261][ T3758] 3 80 4295141312 [ 2231.098274][ T3758] a1 90 4295141312 [ 2231.098287][ T3758] 1e 90 4295141312 [ 2231.098299][ T3758] 7 80 4295141312 [ 2231.098312][ T3758] 1 90 4295141312 [ 2231.098324][ T3758] 8 80 4295141312 [ 2231.098336][ T3758] 4 80 4295141312 [ 2231.098349][ T3758] 1 90 4295141312 [ 2231.098361][ T3758] last result at 4295141492 [ 2231.098371][ T3758] last redo_fd_request at 4295159946 [ 2231.098432][ T3758] status=80 [ 2231.098444][ T3758] fdc_busy=1 [ 2231.098453][ T3758] floppy_work.func=floppy_work_workfn [ 2231.098472][ T3758] cont=ffffffff8a1f4920 [ 2231.098483][ T3758] current_req=0000000000000000 [ 2231.098492][ T3758] command_status=-1 [ 2231.098501][ T3758] [ 2231.098618][ T3758] floppy1: floppy timeout called [ 2231.109421][ T37] audit: type=1800 audit(1638173044.515:949): pid=21849 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048792 res=0 errno=0 [ 2231.119715][T21849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2231.119740][T21849] Call Trace: [ 2231.119750][T21849] 08:04:04 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975", 0x4, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2231.119763][T21849] dump_stack_lvl+0xcd/0x134 [ 2231.119802][T21849] should_fail.cold+0x5/0xa [ 2231.119843][T21849] prepare_alloc_pages+0x17b/0x570 [ 2231.119890][T21849] __alloc_pages+0x12f/0x500 [ 2231.119919][T21849] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 2231.119955][T21849] ? __filemap_fdatawait_range+0x281/0x3a0 [ 2231.120011][T21849] alloc_pages+0x1a7/0x300 [ 2231.120048][T21849] push_pipe+0x2a4/0x680 08:04:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 10) [ 2231.120090][T21849] iov_iter_get_pages+0x9ec/0xea0 [ 2231.120127][T21849] ? iter_xarray_populate_pages+0xaa0/0xaa0 [ 2231.121165][ T3758] [ 2231.121177][ T3758] floppy driver state [ 2231.121184][ T3758] ------------------- [ 2231.121191][ T3758] now=4295159954 last interrupt=4295141312 diff=18642 last called handler=recal_interrupt [ 2231.121225][ T3758] timeout_message=lock fdc [ 2231.121235][ T3758] last output bytes: [ 2231.121242][ T3758] 0 90 4295139496 [ 2231.121255][ T3758] 1 90 4295139496 [ 2231.121268][ T3758] 2 90 4295139496 [ 2231.121281][ T3758] 24 90 4295139496 [ 2231.121294][ T3758] 1b 90 4295139496 [ 2231.121306][ T3758] ff 90 4295139496 [ 2231.121319][ T3758] 12 80 4295141312 [ 2231.121349][ T3758] 3 90 4295141312 [ 2231.121362][ T3758] 13 80 4295141312 [ 2231.121374][ T3758] 0 90 4295141312 [ 2231.121387][ T3758] 1a 90 4295141312 [ 2231.121400][ T3758] 0 90 4295141312 [ 2231.121413][ T3758] 3 80 4295141312 08:04:05 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') ftruncate(0xffffffffffffffff, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') [ 2231.121425][ T3758] a1 90 4295141312 [ 2231.121438][ T3758] 1e 90 4295141312 [ 2231.121450][ T3758] 7 80 4295141312 [ 2231.121463][ T3758] 1 90 4295141312 [ 2231.121475][ T3758] 8 80 4295141312 [ 2231.121488][ T3758] 4 80 4295141312 [ 2231.121500][ T3758] 1 90 4295141312 [ 2231.121514][ T3758] last result at 4295141492 [ 2231.121523][ T3758] last redo_fd_request at 4295159954 [ 2231.122382][ T3758] status=80 [ 2231.122396][ T3758] fdc_busy=1 [ 2231.122405][ T3758] floppy_work.func=floppy_work_workfn [ 2231.122426][ T3758] cont=ffffffff8a1f4960 [ 2231.122436][ T3758] current_req=0000000000000000 [ 2231.122446][ T3758] command_status=-1 [ 2231.122455][ T3758] [ 2231.122705][ T3758] floppy1: floppy timeout called [ 2231.122728][ T3758] floppy.c: no request in request_done [ 2231.123414][ T3758] [ 2231.123426][ T3758] floppy driver state [ 2231.123434][ T3758] ------------------- [ 2231.123443][ T3758] now=4295159954 last interrupt=4295141312 diff=18642 last called handler=recal_interrupt [ 2231.123482][ T3758] timeout_message=lock fdc [ 2231.123493][ T3758] last output bytes: [ 2231.123502][ T3758] 0 90 4295139496 [ 2231.123518][ T3758] 1 90 4295139496 [ 2231.123534][ T3758] 2 90 4295139496 [ 2231.123549][ T3758] 24 90 4295139496 [ 2231.123565][ T3758] 1b 90 4295139496 [ 2231.123581][ T3758] ff 90 4295139496 [ 2231.123596][ T3758] 12 80 4295141312 [ 2231.123612][ T3758] 3 90 4295141312 [ 2231.123635][ T3758] 13 80 4295141312 [ 2231.123651][ T3758] 0 90 4295141312 [ 2231.123666][ T3758] 1a 90 4295141312 [ 2231.123682][ T3758] 0 90 4295141312 [ 2231.123697][ T3758] 3 80 4295141312 [ 2231.123713][ T3758] a1 90 4295141312 [ 2231.123728][ T3758] 1e 90 4295141312 [ 2231.123743][ T3758] 7 80 4295141312 [ 2231.123759][ T3758] 1 90 4295141312 [ 2231.123790][ T3758] 8 80 4295141312 [ 2231.123804][ T3758] 4 80 4295141312 [ 2231.123819][ T3758] 1 90 4295141312 [ 2231.123833][ T3758] last result at 4295141492 [ 2231.123843][ T3758] last redo_fd_request at 4295159954 [ 2231.123904][ T3758] status=80 [ 2231.123917][ T3758] fdc_busy=1 [ 2231.123927][ T3758] floppy_work.func=floppy_work_workfn [ 2231.123948][ T3758] cont=ffffffff8a1f4920 [ 2231.123959][ T3758] current_req=0000000000000000 [ 2231.123969][ T3758] command_status=-1 [ 2231.123979][ T3758] [ 2231.124048][ T3758] floppy1: floppy timeout called [ 2231.125935][ T3758] [ 2231.137774][T21849] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2231.137817][T21849] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2231.137848][T21849] ? iov_iter_npages+0x2c1/0x690 [ 2231.137879][T21849] do_blockdev_direct_IO+0x2516/0x4380 [ 2231.144820][ T3758] floppy driver state [ 2231.149985][T21849] ? fat_add_cluster+0xf0/0xf0 [ 2231.150044][T21849] ? sb_init_dio_done_wq+0x80/0x80 [ 2231.150094][T21849] ? fat_add_cluster+0xf0/0xf0 [ 2231.155508][ T3758] ------------------- [ 2231.155522][ T3758] now=4295159954 last interrupt=4295141312 diff=18642 last called handler=recal_interrupt [ 2231.161007][T21849] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2231.161052][T21849] ? map_id_range_down+0x1c4/0x340 [ 2231.161108][T21849] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2231.167416][ T3758] timeout_message=lock fdc [ 2231.170805][T21849] ? atime_needs_update+0x65/0x640 [ 2231.170851][T21849] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2231.170885][T21849] ? __blockdev_direct_IO+0x32/0x100 [ 2231.170916][T21849] ? fat_add_cluster+0xf0/0xf0 [ 2231.170950][T21849] fat_direct_IO+0x1e0/0x390 [ 2231.170989][T21849] generic_file_read_iter+0x251/0x5a0 [ 2231.171027][T21849] generic_file_splice_read+0x453/0x6d0 [ 2231.171064][T21849] ? folio_flags.constprop.0+0x70/0x70 [ 2231.181475][ T3758] last output bytes: [ 2231.186417][T21849] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2231.186468][T21849] ? security_file_permission+0xab/0xd0 [ 2231.186503][T21849] ? folio_flags.constprop.0+0x70/0x70 [ 2231.186539][T21849] do_splice_to+0x1bf/0x250 [ 2231.186574][T21849] splice_direct_to_actor+0x2c2/0x8c0 [ 2231.186620][T21849] ? generic_file_splice_read+0x6d0/0x6d0 [ 2231.186659][T21849] ? do_splice_to+0x250/0x250 [ 2231.186688][T21849] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2231.192454][ T3758] 0 90 4295139496 [ 2231.197417][T21849] ? security_file_permission+0xab/0xd0 [ 2231.202805][ T3758] 1 90 4295139496 [ 2231.207333][T21849] do_splice_direct+0x1b3/0x280 [ 2231.212156][ T3758] 2 90 4295139496 [ 2231.216437][T21849] ? splice_direct_to_actor+0x8c0/0x8c0 [ 2231.221136][ T3758] 24 90 4295139496 [ 2231.225873][T21849] do_sendfile+0xaf2/0x1250 [ 2231.230815][ T3758] 1b 90 4295139496 [ 2231.235810][T21849] ? do_pwritev+0x270/0x270 [ 2231.240643][ T3758] ff 90 4295139496 [ 