fffffff8}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fffffff}]}, 0x78}, 0x1, 0x0, 0x0, 0x15}, 0x4004) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8010) 00:45:15 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) r1 = gettid() tkill(r1, 0x11) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) (async) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r0, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30) (async) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) 00:45:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x900, 0x10d0}, 0x48) 00:45:15 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x76500, 0xc0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r5, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x76500, 0xc0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r5, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) 00:45:15 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x1000, 0x400040) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RATTACH(r2, &(0x7f0000000100)={0x14, 0x69, 0x1, {0x4, 0x1}}, 0x14) (async) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000800) (async, rerun: 64) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x94, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x30}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffff8}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fffffff}]}, 0x78}, 0x1, 0x0, 0x0, 0x15}, 0x4004) (async, rerun: 64) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8010) 00:45:15 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) gettid() (async) r1 = gettid() tkill(r1, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r0, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) (async) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) 00:45:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0xa00, 0x10d0}, 0x48) 00:45:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x10000, 0x40040) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) write$damon_init_regions(r1, 0x0, 0x4d) 00:45:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x10000, 0x40040) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) write$damon_init_regions(r1, 0x0, 0x4d) 00:45:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0xb00, 0x10d0}, 0x48) 00:45:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0xa4e800) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x6, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x2, 0x7, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x8, 0x4, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r6}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r8}) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r10}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000004c0)={&(0x7f0000000480)=[r2, r3, 0x0, r4, 0x0, r6, r8, r10], 0x8, 0x0, 0x0, 0x20, 0x5, 0x80000001, 0xfb, {0x1, 0x1ff, 0x7, 0x80, 0x3, 0x0, 0x6, 0x0, 0x0, 0x1, 0x6, 0x9, 0x20, 0x200, "0c6d0685afe1fecd02ae7d7e1207d4924174ad697f174b787dd93ab59acfbe79"}}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) 00:45:15 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x410302, 0x314) 00:45:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0xc00, 0x10d0}, 0x48) 00:45:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x10000, 0x40040) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) write$damon_init_regions(r1, 0x0, 0x4d) 00:45:15 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x410302, 0x314) 00:45:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0xa4e800) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x6, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x2, 0x7, 0x3, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x8, 0x4, 0x4}) (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r6}) (async) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r8}) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r10}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000004c0)={&(0x7f0000000480)=[r2, r3, 0x0, r4, 0x0, r6, r8, r10], 0x8, 0x0, 0x0, 0x20, 0x5, 0x80000001, 0xfb, {0x1, 0x1ff, 0x7, 0x80, 0x3, 0x0, 0x6, 0x0, 0x0, 0x1, 0x6, 0x9, 0x20, 0x200, "0c6d0685afe1fecd02ae7d7e1207d4924174ad697f174b787dd93ab59acfbe79"}}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) 00:45:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0xd00, 0x10d0}, 0x48) 00:45:15 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x410302, 0x314) 00:45:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0xe00, 0x10d0}, 0x48) 00:45:15 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = userfaultfd(0x80001) r2 = gettid() tkill(r2, 0x11) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000040)={r2}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) 00:45:15 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x14) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x5, 0x3, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000240)=[r1], 0x1, 0x0, 0x0, 0x0, 0x7f, 0x200, 0x1, {0x1f, 0x400, 0x2, 0x3f, 0x7f, 0x200, 0x8001, 0x4, 0xb36, 0x3, 0x8001, 0x6, 0x6, 0x2, "f4d8f38652e99a7c57776265a8f03320d435350b3b3aa8dbe25bc443e04ebdfa"}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0084320, &(0x7f0000000040)={0x8c00, &(0x7f0000000000)="d1b949034a36552828ab66987eb91c66ea11be86c5a659f828b220c0bc1d3026706f51db3236cc"}) 00:45:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0xa4e800) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x6, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x2, 0x7, 0x3, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x8, 0x4, 0x4}) (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r6}) (async) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r8}) (async) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r10}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000004c0)={&(0x7f0000000480)=[r2, r3, 0x0, r4, 0x0, r6, r8, r10], 0x8, 0x0, 0x0, 0x20, 0x5, 0x80000001, 0xfb, {0x1, 0x1ff, 0x7, 0x80, 0x3, 0x0, 0x6, 0x0, 0x0, 0x1, 0x6, 0x9, 0x20, 0x200, "0c6d0685afe1fecd02ae7d7e1207d4924174ad697f174b787dd93ab59acfbe79"}}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) 00:45:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0xf00, 0x10d0}, 0x48) 00:45:15 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) (async) r1 = userfaultfd(0x80001) (async) r2 = gettid() tkill(r2, 0x11) (async) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000040)={r2}) (async) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) 00:45:15 executing program 3: syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x14) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x5, 0x3, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000240)=[r1], 0x1, 0x0, 0x0, 0x0, 0x7f, 0x200, 0x1, {0x1f, 0x400, 0x2, 0x3f, 0x7f, 0x200, 0x8001, 0x4, 0xb36, 0x3, 0x8001, 0x6, 0x6, 0x2, "f4d8f38652e99a7c57776265a8f03320d435350b3b3aa8dbe25bc443e04ebdfa"}}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000240)=[r1], 0x1, 0x0, 0x0, 0x0, 0x7f, 0x200, 0x1, {0x1f, 0x400, 0x2, 0x3f, 0x7f, 0x200, 0x8001, 0x4, 0xb36, 0x3, 0x8001, 0x6, 0x6, 0x2, "f4d8f38652e99a7c57776265a8f03320d435350b3b3aa8dbe25bc443e04ebdfa"}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0084320, &(0x7f0000000040)={0x8c00, &(0x7f0000000000)="d1b949034a36552828ab66987eb91c66ea11be86c5a659f828b220c0bc1d3026706f51db3236cc"}) 00:45:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) 00:45:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x1100, 0x10d0}, 0x48) 00:45:15 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) (async) r1 = userfaultfd(0x80001) (async, rerun: 32) r2 = gettid() (rerun: 32) tkill(r2, 0x11) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000040)={r2}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) 00:45:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x1200, 0x10d0}, 0x48) 00:45:15 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x14) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x5, 0x3, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000240)=[r1], 0x1, 0x0, 0x0, 0x0, 0x7f, 0x200, 0x1, {0x1f, 0x400, 0x2, 0x3f, 0x7f, 0x200, 0x8001, 0x4, 0xb36, 0x3, 0x8001, 0x6, 0x6, 0x2, "f4d8f38652e99a7c57776265a8f03320d435350b3b3aa8dbe25bc443e04ebdfa"}}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0084320, &(0x7f0000000040)={0x8c00, &(0x7f0000000000)="d1b949034a36552828ab66987eb91c66ea11be86c5a659f828b220c0bc1d3026706f51db3236cc"}) 00:45:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) 00:45:15 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x801c0204, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='/dev/vcsa#\x00'}) 00:45:15 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x4543, 0x1) 00:45:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) (async) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) (async) 00:45:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x1300, 0x10d0}, 0x48) 00:45:15 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x801c0204, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='/dev/vcsa#\x00'}) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) (async) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) (async) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x801c0204, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='/dev/vcsa#\x00'}) (async) 00:45:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x1400, 0x10d0}, 0x48) 00:45:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0xd1293fe1d3094af) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x47, 0x2}, 0x7) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x71, 0x2, {{0x1}, 0xa7a3}}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '!,,-[/'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '\x18['}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6013}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400040e0}, 0x8050) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc00c9207, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2, 0x1}) 00:45:15 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x4543, 0x1) 00:45:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x1500, 0x10d0}, 0x48) 00:45:15 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x801c0204, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='/dev/vcsa#\x00'}) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) (async) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) (async) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x801c0204, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='/dev/vcsa#\x00'}) (async) 00:45:15 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x4543, 0x1) 00:45:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0xd1293fe1d3094af) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x47, 0x2}, 0x7) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) (async) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x71, 0x2, {{0x1}, 0xa7a3}}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '!,,-[/'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '\x18['}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6013}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400040e0}, 0x8050) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc00c9207, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2, 0x1}) 00:45:15 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8cf2, 0x61, 0x500, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x7}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x8, 0xaf6c, 0xa84, 0x440, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5, 0xc}, 0x48) r4 = syz_open_dev$vcsa(&(0x7f0000000240), 0x1, 0x108c0) r5 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x4, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, &(0x7f0000000080), 0x41100, 0x30, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xb, 0x1, 0x100}, 0x10, 0x2c95a, r1, 0x8, &(0x7f0000000280)=[r2, r3, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x0, 0x3, 0x7, 0xc}, {0x2, 0x5, 0x0, 0x5}, {0x0, 0x4, 0xb, 0x5}, {0x0, 0x1, 0x0, 0x5024cbef2ab32339}, {0x2, 0x3, 0x6}, {0x0, 0x3, 0x10, 0x1a00e74af2f87574}, {0x2, 0x4, 0x5, 0xb}, {0x4, 0x5, 0xe, 0x6}], 0x10, 0x9}, 0x90) r6 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r6, 0x0, 0xfffffffffffffdb4) 00:45:15 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 00:45:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x1600, 0x10d0}, 0x48) 00:45:15 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8cf2, 0x61, 0x500, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x7}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x8, 0xaf6c, 0xa84, 0x440, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5, 0xc}, 0x48) (async) r4 = syz_open_dev$vcsa(&(0x7f0000000240), 0x1, 0x108c0) r5 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x4, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, &(0x7f0000000080), 0x41100, 0x30, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xb, 0x1, 0x100}, 0x10, 0x2c95a, r1, 0x8, &(0x7f0000000280)=[r2, r3, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x0, 0x3, 0x7, 0xc}, {0x2, 0x5, 0x0, 0x5}, {0x0, 0x4, 0xb, 0x5}, {0x0, 0x1, 0x0, 0x5024cbef2ab32339}, {0x2, 0x3, 0x6}, {0x0, 0x3, 0x10, 0x1a00e74af2f87574}, {0x2, 0x4, 0x5, 0xb}, {0x4, 0x5, 0xe, 0x6}], 0x10, 0x9}, 0x90) r6 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r6, 0x0, 0xfffffffffffffdb4) 00:45:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0xd1293fe1d3094af) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x47, 0x2}, 0x7) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x71, 0x2, {{0x1}, 0xa7a3}}, 0x18) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '!,,-[/'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '\x18['}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6013}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400040e0}, 0x8050) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async) ioctl$MON_IOCX_MFETCH(r2, 0xc00c9207, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2, 0x1}) 00:45:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x1700, 0x10d0}, 0x48) 00:45:15 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) 00:45:15 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8cf2, 0x61, 0x500, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x7}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x8, 0xaf6c, 0xa84, 0x440, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5, 0xc}, 0x48) (async, rerun: 32) r4 = syz_open_dev$vcsa(&(0x7f0000000240), 0x1, 0x108c0) (rerun: 32) r5 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x4, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, &(0x7f0000000080), 0x41100, 0x30, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xb, 0x1, 0x100}, 0x10, 0x2c95a, r1, 0x8, &(0x7f0000000280)=[r2, r3, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x0, 0x3, 0x7, 0xc}, {0x2, 0x5, 0x0, 0x5}, {0x0, 0x4, 0xb, 0x5}, {0x0, 0x1, 0x0, 0x5024cbef2ab32339}, {0x2, 0x3, 0x6}, {0x0, 0x3, 0x10, 0x1a00e74af2f87574}, {0x2, 0x4, 0x5, 0xb}, {0x4, 0x5, 0xe, 0x6}], 0x10, 0x9}, 0x90) r6 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r6, 0x0, 0xfffffffffffffdb4) 00:45:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x1800, 0x10d0}, 0x48) 00:45:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0) 00:45:15 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 00:45:15 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) 00:45:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x1900, 0x10d0}, 0x48) 00:45:15 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) (async, rerun: 32) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0) (rerun: 32) 00:45:15 executing program 3: r0 = openat$capi20(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0084320, &(0x7f00000000c0)={0x800, &(0x7f0000000040)="755134e1e754f362d876dabfbf79a9ce2dda41b775f7a0412261f80ce769eed143874e702aeacdb7a4d19deb2653d1af2b5a57f7edec315b68e7d8742ce8bed0973ee3a5f888a999d01401911c1b3016979dba271152986da9be"}) 00:45:15 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) (async, rerun: 32) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) 00:45:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x1a00, 0x10d0}, 0x48) 00:45:16 executing program 3: r0 = openat$capi20(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0084320, &(0x7f00000000c0)={0x800, &(0x7f0000000040)="755134e1e754f362d876dabfbf79a9ce2dda41b775f7a0412261f80ce769eed143874e702aeacdb7a4d19deb2653d1af2b5a57f7edec315b68e7d8742ce8bed0973ee3a5f888a999d01401911c1b3016979dba271152986da9be"}) 00:45:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) (async) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0) (async) 00:45:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x1b00, 0x10d0}, 0x48) 00:45:16 executing program 3: r0 = openat$capi20(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0084320, &(0x7f00000000c0)={0x800, &(0x7f0000000040)="755134e1e754f362d876dabfbf79a9ce2dda41b775f7a0412261f80ce769eed143874e702aeacdb7a4d19deb2653d1af2b5a57f7edec315b68e7d8742ce8bed0973ee3a5f888a999d01401911c1b3016979dba271152986da9be"}) 00:45:16 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) (async) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) (async) 00:45:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x1c00, 0x10d0}, 0x48) 00:45:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, [], [], [], [0x0, 0xe66]}) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r1}) 00:45:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x1d00, 0x10d0}, 0x48) 00:45:16 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x80442, 0x0) openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x0, 0xd5) 00:45:16 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0xfffffffc, 0x125c46) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) write$khugepaged_scan(r0, &(0x7f0000000000), 0x8) 00:45:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x1e00, 0x10d0}, 0x48) 00:45:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, [], [], [], [0x0, 0xe66]}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, [], [], [], [0x0, 0xe66]}) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r1}) 00:45:16 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x80442, 0x0) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x0, 0xd5) 00:45:16 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0xfffffffc, 0x125c46) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) write$khugepaged_scan(r0, &(0x7f0000000000), 0x8) 00:45:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x1f00, 0x10d0}, 0x48) 00:45:16 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x80442, 0x0) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x0, 0xd5) 00:45:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, [], [], [], [0x0, 0xe66]}) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r1}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, [], [], [], [0x0, 0xe66]}) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r1}) (async) 00:45:16 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x1944fcc27ffea4b2, 0x4) 00:45:16 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0xfffffffc, 0x125c46) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) write$khugepaged_scan(r0, &(0x7f0000000000), 0x8) syz_open_dev$vcsa(&(0x7f0000000f00), 0xfffffffc, 0x125c46) (async) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) (async) write$khugepaged_scan(r0, &(0x7f0000000000), 0x8) (async) 00:45:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x2000, 0x10d0}, 0x48) 00:45:16 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x1944fcc27ffea4b2, 0x4) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x1944fcc27ffea4b2, 0x4) (async) 00:45:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x2100, 0x10d0}, 0x48) 00:45:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="640000006f020007002004000000000005000000c80000000081000008030000090000000001010000000100000000000000800100000003000000000000000101000000000000000000000002030000000800000000000000"], 0x64) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) r1 = syz_open_dev$usbmon(&(0x7f0000000140), 0x5, 0x2) ioctl$MON_IOCX_GETX(r1, 0x400c920a, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f00000001c0)=""/48, 0x30}) 00:45:16 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x408001) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) 