2231.245293][T21849] ? __context_tracking_exit+0xb8/0xe0 [ 2231.249521][ T3758] 12 80 4295141312 [ 2231.254472][T21849] ? lock_downgrade+0x6e0/0x6e0 [ 2231.259732][ T3758] 3 90 4295141312 [ 2231.266030][T21849] ? lock_downgrade+0x6e0/0x6e0 [ 2231.270083][ T3758] 13 80 4295141312 [ 2231.274181][T21849] __ia32_compat_sys_sendfile+0x1dd/0x220 [ 2231.274226][T21849] ? __ia32_sys_sendfile64+0x210/0x210 [ 2231.274258][T21849] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2231.274294][T21849] __do_fast_syscall_32+0x65/0xf0 [ 2231.274329][T21849] do_fast_syscall_32+0x2f/0x70 [ 2231.274362][T21849] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2231.274395][T21849] RIP: 0023:0xf6edb549 [ 2231.274434][T21849] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2231.274479][T21849] RSP: 002b:00000000f44d55fc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2231.274507][T21849] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 2231.281603][ T3758] 0 90 4295141312 [ 2231.286774][T21849] RDX: 0000000000000000 RSI: 00000000fffffffa RDI: 0000000000000000 [ 2231.292104][ T3758] 1a 90 4295141312 [ 2231.296858][T21849] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2231.299818][ T3758] 0 90 4295141312 [ 2231.305993][T21849] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2231.333597][ T3758] 3 80 4295141312 [ 2231.344960][T21849] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2231.344991][T21849] [ 2231.446712][T21856] loop0: detected capacity change from 0 to 87 [ 2231.458050][ T3758] a1 90 4295141312 [ 2232.356032][ T3758] 1e 90 4295141312 [ 2232.365757][ T3758] 7 80 4295141312 [ 2232.371124][ T3758] 1 90 4295141312 [ 2232.376594][ T3758] 8 80 4295141312 [ 2232.382625][ T3758] 4 80 4295141312 [ 2232.387666][ T3758] 1 90 4295141312 [ 2232.393481][ T3758] last result at 4295141492 [ 2232.399771][ T3758] last redo_fd_request at 4295159954 [ 2232.406034][ T3758] status=80 [ 2232.413856][ T3758] fdc_busy=1 [ 2232.424273][ T3758] floppy_work.func=floppy_work_workfn [ 2232.432350][ T3758] cont=ffffffff8a1f4920 [ 2232.438682][ T3758] current_req=0000000000000000 [ 2232.445698][ T3758] command_status=-1 [ 2232.451358][ T3758] [ 2232.454786][ T3758] floppy1: floppy timeout called [ 2232.478820][T21859] loop2: detected capacity change from 0 to 87 [ 2232.486120][T21861] loop0: detected capacity change from 0 to 87 08:04:05 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2232.515145][ T3758] [ 2232.523739][ T3758] floppy driver state [ 2232.533029][ T3758] ------------------- [ 2232.554005][ T3758] now=4295160100 last interrupt=4295141312 diff=18788 last called handler=recal_interrupt [ 2232.554193][T21864] loop3: detected capacity change from 0 to 87 [ 2232.608085][ T3758] timeout_message=lock fdc 08:04:06 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') ftruncate(0xffffffffffffffff, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') [ 2232.618468][ T3758] last output bytes: [ 2232.625182][ T3758] 0 90 4295139496 [ 2232.635481][ T3758] 1 90 4295139496 [ 2232.641043][ T3758] 2 90 4295139496 [ 2232.657217][ T3758] 24 90 4295139496 [ 2232.663605][ T37] audit: type=1804 audit(1638173046.135:950): pid=21867 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir938124162/syzkaller.1iDaaV/1475/file1/bus" dev="sda1" ino=1199 res=1 errno=0 08:04:06 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975", 0x4, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2232.665474][ T3758] 1b 90 4295139496 [ 2232.706249][ T3758] ff 90 4295139496 [ 2232.706270][ T37] audit: type=1800 audit(1638173046.175:951): pid=21867 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1199 res=0 errno=0 [ 2232.713507][T21864] FAULT_INJECTION: forcing a failure. [ 2232.713507][T21864] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2232.713890][ T3758] 12 80 4295141312 [ 2232.713910][ T3758] 3 90 4295141312 [ 2232.713924][ T3758] 13 80 4295141312 [ 2232.713938][ T3758] 0 90 4295141312 [ 2232.713952][ T3758] 1a 90 4295141312 [ 2232.713965][ T3758] 0 90 4295141312 [ 2232.713979][ T3758] 3 80 4295141312 [ 2232.713993][ T3758] a1 90 4295141312 [ 2232.714005][ T3758] 1e 90 4295141312 [ 2232.714018][ T3758] 7 80 4295141312 08:04:06 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2232.714032][ T3758] 1 90 4295141312 [ 2232.714046][ T3758] 8 80 4295141312 [ 2232.714060][ T3758] 4 80 4295141312 [ 2232.714074][ T3758] 1 90 4295141312 [ 2232.714088][ T3758] last result at 4295141492 [ 2232.714098][ T3758] last redo_fd_request at 4295160092 [ 2232.714185][ T3758] status=80 [ 2232.714201][ T3758] fdc_busy=1 [ 2232.714211][ T3758] floppy_work.func=floppy_work_workfn [ 2232.714237][ T3758] cont=ffffffff8a1f4920 [ 2232.714248][ T3758] current_req=0000000000000000 [ 2232.714258][ T3758] command_status=-1 [ 2232.714300][ T3758] [ 2232.714393][ T3758] floppy1: floppy timeout called [ 2232.735780][T21870] loop2: detected capacity change from 0 to 87 [ 2232.746683][T21871] loop0: detected capacity change from 0 to 87 [ 2232.754152][T13101] [ 2232.754167][T13101] floppy driver state [ 2232.754176][T13101] ------------------- [ 2232.754183][T13101] now=4295160119 last interrupt=4295141312 diff=18807 last called handler=recal_interrupt [ 2232.754222][T13101] timeout_message=lock fdc [ 2232.754232][T13101] last output bytes: [ 2232.754239][T13101] 0 90 4295139496 [ 2232.754254][T13101] 1 90 4295139496 [ 2232.754286][T13101] 2 90 4295139496 [ 2232.754301][T13101] 24 90 4295139496 [ 2232.754314][T13101] 1b 90 4295139496 [ 2232.754328][T13101] ff 90 4295139496 [ 2232.754341][T13101] 12 80 4295141312 [ 2232.754355][T13101] 3 90 4295141312 [ 2232.754369][T13101] 13 80 4295141312 [ 2232.754383][T13101] 0 90 4295141312 [ 2232.754395][T13101] 1a 90 4295141312 [ 2232.754409][T13101] 0 90 4295141312 [ 2232.754422][T13101] 3 80 4295141312 [ 2232.754435][T13101] a1 90 4295141312 [ 2232.754455][T13101] 1e 90 4295141312 [ 2232.754469][T13101] 7 80 4295141312 [ 2232.754483][T13101] 1 90 4295141312 08:04:06 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 11) [ 2232.754496][T13101] 8 80 4295141312 [ 2232.754509][T13101] 4 80 4295141312 [ 2232.754522][T13101] 1 90 4295141312 [ 2232.754536][T13101] last result at 4295141492 [ 2232.754547][T13101] last redo_fd_request at 4295160119 [ 2232.754637][T13101] status=80 [ 2232.754651][T13101] fdc_busy=1 [ 2232.754661][T13101] floppy_work.func=floppy_work_workfn [ 2232.754682][T13101] cont=ffffffff8a1f4920 [ 2232.754694][T13101] current_req=0000000000000000 [ 2232.754705][T13101] command_status=-1 [ 2232.754714][T13101] [ 2232.754787][T13101] floppy1: floppy timeout called [ 2232.758100][T21864] CPU: 2 PID: 21864 Comm: syz-executor.3 Not tainted 5.16.0-rc2-syzkaller #0 [ 2232.758134][T21864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2232.758151][T21864] Call Trace: [ 2232.758159][T21864] [ 2232.758170][T21864] dump_stack_lvl+0xcd/0x134 [ 2232.758206][T21864] should_fail.cold+0x5/0xa [ 2232.758243][T21864] prepare_alloc_pages+0x17b/0x570 [ 2232.758303][T21864] __alloc_pages+0x12f/0x500 [ 2232.758325][T21864] ? jbd2_transaction_committed+0x111/0x140 [ 2232.758387][T21864] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 2232.758414][T21864] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2232.831692][T13101] [ 2232.832181][T21864] ? ext4_map_blocks+0x947/0x17d0 [ 2232.838636][T13101] floppy driver state [ 2232.845655][T21864] ? do_raw_read_unlock+0x3b/0x70 [ 2232.845701][T21864] ? _raw_read_unlock+0x24/0x40 [ 2232.845740][T21864] alloc_pages+0x1a7/0x300 [ 2232.853469][T13101] ------------------- [ 2232.854063][T21864] push_pipe+0x2a4/0x680 [ 2232.876051][T13101] now=4295160121 last interrupt=4295141312 diff=18809 last called handler=recal_interrupt [ 2232.881216][T21864] iov_iter_zero+0x9ad/0x14a0 [ 2232.881262][T21864] ? filemap_check_errors+0xa5/0x150 [ 2232.881298][T21864] ? _copy_mc_to_iter+0x17a0/0x17a0 [ 2232.881335][T21864] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 2232.889153][T13101] timeout_message=lock fdc [ 2232.893610][T21864] ? iomap_iter+0x281/0x11b0 [ 2232.893710][T21864] __iomap_dio_rw+0x983/0x1a10 [ 2232.897106][T13101] last output bytes: [ 2232.903835][T21864] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2232.903886][T21864] ? iomap_dio_bio_iter+0x1530/0x1530 [ 2232.903950][T21864] ? down_read+0x198/0x440 [ 2232.919244][T13101] 0 90 4295139496 [ 2232.920626][T21864] ? aa_file_perm+0x595/0x1180 [ 2232.920668][T21864] ? rwsem_down_read_slowpath+0xa70/0xa70 [ 2232.920707][T21864] iomap_dio_rw+0x38/0x90 [ 2232.924158][T13101] 1 90 4295139496 [ 2232.929027][T21864] ext4_file_read_iter+0x41c/0x5d0 [ 2232.929075][T21864] generic_file_splice_read+0x453/0x6d0 [ 2232.929113][T21864] ? folio_flags.constprop.0+0x70/0x70 [ 2232.929158][T21864] ? security_file_permission+0xab/0xd0 [ 2232.929188][T21864] ? folio_flags.constprop.0+0x70/0x70 [ 2232.929216][T21864] do_splice_to+0x1bf/0x250 [ 2232.929249][T21864] splice_direct_to_actor+0x2c2/0x8c0 [ 2232.936217][T13101] 2 90 4295139496 [ 2232.949351][T21864] ? generic_file_splice_read+0x6d0/0x6d0 [ 2232.949407][T21864] ? do_splice_to+0x250/0x250 [ 2232.949437][T21864] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2232.956827][T13101] 24 90 4295139496 [ 2232.960816][T21864] ? security_file_permission+0xab/0xd0 [ 2232.960875][T21864] do_splice_direct+0x1b3/0x280 [ 2232.960912][T21864] ? splice_direct_to_actor+0x8c0/0x8c0 [ 2232.966605][T13101] 1b 90 4295139496 [ 2232.971269][T21864] do_sendfile+0xaf2/0x1250 [ 2232.971342][T21864] ? do_pwritev+0x270/0x270 [ 2232.971365][T21864] ? __context_tracking_exit+0xb8/0xe0 [ 2232.977457][T13101] ff 90 4295139496 [ 2232.981474][T21864] ? lock_downgrade+0x6e0/0x6e0 [ 2232.981516][T21864] ? lock_downgrade+0x6e0/0x6e0 [ 2232.981551][T21864] __ia32_compat_sys_sendfile+0x1dd/0x220 [ 2232.981584][T21864] ? __ia32_sys_sendfile64+0x210/0x210 [ 2232.988404][T13101] 12 80 4295141312 [ 2232.994152][T21864] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2232.994348][T21864] __do_fast_syscall_32+0x65/0xf0 [ 2232.999870][T13101] 3 90 4295141312 [ 2233.004333][T21864] do_fast_syscall_32+0x2f/0x70 [ 2233.004382][T21864] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2233.004419][T21864] RIP: 0023:0xf6edb549 [ 2233.004442][T21864] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2233.009756][T13101] 13 80 4295141312 [ 2233.014151][T21864] RSP: 002b:00000000f44d55fc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2233.014188][T21864] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000006 [ 2233.014206][T21864] RDX: 0000000000000000 RSI: 00000000fffffffa RDI: 0000000000000000 [ 2233.014224][T21864] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2233.014260][T21864] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2233.014277][T21864] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2233.014316][T21864] 08:04:06 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') [ 2233.618350][T13101] 0 90 4295141312 [ 2233.624161][T13101] 1a 90 4295141312 [ 2233.631372][T13101] 0 90 4295141312 [ 2233.636917][T13101] 3 80 4295141312 [ 2233.645246][T13101] a1 90 4295141312 [ 2233.651128][T13101] 1e 90 4295141312 [ 2233.656734][T13101] 7 80 4295141312 [ 2233.662385][T13101] 1 90 4295141312 [ 2233.667334][T13101] 8 80 4295141312 08:04:07 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="6d4db975", 0x4, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2233.672475][T13101] 4 80 4295141312 [ 2233.678640][T13101] 1 90 4295141312 [ 2233.683925][T13101] last result at 4295141492 [ 2233.690598][T13101] last redo_fd_request at 4295160119 [ 2233.697798][T13101] status=80 [ 2233.708960][T13101] fdc_busy=1 [ 2233.713330][T13101] floppy_work.func=floppy_work_workfn [ 2233.727557][T13101] cont=ffffffff8a1f4960 [ 2233.732259][T21879] loop0: detected capacity change from 0 to 87 [ 2233.733745][T13101] current_req=0000000000000000 [ 2233.736580][T21880] loop2: detected capacity change from 0 to 87 [ 2233.762943][T13101] command_status=-1 [ 2233.767614][T13101] [ 2233.767722][T21882] loop3: detected capacity change from 0 to 87 [ 2233.771222][T13101] floppy1: floppy timeout called [ 2233.785310][T13101] floppy.c: no request in request_done [ 2233.794048][T13101] [ 2233.797033][T13101] floppy driver state 08:04:07 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') [ 2233.808222][T13101] ------------------- [ 2233.816619][T13101] now=4295160226 last interrupt=4295141312 diff=18914 last called handler=recal_interrupt 08:04:07 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 12) [ 2233.821788][ T37] audit: type=1804 audit(1638173047.285:952): pid=21882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir938124162/syzkaller.1iDaaV/1476/file1/bus" dev="loop3" ino=1048793 res=1 errno=0 [ 2233.825484][T21882] FAULT_INJECTION: forcing a failure. [ 2233.825484][T21882] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2233.825524][T21882] CPU: 1 PID: 21882 Comm: syz-executor.3 Not tainted 5.16.0-rc2-syzkaller #0 [ 2233.825552][T21882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2233.825566][T21882] Call Trace: [ 2233.825610][T21882] [ 2233.825621][T21882] dump_stack_lvl+0xcd/0x134 08:04:07 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000180)="6d4db975", 0x4, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2233.825657][T21882] should_fail.cold+0x5/0xa [ 2233.825695][T21882] prepare_alloc_pages+0x17b/0x570 [ 2233.825737][T21882] __alloc_pages+0x12f/0x500 [ 2233.825765][T21882] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 2233.825795][T21882] ? __filemap_fdatawait_range+0x281/0x3a0 [ 2233.825844][T21882] alloc_pages+0x1a7/0x300 [ 2233.825875][T21882] push_pipe+0x2a4/0x680 [ 2233.825912][T21882] iov_iter_get_pages+0x9ec/0xea0 [ 2233.825945][T21882] ? iter_xarray_populate_pages+0xaa0/0xaa0 [ 2233.825982][T21882] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2233.826012][T21882] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2233.826041][T21882] ? iov_iter_npages+0x2c1/0x690 [ 2233.826071][T21882] do_blockdev_direct_IO+0x2516/0x4380 [ 2233.826110][T21882] ? fat_add_cluster+0xf0/0xf0 [ 2233.826156][T21882] ? sb_init_dio_done_wq+0x80/0x80 [ 2233.826202][T21882] ? fat_add_cluster+0xf0/0xf0 [ 2233.826245][T21882] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2233.826282][T21882] ? map_id_range_down+0x1c4/0x340 [ 2233.826333][T21882] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2233.826366][T21882] ? atime_needs_update+0x65/0x640 [ 2233.826397][T21882] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2233.826430][T21882] ? __blockdev_direct_IO+0x32/0x100 [ 2233.826461][T21882] ? fat_add_cluster+0xf0/0xf0 [ 2233.826495][T21882] fat_direct_IO+0x1e0/0x390 [ 2233.826534][T21882] generic_file_read_iter+0x251/0x5a0 [ 2233.826570][T21882] generic_file_splice_read+0x453/0x6d0 08:04:07 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') [ 2233.826606][T21882] ? folio_flags.constprop.0+0x70/0x70 [ 