00:45:16 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x1944fcc27ffea4b2, 0x4) 00:45:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x2200, 0x10d0}, 0x48) 00:45:16 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x408001) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) 00:45:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x2300, 0x10d0}, 0x48) 00:45:16 executing program 3: r0 = openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x5d9b80) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) write$damon_init_regions(r1, &(0x7f0000000080)={{' ', 0xffffffffffffffff}, {' ', 0x7fff}, {' ', 0x1}}, 0x3f) 00:45:16 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x408001) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) 00:45:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="640000006f020007002004000000000005000000c80000000081000008030000090000000001010000000100000000000000800100000003000000000000000101000000000000000000000002030000000800000000000000"], 0x64) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) (async, rerun: 64) r1 = syz_open_dev$usbmon(&(0x7f0000000140), 0x5, 0x2) (rerun: 64) ioctl$MON_IOCX_GETX(r1, 0x400c920a, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f00000001c0)=""/48, 0x30}) 00:45:17 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x1000000, 0x10d0}, 0x48) 00:45:17 executing program 1: openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x20100, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) 00:45:17 executing program 3: r0 = openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x5d9b80) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) write$damon_init_regions(r1, &(0x7f0000000080)={{' ', 0xffffffffffffffff}, {' ', 0x7fff}, {' ', 0x1}}, 0x3f) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x5d9b80) (async) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) (async) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) (async) write$damon_init_regions(r1, &(0x7f0000000080)={{' ', 0xffffffffffffffff}, {' ', 0x7fff}, {' ', 0x1}}, 0x3f) (async) 00:45:17 executing program 1: openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x20100, 0x0) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) 00:45:17 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x2000000, 0x10d0}, 0x48) 00:45:17 executing program 3: r0 = openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x5d9b80) (async) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) (async) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) write$damon_init_regions(r1, &(0x7f0000000080)={{' ', 0xffffffffffffffff}, {' ', 0x7fff}, {' ', 0x1}}, 0x3f) 00:45:17 executing program 1: openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x20100, 0x0) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) 00:45:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="640000006f020007002004000000000005000000c80000000081000008030000090000000001010000000100000000000000800100000003000000000000000101000000000000000000000002030000000800000000000000"], 0x64) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) r1 = syz_open_dev$usbmon(&(0x7f0000000140), 0x5, 0x2) ioctl$MON_IOCX_GETX(r1, 0x400c920a, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f00000001c0)=""/48, 0x30}) 00:45:17 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1000, 0x800) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f00000000c0)) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x347d2) 00:45:17 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10) 00:45:17 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x3000000, 0x10d0}, 0x48) 00:45:17 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1000, 0x800) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f00000000c0)) (async) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x347d2) 00:45:17 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10) 00:45:17 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x4000000, 0x10d0}, 0x48) 00:45:17 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1000, 0x800) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f00000000c0)) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x347d2) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) (async) syz_open_dev$vcsa(&(0x7f0000000080), 0x1000, 0x800) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f00000000c0)) (async) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x347d2) (async) 00:45:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x5000000, 0x10d0}, 0x48) 00:45:18 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) (async) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10) 00:45:18 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='fsi_master_aspeed_opb_read\x00', r2}, 0x10) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x0, &(0x7f0000000340), &(0x7f00000000c0)='GPL\x00', 0x6, 0x7, &(0x7f0000000100)=""/7, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[r0, 0x1, r1, r3, 0x1, 0xffffffffffffffff], &(0x7f0000000200)=[{0x2, 0x3, 0x3, 0x4}], 0x10, 0xffffffc1}, 0x90) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x1d6) ioctl$FLOPPY_FDMSGOFF(0xffffffffffffffff, 0x246) 00:45:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x15, 0x2}, 0x7) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x10000) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) write$P9_RRENAME(r2, &(0x7f0000000280)={0x7, 0x15, 0x1}, 0x7) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x3, 0x4, 0x6}) r3 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x80, 0x800) write$P9_RVERSION(r3, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.L'}, 0x15) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) 00:45:18 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43, 0x9, 0x2, {0x401, 0x8001, 0x2, 0x7fffffff, 0x2de, 0x9, 0x8, 0xfff, 0x5}}, 0x43) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) pipe2$9p(&(0x7f0000000280), 0x1c0800) write$P9_RREMOVE(r2, &(0x7f00000002c0)={0x37, 0x7b, 0x2}, 0x7) r4 = syz_open_dev$vcsa(&(0x7f0000000100), 0x5, 0x40) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)) r5 = openat$binderfs(0xffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000440)={0x73622a85, 0x100b, 0x2}) write$P9_ROPEN(r0, &(0x7f0000000180)={0x18, 0x71, 0x2, {{0x10, 0x4}, 0x5}}, 0x18) write$P9_RWALK(r4, &(0x7f0000000140)={0x16, 0x6f, 0x1, {0x1, [{0x4, 0x4, 0x4}]}}, 0x16) write$damon_init_regions(r0, 0x0, 0xffffffffffffffc5) r6 = syz_open_dev$floppy(&(0x7f0000000300), 0x9, 0x800) ioctl$FLOPPY_FDGETMAXERRS(r6, 0x8014020e, &(0x7f0000000340)) write$P9_RATTACH(r1, &(0x7f0000000240)={0x14, 0x69, 0x2, {0x40, 0x2, 0x2}}, 0x14) r7 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x9, 0x4400) write$P9_RUNLINKAT(r2, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7) write$capi20(r7, &(0x7f0000000200)={0x10, 0x0, 0x41, 0x82, 0x7}, 0x10) 00:45:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x6000000, 0x10d0}, 0x48) 00:45:18 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43, 0x9, 0x2, {0x401, 0x8001, 0x2, 0x7fffffff, 0x2de, 0x9, 0x8, 0xfff, 0x5}}, 0x43) (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) pipe2$9p(&(0x7f0000000280), 0x1c0800) (async) write$P9_RREMOVE(r2, &(0x7f00000002c0)={0x37, 0x7b, 0x2}, 0x7) (async) r4 = syz_open_dev$vcsa(&(0x7f0000000100), 0x5, 0x40) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)) (async, rerun: 32) r5 = openat$binderfs(0xffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x802, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000440)={0x73622a85, 0x100b, 0x2}) (async) write$P9_ROPEN(r0, &(0x7f0000000180)={0x18, 0x71, 0x2, {{0x10, 0x4}, 0x5}}, 0x18) write$P9_RWALK(r4, &(0x7f0000000140)={0x16, 0x6f, 0x1, {0x1, [{0x4, 0x4, 0x4}]}}, 0x16) write$damon_init_regions(r0, 0x0, 0xffffffffffffffc5) r6 = syz_open_dev$floppy(&(0x7f0000000300), 0x9, 0x800) ioctl$FLOPPY_FDGETMAXERRS(r6, 0x8014020e, &(0x7f0000000340)) (async) write$P9_RATTACH(r1, &(0x7f0000000240)={0x14, 0x69, 0x2, {0x40, 0x2, 0x2}}, 0x14) (async) r7 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x9, 0x4400) write$P9_RUNLINKAT(r2, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7) (async) write$capi20(r7, &(0x7f0000000200)={0x10, 0x0, 0x41, 0x82, 0x7}, 0x10) 00:45:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) (async) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x15, 0x2}, 0x7) (async, rerun: 64) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x10000) (async, rerun: 64) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async) write$P9_RRENAME(r2, &(0x7f0000000280)={0x7, 0x15, 0x1}, 0x7) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x3, 0x4, 0x6}) (async) r3 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x80, 0x800) write$P9_RVERSION(r3, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.L'}, 0x15) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) 00:45:18 executing program 3: syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='fsi_master_aspeed_opb_read\x00', r2}, 0x10) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x0, &(0x7f0000000340), &(0x7f00000000c0)='GPL\x00', 0x6, 0x7, &(0x7f0000000100)=""/7, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[r0, 0x1, r1, r3, 0x1, 0xffffffffffffffff], &(0x7f0000000200)=[{0x2, 0x3, 0x3, 0x4}], 0x10, 0xffffffc1}, 0x90) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) (async) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x1d6) ioctl$FLOPPY_FDMSGOFF(0xffffffffffffffff, 0x246) 00:45:18 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43, 0x9, 0x2, {0x401, 0x8001, 0x2, 0x7fffffff, 0x2de, 0x9, 0x8, 0xfff, 0x5}}, 0x43) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) pipe2$9p(&(0x7f0000000280), 0x1c0800) write$P9_RREMOVE(r2, &(0x7f00000002c0)={0x37, 0x7b, 0x2}, 0x7) r4 = syz_open_dev$vcsa(&(0x7f0000000100), 0x5, 0x40) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)) r5 = openat$binderfs(0xffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000440)={0x73622a85, 0x100b, 0x2}) write$P9_ROPEN(r0, &(0x7f0000000180)={0x18, 0x71, 0x2, {{0x10, 0x4}, 0x5}}, 0x18) write$P9_RWALK(r4, &(0x7f0000000140)={0x16, 0x6f, 0x1, {0x1, [{0x4, 0x4, 0x4}]}}, 0x16) write$damon_init_regions(r0, 0x0, 0xffffffffffffffc5) r6 = syz_open_dev$floppy(&(0x7f0000000300), 0x9, 0x800) ioctl$FLOPPY_FDGETMAXERRS(r6, 0x8014020e, &(0x7f0000000340)) write$P9_RATTACH(r1, &(0x7f0000000240)={0x14, 0x69, 0x2, {0x40, 0x2, 0x2}}, 0x14) r7 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x9, 0x4400) write$P9_RUNLINKAT(r2, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7) write$capi20(r7, &(0x7f0000000200)={0x10, 0x0, 0x41, 0x82, 0x7}, 0x10) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) (async) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43, 0x9, 0x2, {0x401, 0x8001, 0x2, 0x7fffffff, 0x2de, 0x9, 0x8, 0xfff, 0x5}}, 0x43) (async) pipe2$9p(&(0x7f0000000080), 0x800) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async) pipe2$9p(&(0x7f0000000280), 0x1c0800) (async) write$P9_RREMOVE(r2, &(0x7f00000002c0)={0x37, 0x7b, 0x2}, 0x7) (async) syz_open_dev$vcsa(&(0x7f0000000100), 0x5, 0x40) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)) (async) openat$binderfs(0xffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x802, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000440)={0x73622a85, 0x100b, 0x2}) (async) write$P9_ROPEN(r0, &(0x7f0000000180)={0x18, 0x71, 0x2, {{0x10, 0x4}, 0x5}}, 0x18) (async) write$P9_RWALK(r4, &(0x7f0000000140)={0x16, 0x6f, 0x1, {0x1, [{0x4, 0x4, 0x4}]}}, 0x16) (async) write$damon_init_regions(r0, 0x0, 0xffffffffffffffc5) (async) syz_open_dev$floppy(&(0x7f0000000300), 0x9, 0x800) (async) ioctl$FLOPPY_FDGETMAXERRS(r6, 0x8014020e, &(0x7f0000000340)) (async) write$P9_RATTACH(r1, &(0x7f0000000240)={0x14, 0x69, 0x2, {0x40, 0x2, 0x2}}, 0x14) (async) syz_open_dev$vcsa(&(0x7f00000001c0), 0x9, 0x4400) (async) write$P9_RUNLINKAT(r2, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7) (async) write$capi20(r7, &(0x7f0000000200)={0x10, 0x0, 0x41, 0x82, 0x7}, 0x10) (async) 00:45:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x7000000, 0x10d0}, 0x48) 00:45:18 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) 00:45:18 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='fsi_master_aspeed_opb_read\x00', r2}, 0x10) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x0, &(0x7f0000000340), &(0x7f00000000c0)='GPL\x00', 0x6, 0x7, &(0x7f0000000100)=""/7, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[r0, 0x1, r1, r3, 0x1, 0xffffffffffffffff], &(0x7f0000000200)=[{0x2, 0x3, 0x3, 0x4}], 0x10, 0xffffffc1}, 0x90) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x1d6) ioctl$FLOPPY_FDMSGOFF(0xffffffffffffffff, 0x246) 00:45:18 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x15, 0x2}, 0x7) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x10000) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) write$P9_RRENAME(r2, &(0x7f0000000280)={0x7, 0x15, 0x1}, 0x7) (async) write$P9_RRENAME(r2, &(0x7f0000000280)={0x7, 0x15, 0x1}, 0x7) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x3, 0x4, 0x6}) r3 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x80, 0x800) write$P9_RVERSION(r3, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.L'}, 0x15) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) 00:45:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x8000000, 0x10d0}, 0x48) 00:45:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x9000000, 0x10d0}, 0x48) 00:45:18 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) (async, rerun: 64) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) (rerun: 64) 00:45:18 executing program 3: r0 = openat$capi20(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000040)=0x2) 00:45:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0xa000000, 0x10d0}, 0x48) 00:45:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) 00:45:18 executing program 3: openat$capi20(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) r0 = openat$capi20(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000040)=0x2) 00:45:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0xb000000, 0x10d0}, 0x48) 00:45:18 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) (async, rerun: 32) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) (rerun: 32) 00:45:18 executing program 3: r0 = openat$capi20(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000040)=0x2) openat$capi20(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000040)=0x2) (async) 00:45:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0xc000000, 0x10d0}, 0x48) 00:45:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) 00:45:18 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2bd0466b, 0x800) read$usbmon(r1, &(0x7f0000000040)=""/112, 0x70) 00:45:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0xd000000, 0x10d0}, 0x48) 00:45:18 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x21) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$FLOPPY_FDFMTBEG(r1, 0x247) 00:45:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) (async) 00:45:18 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2bd0466b, 0x800) read$usbmon(r1, &(0x7f0000000040)=""/112, 0x70) 00:45:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0xe000000, 0x10d0}, 0x48) 00:45:18 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000000)='/dev/dri/card#\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r0}, 0x4) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464b8, &(0x7f00000000c0)) 00:45:18 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x21) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) ioctl$FLOPPY_FDFMTBEG(r1, 0x247) 00:45:18 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x21) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x21) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$FLOPPY_FDFMTBEG(r1, 0x247) 00:45:18 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) (async, rerun: 32) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2bd0466b, 0x800) (rerun: 32) read$usbmon(r1, &(0x7f0000000040)=""/112, 0x70) 00:45:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0xf000000, 0x10d0}, 0x48) 00:45:18 executing program 3: write$capi20(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x81, 0x3, 0x83, 0x200, 0x10001}, 0x10) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x1e0) 00:45:18 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000000)='/dev/dri/card#\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r0}, 0x4) (async) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464b8, &(0x7f00000000c0)) 00:45:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x10000000, 0x10d0}, 0x48) 00:45:18 executing program 3: write$capi20(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x81, 0x3, 0x83, 0x200, 0x10001}, 0x10) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x1e0) write$capi20(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x81, 0x3, 0x83, 0x200, 0x10001}, 0x10) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x1e0) (async) 00:45:19 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0xfffffffd, 0x4c41) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[{}], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x1, 0x1, 0x1}) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000001c0)={0x2}) 00:45:19 executing program 3: write$capi20(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x81, 0x3, 0x83, 0x200, 0x10001}, 0x10) (async) write$capi20(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x81, 0x3, 0x83, 0x200, 0x10001}, 0x10) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x1e0) 00:45:19 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000000)='/dev/dri/card#\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r0}, 0x4) (async) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464b8, &(0x7f00000000c0)) 00:45:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x11000000, 0x10d0}, 0x48) 00:45:19 executing program 3: clock_gettime(0x3, &(0x7f0000000640)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000580)={0x54, 0x9, 0x1, 0x7, 0x7fff, 0x8, 0x2a, 0x4}, &(0x7f00000005c0)={0x5, 0x87, 0x9, 0x2, 0x0, 0x6, 0x9, 0xe9}, &(0x7f0000000600)={0x0, 0x4, 0x9db, 0x9, 0xfffffffffffffff8, 0x6, 0x3, 0xda}, &(0x7f0000000680)={r0, r1+60000000}, &(0x7f0000000700)={&(0x7f00000006c0)={[0x407]}, 0x8}) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$damon_init_regions(0xffffff9c, &(0x7f0000000080), 0x4be340, 0x86) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x2, 0x0, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x8, 0x1, 0x4}}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x403a, 0xff, 0x8, 0x0, 0x1, 0x7, '\x00', r2, 0xffffffffffffffff, 0x2}, 0x48) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) write$P9_RLERRORu(r3, &(0x7f00000000c0)={0x32, 0x7, 0x1, {{0x25, '/sys/kernel/debug/damon/init_regions\x00'}, 0x80}}, 0x32) r4 = gettid() write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000540)={0x8, 0x35, 0x2, 0x1}, 0x8) sched_rr_get_interval(r4, &(0x7f0000000480)) r5 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r5, 0x0, 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="000226bd00060000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x22048880}, 0x24000000) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840055dd", @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000005000600060000000c000400040000000001000005000600200000001800040000000000fffeffff7b7b00000200000000800000050006008100000005000500030000000500050000000000140004000000000009000000050000000900000008000300000000806a4c050002000000"], 0x84}, 0x1, 0x0, 0x0, 0x24000014}, 0x20008800) 00:45:19 executing program 3: clock_gettime(0x3, &(0x7f0000000640)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000580)={0x54, 0x9, 0x1, 0x7, 0x7fff, 0x8, 0x2a, 0x4}, &(0x7f00000005c0)={0x5, 0x87, 0x9, 0x2, 0x0, 0x6, 0x9, 0xe9}, &(0x7f0000000600)={0x0, 0x4, 0x9db, 0x9, 0xfffffffffffffff8, 0x6, 0x3, 0xda}, &(0x7f0000000680)={r0, r1+60000000}, &(0x7f0000000700)={&(0x7f00000006c0)={[0x407]}, 0x8}) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$damon_init_regions(0xffffff9c, &(0x7f0000000080), 0x4be340, 0x86) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x2, 0x0, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x8, 0x1, 0x4}}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x403a, 