2233.826646][T21882] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2233.826683][T21882] ? security_file_permission+0xab/0xd0 [ 2233.826717][T21882] ? folio_flags.constprop.0+0x70/0x70 [ 2233.826750][T21882] do_splice_to+0x1bf/0x250 [ 2233.826783][T21882] splice_direct_to_actor+0x2c2/0x8c0 [ 2233.826819][T21882] ? generic_file_splice_read+0x6d0/0x6d0 [ 2233.826900][T21882] ? do_splice_to+0x250/0x250 [ 2233.826957][T21882] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2233.826991][T21882] ? security_file_permission+0xab/0xd0 [ 2233.827030][T21882] do_splice_direct+0x1b3/0x280 [ 2233.827064][T21882] ? splice_direct_to_actor+0x8c0/0x8c0 [ 2233.827115][T21882] do_sendfile+0xaf2/0x1250 [ 2233.827157][T21882] ? do_pwritev+0x270/0x270 [ 2233.827191][T21882] ? __context_tracking_exit+0xb8/0xe0 [ 2233.827221][T21882] ? lock_downgrade+0x6e0/0x6e0 [ 2233.827247][T21882] ? lock_downgrade+0x6e0/0x6e0 [ 2233.827288][T21882] __ia32_compat_sys_sendfile+0x1dd/0x220 [ 2233.827318][T21882] ? __ia32_sys_sendfile64+0x210/0x210 [ 2233.827352][T21882] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2233.827386][T21882] __do_fast_syscall_32+0x65/0xf0 [ 2233.827420][T21882] do_fast_syscall_32+0x2f/0x70 [ 2233.827451][T21882] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2233.827484][T21882] RIP: 0023:0xf6edb549 [ 2233.827506][T21882] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2233.827546][T21882] RSP: 002b:00000000f44d55fc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2233.827575][T21882] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 2233.827593][T21882] RDX: 0000000000000000 RSI: 00000000fffffffa RDI: 0000000000000000 [ 2233.827610][T21882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2233.827626][T21882] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2233.827643][T21882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2233.827679][T21882] [ 2233.829717][T13101] timeout_message=lock fdc [ 2233.866318][ T37] audit: type=1800 audit(1638173047.285:953): pid=21882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048793 res=0 errno=0 [ 2233.884242][T13101] last output bytes: [ 2233.952537][T21884] loop2: detected capacity change from 0 to 87 [ 2233.953080][T13101] 0 90 4295139496 [ 2234.039663][T21886] loop0: detected capacity change from 0 to 87 [ 2234.041783][T13101] 1 90 4295139496 [ 2234.424533][T13101] 2 90 4295139496 [ 2234.428406][T13101] 24 90 4295139496 [ 2234.432213][T13101] 1b 90 4295139496 [ 2234.435944][T13101] ff 90 4295139496 [ 2234.439845][T13101] 12 80 4295141312 [ 2234.444299][T13101] 3 90 4295141312 [ 2234.448952][T13101] 13 80 4295141312 [ 2234.453272][T13101] 0 90 4295141312 [ 2234.458363][T13101] 1a 90 4295141312 [ 2234.463201][T13101] 0 90 4295141312 [ 2234.468099][T13101] 3 80 4295141312 [ 2234.472733][T13101] a1 90 4295141312 [ 2234.477468][T13101] 1e 90 4295141312 [ 2234.482506][T13101] 7 80 4295141312 [ 2234.487436][T13101] 1 90 4295141312 [ 2234.495665][T13101] 8 80 4295141312 [ 2234.500888][T13101] 4 80 4295141312 [ 2234.505634][T13101] 1 90 4295141312 [ 2234.511217][T13101] last result at 4295141492 [ 2234.516782][T13101] last redo_fd_request at 4295160224 [ 2234.527110][T21888] loop3: detected capacity change from 0 to 87 [ 2234.535324][T13101] status=80 [ 2234.535352][T13101] fdc_busy=1 [ 2234.535362][T13101] floppy_work.func=floppy_work_workfn [ 2234.535390][T13101] cont=ffffffff8a1f4920 [ 2234.535402][T13101] current_req=0000000000000000 [ 2234.535413][T13101] command_status=-1 [ 2234.535424][T13101] [ 2234.535503][T13101] floppy1: floppy timeout called [ 2234.568114][T21890] loop0: detected capacity change from 0 to 87 [ 2234.590184][ T37] audit: type=1804 audit(1638173048.045:954): pid=21888 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir938124162/syzkaller.1iDaaV/1477/file1/bus" dev="loop3" ino=1048794 res=1 errno=0 [ 2234.592565][T17293] 08:04:08 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:04:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000180)="6d4db975", 0x4, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2234.629398][T21888] FAULT_INJECTION: forcing a failure. [ 2234.629398][T21888] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2234.629690][T17293] floppy driver state [ 2234.639239][ T37] audit: type=1800 audit(1638173048.045:955): pid=21888 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048794 res=0 errno=0 [ 2234.648130][T21888] CPU: 0 PID: 21888 Comm: syz-executor.3 Not tainted 5.16.0-rc2-syzkaller #0 [ 2234.662551][T17293] ------------------- [ 2234.680638][T21888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2234.680662][T21888] Call Trace: [ 2234.680674][T21888] [ 2234.680686][T21888] dump_stack_lvl+0xcd/0x134 [ 2234.680725][T21888] should_fail.cold+0x5/0xa [ 2234.680764][T21888] prepare_alloc_pages+0x17b/0x570 [ 2234.680807][T21888] __alloc_pages+0x12f/0x500 [ 2234.680833][T21888] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 2234.680866][T21888] ? __filemap_fdatawait_range+0x281/0x3a0 [ 2234.680917][T21888] alloc_pages+0x1a7/0x300 [ 2234.680951][T21888] push_pipe+0x2a4/0x680 [ 2234.680989][T21888] iov_iter_get_pages+0x9ec/0xea0 [ 2234.681026][T21888] ? iter_xarray_populate_pages+0xaa0/0xaa0 [ 2234.780293][T21888] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2234.788150][T21888] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2234.795475][T21888] ? iov_iter_npages+0x2c1/0x690 [ 2234.803117][T21888] do_blockdev_direct_IO+0x2516/0x4380 [ 2234.810538][T21888] ? fat_add_cluster+0xf0/0xf0 [ 2234.832126][T21888] ? sb_init_dio_done_wq+0x80/0x80 [ 2234.838646][T21888] ? fat_add_cluster+0xf0/0xf0 [ 2234.845307][T21888] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2234.853691][T21888] ? map_id_range_down+0x1c4/0x340 [ 2234.861178][T21888] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2234.870277][T21888] ? atime_needs_update+0x65/0x640 [ 2234.875693][T17293] now=4295160332 last interrupt=4295141312 diff=19020 last called handler=recal_interrupt [ 2234.877421][T21888] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2234.877481][T21888] ? __blockdev_direct_IO+0x32/0x100 [ 2234.877514][T21888] ? fat_add_cluster+0xf0/0xf0 [ 2234.877548][T21888] fat_direct_IO+0x1e0/0x390 [ 2234.921362][T21888] generic_file_read_iter+0x251/0x5a0 [ 2234.928797][T21888] generic_file_splice_read+0x453/0x6d0 [ 2234.934185][T17293] timeout_message=lock fdc [ 2234.936177][T21888] ? folio_flags.constprop.0+0x70/0x70 [ 2234.936227][T21888] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2234.936267][T21888] ? security_file_permission+0xab/0xd0 [ 2234.936303][T21888] ? folio_flags.constprop.0+0x70/0x70 [ 2234.964696][T17293] last output bytes: [ 2234.965577][T21888] do_splice_to+0x1bf/0x250 [ 2234.983487][T21888] splice_direct_to_actor+0x2c2/0x8c0 [ 2234.989874][T21888] ? generic_file_splice_read+0x6d0/0x6d0 [ 2234.996546][T21888] ? do_splice_to+0x250/0x250 [ 2235.000359][T17293] 0 90 4295139496 [ 2235.002339][T21888] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2235.002379][T21888] ? security_file_permission+0xab/0xd0 [ 2235.002419][T21888] do_splice_direct+0x1b3/0x280 [ 2235.002453][T21888] ? splice_direct_to_actor+0x8c0/0x8c0 [ 2235.019334][T17293] 1 90 4295139496 [ 2235.021257][T21888] do_sendfile+0xaf2/0x1250 [ 2235.021312][T21888] ? do_pwritev+0x270/0x270 [ 2235.021347][T21888] ? __context_tracking_exit+0xb8/0xe0 [ 2235.021376][T21888] ? lock_downgrade+0x6e0/0x6e0 [ 2235.036039][T17293] 2 90 4295139496 [ 