0xff, 0x8, 0x0, 0x1, 0x7, '\x00', r2, 0xffffffffffffffff, 0x2}, 0x48) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) write$P9_RLERRORu(r3, &(0x7f00000000c0)={0x32, 0x7, 0x1, {{0x25, '/sys/kernel/debug/damon/init_regions\x00'}, 0x80}}, 0x32) r4 = gettid() write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000540)={0x8, 0x35, 0x2, 0x1}, 0x8) sched_rr_get_interval(r4, &(0x7f0000000480)) r5 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r5, 0x0, 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="000226bd00060000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x22048880}, 0x24000000) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840055dd", @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000005000600060000000c000400040000000001000005000600200000001800040000000000fffeffff7b7b00000200000000800000050006008100000005000500030000000500050000000000140004000000000009000000050000000900000008000300000000806a4c050002000000"], 0x84}, 0x1, 0x0, 0x0, 0x24000014}, 0x20008800) clock_gettime(0x3, &(0x7f0000000640)) (async) pselect6(0x40, &(0x7f0000000580)={0x54, 0x9, 0x1, 0x7, 0x7fff, 0x8, 0x2a, 0x4}, &(0x7f00000005c0)={0x5, 0x87, 0x9, 0x2, 0x0, 0x6, 0x9, 0xe9}, &(0x7f0000000600)={0x0, 0x4, 0x9db, 0x9, 0xfffffffffffffff8, 0x6, 0x3, 0xda}, &(0x7f0000000680)={r0, r1+60000000}, &(0x7f0000000700)={&(0x7f00000006c0)={[0x407]}, 0x8}) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000080), 0x4be340, 0x86) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x2, 0x0, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x8, 0x1, 0x4}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x403a, 0xff, 0x8, 0x0, 0x1, 0x7, '\x00', r2, 0xffffffffffffffff, 0x2}, 0x48) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async) write$P9_RLERRORu(r3, &(0x7f00000000c0)={0x32, 0x7, 0x1, {{0x25, '/sys/kernel/debug/damon/init_regions\x00'}, 0x80}}, 0x32) (async) gettid() (async) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000540)={0x8, 0x35, 0x2, 0x1}, 0x8) (async) sched_rr_get_interval(r4, &(0x7f0000000480)) (async) socket$tipc(0x1e, 0x5, 0x0) (async) accept4$tipc(r5, 0x0, 0x0, 0x0) (async) getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f00000004c0), &(0x7f0000000500)=0x4) (async) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="000226bd00060000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x22048880}, 0x24000000) (async) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840055dd", @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000005000600060000000c000400040000000001000005000600200000001800040000000000fffeffff7b7b00000200000000800000050006008100000005000500030000000500050000000000140004000000000009000000050000000900000008000300000000806a4c050002000000"], 0x84}, 0x1, 0x0, 0x0, 0x24000014}, 0x20008800) (async) 00:45:19 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0xfffffffd, 0x4c41) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[{}], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x1, 0x1, 0x1}) (async) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000001c0)={0x2}) 00:45:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x12000000, 0x10d0}, 0x48) 00:45:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x7f26, 0x90002) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x100) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x9, 0x9, 0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x2, 0x7}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r6}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000440)={&(0x7f0000000400)=[r3, r4, r6, r8, 0x0], 0x5, 0x0, 0x0, 0x6, 0x2, 0x330, 0x101, {0xce8, 0xfff8, 0x3, 0x400, 0x929, 0x9, 0x4, 0x1, 0x100, 0x5, 0xfff8, 0x3, 0x2, 0x7fff, "8accf8a0e51b0cfff755be24c378f6caa5f43ac30fbf139d52d5b6d3687efcf5"}}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f00000004c0), 0x1ff, 0x640400) 00:45:19 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0xfffffffd, 0x4c41) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[{}], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x1, 0x1, 0x1}) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000001c0)={0x2}) syz_open_dev$vcsa(&(0x7f0000000f00), 0xfffffffd, 0x4c41) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[{}], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x1, 0x1, 0x1}) (async) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000001c0)={0x2}) (async) 00:45:19 executing program 3: clock_gettime(0x3, &(0x7f0000000640)) (async) clock_gettime(0x3, &(0x7f0000000640)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000580)={0x54, 0x9, 0x1, 0x7, 0x7fff, 0x8, 0x2a, 0x4}, &(0x7f00000005c0)={0x5, 0x87, 0x9, 0x2, 0x0, 0x6, 0x9, 0xe9}, &(0x7f0000000600)={0x0, 0x4, 0x9db, 0x9, 0xfffffffffffffff8, 0x6, 0x3, 0xda}, &(0x7f0000000680)={r0, r1+60000000}, &(0x7f0000000700)={&(0x7f00000006c0)={[0x407]}, 0x8}) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$damon_init_regions(0xffffff9c, &(0x7f0000000080), 0x4be340, 0x86) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x2, 0x0, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x8, 0x1, 0x4}}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x403a, 0xff, 0x8, 0x0, 0x1, 0x7, '\x00', r2, 0xffffffffffffffff, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x403a, 0xff, 0x8, 0x0, 0x1, 0x7, '\x00', r2, 0xffffffffffffffff, 0x2}, 0x48) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) write$P9_RLERRORu(r3, &(0x7f00000000c0)={0x32, 0x7, 0x1, {{0x25, '/sys/kernel/debug/damon/init_regions\x00'}, 0x80}}, 0x32) r4 = gettid() write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000540)={0x8, 0x35, 0x2, 0x1}, 0x8) sched_rr_get_interval(r4, &(0x7f0000000480)) r5 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r5, 0x0, 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="000226bd00060000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x22048880}, 0x24000000) (async) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="000226bd00060000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x22048880}, 0x24000000) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840055dd", @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000005000600060000000c000400040000000001000005000600200000001800040000000000fffeffff7b7b00000200000000800000050006008100000005000500030000000500050000000000140004000000000009000000050000000900000008000300000000806a4c050002000000"], 0x84}, 0x1, 0x0, 0x0, 0x24000014}, 0x20008800) (async) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840055dd", @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000005000600060000000c000400040000000001000005000600200000001800040000000000fffeffff7b7b00000200000000800000050006008100000005000500030000000500050000000000140004000000000009000000050000000900000008000300000000806a4c050002000000"], 0x84}, 0x1, 0x0, 0x0, 0x24000014}, 0x20008800) 00:45:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x13000000, 0x10d0}, 0x48) 00:45:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x7f26, 0x90002) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x100) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x9, 0x9, 0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x2, 0x7}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r6}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000440)={&(0x7f0000000400)=[r3, r4, r6, r8, 0x0], 0x5, 0x0, 0x0, 0x6, 0x2, 0x330, 0x101, {0xce8, 0xfff8, 0x3, 0x400, 0x929, 0x9, 0x4, 0x1, 0x100, 0x5, 0xfff8, 0x3, 0x2, 0x7fff, "8accf8a0e51b0cfff755be24c378f6caa5f43ac30fbf139d52d5b6d3687efcf5"}}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f00000004c0), 0x1ff, 0x640400) syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) (async) syz_open_dev$dri(&(0x7f0000000000), 0x7f26, 0x90002) (async) syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x100) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x9, 0x9, 0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x2, 0x7}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r6}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r8}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000440)={&(0x7f0000000400)=[r3, r4, r6, r8, 0x0], 0x5, 0x0, 0x0, 0x6, 0x2, 0x330, 0x101, {0xce8, 0xfff8, 0x3, 0x400, 0x929, 0x9, 0x4, 0x1, 0x100, 0x5, 0xfff8, 0x3, 0x2, 0x7fff, "8accf8a0e51b0cfff755be24c378f6caa5f43ac30fbf139d52d5b6d3687efcf5"}}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000140)) (async) syz_open_dev$dri(&(0x7f00000004c0), 0x1ff, 0x640400) (async) 00:45:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x14000000, 0x10d0}, 0x48) 00:45:19 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x410841) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) write$P9_RCLUNK(r0, &(0x7f0000000000)={0x7, 0x79, 0x2}, 0x7) 00:45:19 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcp_state_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:setrans_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0xa0}, 0x1, 0x0, 0x0, 0x200008c0}, 0x80) 00:45:19 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x410841) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) write$P9_RCLUNK(r0, &(0x7f0000000000)={0x7, 0x79, 0x2}, 0x7) syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x410841) (async) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) (async) write$P9_RCLUNK(r0, &(0x7f0000000000)={0x7, 0x79, 0x2}, 0x7) (async) 00:45:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x15000000, 0x10d0}, 0x48) 00:45:19 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcp_state_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:setrans_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0xa0}, 0x1, 0x0, 0x0, 0x200008c0}, 0x80) 00:45:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x7f26, 0x90002) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x100) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x9, 0x9, 0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x2, 0x7}) (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r6}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000440)={&(0x7f0000000400)=[r3, r4, r6, r8, 0x0], 0x5, 0x0, 0x0, 0x6, 0x2, 0x330, 0x101, {0xce8, 0xfff8, 0x3, 0x400, 0x929, 0x9, 0x4, 0x1, 0x100, 0x5, 0xfff8, 0x3, 0x2, 0x7fff, "8accf8a0e51b0cfff755be24c378f6caa5f43ac30fbf139d52d5b6d3687efcf5"}}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000140)) (async) syz_open_dev$dri(&(0x7f00000004c0), 0x1ff, 0x640400) 00:45:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x16000000, 0x10d0}, 0x48) 00:45:19 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcp_state_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:setrans_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0xa0}, 0x1, 0x0, 0x0, 0x200008c0}, 0x80) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcp_state_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:setrans_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0xa0}, 0x1, 0x0, 0x0, 0x200008c0}, 0x80) (async) 00:45:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x5]}) 00:45:19 executing program 1: syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x410841) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x410841) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) write$P9_RCLUNK(r0, &(0x7f0000000000)={0x7, 0x79, 0x2}, 0x7) 00:45:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x5]}) 00:45:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x17000000, 0x10d0}, 0x48) 00:45:19 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x185810, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4000000000000000}}], [{@subj_user={'subj_user', 0x3d, '/sys/kernel/debug/damon/init_regions\x00'}}, {@subj_user}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@uid_gt={'uid>', r1}}, {@pcr={'pcr', 0x3d, 0xc}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/sys/kernel/debug/damon/init_regions\x00'}}, {@subj_role={'subj_role', 0x3d, '/sys/kernel/debug/damon/init_regions\x00'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@appraise_type}]}}) 00:45:19 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x5]}) 00:45:19 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 00:45:19 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x185810, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4000000000000000}}], [{@subj_user={'subj_user', 0x3d, '/sys/kernel/debug/damon/init_regions\x00'}}, {@subj_user}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@uid_gt={'uid>', r1}}, {@pcr={'pcr', 0x3d, 0xc}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/sys/kernel/debug/damon/init_regions\x00'}}, {@subj_role={'subj_role', 0x3d, '/sys/kernel/debug/damon/init_regions\x00'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@appraise_type}]}}) 00:45:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x18000000, 0x10d0}, 0x48) 00:45:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) connect$nfc_raw(r1, &(0x7f0000000000)={0x27, 0x0, 0x1, 0x7}, 0x10) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) 00:45:19 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x185810, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4000000000000000}}], [{@subj_user={'subj_user', 0x3d, '/sys/kernel/debug/damon/init_regions\x00'}}, {@subj_user}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@uid_gt={'uid>', r1}}, {@pcr={'pcr', 0x3d, 0xc}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/sys/kernel/debug/damon/init_regions\x00'}}, {@subj_role={'subj_role', 0x3d, '/sys/kernel/debug/damon/init_regions\x00'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@appraise_type}]}}) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x185810, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4000000000000000}}], [{@subj_user={'subj_user', 0x3d, '/sys/kernel/debug/damon/init_regions\x00'}}, {@subj_user}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@uid_gt={'uid>', r1}}, {@pcr={'pcr', 0x3d, 0xc}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/sys/kernel/debug/damon/init_regions\x00'}}, {@subj_role={'subj_role', 0x3d, '/sys/kernel/debug/damon/init_regions\x00'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@appraise_type}]}}) (async) 00:45:19 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) (async) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) 00:45:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x19000000, 0x10d0}, 0x48) 00:45:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) connect$nfc_raw(r1, &(0x7f0000000000)={0x27, 0x0, 0x1, 0x7}, 0x10) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) 00:45:19 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 00:45:19 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x313040, 0x0) 00:45:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) connect$nfc_raw(r1, &(0x7f0000000000)={0x27, 0x0, 0x1, 0x7}, 0x10) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) connect$nfc_raw(r1, &(0x7f0000000000)={0x27, 0x0, 0x1, 0x7}, 0x10) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) (async) 00:45:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x1a000000, 0x10d0}, 0x48) 00:45:19 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x313040, 0x0) 00:45:19 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x402c81) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x9, 0x490680) write$capi20_data(r1, &(0x7f00000000c0)={{0x10, 0x3f, 0x88, 0x0, 0xfffa, 0xffffffff}, 0xa6, "d0b22e5115527b26a1af7bd93816fc854be19c27c5cb77645f3aa1c6102cc04c0767d5718746e2af36fea574dbd78c8530dddfdbb0d129a6e3448620502f69dfa944b181d91eb2ca1df1367cd92b875764eb8873604cece39df8eaae75432fad2ffdf094488dff0a8c75a8facd36a2e74b991f89c13be1e045506b80729dd2b4b2fcab6ce84318b21aacbab342ac7914314978ecc31d0543b634094ffefc3d48a8bd6e3bb356"}, 0xb8) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 00:45:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x1b000000, 0x10d0}, 0x48) 00:45:19 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r2, 0x0, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r3, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xb0, 0x0, &(0x7f0000000440)=[@exit_looper, @decrefs={0x40046307, 0x3}, @decrefs, @exit_looper, @enter_looper, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@handle={0x73682a85, 0x0, 0x2}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0xb}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/121, 0x79, 0x0, 0x37}, @fda={0x66646185, 0x8, 0x0, 0x3f}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}}, @enter_looper], 0x13a, 0x0, &(0x7f0000000500)="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"}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x2}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06464b8, &(0x7f00000000c0)) 00:45:19 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x313040, 0x0) 00:45:19 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x402c81) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x9, 0x490680) write$capi20_data(r1, &(0x7f00000000c0)={{0x10, 0x3f, 0x88, 0x0, 0xfffa, 0xffffffff}, 0xa6, "d0b22e5115527b26a1af7bd93816fc854be19c27c5cb77645f3aa1c6102cc04c0767d5718746e2af36fea574dbd78c8530dddfdbb0d129a6e3448620502f69dfa944b181d91eb2ca1df1367cd92b875764eb8873604cece39df8eaae75432fad2ffdf094488dff0a8c75a8facd36a2e74b991f89c13be1e045506b80729dd2b4b2fcab6ce84318b21aacbab342ac7914314978ecc31d0543b634094ffefc3d48a8bd6e3bb356"}, 0xb8) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 00:45:19 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0xe400, 0x6d) openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x80840, 0x40) 00:45:19 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0xe400, 0x6d) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x80840, 0x40) 00:45:19 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x402c81) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x9, 0x490680) write$capi20_data(r1, &(0x7f00000000c0)={{0x10, 0x3f, 0x88, 0x0, 0xfffa, 0xffffffff}, 0xa6, "d0b22e5115527b26a1af7bd93816fc854be19c27c5cb77645f3aa1c6102cc04c0767d5718746e2af36fea574dbd78c8530dddfdbb0d129a6e3448620502f69dfa944b181d91eb2ca1df1367cd92b875764eb8873604cece39df8eaae75432fad2ffdf094488dff0a8c75a8facd36a2e74b991f89c13be1e045506b80729dd2b4b2fcab6ce84318b21aacbab342ac7914314978ecc31d0543b634094ffefc3d48a8bd6e3bb356"}, 0xb8) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x2000)=nil, 0x2000}) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 00:45:19 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0xe400, 0x6d) openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x80840, 0x40) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x80840, 0x40) 00:45:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x1c000000, 0x10d0}, 0x48) 00:45:19 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r2, 0x0, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r3, 0x0, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xb0, 0x0, &(0x7f0000000440)=[@exit_looper, @decrefs={0x40046307, 0x3}, @decrefs, @exit_looper, @enter_looper, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@handle={0x73682a85, 0x0, 0x2}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0xb}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/121, 0x79, 0x0, 0x37}, @fda={0x66646185, 0x8, 0x0, 0x3f}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}}, @enter_looper], 0x13a, 0x0, &(0x7f0000000500)="d9ddfbcd743e67ecbc9d9c01e1b6b15ec4ed7bffc469e7e0b3b52eb3ab91912757d7a834bef3f79a20856f16a1d4b4464593536b9af0848ef71312074225ed6ea296fb8879e14dafc538b005cc043c77805f8fbdbef6565b4533e2290a530c7c963db808b480f2772ddb5b8cd989c793b710bfc683b7142a09c8274b2100ad24fd349cc8d70b2af5403c93b5b3a71e9d7751a14646d285f1f910f9ac9910082504aa9b800d3d2c8f9f067cbb97347eadbbf56bd5c146943640a064b2abd9f1b9f87f0000d6daf15b16525585cdcbb0e975804f13338d5b3114011290ef9df0b9554f6d71cc8f986d555e501c620f04f5692f29ebf26a75094724e6133a11bc151bf93549ba440f8ae3c5dcc96b08555886c6f541c58bb286f18b939212fb408524f5a749755d75838c3d724483d0ab46b020756385d6e5d67d97"}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x2}) (async) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06464b8, &(0x7f00000000c0)) 00:45:19 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={r0}) 00:45:19 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={r0}) 00:45:19 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0xc84c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) 00:45:19 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async, rerun: 64) r2 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) accept4$tipc(r2, 0x0, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r3, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xb0, 0x0, &(0x7f0000000440)=[@exit_looper, @decrefs={0x40046307, 0x3}, @decrefs, @exit_looper, @enter_looper, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@handle={0x73682a85, 0x0, 0x2}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0xb}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/121, 0x79, 0x0, 0x37}, @fda={0x66646185, 0x8, 0x0, 0x3f}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}}, @enter_looper], 0x13a, 0x0, &(0x7f0000000500)="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"}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x2}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06464b8, &(0x7f00000000c0)) 00:45:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x1d000000, 0x10d0}, 0x48) 00:45:19 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) (rerun: 64) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={r0}) 00:45:19 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0xc84c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) 00:45:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x1e000000, 0x10d0}, 0x48) 00:45:19 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xa50, '\x00', r0, 0xffffffffffffffff, 0x2, 0x5}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06464b8, &(0x7f00000000c0)) 00:45:19 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0xc84c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) (rerun: 32) 00:45:19 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x8040, 0x0) ioctl$FLOPPY_FDFMTEND(0xffffffffffffffff, 0x249) connect$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{}, 0x1}}, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000040)={0x1, 0x1}) 00:45:19 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xa50, '\x00', r0, 0xffffffffffffffff, 0x2, 0x5}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06464b8, &(0x7f00000000c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xa50, '\x00', r0, 0xffffffffffffffff, 0x2, 0x5}, 0x48) (async) syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06464b8, &(0x7f00000000c0)) (async) 00:45:19 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0xa, 0x3, 0x8}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], 0x1, r1, 0x0, 0x20, 0x89b, 0x3, 0xfffffffb, {0xfffffffb, 0x7, 0x8, 0x81, 0x101, 0x0, 0x1, 0x9, 0x7ff, 0x40, 0x5, 0x7, 0x100, 0x3, "41432c4c2d02dac023e57ea1172ff895531b10f3714fda4b60a5eeee42fb9ea5"}}) 00:45:19 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x8040, 0x0) (async) ioctl$FLOPPY_FDFMTEND(0xffffffffffffffff, 0x249) connect$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{}, 0x1}}, 0x10) r0 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000040)={0x1, 0x1}) 00:45:20 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x1f000000, 0x10d0}, 0x48) 00:45:20 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x8040, 0x0) (async) ioctl$FLOPPY_FDFMTEND(0xffffffffffffffff, 0x249) (async) connect$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{}, 0x1}}, 0x10) (async, rerun: 64) r0 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) accept4$tipc(r0, 0x0, 0x0, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000040)={0x1, 0x1}) 00:45:20 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0xa, 0x3, 0x8}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], 0x1, r1, 0x0, 0x20, 0x89b, 0x3, 0xfffffffb, {0xfffffffb, 0x7, 0x8, 0x81, 0x101, 0x0, 0x1, 0x9, 0x7ff, 0x40, 0x5, 0x7, 0x100, 0x3, "41432c4c2d02dac023e57ea1172ff895531b10f3714fda4b60a5eeee42fb9ea5"}}) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) (async) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0xa, 0x3, 0x8}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], 0x1, r1, 0x0, 0x20, 0x89b, 0x3, 0xfffffffb, {0xfffffffb, 0x7, 0x8, 0x81, 0x101, 0x0, 0x1, 0x9, 0x7ff, 0x40, 0x5, 0x7, 0x100, 0x3, "41432c4c2d02dac023e57ea1172ff895531b10f3714fda4b60a5eeee42fb9ea5"}}) (async) 00:45:20 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xa50, '\x00', r0, 0xffffffffffffffff, 0x2, 0x5}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06464b8, &(0x7f00000000c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xa50, '\x00', r0, 0xffffffffffffffff, 0x2, 0x5}, 0x48) (async) syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06464b8, &(0x7f00000000c0)) (async) 00:45:20 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x20000000, 0x10d0}, 0x48) 00:45:20 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x280003, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x6a36) 00:45:20 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x280003, 0x0) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x6a36) 00:45:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x75]}) 00:45:20 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x21000000, 0x10d0}, 0x48) 00:45:20 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0xa, 0x3, 0x8}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], 0x1, r1, 0x0, 0x20, 0x89b, 0x3, 0xfffffffb, {0xfffffffb, 0x7, 0x8, 0x81, 0x101, 0x0, 0x1, 0x9, 0x7ff, 0x40, 0x5, 0x7, 0x100, 0x3, "41432c4c2d02dac023e57ea1172ff895531b10f3714fda4b60a5eeee42fb9ea5"}}) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) (async) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0xa, 0x3, 0x8}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], 0x1, r1, 0x0, 0x20, 0x89b, 0x3, 0xfffffffb, {0xfffffffb, 0x7, 0x8, 0x81, 0x101, 0x0, 0x1, 0x9, 0x7ff, 0x40, 0x5, 0x7, 0x100, 0x3, "41432c4c2d02dac023e57ea1172ff895531b10f3714fda4b60a5eeee42fb9ea5"}}) (async) 00:45:20 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x280003, 0x0) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async, rerun: 32) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x6a36) (rerun: 32) 00:45:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x75]}) 00:45:20 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40080, 0xc0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x14) 00:45:20 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x22000000, 0x10d0}, 0x48) 00:45:20 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40080, 0xc0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x14) 00:45:20 executing program 1: syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x4c41) 00:45:20 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40080, 0xc0) (async, rerun: 32) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x14) (rerun: 32) 00:45:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x75]}) 00:45:20 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x23000000, 0x10d0}, 0x48) 00:45:20 executing program 1: syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x4c41) 00:45:20 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0}, 0x48) 00:45:20 executing program 3: clock_gettime(0x3, &(0x7f0000000440)) openat$damon_init_regions(0xffffff9c, &(0x7f00000004c0), 0x200000, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80805659, &(0x7f0000000080)={0x0, @data}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x174, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040)) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) syz_open_dev$swradio(&(0x7f0000000480), 0x1, 0x2) r4 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0xb4}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x1d}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000000)='GPL\x00', 0xa64, 0x3c, &(0x7f0000000180)=""/60, 0x40f00, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x10, 0x80, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[r1, r0, r2, r0, r0, r3, 0xffffffffffffffff, r4, r0], &(0x7f0000000300)=[{0x5, 0x5, 0x8, 0x3}, {0x1, 0x2, 0x1, 0xc}, {0x3, 0x4, 0xd, 0xa}, {0x2, 0x2, 0x10, 0x8}, {0x2, 0x4, 0x6}], 0x10, 0xfff}, 0x90) 00:45:20 executing program 2: getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x800}}, {@blksize={'blksize', 0x3d, 0x1200}}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x3796}}, {@blksize={'blksize', 0x3d, 0x2800}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}], [{@seclabel}]}}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x4, 0x402c42) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06464b8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x7f], [], [0x0, 0x0, 0x0, 0x4000]}) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000)) 00:45:20 executing program 1: syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x4c41) 00:45:20 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x2}, 0x48) 00:45:20 executing program 2: getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000140), &(0x7f0000000180)) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async, rerun: 64) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x800}}, {@blksize={'blksize', 0x3d, 0x1200}}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x3796}}, {@blksize={'blksize', 0x3d, 0x2800}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}], [{@seclabel}]}}) (rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x4, 0x402c42) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06464b8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x7f], [], [0x0, 0x0, 0x0, 0x4000]}) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000)) 00:45:20 executing program 3: clock_gettime(0x3, &(0x7f0000000440)) (async) openat$damon_init_regions(0xffffff9c, &(0x7f00000004c0), 0x200000, 0x0) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80805659, &(0x7f0000000080)={0x0, @data}) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x174, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040)) (async, rerun: 32) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async) syz_open_dev$swradio(&(0x7f0000000480), 0x1, 0x2) r4 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0xb4}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x1d}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000000)='GPL\x00', 0xa64, 0x3c, &(0x7f0000000180)=""/60, 0x40f00, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x10, 0x80, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[r1, r0, r2, r0, r0, r3, 0xffffffffffffffff, r4, r0], &(0x7f0000000300)=[{0x5, 0x5, 0x8, 0x3}, {0x1, 0x2, 0x1, 0xc}, {0x3, 0x4, 0xd, 0xa}, {0x2, 0x2, 0x10, 0x8}, {0x2, 0x4, 0x6}], 0x10, 0xfff}, 0x90) (rerun: 32) 00:45:20 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x3}, 0x48) 00:45:20 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080)=0x4, 0x4) 00:45:20 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x4}, 0x48) 00:45:20 executing program 2: getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000140), &(0x7f0000000180)) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x800}}, {@blksize={'blksize', 0x3d, 0x1200}}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x3796}}, {@blksize={'blksize', 0x3d, 0x2800}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}], [{@seclabel}]}}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x4, 0x402c42) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06464b8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0x7f], [], [0x0, 0x0, 0x0, 0x4000]}) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r5}) (async) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000)) 00:45:20 executing program 3: clock_gettime(0x3, &(0x7f0000000440)) openat$damon_init_regions(0xffffff9c, &(0x7f00000004c0), 0x200000, 0x0) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) ioctl$VIDIOC_DQEVENT(r0, 0x80805659, &(0x7f0000000080)={0x0, @data}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x174, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040)) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) syz_open_dev$swradio(&(0x7f0000000480), 0x1, 0x2) (async) r4 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0xb4}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x1d}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000000)='GPL\x00', 0xa64, 0x3c, &(0x7f0000000180)=""/60, 0x40f00, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x10, 0x80, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[r1, r0, r2, r0, r0, r3, 0xffffffffffffffff, r4, r0], &(0x7f0000000300)=[{0x5, 0x5, 0x8, 0x3}, {0x1, 0x2, 0x1, 0xc}, {0x3, 0x4, 0xd, 0xa}, {0x2, 0x2, 0x10, 0x8}, {0x2, 0x4, 0x6}], 0x10, 0xfff}, 0x90) 00:45:20 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080)=0x4, 0x4) 00:45:20 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RREAD(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="73000000750100fc000000866ac452adb470a904c2dc870435438c29242493003580921db640a0ccdbc0f4f05a402850e08c340f7a0b5fa787a1d1a5a7f4a09dd420b9fe203fdb2142afe316531bbdb8f2c329ffbc825fa7cbbd77788f4c490c235c71cc0cd4d8740a71bc0f2eec4b4f711ac4"], 0x73) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06464b8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000001000/0x4000)=nil, 0x4000}) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x69, 0x2, {0x2, 0x3, 0xffffffffffff352a}}, 0x14) 00:45:20 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x5}, 0x48) 00:45:20 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080)=0x4, 0x4) 00:45:20 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x6}, 0x48) 00:45:20 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RREAD(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="73000000750100fc000000866ac452adb470a904c2dc870435438c29242493003580921db640a0ccdbc0f4f05a402850e08c340f7a0b5fa787a1d1a5a7f4a09dd420b9fe203fdb2142afe316531bbdb8f2c329ffbc825fa7cbbd77788f4c490c235c71cc0cd4d8740a71bc0f2eec4b4f711ac4"], 0x73) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06464b8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3}) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000001000/0x4000)=nil, 0x4000}) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x69, 0x2, {0x2, 0x3, 0xffffffffffff352a}}, 0x14) 00:45:20 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0xffffff27, 0x800) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0xffffffff, 0xc18803) write$damon_init_regions(r1, 0x0, 0xfffffffffffffdb4) 00:45:20 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x20000, 0x5d1e31115e8980bd) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r2) write$damon_init_regions(r0, &(0x7f0000000100)={{' ', r1}, {' ', 0x800}, {' ', 0xddac}}, 0x3f) 00:45:20 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x7}, 0x48) 00:45:20 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0xffffff27, 0x800) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async, rerun: 32) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0xffffffff, 0xc18803) (rerun: 32) write$damon_init_regions(r1, 0x0, 0xfffffffffffffdb4) 00:45:20 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RREAD(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="73000000750100fc000000866ac452adb470a904c2dc870435438c29242493003580921db640a0ccdbc0f4f05a402850e08c340f7a0b5fa787a1d1a5a7f4a09dd420b9fe203fdb2142afe316531bbdb8f2c329ffbc825fa7cbbd77788f4c490c235c71cc0cd4d8740a71bc0f2eec4b4f711ac4"], 0x73) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06464b8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3}) (async) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000001000/0x4000)=nil, 0x4000}) (async) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x69, 0x2, {0x2, 0x3, 0xffffffffffff352a}}, 0x14) 00:45:20 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x8}, 0x48) 00:45:20 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async, rerun: 64) r0 = openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x20000, 0x5d1e31115e8980bd) (async, rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r2) (async) write$damon_init_regions(r0, &(0x7f0000000100)={{' ', r1}, {' ', 0x800}, {' ', 0xddac}}, 0x3f) 00:45:20 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0xffffff27, 0x800) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0xffffffff, 0xc18803) write$damon_init_regions(r1, 0x0, 0xfffffffffffffdb4) (async) write$damon_init_regions(r1, 0x0, 0xfffffffffffffdb4) 00:45:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], 0x1, 0x2, 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000240)={r2, 0x3, 0x101, 0x4, &(0x7f0000000200)=[{0x68c, 0x8, 0x7, 0x7f}, {0xab87, 0x1, 0x327, 0x7956}, {0x400, 0xfffe, 0x1, 0xffff}, {0x9, 0x2, 0x1000, 0x81}]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r1, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], 0x0, 0x8, &(0x7f0000000700)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x10, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000a40)=[{}], 0x8, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x15, 0x1, &(0x7f00000005c0)=@raw=[@ldst={0x2, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}], &(0x7f0000000600)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x96182a9957620c74, '\x00', r5, 0x2, r1, 0x8, &(0x7f0000000940)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, r6, r1, 0x0, &(0x7f0000000c80)=[r1, r1, r1], 0x0, 0x10, 0x2}, 0x90) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x4, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000580)={r3, r4, r7, 0x4, 0x4, 0x8, 0x0, 0xd703, 0x7, 0x3, 0xfff, 0x7}) 00:45:20 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x9}, 0x48) 00:45:20 executing program 1: openat$capi20(0xffffff9c, &(0x7f0000000000), 0x400200, 0x0) 00:45:20 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) r0 = openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x20000, 0x5d1e31115e8980bd) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r2) write$damon_init_regions(r0, &(0x7f0000000100)={{' ', r1}, {' ', 0x800}, {' ', 0xddac}}, 0x3f) 00:45:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], 0x1, 0x2, 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000240)={r2, 0x3, 0x101, 0x4, &(0x7f0000000200)=[{0x68c, 0x8, 0x7, 0x7f}, {0xab87, 0x1, 0x327, 0x7956}, {0x400, 0xfffe, 0x1, 0xffff}, {0x9, 0x2, 0x1000, 0x81}]}) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000240)={r2, 0x3, 0x101, 0x4, &(0x7f0000000200)=[{0x68c, 0x8, 0x7, 0x7f}, {0xab87, 0x1, 0x327, 0x7956}, {0x400, 0xfffe, 0x1, 0xffff}, {0x9, 0x2, 0x1000, 0x81}]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r1, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], 0x0, 0x8, &(0x7f0000000700)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x10, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000a40)=[{}], 0x8, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x15, 0x1, &(0x7f00000005c0)=@raw=[@ldst={0x2, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}], &(0x7f0000000600)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x96182a9957620c74, '\x00', r5, 0x2, r1, 0x8, &(0x7f0000000940)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, r6, r1, 0x0, &(0x7f0000000c80)=[r1, r1, r1], 0x0, 0x10, 0x2}, 0x90) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x4, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000580)={r3, r4, r7, 0x4, 0x4, 0x8, 0x0, 0xd703, 0x7, 0x3, 0xfff, 0x7}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000580)={r3, r4, r7, 0x4, 0x4, 0x8, 0x0, 0xd703, 0x7, 0x3, 0xfff, 0x7}) 00:45:20 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0xa}, 0x48) 00:45:20 executing program 1: openat$capi20(0xffffff9c, &(0x7f0000000000), 0x400200, 0x0) 00:45:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], 0x1, 0x2, 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000240)={r2, 0x3, 0x101, 0x4, &(0x7f0000000200)=[{0x68c, 0x8, 0x7, 0x7f}, {0xab87, 0x1, 0x327, 0x7956}, {0x400, 0xfffe, 0x1, 0xffff}, {0x9, 0x2, 0x1000, 0x81}]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r1, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], 0x0, 0x8, &(0x7f0000000700)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x10, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000a40)=[{}], 0x8, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x15, 0x1, &(0x7f00000005c0)=@raw=[@ldst={0x2, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}], &(0x7f0000000600)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x96182a9957620c74, '\x00', r5, 0x2, r1, 0x8, &(0x7f0000000940)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, r6, r1, 