2235.039016][T21888] ? lock_downgrade+0x6e0/0x6e0 [ 2235.039063][T21888] __ia32_compat_sys_sendfile+0x1dd/0x220 [ 2235.039095][T21888] ? __ia32_sys_sendfile64+0x210/0x210 [ 2235.039128][T21888] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2235.039161][T21888] __do_fast_syscall_32+0x65/0xf0 [ 2235.039197][T21888] do_fast_syscall_32+0x2f/0x70 [ 2235.039228][T21888] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2235.052778][T17293] 24 90 4295139496 [ 2235.059142][T21888] RIP: 0023:0xf6edb549 08:04:08 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 13) [ 2235.059172][T21888] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2235.059198][T21888] RSP: 002b:00000000f44d55fc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2235.059226][T21888] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 2235.059245][T21888] RDX: 0000000000000000 RSI: 00000000fffffffa RDI: 0000000000000000 [ 2235.059262][T21888] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2235.059279][T21888] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2235.059295][T21888] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2235.059349][T21888] [ 2235.084998][T21895] loop2: detected capacity change from 0 to 87 [ 2235.124013][T17293] 1b 90 4295139496 08:04:08 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') [ 2235.248583][T17293] ff 90 4295139496 [ 2235.253651][T17293] 12 80 4295141312 [ 2235.258801][T17293] 3 90 4295141312 [ 2235.263446][T17293] 13 80 4295141312 [ 2235.269086][T17293] 0 90 4295141312 [ 2235.273588][T17293] 1a 90 4295141312 [ 2235.278091][T17293] 0 90 4295141312 [ 2235.283875][T17293] 3 80 4295141312 [ 2235.288328][T17293] a1 90 4295141312 [ 2235.292559][T17293] 1e 90 4295141312 [ 2235.298105][T17293] 7 80 4295141312 08:04:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000180)="6d4db975", 0x4, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2235.303317][T17293] 1 90 4295141312 [ 2235.309133][T17293] 8 80 4295141312 [ 2235.314536][T17293] 4 80 4295141312 [ 2235.319601][T17293] 1 90 4295141312 [ 2235.324751][T17293] last result at 4295141492 [ 2235.331396][T17293] last redo_fd_request at 4295160302 [ 2235.339265][T17293] status=80 [ 2235.343992][T17293] fdc_busy=1 [ 2235.349795][T17293] floppy_work.func=floppy_work_workfn [ 2235.357210][T17293] cont=ffffffff8a1f4920 [ 2235.372039][T17293] current_req=0000000000000000 [ 2235.379408][T17293] command_status=-1 [ 2235.385782][T17293] [ 2235.389582][T21901] loop2: detected capacity change from 0 to 87 [ 2235.418111][T17293] floppy1: floppy timeout called [ 2235.422344][T21903] loop3: detected capacity change from 0 to 87 08:04:08 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') [ 2235.426996][T17293] [ 2235.435922][T17293] floppy driver state [ 2235.441343][T17293] ------------------- [ 2235.447018][T17293] now=4295160389 last interrupt=4295141312 diff=19077 last called handler=recal_interrupt [ 2235.474972][T17293] timeout_message=lock fdc [ 2235.477313][ T37] audit: type=1804 audit(1638173048.945:956): pid=21903 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir938124162/syzkaller.1iDaaV/1478/file1/bus" dev="loop3" ino=1048795 res=1 errno=0 [ 2235.478250][T21903] FAULT_INJECTION: forcing a failure. [ 2235.478250][T21903] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2235.478291][T21903] CPU: 1 PID: 21903 Comm: syz-executor.3 Not tainted 5.16.0-rc2-syzkaller #0 [ 2235.478322][T21903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2235.478339][T21903] Call Trace: 08:04:09 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 14) [ 2235.478349][T21903] [ 2235.478362][T21903] dump_stack_lvl+0xcd/0x134 [ 2235.478405][T21903] should_fail.cold+0x5/0xa [ 2235.478446][T21903] prepare_alloc_pages+0x17b/0x570 [ 2235.478493][T21903] __alloc_pages+0x12f/0x500 08:04:09 executing program 0: chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') [ 2235.478522][T21903] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 2235.478557][T21903] ? __filemap_fdatawait_range+0x281/0x3a0 [ 2235.478612][T21903] alloc_pages+0x1a7/0x300 [ 2235.478648][T21903] push_pipe+0x2a4/0x680 [ 2235.478736][T21903] iov_iter_get_pages+0x9ec/0xea0 [ 2235.478775][T21903] ? iter_xarray_populate_pages+0xaa0/0xaa0 [ 2235.478832][T21903] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2235.478868][T21903] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2235.478900][T21903] ? iov_iter_npages+0x2c1/0x690 [ 2235.478936][T21903] do_blockdev_direct_IO+0x2516/0x4380 [ 2235.478979][T21903] ? fat_add_cluster+0xf0/0xf0 [ 2235.479032][T21903] ? sb_init_dio_done_wq+0x80/0x80 [ 2235.479091][T21903] ? fat_add_cluster+0xf0/0xf0 [ 2235.479175][T21903] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2235.479207][T21903] ? map_id_range_down+0x1c4/0x340 [ 2235.479263][T21903] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2235.479297][T21903] ? atime_needs_update+0x65/0x640 [ 2235.479333][T21903] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2235.479367][T21903] ? __blockdev_direct_IO+0x32/0x100 [ 2235.479401][T21903] ? fat_add_cluster+0xf0/0xf0 [ 2235.479437][T21903] fat_direct_IO+0x1e0/0x390 [ 2235.479481][T21903] generic_file_read_iter+0x251/0x5a0 [ 2235.479523][T21903] generic_file_splice_read+0x453/0x6d0 [ 2235.479562][T21903] ? folio_flags.constprop.0+0x70/0x70 [ 2235.479606][T21903] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2235.479649][T21903] ? security_file_permission+0xab/0xd0 [ 2235.479686][T21903] ? folio_flags.constprop.0+0x70/0x70 [ 2235.479725][T21903] do_splice_to+0x1bf/0x250 [ 2235.479764][T21903] splice_direct_to_actor+0x2c2/0x8c0 [ 2235.479803][T21903] ? generic_file_splice_read+0x6d0/0x6d0 [ 2235.479846][T21903] ? do_splice_to+0x250/0x250 [ 2235.479878][T21903] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2235.479912][T21903] ? security_file_permission+0xab/0xd0 [ 2235.479956][T21903] do_splice_direct+0x1b3/0x280 [ 2235.479992][T21903] ? splice_direct_to_actor+0x8c0/0x8c0 [ 2235.480051][T21903] do_sendfile+0xaf2/0x1250 [ 2235.480107][T21903] ? do_pwritev+0x270/0x270 [ 2235.480146][T21903] ? __context_tracking_exit+0xb8/0xe0 [ 2235.480180][T21903] ? lock_downgrade+0x6e0/0x6e0 [ 2235.480210][T21903] ? lock_downgrade+0x6e0/0x6e0 [ 2235.480247][T21903] __ia32_compat_sys_sendfile+0x1dd/0x220 [ 2235.480280][T21903] ? __ia32_sys_sendfile64+0x210/0x210 [ 2235.480316][T21903] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2235.480354][T21903] __do_fast_syscall_32+0x65/0xf0 [ 2235.480390][T21903] do_fast_syscall_32+0x2f/0x70 [ 2235.480425][T21903] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2235.480462][T21903] RIP: 0023:0xf6edb549 [ 2235.480486][T21903] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2235.480514][T21903] RSP: 002b:00000000f44d55fc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2235.480546][T21903] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 2235.480567][T21903] RDX: 0000000000000000 RSI: 00000000fffffffa RDI: 0000000000000000 [ 2235.480586][T21903] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2235.480620][T21903] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2235.480639][T21903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2235.480681][T21903] [ 2235.511538][T17293] last output bytes: [ 2235.527138][ T37] audit: type=1800 audit(1638173048.945:957): pid=21903 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048795 res=0 errno=0 [ 2235.536302][T17293] 0 90 4295139496 [ 2236.021461][T17293] 1 90 4295139496 [ 2236.025992][T17293] 2 90 4295139496 [ 2236.030894][T17293] 24 90 4295139496 [ 2236.035658][T17293] 1b 90 4295139496 [ 2236.040316][T17293] ff 90 4295139496 [ 2236.045391][T17293] 12 80 4295141312 [ 2236.061011][T17293] 3 90 4295141312 [ 2236.065778][T17293] 13 80 4295141312 [ 2236.070928][T17293] 0 90 4295141312 [ 2236.076000][T17293] 1a 90 4295141312 [ 2236.080779][T17293] 0 90 4295141312 [ 2236.085432][T17293] 3 80 4295141312 [ 2236.090248][T17293] a1 90 4295141312 [ 2236.095200][T17293] 1e 90 4295141312 [ 2236.099977][T17293] 7 80 4295141312 [ 2236.104802][T17293] 1 90 4295141312 [ 2236.109964][T17293] 8 80 4295141312 [ 2236.114649][T17293] 4 80 4295141312 [ 2236.119466][T17293] 1 90 4295141312 [ 2236.124131][T17293] last result at 4295141492 [ 2236.130225][T17293] last redo_fd_request at 4295160387 [ 2236.136910][T17293] status=80 [ 2236.141183][T17293] fdc_busy=1 [ 2236.145352][T17293] floppy_work.func=floppy_work_workfn [ 2236.151806][T17293] cont=ffffffff8a1f4920 [ 2236.156424][T17293] current_req=0000000000000000 [ 2236.162293][T17293] command_status=-1 [ 2236.167016][T17293] [ 2236.170126][T17293] floppy1: floppy timeout called [ 2236.195348][ T3758] [ 2236.197624][T21909] loop3: detected capacity change from 0 to 87 [ 2236.199489][ T3758] floppy driver state [ 2236.199502][ T3758] ------------------- 08:04:09 executing program 1: r0 = syz_open_dev$floppy(&(0x7f00000001c0), 0x1, 0x3) ioctl$FLOPPY_FDDEFPRM(r0, 0x400c0248, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:04:09 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)}, {&(0x7f0000000180)="6d4db975", 0x4, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) 08:04:09 executing program 0: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') [ 2236.199511][ T3758] now=4295160465 last interrupt=4295141312 diff=19153 last called handler=recal_interrupt [ 2236.248153][T21911] loop2: detected capacity change from 0 to 87 [ 2236.248205][ T3758] timeout_message=lock fdc [ 2236.256897][ T37] audit: type=1804 audit(1638173049.725:958): pid=21909 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir938124162/syzkaller.1iDaaV/1479/file1/bus" dev="loop3" ino=1048796 res=1 errno=0 08:04:09 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)}, {&(0x7f0000000180)="6d4db975", 0x4, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2236.259986][ T3758] last output bytes: [ 2236.260000][ T3758] 0 90 4295139496 [ 2236.260025][ T3758] 1 90 4295139496 [ 2236.260619][T21913] loop0: detected capacity change from 0 to 87 [ 2236.283653][T21909] FAULT_INJECTION: forcing a failure. 08:04:09 executing program 3: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x7) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) (fail_nth: 15) [ 2236.283653][T21909] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2236.283682][T21909] CPU: 3 PID: 21909 Comm: syz-executor.3 Not tainted 5.16.0-rc2-syzkaller #0 [ 2236.283700][T21909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2236.283710][T21909] Call Trace: [ 2236.283716][T21909] [ 2236.283723][T21909] dump_stack_lvl+0xcd/0x134 [ 2236.283746][T21909] should_fail.cold+0x5/0xa [ 2236.283769][T21909] prepare_alloc_pages+0x17b/0x570 [ 2236.283832][T21909] __alloc_pages+0x12f/0x500 [ 2236.283849][T21909] ? put_task_struct_rcu_user+0x7f/0xb0 [ 2236.283935][T21909] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 2236.283952][T21909] ? __schedule+0xaa2/0x4940 [ 2236.283980][T21909] ? __filemap_fdatawait_range+0x281/0x3a0 [ 2236.284037][T21909] alloc_pages+0x1a7/0x300 [ 2236.284070][T21909] push_pipe+0x2a4/0x680 [ 2236.284112][T21909] iov_iter_get_pages+0x9ec/0xea0 [ 2236.284149][T21909] ? iter_xarray_populate_pages+0xaa0/0xaa0 [ 2236.284175][T21909] ? __bpf_trace_lock+0xe0/0xe0 [ 2236.284208][T21909] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2236.284240][T21909] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2236.284270][T21909] ? iov_iter_npages+0x2c1/0x690 [ 2236.284305][T21909] do_blockdev_direct_IO+0x2516/0x4380 [ 2236.284349][T21909] ? fat_add_cluster+0xf0/0xf0 [ 2236.284402][T21909] ? sb_init_dio_done_wq+0x80/0x80 [ 2236.284453][T21909] ? fat_add_cluster+0xf0/0xf0 [ 2236.284495][T21909] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2236.284523][T21909] ? map_id_range_down+0x1c4/0x340 [ 2236.284567][T21909] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2236.284599][T21909] ? atime_needs_update+0x65/0x640 [ 2236.284630][T21909] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2236.284659][T21909] ? __blockdev_direct_IO+0x32/0x100 [ 2236.284687][T21909] ? fat_add_cluster+0xf0/0xf0 [ 2236.284718][T21909] fat_direct_IO+0x1e0/0x390 [ 2236.284755][T21909] generic_file_read_iter+0x251/0x5a0 [ 2236.284795][T21909] generic_file_splice_read+0x453/0x6d0 [ 2236.284837][T21909] ? folio_flags.constprop.0+0x70/0x70 [ 2236.284868][T21909] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2236.284906][T21909] ? security_file_permission+0xab/0xd0 [ 2236.284940][T21909] ? folio_flags.constprop.0+0x70/0x70 [ 2236.284961][T21909] do_splice_to+0x1bf/0x250 [ 2236.284997][T21909] splice_direct_to_actor+0x2c2/0x8c0 [ 2236.285037][T21909] ? generic_file_splice_read+0x6d0/0x6d0 [ 2236.285066][T21909] ? do_splice_to+0x250/0x250 [ 2236.285095][T21909] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2236.285127][T21909] ? security_file_permission+0xab/0xd0 [ 2236.285167][T21909] do_splice_direct+0x1b3/0x280 [ 2236.285220][T21909] ? splice_direct_to_actor+0x8c0/0x8c0 [ 2236.285272][T21909] do_sendfile+0xaf2/0x1250 [ 2236.285316][T21909] ? do_pwritev+0x270/0x270 [ 2236.285352][T21909] ? __context_tracking_exit+0xb8/0xe0 [ 2236.285384][T21909] ? lock_downgrade+0x6e0/0x6e0 [ 2236.285412][T21909] ? lock_downgrade+0x6e0/0x6e0 [ 2236.285446][T21909] __ia32_compat_sys_sendfile+0x1dd/0x220 [ 2236.285479][T21909] ? __ia32_sys_sendfile64+0x210/0x210 [ 2236.285513][T21909] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2236.285548][T21909] __do_fast_syscall_32+0x65/0xf0 [ 2236.285582][T21909] do_fast_syscall_32+0x2f/0x70 [ 2236.285614][T21909] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2236.285651][T21909] RIP: 0023:0xf6edb549 [ 2236.285676][T21909] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2236.285708][T21909] RSP: 002b:00000000f44d55fc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2236.285741][T21909] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 2236.285761][T21909] RDX: 0000000000000000 RSI: 00000000fffffffa RDI: 0000000000000000 [ 2236.285780][T21909] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2236.285795][T21909] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2236.285809][T21909] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2236.285843][T21909] [ 2236.299093][ T37] audit: type=1800 audit(1638173049.725:959): pid=21909 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048796 res=0 errno=0 [ 2236.303653][ T3758] 2 90 4295139496 [ 2236.810419][ T3758] 24 90 4295139496 [ 2236.814932][ T3758] 1b 90 4295139496 [ 2236.819960][ T3758] ff 90 4295139496 [ 2236.824934][ T3758] 12 80 4295141312 [ 2236.829825][ T3758] 3 90 4295141312 [ 2236.835018][ T3758] 13 80 4295141312 [ 2236.839685][ T3758] 0 90 4295141312 [ 2236.844242][ T3758] 1a 90 4295141312 [ 2236.849329][ T3758] 0 90 4295141312 [ 2236.854607][ T3758] 3 80 4295141312 [ 2236.865608][ T3758] a1 90 4295141312 08:04:10 executing program 0: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)='./file1\x00') [ 