0x0, &(0x7f0000000c80)=[r1, r1, r1], 0x0, 0x10, 0x2}, 0x90) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x4, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000580)={r3, r4, r7, 0x4, 0x4, 0x8, 0x0, 0xd703, 0x7, 0x3, 0xfff, 0x7}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], 0x1, 0x2, 0x2, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000240)={r2, 0x3, 0x101, 0x4, &(0x7f0000000200)=[{0x68c, 0x8, 0x7, 0x7f}, {0xab87, 0x1, 0x327, 0x7956}, {0x400, 0xfffe, 0x1, 0xffff}, {0x9, 0x2, 0x1000, 0x81}]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0], 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x5, 0x1, 0x8}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r1, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], 0x0, 0x8, &(0x7f0000000700)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x10, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000a40)=[{}], 0x8, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x15, 0x1, &(0x7f00000005c0)=@raw=[@ldst={0x2, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffff4, 0xfffffffffffffffc}], &(0x7f0000000600)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x96182a9957620c74, '\x00', r5, 0x2, r1, 0x8, &(0x7f0000000940)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, r6, r1, 0x0, &(0x7f0000000c80)=[r1, r1, r1], 0x0, 0x10, 0x2}, 0x90) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x4, 0x3, 0x5}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000580)={r3, r4, r7, 0x4, 0x4, 0x8, 0x0, 0xd703, 0x7, 0x3, 0xfff, 0x7}) (async) 00:45:20 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0xb}, 0x48) 00:45:20 executing program 1: openat$capi20(0xffffff9c, &(0x7f0000000000), 0x400200, 0x0) 00:45:20 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x40, 0x100) 00:45:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x5}, 0x48) 00:45:20 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0xc}, 0x48) 00:45:20 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x1}, @decrefs={0x40046307, 0x2}], 0x3f, 0x0, &(0x7f0000000040)="79c14737676e00a3e248f7d2d0f4a2ad66114667e198612b67273bde79042b4cd35359e92150ae930c7c62583bf9e61a9fa1007f5b8417429b599a91d96f8a"}) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) 00:45:20 executing program 2: clock_gettime(0x3, &(0x7f0000000440)) openat$damon_init_regions(0xffffff9c, &(0x7f00000004c0), 0x200000, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80805659, &(0x7f0000000080)={0x0, @data}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x174, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040)) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) syz_open_dev$swradio(&(0x7f0000000480), 0x1, 0x2) r4 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0xb4}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x1d}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000000)='GPL\x00', 0xa64, 0x3c, &(0x7f0000000180)=""/60, 0x40f00, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x10, 0x80, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[r1, r0, r2, r0, r0, r3, 0xffffffffffffffff, r4, r0], &(0x7f0000000300)=[{0x5, 0x5, 0x8, 0x3}, {0x1, 0x2, 0x1, 0xc}, {0x3, 0x4, 0xd, 0xa}, {0x2, 0x2, 0x10, 0x8}, {0x2, 0x4, 0x6}], 0x10, 0xfff}, 0x90) 00:45:21 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x1}, @decrefs={0x40046307, 0x2}], 0x3f, 0x0, &(0x7f0000000040)="79c14737676e00a3e248f7d2d0f4a2ad66114667e198612b67273bde79042b4cd35359e92150ae930c7c62583bf9e61a9fa1007f5b8417429b599a91d96f8a"}) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) 00:45:21 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x40, 0x100) 00:45:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0xd}, 0x48) 00:45:21 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x1}, @decrefs={0x40046307, 0x2}], 0x3f, 0x0, &(0x7f0000000040)="79c14737676e00a3e248f7d2d0f4a2ad66114667e198612b67273bde79042b4cd35359e92150ae930c7c62583bf9e61a9fa1007f5b8417429b599a91d96f8a"}) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) 00:45:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0xe}, 0x48) 00:45:21 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x40, 0x100) 00:45:21 executing program 2: clock_gettime(0x3, &(0x7f0000000440)) openat$damon_init_regions(0xffffff9c, &(0x7f00000004c0), 0x200000, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80805659, &(0x7f0000000080)={0x0, @data}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x174, '\x00', 0x0, r0, 0x4, 0x4}, 0x48) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040)) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) syz_open_dev$swradio(&(0x7f0000000480), 0x1, 0x2) r4 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0xb4}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x1d}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000000)='GPL\x00', 0xa64, 0x3c, &(0x7f0000000180)=""/60, 0x40f00, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x10, 0x80, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[r1, r0, r2, r0, r0, r3, 0xffffffffffffffff, r4, r0], &(0x7f0000000300)=[{0x5, 0x5, 0x8, 0x3}, {0x1, 0x2, 0x1, 0xc}, {0x3, 0x4, 0xd, 0xa}, {0x2, 0x2, 0x10, 0x8}, {0x2, 0x4, 0x6}], 0x10, 0xfff}, 0x90) 00:45:21 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x699}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) r0 = syz_open_dev$floppy(&(0x7f00000000c0), 0x1800000, 0x400) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000100)) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) accept4$tipc(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80000) r2 = openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x0, 0x18) write$damon_init_regions(r2, 0x0, 0x0) 00:45:21 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xb2a}, 0x8) r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x40, 0xb2840) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}], &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0], 0x1, 0x0, 0x7}) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) write$damon_init_regions(r2, &(0x7f0000000180)={{}, {' ', 0x2}, {' ', 0x4}}, 0x3f) 00:45:21 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x699}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) (async) r0 = syz_open_dev$floppy(&(0x7f00000000c0), 0x1800000, 0x400) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000100)) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) accept4$tipc(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80000) r2 = openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x0, 0x18) write$damon_init_regions(r2, 0x0, 0x0) 00:45:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0xf}, 0x48) 00:45:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) connect$nfc_raw(r1, &(0x7f0000000000)={0x27, 0x0, 0x1, 0x7}, 0x10) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) 00:45:21 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xb2a}, 0x8) r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x40, 0xb2840) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}], &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0], 0x1, 0x0, 0x7}) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) write$damon_init_regions(r2, &(0x7f0000000180)={{}, {' ', 0x2}, {' ', 0x4}}, 0x3f) 00:45:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x10}, 0x48) 00:45:21 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x699}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) (async) r0 = syz_open_dev$floppy(&(0x7f00000000c0), 0x1800000, 0x400) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000100)) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) accept4$tipc(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80000) (async) r2 = openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x0, 0x18) write$damon_init_regions(r2, 0x0, 0x0) 00:45:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x11}, 0x48) 00:45:21 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 00:45:21 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xb2a}, 0x8) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x40, 0xb2840) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}], &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0], 0x1, 0x0, 0x7}) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async) write$damon_init_regions(r2, &(0x7f0000000180)={{}, {' ', 0x2}, {' ', 0x4}}, 0x3f) 00:45:21 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) 00:45:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x12}, 0x48) 00:45:21 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x38681, 0x2a) 00:45:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x13}, 0x48) 00:45:21 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0xfffffffc, 0x125c46) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) write$khugepaged_scan(r0, &(0x7f0000000000), 0x8) 00:45:21 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) 00:45:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x14}, 0x48) 00:45:21 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x38681, 0x2a) 00:45:21 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0xfffffffc, 0x125c46) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) write$khugepaged_scan(r0, &(0x7f0000000000), 0x8) 00:45:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x15}, 0x48) 00:45:21 executing program 1: openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x4543, 0x1) 00:45:21 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x38681, 0x2a) openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x38681, 0x2a) (async) 00:45:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x16}, 0x48) 00:45:21 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0xfffffffc, 0x125c46) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) write$khugepaged_scan(r0, &(0x7f0000000000), 0x8) 00:45:21 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80805659, &(0x7f0000000080)={0x0, @frame_sync}) 00:45:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x17}, 0x48) 00:45:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0xa4e800) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x6, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x2, 0x7, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x8, 0x4, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r6}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r8}) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r10}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000004c0)={&(0x7f0000000480)=[r2, r3, 0x0, r4, 0x0, r6, r8, r10], 0x8, 0x0, 0x0, 0x20, 0x5, 0x80000001, 0xfb, {0x1, 0x1ff, 0x7, 0x80, 0x3, 0x0, 0x6, 0x0, 0x0, 0x1, 0x6, 0x9, 0x20, 0x200, "0c6d0685afe1fecd02ae7d7e1207d4924174ad697f174b787dd93ab59acfbe79"}}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) 00:45:21 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) ioctl$VIDIOC_DQEVENT(r0, 0x80805659, &(0x7f0000000080)={0x0, @frame_sync}) 00:45:21 executing program 2: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x76500, 0xc0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r5, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 00:45:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x18}, 0x48) 00:45:21 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x14c41) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x2e, 0x1, 0x2c, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0xa, 0x1, 0x2, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) 00:45:21 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80805659, &(0x7f0000000080)={0x0, @frame_sync}) 00:45:21 executing program 3: getuid() r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = getuid() r2 = getgid() write$P9_RGETATTR(r0, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0x3048, {0x4, 0x3, 0x8}, 0x20, r1, r2, 0x567c1311, 0x20000000000004, 0x2, 0x8, 0x6, 0x5, 0x40, 0x4000000000000001, 0x2, 0x3f, 0xf11c, 0x8, 0x7, 0xcb3, 0x2}}, 0xa0) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) r3 = gettid() getpgid(r3) 00:45:21 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x14c41) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x2e, 0x1, 0x2c, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0xa, 0x1, 0x2, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) 00:45:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x19}, 0x48) 00:45:21 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x14c41) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x2e, 0x1, 0x2c, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0xa, 0x1, 0x2, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) 00:45:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x19, 0x10d0}, 0x48) 00:45:21 executing program 3: getuid() (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = getuid() r2 = getgid() write$P9_RGETATTR(r0, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0x3048, {0x4, 0x3, 0x8}, 0x20, r1, r2, 0x567c1311, 0x20000000000004, 0x2, 0x8, 0x6, 0x5, 0x40, 0x4000000000000001, 0x2, 0x3f, 0xf11c, 0x8, 0x7, 0xcb3, 0x2}}, 0xa0) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async, rerun: 32) r3 = gettid() (rerun: 32) getpgid(r3) 00:45:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1a}, 0x48) 00:45:21 executing program 1: syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x14c41) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x2e, 0x1, 0x2c, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0xa, 0x1, 0x2, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 00:45:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1b}, 0x48) 00:45:21 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0xa}}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x90) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={r1, r3, 0x0, 0x2, 0x5, 0x1, 0xd9d1, 0x34, 0x1, 0x5, 0x7f, 0x8}) r4 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r4, 0x0, 0xfffffffffffffdb4) 00:45:21 executing program 1: syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x14c41) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x2e, 0x1, 0x2c, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) 00:45:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1c}, 0x48) 00:45:21 executing program 3: getuid() (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = getuid() (async) r2 = getgid() write$P9_RGETATTR(r0, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0x3048, {0x4, 0x3, 0x8}, 0x20, r1, r2, 0x567c1311, 0x20000000000004, 0x2, 0x8, 0x6, 0x5, 0x40, 0x4000000000000001, 0x2, 0x3f, 0xf11c, 0x8, 0x7, 0xcb3, 0x2}}, 0xa0) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) r3 = gettid() getpgid(r3) 00:45:21 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x2e, 0x1, 0x2c, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) 00:45:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x22001) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) r1 = openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r1, 0x5421, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x2, 0x2, 0x6, 0x3}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={0x0, r2, 0x0, 0xfffffffb, 0x7, 0x0, 0x2, 0x430, 0x8, 0xffffffff, 0x800, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001800)={0xfc, 0x0, &(0x7f0000001600)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/153, 0x99, 0x1, 0x15}, @fda={0x66646185, 0x9, 0x1, 0x28}, @flat=@handle={0x73682a85, 0x100, 0x3}}, &(0x7f0000000380)={0x0, 0x28, 0x44}}, 0x400}, @clear_death={0x400c630f, 0x1}, @free_buffer, @free_buffer, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001480)={@ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/4088, 0xff8, 0x1, 0x3c}, @ptr={0x70742a85, 0x0, &(0x7f00000013c0)=""/76, 0x4c, 0x1, 0x5}, @ptr={0x70742a85, 0x1, &(0x7f0000001440)=""/15, 0xf, 0x0, 0x18}}, &(0x7f0000001500)={0x0, 0x28, 0x50}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001540)={@flat=@binder={0x73622a85, 0xb, 0x1}, @fda={0x66646185, 0x2, 0x2, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x3e}}, &(0x7f00000015c0)={0x0, 0x18, 0x34}}}], 0xfa, 0x0, &(0x7f0000001700)="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"}) 00:45:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1d}, 0x48) 00:45:21 executing program 1: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 00:45:21 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x6, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) 00:45:21 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f0000000080)={0x0, 0x5, 0x78, 0xfffffff7, 0xb2eae0d485e1789f, [], [0x9, 0x9, 0x0, 0xffffffff], [0x1, 0x3, 0x1ff, 0x85], [0x2, 0xa, 0x100000001, 0x1]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x2, 0x4, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0xa, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000340)={&(0x7f00000001c0)=[0x0, 0x0, r0, 0x0], 0x4, 0x0, r1, 0xfffeffff, 0x403, 0x0, 0x7, {0x76f, 0x3, 0x3f, 0x7, 0x6, 0x1, 0x3000, 0x0, 0x2, 0x1, 0xff19, 0x8, 0x8, 0x3, "918b03ff03ced2c4fd8208a6c7eedf2ca66ebfdcf422be3dbf3e390de9b760a0"}}) 00:45:22 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x404c41) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f0000000040)=[@release={0x40046306, 0x2}, @register_looper, @enter_looper, @decrefs={0x40046307, 0x1}], 0xfc, 0x0, &(0x7f0000000080)="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"}) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r1}, {0x8, 0x1, r0}, {0x8, 0x1, r3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc800}, 0x4000044) write$P9_RLCREATE(r0, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x2, 0x2, 0x1}, 0x4}}, 0x18) r4 = openat$binderfs(0xffffff9c, &(0x7f00000002c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000300)) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) 00:45:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1e}, 0x48) 00:45:22 executing program 1: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 00:45:22 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f0000000080)={0x0, 0x5, 0x78, 0xfffffff7, 0xb2eae0d485e1789f, [], [0x9, 0x9, 0x0, 0xffffffff], [0x1, 0x3, 0x1ff, 0x85], [0x2, 0xa, 0x100000001, 0x1]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x2, 0x4, 0x3, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0xa, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000340)={&(0x7f00000001c0)=[0x0, 0x0, r0, 0x0], 0x4, 0x0, r1, 0xfffeffff, 0x403, 0x0, 0x7, {0x76f, 0x3, 0x3f, 0x7, 0x6, 0x1, 0x3000, 0x0, 0x2, 0x1, 0xff19, 0x8, 0x8, 0x3, "918b03ff03ced2c4fd8208a6c7eedf2ca66ebfdcf422be3dbf3e390de9b760a0"}}) [ 2635.465601][ T4966] binder: 4965:4966 ioctl c00c620f 20000300 returned -22 00:45:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x21}, 0x48) 00:45:22 executing program 1: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 00:45:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06464ce, &(0x7f00000003c0)={0x0, 0x4, 0x1f, 0x6, 0x2, [], [0x0, 0x2, 0x69, 0x4], [0x6, 0x6, 0xf1a, 0x8000], [0x3, 0x200, 0x8, 0x5]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x2, 0x1, 0x4, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}], &(0x7f0000000040)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x1, 0x1, 0x4, 0x0, r2}) 00:45:22 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f0000000080)={0x0, 0x5, 0x78, 0xfffffff7, 0xb2eae0d485e1789f, [], [0x9, 0x9, 0x0, 0xffffffff], [0x1, 0x3, 0x1ff, 0x85], [0x2, 0xa, 0x100000001, 0x1]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x2, 0x4, 0x3, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0xa, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000340)={&(0x7f00000001c0)=[0x0, 0x0, r0, 0x0], 0x4, 0x0, r1, 0xfffeffff, 0x403, 0x0, 0x7, {0x76f, 0x3, 0x3f, 0x7, 0x6, 0x1, 0x3000, 0x0, 0x2, 0x1, 0xff19, 0x8, 0x8, 0x3, "918b03ff03ced2c4fd8208a6c7eedf2ca66ebfdcf422be3dbf3e390de9b760a0"}}) 00:45:22 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x0, 0x1, 0x2c, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) 00:45:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x22}, 0x48) 00:45:22 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x0, 0x1, 0x2c, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) 00:45:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x23}, 0x48) 00:45:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06464ce, &(0x7f00000003c0)={0x0, 0x4, 0x1f, 0x6, 0x2, [], [0x0, 0x2, 0x69, 0x4], [0x6, 0x6, 0xf1a, 0x8000], [0x3, 0x200, 0x8, 0x5]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x2, 