2236.870586][ T3758] 1e 90 4295141312 [ 2236.875333][ T3758] 7 80 4295141312 [ 2236.880444][ T3758] 1 90 4295141312 [ 2236.885060][ T3758] 8 80 4295141312 [ 2236.890208][ T3758] 4 80 4295141312 [ 2236.894506][ T3758] 1 90 4295141312 [ 2236.904027][ T3758] last result at 4295141492 [ 2236.904218][T21918] loop2: detected capacity change from 0 to 87 [ 2236.910028][ T3758] last redo_fd_request at 4295160464 [ 2236.916485][T21920] loop3: detected capacity change from 0 to 87 [ 2236.931684][ T3758] status=80 [ 2236.935994][ T3758] fdc_busy=1 [ 2236.941049][ T3758] floppy_work.func=floppy_work_workfn [ 2236.948741][ T3758] cont=ffffffff8a1f4920 [ 2236.954411][ T3758] current_req=0000000000000000 [ 2236.963450][ T3758] command_status=-1 [ 2236.967440][ T3758] [ 2236.970912][ T3758] floppy1: floppy timeout called [ 2236.977496][T21920] FAULT_INJECTION: forcing a failure. [ 2236.977496][T21920] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2236.988009][ T37] audit: type=1804 audit(1638173050.445:960): pid=21920 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir938124162/syzkaller.1iDaaV/1480/file1/bus" dev="loop3" ino=1048797 res=1 errno=0 [ 2236.995045][T21920] CPU: 1 PID: 21920 Comm: syz-executor.3 Not tainted 5.16.0-rc2-syzkaller #0 [ 2236.998905][ T3758] [ 2236.998917][ T3758] floppy driver state [ 2236.998925][ T3758] ------------------- [ 2236.998933][ T3758] now=4295160544 last interrupt=4295141312 diff=19232 last called handler=recal_interrupt [ 2236.998971][ T3758] timeout_message=lock fdc [ 2236.998981][ T3758] last output bytes: [ 2236.998988][ T3758] 0 90 4295139496 [ 2236.999003][ T3758] 1 90 4295139496 [ 2236.999019][ T3758] 2 90 4295139496 [ 2236.999035][ T3758] 24 90 4295139496 08:04:10 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xae9e, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)}, {&(0x7f0000000180)="6d4db975", 0x4, 0x8}], 0x18000, &(0x7f0000000080)=ANY=[]) [ 2236.999051][ T3758] 1b 90 4295139496 [ 2236.999075][ T3758] ff 90 4295139496 [ 2236.999090][ T3758] 12 80 4295141312 [ 2236.999106][ T3758] 3 90 4295141312 [ 2236.999122][ T3758] 13 80 4295141312 [ 2236.999138][ T3758] 0 90 4295141312 [ 2236.999154][ T3758] 1a 90 4295141312 [ 2236.999170][ T3758] 0 90 4295141312 [ 2236.999186][ T3758] 3 80 4295141312 [ 2236.999202][ T3758] a1 90 4295141312 [ 2236.999218][ T3758] 1e 90 4295141312 [ 2236.999234][ T3758] 7 80 4295141312 [ 2236.999249][ T3758] 1 90 4295141312 [ 2236.999265][ T3758] 8 80 4295141312 [ 2236.999281][ T3758] 4 80 4295141312 [ 2236.999297][ T3758] 1 90 4295141312 [ 2236.999313][ T3758] last result at 4295141492 [ 2236.999324][ T3758] last redo_fd_request at 4295160542 [ 2236.999398][ T3758] status=80 [ 2236.999413][ T3758] fdc_busy=1 [ 2236.999424][ T3758] cont=0000000000000000 [ 2236.999436][ T3758] current_req=0000000000000000 [ 2236.999448][ T3758] command_status=-1 [ 2236.999460][ T3758] [ 2236.999548][ T3758] floppy1: floppy timeout called [ 2236.999563][ T3758] no cont in shutdown! [ 2237.003309][ T3758] floppy1: floppy_shutdown: timeout handler died. [ 2237.005293][ T7] ------------[ cut here ]------------ [ 2237.005512][ T7] WARNING: CPU: 0 PID: 7 at drivers/block/floppy.c:1000 schedule_bh+0x5f/0x70 [ 2237.005564][ T7] Modules linked in: [ 2237.005594][ T7] CPU: 0 PID: 7 Comm: kworker/0:1 Not tainted 5.16.0-rc2-syzkaller #0 [ 2237.005625][ T7] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2237.005679][ T7] Workqueue: events_freezable_power_ disk_events_workfn [ 2237.005734][ T7] RIP: 0010:schedule_bh+0x5f/0x70 [ 2237.005767][ T7] Code: 07 1d fd fc 48 89 2d c0 72 ff 0b 5b 48 c7 c2 20 62 6a 8c 48 8b 35 91 77 ff 0b bf 08 00 00 00 5d e9 f6 a2 d1 fc e8 e1 1c fd fc <0f> 0b eb d1 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 e8 cb 1c fd fc [ 2237.005796][ T7] RSP: 0018:ffffc9000038fbc8 EFLAGS: 00010293 [ 2237.005823][ T7] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 2237.005843][ T7] RDX: ffff888010feba00 RSI: ffffffff847a7ddf RDI: 0000000000000003 [ 2237.005864][ T7] RBP: ffffffff847b5b70 R08: 0000000000000000 R09: ffffffff8c6a6227 [ 2237.005886][ T7] R10: ffffffff847a7daf R11: 0000000000000000 R12: ffffffff847b5b70 [ 2237.005906][ T7] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 2237.005935][ T7] FS: 0000000000000000(0000) GS:ffff88802ca00000(0000) knlGS:0000000000000000 [ 2237.006005][ T7] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2237.006031][ T7] CR2: 000000002c521000 CR3: 000000004e522000 CR4: 0000000000150ef0 [ 2237.006052][ T7] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2237.006078][ T7] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2237.006098][ T7] Call Trace: [ 2237.006109][ T7] [ 2237.006124][ T7] wait_til_done+0x7b/0x370 [ 2237.006159][ T7] ? fdc_specify+0x880/0x880 [ 2237.006202][ T7] ? lock_release+0x720/0x720 [ 2237.006242][ T7] floppy_check_events+0x3d0/0x510 [ 2237.006280][ T7] disk_check_events+0xc2/0x420 [ 2237.006320][ T7] process_one_work+0x9b2/0x1690 [ 2237.006378][ T7] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2237.006415][ T7] ? rwlock_bug.part.0+0x90/0x90 [ 2237.006447][ T7] ? _raw_spin_lock_irq+0x41/0x50 [ 2237.006493][ T7] worker_thread+0x658/0x11f0 [ 2237.006583][ T7] ? process_one_work+0x1690/0x1690 [ 2237.006619][ T7] kthread+0x405/0x4f0 [ 2237.006651][ T7] ? set_kthread_struct+0x130/0x130 [ 2237.006689][ T7] ret_from_fork+0x1f/0x30 [ 2237.006796][ T7] [ 2237.006827][ T7] Kernel panic - not syncing: panic_on_warn set ... [ 2237.034614][ T37] audit: type=1800 audit(1638173050.445:961): pid=21920 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048797 res=0 errno=0 [ 2237.038798][T21920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2237.038819][T21920] Call Trace: [ 2237.038829][T21920] [ 2237.038842][T21920] dump_stack_lvl+0xcd/0x134 [ 2237.038878][T21920] should_fail.cold+0x5/0xa [ 2237.038914][T21920] prepare_alloc_pages+0x17b/0x570 [ 2237.038955][T21920] __alloc_pages+0x12f/0x500 [ 2237.038980][T21920] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 2237.039008][T21920] ? __filemap_fdatawait_range+0x281/0x3a0 [ 2237.155312][T21925] loop2: detected capacity change from 0 to 87 [ 2237.156705][T21920] alloc_pages+0x1a7/0x300 [ 2237.156753][T21920] push_pipe+0x2a4/0x680 [ 2237.156790][T21920] iov_iter_get_pages+0x9ec/0xea0 [ 2237.156819][T21920] ? iter_xarray_populate_pages+0xaa0/0xaa0 [ 2237.171634][T21922] loop0: detected capacity change from 0 to 87 [ 2237.176662][T21920] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2237.176708][T21920] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2237.176740][T21920] ? iov_iter_npages+0x2c1/0x690 [ 2237.176771][T21920] do_blockdev_direct_IO+0x2516/0x4380 [ 2237.695865][T21920] ? fat_add_cluster+0xf0/0xf0 [ 2237.701373][T21920] ? sb_init_dio_done_wq+0x80/0x80 [ 2237.708034][T21920] ? fat_add_cluster+0xf0/0xf0 [ 2237.713944][T21920] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2237.720995][T21920] ? map_id_range_down+0x1c4/0x340 [ 2237.726962][T21920] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2237.734888][T21920] ? atime_needs_update+0x65/0x640 [ 2237.740990][T21920] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2237.748431][T21920] ? __blockdev_direct_IO+0x32/0x100 [ 2237.754752][T21920] ? fat_add_cluster+0xf0/0xf0 [ 2237.761277][T21920] fat_direct_IO+0x1e0/0x390 [ 2237.767512][T21920] generic_file_read_iter+0x251/0x5a0 [ 2237.781710][T21920] generic_file_splice_read+0x453/0x6d0 [ 2237.788825][T21920] ? folio_flags.constprop.0+0x70/0x70 [ 2237.795657][T21920] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2237.804039][T21920] ? security_file_permission+0xab/0xd0 [ 2237.811895][T21920] ? folio_flags.constprop.0+0x70/0x70 [ 2237.819635][T21920] do_splice_to+0x1bf/0x250 [ 2237.825719][T21920] splice_direct_to_actor+0x2c2/0x8c0 [ 2237.832846][T21920] ? generic_file_splice_read+0x6d0/0x6d0 [ 2237.839678][T21920] ? do_splice_to+0x250/0x250 [ 2237.845364][T21920] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2237.852948][T21920] ? security_file_permission+0xab/0xd0 [ 2237.859617][T21920] do_splice_direct+0x1b3/0x280 [ 2237.864337][T21920] ? splice_direct_to_actor+0x8c0/0x8c0 [ 2237.869985][T21920] do_sendfile+0xaf2/0x1250 [ 2237.874671][T21920] ? do_pwritev+0x270/0x270 [ 2237.879182][T21920] ? __context_tracking_exit+0xb8/0xe0 [ 2237.884921][T21920] ? lock_downgrade+0x6e0/0x6e0 [ 2237.890199][T21920] ? lock_downgrade+0x6e0/0x6e0 [ 2237.895492][T21920] __ia32_compat_sys_sendfile+0x1dd/0x220 [ 2237.901628][T21920] ? __ia32_sys_sendfile64+0x210/0x210 [ 2237.908202][T21920] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2237.914077][T21920] __do_fast_syscall_32+0x65/0xf0 [ 2237.919327][T21920] do_fast_syscall_32+0x2f/0x70 [ 2237.924490][T21920] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 2237.931457][T21920] RIP: 0023:0xf6edb549 [ 2237.936282][T21920] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2237.958495][T21920] RSP: 002b:00000000f44d55fc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2237.968817][T21920] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 2237.978948][T21920] RDX: 0000000000000000 RSI: 00000000fffffffa RDI: 0000000000000000 [ 2237.989033][T21920] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2237.998642][T21920] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2238.008671][T21920] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2238.017967][T21920] [ 2238.021796][ T7] CPU: 0 PID: 7 Comm: kworker/0:1 Not tainted 5.16.0-rc2-syzkaller #0 [ 2238.033303][ T7] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 2238.044037][ T7] Workqueue: events_freezable_power_ disk_events_workfn [ 2238.052521][ T7] Call Trace: [ 2238.056233][ T7] [ 2238.059544][ T7] dump_stack_lvl+0xcd/0x134 [ 2238.065659][ T7] panic+0x2b0/0x6dd [ 2238.070298][ T7] ? __warn_printk+0xf3/0xf3 [ 2238.076225][ T7] ? __warn.cold+0x1a/0x44 [ 2238.081974][ T7] ? schedule_bh+0x5f/0x70 [ 2238.087843][ T7] __warn.cold+0x35/0x44 [ 2238.093316][ T7] ? schedule_bh+0x5f/0x70 [ 2238.098586][ T7] report_bug+0x1bd/0x210 [ 2238.103554][ T7] handle_bug+0x3c/0x60 [ 2238.108300][ T7] exc_invalid_op+0x14/0x40 [ 2238.113418][ T7] asm_exc_invalid_op+0x12/0x20 [ 2238.119292][ T7] RIP: 0010:schedule_bh+0x5f/0x70 [ 2238.126553][ T7] Code: 07 1d fd fc 48 89 2d c0 72 ff 0b 5b 48 c7 c2 20 62 6a 8c 48 8b 35 91 77 ff 0b bf 08 00 00 00 5d e9 f6 a2 d1 fc e8 e1 1c fd fc <0f> 0b eb d1 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 e8 cb 1c fd fc [ 2238.148277][ T7] RSP: 0018:ffffc9000038fbc8 EFLAGS: 00010293 [ 2238.155875][ T7] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 2238.165308][ T7] RDX: ffff888010feba00 RSI: ffffffff847a7ddf RDI: 0000000000000003 [ 2238.176374][ T7] RBP: ffffffff847b5b70 R08: 0000000000000000 R09: ffffffff8c6a6227 [ 2238.185886][ T7] R10: ffffffff847a7daf R11: 0000000000000000 R12: ffffffff847b5b70 [ 2238.195586][ T7] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 2238.206342][ T7] ? redo_fd_request+0x2950/0x2950 [ 2238.212738][ T7] ? redo_fd_request+0x2950/0x2950 [ 2238.219478][ T7] ? schedule_bh+0x2f/0x70 [ 2238.225269][ T7] ? schedule_bh+0x5f/0x70 [ 2238.230556][ T7] ? schedule_bh+0x5f/0x70 [ 2238.236253][ T7] wait_til_done+0x7b/0x370 [ 2238.242234][ T7] ? fdc_specify+0x880/0x880 [ 2238.248507][ T7] ? lock_release+0x720/0x720 [ 2238.255285][ T7] floppy_check_events+0x3d0/0x510 [ 2238.262609][ T7] disk_check_events+0xc2/0x420 [ 2238.269451][ T7] process_one_work+0x9b2/0x1690 [ 2238.276091][ T7] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2238.283350][ T7] ? rwlock_bug.part.0+0x90/0x90 [ 2238.289699][ T7] ? _raw_spin_lock_irq+0x41/0x50 [ 2238.296558][ T7] worker_thread+0x658/0x11f0 [ 2238.303207][ T7] ? process_one_work+0x1690/0x1690 [ 2238.310623][ T7] kthread+0x405/0x4f0 [ 2238.315986][ T7] ? set_kthread_struct+0x130/0x130 [ 2238.323049][ T7] ret_from_fork+0x1f/0x30 [ 2238.329261][ T7] [ 2238.335083][ T7] Kernel Offset: disabled [ 2238.341954][ T7] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:04:11 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff888010feba00 RSI=ffffffff815e87f6 RDI=0000000000000003 RBP=0000000000000000 RSP=ffffc9000038f950 R8 =00000000ffffffff R9 =0000000000000003 R10=ffffffff815e881b R11=0000000000000000 R12=ffffffff8a086ee0 R13=ffffffff89aa770a R14=0000000000000300 R15=0000000000000009 RIP=ffffffff815e87f8 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002c521000 CR3=000000004e522000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041787bf700000000 XMM03=32322035312e322e302e303120363933 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8440e53c RDI=ffffffff9078b980 RBP=ffffffff9078b940 RSP=ffffc9002b126d30 R8 =000000000000005b R9 =0000000000000000 R10=ffffffff8440e52d R11=000000000000001f R12=0000000000000000 R13=fffffbfff20f177b R14=fffffbfff20f1732 R15=dffffc0000000000 RIP=ffffffff8440e562 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802cb00000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f6fd20c8 CR3=000000004bae4000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00ff000000000000000000000000ff00 XMM03=3134392e36333232205b203a6c656e72 XMM04=ffffffffffffffffffffffff00ff0000 XMM05=ffffffffffffffffffffffff00ff0000 XMM06=0000000000000000000000000a000a20 XMM07=7320353932373639343932343d736573 XMM08=2500656c6f736e6f632f7665642f000a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000001 RBX=ffff88802ca41e20 RCX=0000000000000000 RDX=ffff88801a170000 RSI=0000000000000001 RDI=0000000000000003 RBP=0000000000000003 RSP=ffffc9002a6d77e8 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff816c2566 R11=0000000000000000 R12=ffffed10059483c5 R13=0000000000000000 R14=ffff88802ca41e28 R15=0000000000000001 RIP=ffffffff81779cec RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cc00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f823000 CR3=0000000019509000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041787bf700000000 XMM03=32322035312e322e302e303120363933 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=000000000088d987 RBX=ffff8880114ad700 RCX=ffffffff8944145f RDX=ffffed10059a754b RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000003 RSP=ffffc9000045fdf8 R8 =0000000000000001 R9 =ffff88802cd3aa53 R10=ffffed10059a754a R11=0000000000000000 R12=ffffed1002295ae0 R13=0000000000000003 R14=ffffffff8d912ad0 R15=0000000000000000 RIP=ffffffff8946e08b RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cd00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f826000 CR3=0000000078d6d000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000008 XMM01=00007f9838245a4000005607ff398610 XMM02=00000000000003f80000000000000000 XMM03=00007f98d59a0d6b0000000000000000 XMM04=0f02000a0202000a0000000000000000 XMM05=00000000000000000000000000000600 XMM06=14000000000000000000000000000000 XMM07=00000050000000000000000016001492 XMM08=0d064e64757732455f4eba2845103f88 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000