0x1, 0x4, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}], &(0x7f0000000040)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x1, 0x1, 0x4, 0x0, r2}) 00:45:22 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) r0 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], 0x1, 0x1, 0x2, 0x1}) socket$tipc(0x1e, 0x2, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000280), 0x6, 0x80000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc00c64b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1}) getrusage(0x0, &(0x7f0000000540)) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000240)={r1, 0x0, 0x5, 0x6, &(0x7f0000000200)=[{0x4, 0x3, 0x7, 0x77}, {0x4, 0xcdc, 0x1, 0x101}, {0xff, 0x50a, 0x4, 0x7f}, {0x1, 0x7, 0x3, 0x1}, {0x3, 0x1, 0x8, 0x7}, {0x0, 0x7, 0x8, 0x8}]}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x2}) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0xa, 0x2, 0x9, 0x1}) r5 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x4, r7}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000004c0)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4, r4}) 00:45:22 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x0, 0x1, 0x2c, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) 00:45:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x300}, 0x48) 00:45:22 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) r0 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], 0x1, 0x1, 0x2, 0x1}) (async, rerun: 64) socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) r2 = syz_open_dev$vcsa(&(0x7f0000000280), 0x6, 0x80000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc00c64b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1}) (async) getrusage(0x0, &(0x7f0000000540)) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000240)={r1, 0x0, 0x5, 0x6, &(0x7f0000000200)=[{0x4, 0x3, 0x7, 0x77}, {0x4, 0xcdc, 0x1, 0x101}, {0xff, 0x50a, 0x4, 0x7f}, {0x1, 0x7, 0x3, 0x1}, {0x3, 0x1, 0x8, 0x7}, {0x0, 0x7, 0x8, 0x8}]}) (async, rerun: 64) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x2}) (async, rerun: 64) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0xa, 0x2, 0x9, 0x1}) r5 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x4, r7}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000004c0)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4, r4}) 00:45:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06464ce, &(0x7f00000003c0)={0x0, 0x4, 0x1f, 0x6, 0x2, [], [0x0, 0x2, 0x69, 0x4], [0x6, 0x6, 0xf1a, 0x8000], [0x3, 0x200, 0x8, 0x5]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x2, 0x1, 0x4, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}], &(0x7f0000000040)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x1, 0x1, 0x4, 0x0, r2}) 00:45:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x500}, 0x48) 00:45:22 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x2e, 0x0, 0x2c, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) 00:45:22 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x2e, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) 00:45:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x600}, 0x48) 00:45:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06464ce, &(0x7f00000003c0)={0x0, 0x4, 0x1f, 0x6, 0x2, [], [0x0, 0x2, 0x69, 0x4], [0x6, 0x6, 0xf1a, 0x8000], [0x3, 0x200, 0x8, 0x5]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x2, 0x1, 0x4, 0x1}) 00:45:22 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) r0 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], 0x1, 0x1, 0x2, 0x1}) socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000280), 0x6, 0x80000) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000280), 0x6, 0x80000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc00c64b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1}) getrusage(0x0, &(0x7f0000000540)) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000240)={r1, 0x0, 0x5, 0x6, &(0x7f0000000200)=[{0x4, 0x3, 0x7, 0x77}, {0x4, 0xcdc, 0x1, 0x101}, {0xff, 0x50a, 0x4, 0x7f}, {0x1, 0x7, 0x3, 0x1}, {0x3, 0x1, 0x8, 0x7}, {0x0, 0x7, 0x8, 0x8}]}) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000240)={r1, 0x0, 0x5, 0x6, &(0x7f0000000200)=[{0x4, 0x3, 0x7, 0x77}, {0x4, 0xcdc, 0x1, 0x101}, {0xff, 0x50a, 0x4, 0x7f}, {0x1, 0x7, 0x3, 0x1}, {0x3, 0x1, 0x8, 0x7}, {0x0, 0x7, 0x8, 0x8}]}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x2}) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0xa, 0x2, 0x9, 0x1}) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) r5 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x4, r7}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000004c0)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4, r4}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000004c0)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4, r4}) 00:45:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x700}, 0x48) 00:45:22 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) 00:45:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06464ce, &(0x7f00000003c0)={0x0, 0x4, 0x1f, 0x6, 0x2, [], [0x0, 0x2, 0x69, 0x4], [0x6, 0x6, 0xf1a, 0x8000], [0x3, 0x200, 0x8, 0x5]}) 00:45:22 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sched_rr_get_interval(0x0, &(0x7f0000000040)) openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x111000, 0xd9) 00:45:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x900}, 0x48) 00:45:22 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) 00:45:22 executing program 3: socket$tipc(0x1e, 0x5, 0x0) (async) r0 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sched_rr_get_interval(0x0, &(0x7f0000000040)) openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x111000, 0xd9) 00:45:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0xa00}, 0x48) 00:45:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) 00:45:22 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0]}, 0x40) 00:45:22 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sched_rr_get_interval(0x0, &(0x7f0000000040)) (async) sched_rr_get_interval(0x0, &(0x7f0000000040)) openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x111000, 0xd9) 00:45:22 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:45:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0xb00}, 0x48) 00:45:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) 00:45:22 executing program 3: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x298340, 0x2) 00:45:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0xc00}, 0x48) 00:45:22 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x2e, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) 00:45:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) 00:45:22 executing program 3: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)) (async, rerun: 32) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x298340, 0x2) (rerun: 32) 00:45:22 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x2e, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) 00:45:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0xd00}, 0x48) 00:45:22 executing program 2: ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464b8, &(0x7f00000000c0)) 00:45:22 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x2e, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) 00:45:22 executing program 3: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x298340, 0x2) 00:45:22 executing program 2: ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464b8, &(0x7f00000000c0)) 00:45:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0xe00}, 0x48) 00:45:22 executing program 2: ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464b8, &(0x7f00000000c0)) 00:45:22 executing program 1: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 00:45:22 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x80}) 00:45:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0xf00}, 0x48) 00:45:22 executing program 1: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 00:45:22 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) 00:45:22 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x80}) 00:45:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1100}, 0x48) 00:45:22 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) 00:45:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1200}, 0x48) 00:45:22 executing program 1: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 00:45:22 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x80}) 00:45:22 executing program 2: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) 00:45:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1300}, 0x48) 00:45:22 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) 00:45:22 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) 00:45:22 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x200582, 0x114) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x212}) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x20}) 00:45:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1400}, 0x48) 00:45:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) 00:45:23 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x200582, 0x114) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x212}) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x20}) 00:45:23 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) 00:45:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1500}, 0x48) 00:45:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) 00:45:23 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) 00:45:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1600}, 0x48) 00:45:23 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x200582, 0x114) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x212}) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x20}) 00:45:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1700}, 0x48) 00:45:23 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464b8, &(0x7f00000000c0)) 00:45:23 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) 00:45:23 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)='%p \x00'}, 0x1c) syz_open_dev$dri(&(0x7f0000000000), 0x400, 0xd0900) 00:45:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1800}, 0x48) 00:45:23 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) 00:45:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1900}, 0x48) 00:45:23 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)='%p \x00'}, 0x1c) (async) syz_open_dev$dri(&(0x7f0000000000), 0x400, 0xd0900) 00:45:23 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464b8, &(0x7f00000000c0)) 00:45:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1a00}, 0x48) 00:45:23 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)='%p \x00'}, 0x1c) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000000), 0x400, 0xd0900) 00:45:23 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0]}, 0x40) 00:45:23 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 00:45:23 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464b8, &(0x7f00000000c0)) 00:45:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1b00}, 0x48) 00:45:23 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x252001, 0xc) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000080)=0x4) 00:45:23 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0]}, 0x40) 00:45:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1c00}, 0x48) 00:45:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x7e3, 0x20480) clock_gettime(0x4, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) 00:45:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, 0x0) 00:45:23 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x0) (async) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x252001, 0xc) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000080)=0x4) 00:45:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1d00}, 0x48) 00:45:23 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x252001, 0xc) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000080)=0x4) 00:45:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, 0x0) 00:45:23 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x252001, 0xc) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000080)=0x4) socket$tipc(0x1e, 0x5, 0x0) (async) accept4$tipc(r0, 0x0, 0x0, 0x0) (async) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x252001, 0xc) (async) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) 00:45:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x1200, 0x0, 0x10d0}, 0x48) 00:45:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1e00}, 0x48) 00:45:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, 0x0) 00:45:23 executing program 3: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x9}) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) 00:45:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4d8c8ed2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fff}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0xadae125cb12e1017) ioctl$FLOPPY_FDPOLLDRVSTAT(0xffffffffffffffff, 0x80340213, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000380)={r2, 0x9, 0x3f, 0x7, 0x1, [], [0x0, 0x9, 0x4, 0x80000000], [0x425, 0x4, 0x101, 0x3], [0xd456, 0x306, 0x0, 0x60000000000]}) 00:45:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1f00}, 0x48) 00:45:23 executing program 2: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r1) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0001dc7833f7e1429406000000ffdbdf25150000000c00060003220bb32c56c7b98e6935406522e4500dfda1bf705c069652c28e8bca3c3b6059912e32a4ccc9ed6c8763af69e5c90065b4b337bb402c43993f4caba1930260f2ebd2eef9b8cb1882f67c02bb16a840e11779760ffc7d4dc1bc0b166f9423ef12f78a14a7b8c22ced10dc52d616fe35cf6a0d4a5c9b984bd06b9d7448047c4bfb3e455448a538573bfd878bc3e4a914525fbfa3c1943506bd137400f68c159da989d7f94c3b0a8fccc6c2da83939647a263c2798f0853ef275ce966b4a05100840e3960c4da2dc3b515ea017cc9c43d76b5c1bfc9dacd6fb769e25d"], 0x20}}, 0x40001) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x805}, 0x1) 00:45:23 executing program 3: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x9}) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x9}) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) 00:45:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x4, 0x4, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000380)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[{}], &(0x7f00000001c0), &(0x7f0000000200)=[0x0, 0x0], 0x1, 0x0, 0x3, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464b8, &(0x7f00000000c0)) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r3}) 00:45:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x2000}, 0x48) 00:45:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x4, 0x0, 0x10d0}, 0x48) 00:45:23 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7fff, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) 00:45:23 executing program 3: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x9}) (async) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x9}) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) 00:45:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x2100}, 0x48) 00:45:23 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7fff, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) 00:45:23 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x8000, 0x14000) r2 = syz_open_dev$floppy(&(0x7f0000000080), 0x3, 0x80000) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) r4 = gettid() tkill(r4, 0x11) gettid() r5 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r3}, 0x10) r6 = gettid() tkill(r6, 0x11) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r6, r5, 0x0, 0x98, &(0x7f00000002c0)='\xa0y\x95/u\xb9\x02\xaf\a\x84\xb8\xf5\xd2\x0e\xf0t/\x00\x1b\x92\x15_\xbb9T!H\x96tP\xd8\x0e1\x0f\x11\x85\'\xb3\xc9s\xf0\xfc\xd0O\xfd\x961\xc9\xa4\xd8\x17A\fb\xcb\x98mx\x8bC\xd6\x84)\xb4\x8c@;\x87\xf6\xc3_\x15\xabO\xe1\x15j\x89NQ9\xba\fY9\xb9f\xd3cb+w\xc7\xe2\x18\xbaK\xa4\xae\xc2*KR\xdc\xf2\xe85\xe0>\xcf$4\x93\xbe\xa3\xd8\x96^\r^b\xa3\xf9\x9d\a/8\xa7X<\xf1\xde\x9f\xea.\x8av\xfc\x9a$\xa3$\xc6\x10#Kp4\xc3\xc8\xb0\x13'}, 0x30) ioctl$FLOPPY_FDFMTBEG(r2, 0x247) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1}) 00:45:23 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '+\':\\\xd2-'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48014}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x8001, 0x0, 0x2, 0x3040, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3, 0x9}, 0x48) 00:45:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x2200}, 0x48) 00:45:23 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x80000) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$MON_IOCX_GETX(r1, 0x400c920a, &(0x7f00000000c0)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/54, 0x36}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) 00:45:23 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x7ff, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x8001]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x200cc080}, 0x40000c4) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf250400000014000100fc00000000000000000000000000000060399e38a341718fb8d3acf06a3594060d14a677b1d7194a038d7df399d0cad3208c51410d06920b2be581388b5ae6ca47cbfccc8db7b276f3f1101540dcec21e1c15171da2f68f789fccee3638d2a81235a5f40c8270b2637e9a8010d2c840534d2300d39412c84bf9f15f9440bc8e47207ddabd0ebec425d4925149486dde7d6"], 0x28}, 0x1, 0x0, 0x0, 0x2000c450}, 0x4004002) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r2}, &(0x7f00000000c0), &(0x7f0000000040)='%d \x00'}, 0x1c) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000240)={&(0x7f0000ff2000/0xd000)=nil, 0xd000}) syz_open_dev$vcsa(&(0x7f0000000000), 0xa686, 0x301900) 00:45:23 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '+\':\\\xd2-'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48014}, 0x4000000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x8001, 0x0, 0x2, 0x3040, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3, 0x9}, 0x48) 00:45:23 executing program 2: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '+\':\\\xd2-'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48014}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x8001, 0x0, 0x2, 0x3040, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3, 0x9}, 0x48) 00:45:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x2300}, 0x48) 00:45:23 executing program 1: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x4640, 0x0) 00:45:23 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '+\':\\\xd2-'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48014}, 0x4000000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x8001, 0x0, 0x2, 0x3040, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3, 0x9}, 0x48) 00:45:23 executing program 1: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x4640, 0x0) 00:45:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1000000}, 0x48) 00:45:23 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$FLOPPY_FDPOLLDRVSTAT(r2, 0x80340213, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x1}) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:24 executing program 3: socket$tipc(0x1e, 0x5, 0x0) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000000)={0x7, 0x7f, 0x2}, 0x7) 00:45:24 executing program 1: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x4640, 0x0) 00:45:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x2000000}, 0x48) 00:45:24 executing program 3: socket$tipc(0x1e, 0x5, 0x0) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) write$P9_RWSTAT(r0, &(0x7f0000000000)={0x7, 0x7f, 0x2}, 0x7) 00:45:24 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$FLOPPY_FDPOLLDRVSTAT(r2, 0x80340213, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x1}) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:24 executing program 1: openat$damon_init_regions(0xffffff9c, 0x0, 0x4640, 0x0) 00:45:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x3000000}, 0x48) 00:45:24 executing program 3: socket$tipc(0x1e, 0x5, 0x0) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000000)={0x7, 0x7f, 0x2}, 0x7) 00:45:24 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$FLOPPY_FDPOLLDRVSTAT(r2, 0x80340213, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x1}) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x4000000}, 0x48) 00:45:24 executing program 1: openat$damon_init_regions(0xffffff9c, 0x0, 0x4640, 0x0) 00:45:24 executing program 3: write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x69, 0x1, {0x10, 0x4, 0x5}}, 0x14) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) 00:45:24 executing program 1: openat$damon_init_regions(0xffffff9c, 0x0, 0x4640, 0x0) 00:45:24 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x5000000}, 0x48) 00:45:24 executing program 3: write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x69, 0x1, {0x10, 0x4, 0x5}}, 0x14) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) 00:45:24 executing program 1: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 00:45:24 executing program 3: write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x69, 0x1, {0x10, 0x4, 0x5}}, 0x14) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) 00:45:24 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x6000000}, 0x48) 00:45:24 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fcdbdf25010000000c000400b90f0000000000000c00020089000000000000000c000200ffffffff000000000c00080004000000000000000f000a002f6465762f76637361230000"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040801) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r3) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) r4 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f00000001c0)=0x8, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r6, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r7) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r7) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fddbdf250300000008000100000000000c00080001010000000000001c00078008000100", @ANYRESOCT=r2, @ANYBLOB="5fb57b3e38a1896ed99043fe326db65b151cf12e731a89da43fcd989915c69d3a597bdce8418da70e0affce8cafb54d5ea0062efd6d66104c15e8b77dd8d79ac1aaed4613a0f38918e4d5c56460a2a9906a473a2624b18", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x0) 00:45:24 executing program 1: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 00:45:24 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x7000000}, 0x48) 00:45:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x8000000}, 0x48) 00:45:24 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:24 executing program 1: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 00:45:24 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fcdbdf25010000000c000400b90f0000000000000c00020089000000000000000c000200ffffffff000000000c00080004000000000000000f000a002f6465762f76637361230000"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040801) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r3) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) (async, rerun: 64) r4 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async, rerun: 64) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f00000001c0)=0x8, 0x4) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) (async, rerun: 32) r6 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) accept4$tipc(r6, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r7) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r7) (async, rerun: 32) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000003656ec53a22dc283c7a1bece6b568efe0aae9380b14bdeba477c1730e4402da997c791357c98dd40fe389109088eb07b731dd630e483f5e8fa780d1b6ba4b3e0458568204fe949ac79d6df32db9f84d65340fa1eba9bdadc24fcebb707964afc6b06191c13e496ac02af4d1e6b706707fe4ea211977feb9b5d154a60041fdf79bfb49b89d4cd5fed2689b37c1f8cc135d6438a6e1e95543e16c19ed9200db6526786033ca94c21549102472e97631f5a147b298bb2834b2ccc3e128b53ad422e5ff3c987d41218a5b5ae9cf9fd23410236b772c78b60594e71592ec1425c4369dcf94d9b98fe312aa9357d1f427491e28b79f55c290ec605a34b5459c11105e6d553fd479ab7d441f85f9f76f1e4c517600612c798c3daf1e46b1a8503c61968a49312233e3757cf0a8bbab42c07a98c4a0d6bf288f985a9b1c57d8b6f769115745a330e3d59a842596e5d58c4f7a17e826a5fbf65495d448d160ff3e238011e7f063ddae11d80e534bd6c34106393eba0c01b349ea0b20f0fb722a2a582d25318a2c9d6babcc9af0ffca76af13dfe3add0e4282242314c9f6606988c5ee6e6c6adc75d7578d7b1cfe2342db56703f6891b1d18e8c27145812ebcfcc7d", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fddbdf250300000008000100000000000c00080001010000000000001c00078008000100", @ANYRESOCT=r2, @ANYBLOB="5fb57b3e38a1896ed99043fe326db65b151cf12e731a89da43fcd989915c69d3a597bdce8418da70e0affce8cafb54d5ea0062efd6d66104c15e8b77dd8d79ac1aaed4613a0f38918e4d5c56460a2a9906a473a2624b18", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x0) (rerun: 32) 00:45:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x9000000}, 0x48) 00:45:24 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fcdbdf25010000000c000400b90f0000000000000c00020089000000000000000c000200ffffffff000000000c00080004000000000000000f000a002f6465762f76637361230000"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040801) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r3) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) r4 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f00000001c0)=0x8, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r6, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r7) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r7) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000003656ec53a22dc283c7a1bece6b568efe0aae9380b14bdeba477c1730e4402da997c791357c98dd40fe389109088eb07b731dd630e483f5e8fa780d1b6ba4b3e0458568204fe949ac79d6df32db9f84d65340fa1eba9bdadc24fcebb707964afc6b06191c13e496ac02af4d1e6b706707fe4ea211977feb9b5d154a60041fdf79bfb49b89d4cd5fed2689b37c1f8cc135d6438a6e1e95543e16c19ed9200db6526786033ca94c21549102472e97631f5a147b298bb2834b2ccc3e128b53ad422e5ff3c987d41218a5b5ae9cf9fd23410236b772c78b60594e71592ec1425c4369dcf94d9b98fe312aa9357d1f427491e28b79f55c290ec605a34b5459c11105e6d553fd479ab7d441f85f9f76f1e4c517600612c798c3daf1e46b1a8503c61968a49312233e3757cf0a8bbab42c07a98c4a0d6bf288f985a9b1c57d8b6f769115745a330e3d59a842596e5d58c4f7a17e826a5fbf65495d448d160ff3e238011e7f063ddae11d80e534bd6c34106393eba0c01b349ea0b20f0fb722a2a582d25318a2c9d6babcc9af0ffca76af13dfe3add0e4282242314c9f6606988c5ee6e6c6adc75d7578d7b1cfe2342db56703f6891b1d18e8c27145812ebcfcc7d", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fddbdf250300000008000100000000000c00080001010000000000001c00078008000100", @ANYRESOCT=r2, @ANYBLOB="5fb57b3e38a1896ed99043fe326db65b151cf12e731a89da43fcd989915c69d3a597bdce8418da70e0affce8cafb54d5ea0062efd6d66104c15e8b77dd8d79ac1aaed4613a0f38918e4d5c56460a2a9906a473a2624b18", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x0) 00:45:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0xa000000}, 0x48) 00:45:24 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0xb000000}, 0x48) 00:45:24 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0xc000000}, 0x48) 00:45:24 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0xd000000}, 0x48) 00:45:24 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fcdbdf25010000000c000400b90f0000000000000c00020089000000000000000c000200ffffffff000000000c00080004000000000000000f000a002f6465762f76637361230000"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040801) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r3) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) r4 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f00000001c0)=0x8, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r6, 0x0, 0x0, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r7) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r7) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000003656ec53a22dc283c7a1bece6b568efe0aae9380b14bdeba477c1730e4402da997c791357c98dd40fe389109088eb07b731dd630e483f5e8fa780d1b6ba4b3e0458568204fe949ac79d6df32db9f84d65340fa1eba9bdadc24fcebb707964afc6b06191c13e496ac02af4d1e6b706707fe4ea211977feb9b5d154a60041fdf79bfb49b89d4cd5fed2689b37c1f8cc135d6438a6e1e95543e16c19ed9200db6526786033ca94c21549102472e97631f5a147b298bb2834b2ccc3e128b53ad422e5ff3c987d41218a5b5ae9cf9fd23410236b772c78b60594e71592ec1425c4369dcf94d9b98fe312aa9357d1f427491e28b79f55c290ec605a34b5459c11105e6d553fd479ab7d441f85f9f76f1e4c517600612c798c3daf1e46b1a8503c61968a49312233e3757cf0a8bbab42c07a98c4a0d6bf288f985a9b1c57d8b6f769115745a330e3d59a842596e5d58c4f7a17e826a5fbf65495d448d160ff3e238011e7f063ddae11d80e534bd6c34106393eba0c01b349ea0b20f0fb722a2a582d25318a2c9d6babcc9af0ffca76af13dfe3add0e4282242314c9f6606988c5ee6e6c6adc75d7578d7b1cfe2342db56703f6891b1d18e8c27145812ebcfcc7d", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fddbdf250300000008000100000000000c00080001010000000000001c00078008000100", @ANYRESOCT=r2, @ANYBLOB="5fb57b3e38a1896ed99043fe326db65b151cf12e731a89da43fcd989915c69d3a597bdce8418da70e0affce8cafb54d5ea0062efd6d66104c15e8b77dd8d79ac1aaed4613a0f38918e4d5c56460a2a9906a473a2624b18", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x0) 00:45:24 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fcdbdf25010000000c000400b90f0000000000000c00020089000000000000000c000200ffffffff000000000c00080004000000000000000f000a002f6465762f76637361230000"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040801) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r3) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) r4 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f00000001c0)=0x8, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r6, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r7) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r7) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fddbdf250300000008000100000000000c00080001010000000000001c00078008000100", @ANYRESOCT=r2, @ANYBLOB="5fb57b3e38a1896ed99043fe326db65b151cf12e731a89da43fcd989915c69d3a597bdce8418da70e0affce8cafb54d5ea0062efd6d66104c15e8b77dd8d79ac1aaed4613a0f38918e4d5c56460a2a9906a473a2624b18", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x0) 00:45:24 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0xe000000}, 0x48) 00:45:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0xf000000}, 0x48) 00:45:24 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x2000, 0x8) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x9, 0x189, 0x0, 0x800, r0, 0x1c00000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3, 0xf}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffa}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xe1, 0x2, 0xb1000000, 0x7f, 0x3ff]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20008044) 00:45:24 executing program 2: syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:24 executing program 1: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 00:45:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x10000000}, 0x48) 00:45:24 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x2000, 0x8) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x9, 0x189, 0x0, 0x800, r0, 0x1c00000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3, 0xf}, 0x48) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffa}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xe1, 0x2, 0xb1000000, 0x7f, 0x3ff]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20008044) 00:45:24 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:24 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x11000000}, 0x48) 00:45:24 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x2000, 0x8) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x9, 0x189, 0x0, 0x800, r0, 0x1c00000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3, 0xf}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffa}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xe1, 0x2, 0xb1000000, 0x7f, 0x3ff]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20008044) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x2000, 0x8) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x9, 0x189, 0x0, 0x800, r0, 0x1c00000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3, 0xf}, 0x48) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffa}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xe1, 0x2, 0xb1000000, 0x7f, 0x3ff]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20008044) (async) 00:45:24 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:24 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x800) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x12000000}, 0x48) 00:45:24 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x800) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 3: r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) getpeername$tipc(r0, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0xa) openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0xd7803, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x9, 0x10000, 0x7, 0x2c7b, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x804, 0x800000000c}, 0x48) getpeername$tipc(r0, &(0x7f0000000180)=@name, &(0x7f00000001c0)=0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x7f, 0x0, 0x0, 0x41, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8, 0x20, 0x1a, 0x5}}) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0], 0x0, 0x8, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={r1, 0xffffffffffffffff}, 0x4) r6 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="180000009c4065e30900000000080000185300000c0000000000000000000000180000000200000000000000f7ffff8aefb8b4eaf5303300000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x8f2, 0xb3, &(0x7f00000002c0)=""/179, 0x40f00, 0x0, '\x00', r2, 0x30, r3, 0x8, &(0x7f0000000440)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x5, 0x6, 0xffffffff}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[r5, r1, r6, r7, r1, r1, r8], 0x0, 0x10, 0x1}, 0x90) 00:45:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x13000000}, 0x48) 00:45:25 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x800) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 3: r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) getpeername$tipc(r0, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0xa) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0xd7803, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x9, 0x10000, 0x7, 0x2c7b, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x804, 0x800000000c}, 0x48) (async) getpeername$tipc(r0, &(0x7f0000000180)=@name, &(0x7f00000001c0)=0x10) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x7f, 0x0, 0x0, 0x41, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8, 0x20, 0x1a, 0x5}}) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0], 0x0, 0x8, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={r1, 0xffffffffffffffff}, 0x4) (async, rerun: 64) r6 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="180000009c4065e30900000000080000185300000c0000000000000000000000180000000200000000000000f7ffff8aefb8b4eaf5303300000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x8f2, 0xb3, &(0x7f00000002c0)=""/179, 0x40f00, 0x0, '\x00', r2, 0x30, r3, 0x8, &(0x7f0000000440)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x5, 0x6, 0xffffffff}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[r5, r1, r6, r7, r1, r1, r8], 0x0, 0x10, 0x1}, 0x90) 00:45:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x14000000}, 0x48) 00:45:25 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x800) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 3: r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) getpeername$tipc(r0, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0xa) openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0xd7803, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x9, 0x10000, 0x7, 0x2c7b, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x804, 0x800000000c}, 0x48) getpeername$tipc(r0, &(0x7f0000000180)=@name, &(0x7f00000001c0)=0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x7f, 0x0, 0x0, 0x41, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8, 0x20, 0x1a, 0x5}}) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0], 0x0, 0x8, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={r1, 0xffffffffffffffff}, 0x4) r6 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="180000009c4065e30900000000080000185300000c0000000000000000000000180000000200000000000000f7ffff8aefb8b4eaf5303300000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x8f2, 0xb3, &(0x7f00000002c0)=""/179, 0x40f00, 0x0, '\x00', r2, 0x30, r3, 0x8, &(0x7f0000000440)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x5, 0x6, 0xffffffff}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[r5, r1, r6, r7, r1, r1, r8], 0x0, 0x10, 0x1}, 0x90) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) (async) getpeername$tipc(r0, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0xa) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0xd7803, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x9, 0x10000, 0x7, 0x2c7b, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x804, 0x800000000c}, 0x48) (async) getpeername$tipc(r0, &(0x7f0000000180)=@name, &(0x7f00000001c0)=0x10) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x7f, 0x0, 0x0, 0x41, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8, 0x20, 0x1a, 0x5}}) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0], 0x0, 0x8, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={r1}, 0x4) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="180000009c4065e30900000000080000185300000c0000000000000000000000180000000200000000000000f7ffff8aefb8b4eaf5303300000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x8f2, 0xb3, &(0x7f00000002c0)=""/179, 0x40f00, 0x0, '\x00', r2, 0x30, r3, 0x8, &(0x7f0000000440)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x5, 0x6, 0xffffffff}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[r5, r1, r6, r7, r1, r1, r8], 0x0, 0x10, 0x1}, 0x90) (async) 00:45:25 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x15000000}, 0x48) 00:45:25 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x800) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x8, 0xa0000) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000080)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x142) write$P9_RSTATFS(r2, &(0x7f0000000040)={0x43, 0x9, 0x0, {0x8, 0x3cfe016d, 0x1e21, 0x1, 0x3, 0x4, 0x2, 0x4, 0x6}}, 0x43) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = userfaultfd(0x80803) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x6, 0x0, 0x0) write$P9_RWALK(r1, &(0x7f0000000100)={0x16, 0x6f, 0x1, {0x1, [{0x4, 0x3, 0x3}]}}, 0x16) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xff) 00:45:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x16000000}, 0x48) 00:45:25 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x8, 0xa0000) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000080)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x142) write$P9_RSTATFS(r2, &(0x7f0000000040)={0x43, 0x9, 0x0, {0x8, 0x3cfe016d, 0x1e21, 0x1, 0x3, 0x4, 0x2, 0x4, 0x6}}, 0x43) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = userfaultfd(0x80803) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x6, 0x0, 0x0) write$P9_RWALK(r1, &(0x7f0000000100)={0x16, 0x6f, 0x1, {0x1, [{0x4, 0x3, 0x3}]}}, 0x16) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xff) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x8, 0xa0000) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000080)) (async) pipe2$9p(&(0x7f00000000c0), 0x80000) (async) syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x142) (async) write$P9_RSTATFS(r2, &(0x7f0000000040)={0x43, 0x9, 0x0, {0x8, 0x3cfe016d, 0x1e21, 0x1, 0x3, 0x4, 0x2, 0x4, 0x6}}, 0x43) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) userfaultfd(0x80803) (async) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x6, 0x0, 0x0) (async) write$P9_RWALK(r1, &(0x7f0000000100)={0x16, 0x6f, 0x1, {0x1, [{0x4, 0x3, 0x3}]}}, 0x16) (async) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xff) (async) 00:45:25 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x17000000}, 0x48) 00:45:25 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x800) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x18000000}, 0x48) 00:45:25 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x8, 0xa0000) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000080)) pipe2$9p(&(0x7f00000000c0), 0x80000) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x142) write$P9_RSTATFS(r2, &(0x7f0000000040)={0x43, 0x9, 0x0, {0x8, 0x3cfe016d, 0x1e21, 0x1, 0x3, 0x4, 0x2, 0x4, 0x6}}, 0x43) socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = userfaultfd(0x80803) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x6, 0x0, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x6, 0x0, 0x0) write$P9_RWALK(r1, &(0x7f0000000100)={0x16, 0x6f, 0x1, {0x1, [{0x4, 0x3, 0x3}]}}, 0x16) (async) write$P9_RWALK(r1, &(0x7f0000000100)={0x16, 0x6f, 0x1, {0x1, [{0x4, 0x3, 0x3}]}}, 0x16) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xff) 00:45:25 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x19000000}, 0x48) 00:45:25 executing program 1: syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x3}) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) 00:45:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1a000000}, 0x48) 00:45:25 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x3}) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) 00:45:25 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1b000000}, 0x48) 00:45:25 executing program 1: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x800) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 1: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x800) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x3}) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) 00:45:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1c000000}, 0x48) 00:45:25 executing program 1: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x800) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000080)=0x4) 00:45:25 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x800) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x800) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1d000000}, 0x48) 00:45:25 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x800) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000080)=0x4) 00:45:25 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, 0x0) 00:45:25 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, 0x0) 00:45:25 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000080)=0x4) 00:45:25 executing program 1: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1e000000}, 0x48) 00:45:25 executing program 1: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, 0x0) 00:45:25 executing program 1: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:25 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x4000) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x28, r5, 0x125, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r5, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x27, 0x1}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x27, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x28, 0x4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2a, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040006}, 0x40) r7 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000140)={r0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x38, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan3\x00'}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r15, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x38, r13, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x237d280cb6318949}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x20004080) 00:45:25 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, 0x0) 00:45:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x1f000000}, 0x48) 00:45:25 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x20000000}, 0x48) 00:45:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x21000000}, 0x48) 00:45:26 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, 0x0) 00:45:26 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:26 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, 0x0) 00:45:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x22000000}, 0x48) 00:45:26 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) (async) syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x4000) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x28, r5, 0x125, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r5, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x27, 0x1}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x27, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x28, 0x4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2a, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040006}, 0x40) (async) r7 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000140)={r0}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x38, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan3\x00'}) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r15, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x38, r13, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x237d280cb6318949}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x20004080) 00:45:26 executing program 2: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x4000) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x28, r5, 0x125, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r5, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x27, 0x1}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x27, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x28, 0x4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2a, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040006}, 0x40) r7 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000140)={r0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x38, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan3\x00'}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r15, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x38, r13, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x237d280cb6318949}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x20004080) 00:45:26 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x23000000}, 0x48) 00:45:26 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x4000) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x28, r5, 0x125, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r5, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x27, 0x1}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x27, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x28, 0x4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2a, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040006}, 0x40) (async) r7 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000140)={r0}) (async, rerun: 64) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) (async, rerun: 64) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x38, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan3\x00'}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) (async) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r15, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x38, r13, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x237d280cb6318949}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x20004080) 00:45:26 executing program 1: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x4000) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x28, r5, 0x125, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r5, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x27, 0x1}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x27, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x28, 0x4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2a, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040006}, 0x40) r7 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000140)={r0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x38, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan3\x00'}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r15, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x38, r13, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x237d280cb6318949}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x20004080) 00:45:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0}, 0x48) 00:45:26 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) 00:45:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) 00:45:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0}, 0x48) 00:45:26 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) 00:45:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) 00:45:26 executing program 2: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x4000) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x28, r5, 0x125, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r5, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x27, 0x1}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x27, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x28, 0x4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2a, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040006}, 0x40) r7 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000140)={r0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x38, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan3\x00'}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r15, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x38, r13, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x237d280cb6318949}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x20004080) 00:45:26 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) 00:45:26 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) (async) 00:45:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) 00:45:26 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:26 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:26 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0xd14c, 0x20200) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000180)=0xffffffffffffffff, 0x49) openat$damon_init_regions(0xffffff9c, &(0x7f0000000100), 0x47d1a9dbda140aec, 0x0) openat$damon_init_regions(0xffffff9c, &(0x7f0000000140), 0x40000, 0x1b0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x96f1) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000040)=0x6, 0x8) 00:45:26 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0xd14c, 0x20200) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000180)=0xffffffffffffffff, 0x49) openat$damon_init_regions(0xffffff9c, &(0x7f0000000100), 0x47d1a9dbda140aec, 0x0) openat$damon_init_regions(0xffffff9c, &(0x7f0000000140), 0x40000, 0x1b0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x96f1) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000040)=0x6, 0x8) 00:45:26 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0xd14c, 0x20200) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000180)=0xffffffffffffffff, 0x49) openat$damon_init_regions(0xffffff9c, &(0x7f0000000100), 0x47d1a9dbda140aec, 0x0) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000140), 0x40000, 0x1b0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x96f1) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000040)=0x6, 0x8) 00:45:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x18000000}, 0x48) 00:45:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x6}, 0x48) 00:45:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x7}, 0x48) 00:45:26 executing program 1: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x8, 0xa0000) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000080)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x142) write$P9_RSTATFS(r2, &(0x7f0000000040)={0x43, 0x9, 0x0, {0x8, 0x3cfe016d, 0x1e21, 0x1, 0x3, 0x4, 0x2, 0x4, 0x6}}, 0x43) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = userfaultfd(0x80803) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x6, 0x0, 0x0) write$P9_RWALK(r1, &(0x7f0000000100)={0x16, 0x6f, 0x1, {0x1, [{0x4, 0x3, 0x3}]}}, 0x16) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0xff) 00:45:26 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x800) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:26 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0xd14c, 0x20200) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000180)=0xffffffffffffffff, 0x49) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000100), 0x47d1a9dbda140aec, 0x0) openat$damon_init_regions(0xffffff9c, &(0x7f0000000140), 0x40000, 0x1b0) (async, rerun: 32) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x96f1) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000040)=0x6, 0x8) 00:45:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x8}, 0x48) 00:45:26 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$FLOPPY_FDPOLLDRVSTAT(r2, 0x80340213, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x1}) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:26 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1004, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) 00:45:26 executing program 3: userfaultfd(0x800) 00:45:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x9}, 0x48) 00:45:26 executing program 1: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x1800) 00:45:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xa}, 0x48) 00:45:26 executing program 3: userfaultfd(0x800) 00:45:26 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$FLOPPY_FDPOLLDRVSTAT(r2, 0x80340213, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x1}) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:26 executing program 1: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x1800) 00:45:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xb}, 0x48) 00:45:26 executing program 3: userfaultfd(0x800) userfaultfd(0x800) (async) 00:45:26 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$FLOPPY_FDPOLLDRVSTAT(r2, 0x80340213, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x1}) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=',@(\x00'}) 00:45:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xc}, 0x48) 00:45:26 executing program 1: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x2004c005}, 0x80) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) write$damon_init_regions(r1, 0x0, 0xfffffffffffffdb4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)={0x20, r5, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x2008000}, 0x80) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}}, 0x0) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x4080) 00:45:26 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x52200, 0xc1) 00:45:26 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$FLOPPY_FDPOLLDRVSTAT(r1, 0x80340213, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x1}) 00:45:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xd}, 0x48) 00:45:26 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x52200, 0xc1) openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x52200, 0xc1) (async) 00:45:26 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xe}, 0x48) 00:45:27 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000000), 0x52200, 0xc1) 00:45:27 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) 00:45:27 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$FLOPPY_FDPOLLDRVSTAT(r1, 0x80340213, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x1}) 00:45:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xf}, 0x48) 00:45:27 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0x400, 0x40, 0x7f}, {0x7f, 0xb3, 0x81, 0x101}, {0x9, 0x9, 0x0, 0x800}, {0x7, 0x6, 0xd7, 0x8000}, {0x2, 0x90, 0xfa, 0x8}, {0x5, 0x7f, 0xfe, 0x3ff}, {0x7, 0x4, 0x3f, 0x100}]}) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f00000001c0)={0x0, @motion_det}) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{0x401, 0x7, 0x7, 0x3aa7}, {0xb5b, 0x0, 0x0, 0xfffff535}, {0x4, 0x0, 0x20, 0x1f}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r1, 0x11, 0x1, 0x200, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0]}, 0x40) r3 = socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r3, 0x0, &(0x7f0000000100), 0x80000) r4 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCGETLINKNAME(r4, 0x89e0, &(0x7f0000000140)={0x0, 0x2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={0x0, 0x2}) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) 00:45:27 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) 00:45:27 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 1) 00:45:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10}, 0x48) 00:45:27 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) write$damon_init_regions(r0, 0x0, 0xfffffffffffffdb4) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) 00:45:27 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0x400, 0x40, 0x7f}, {0x7f, 0xb3, 0x81, 0x101}, {0x9, 0x9, 0x0, 0x800}, {0x7, 0x6, 0xd7, 0x8000}, {0x2, 0x90, 0xfa, 0x8}, {0x5, 0x7f, 0xfe, 0x3ff}, {0x7, 0x4, 0x3f, 0x100}]}) (async) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f00000001c0)={0x0, @motion_det}) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{0x401, 0x7, 0x7, 0x3aa7}, {0xb5b, 0x0, 0x0, 0xfffff535}, {0x4, 0x0, 0x20, 0x1f}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r1, 0x11, 0x1, 0x200, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0]}, 0x40) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r3, 0x0, &(0x7f0000000100), 0x80000) (async) r4 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCGETLINKNAME(r4, 0x89e0, &(0x7f0000000140)={0x0, 0x2}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={0x0, 0x2}) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) [ 2640.561687][ T5699] FAULT_INJECTION: forcing a failure. [ 2640.561687][ T5699] name failslab, interval 1, probability 0, space 0, times 0 [ 2640.569967][ T5699] CPU: 3 PID: 5699 Comm: syz-executor.1 Not tainted 6.6.0-rc6-syzkaller-00029-g213f891525c2 #0 [ 2640.574055][ T5699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2640.577856][ T5699] Call Trace: [ 2640.579227][ T5699] [ 2640.580508][ T5699] dump_stack_lvl+0x125/0x1b0 [ 2640.582306][ T5699] should_fail_ex+0x496/0x5b0 [ 2640.584373][ T5699] should_failslab+0x9/0x20 [ 2640.586256][ T5699] __kmem_cache_alloc_node+0x2f7/0x340 [ 2640.588402][ T5699] ? tomoyo_realpath_from_path+0xb9/0x710 [ 2640.590925][ T5699] ? tomoyo_realpath_from_path+0xb9/0x710 [ 2640.593119][ T5699] __kmalloc+0x4f/0x100 [ 2640.594736][ T5699] tomoyo_realpath_from_path+0xb9/0x710 [ 2640.597072][ T5699] ? tomoyo_profile+0x47/0x60 [ 2640.599122][ T5699] tomoyo_path_number_perm+0x241/0x580 [ 2640.601367][ T5699] ? tomoyo_path_number_perm+0x22e/0x580 [ 2640.603521][ T5699] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2640.605772][ T5699] ? find_held_lock+0x2d/0x110 [ 2640.607662][ T5699] ? reacquire_held_locks+0x4b0/0x4b0 [ 2640.609750][ T5699] ? reacquire_held_locks+0x4b0/0x4b0 [ 2640.611777][ T5699] ? bit_wait_io_timeout+0x160/0x160 [ 2640.614038][ T5699] ? __fget_files+0x272/0x410 [ 2640.616187][ T5699] ? __fget_files+0x272/0x410 [ 2640.618492][ T5699] security_file_ioctl+0x72/0xb0 [ 2640.620863][ T5699] __do_compat_sys_ioctl+0x5d/0x330 [ 2640.623167][ T5699] __do_fast_syscall_32+0x61/0xe0 [ 2640.625546][ T5699] do_fast_syscall_32+0x33/0x70 [ 2640.627794][ T5699] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2640.630589][ T5699] RIP: 0023:0xf7f2a579 [ 2640.632448][ T5699] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2640.641453][ T5699] RSP: 002b:00000000f7f255ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2640.645468][ T5699] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000801c0204 [ 2640.648688][ T5699] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2640.651750][ T5699] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2640.654760][ T5699] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2640.658169][ T5699] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2640.661128][ T5699] 00:45:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x11}, 0x48) 00:45:27 executing program 2: syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x4c41) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) [ 2640.664033][ T5699] ERROR: Out of memory at tomoyo_realpath_from_path. 00:45:27 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) 00:45:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x12}, 0x48) 00:45:27 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 2) 00:45:27 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0x400, 0x40, 0x7f}, {0x7f, 0xb3, 0x81, 0x101}, {0x9, 0x9, 0x0, 0x800}, {0x7, 0x6, 0xd7, 0x8000}, {0x2, 0x90, 0xfa, 0x8}, {0x5, 0x7f, 0xfe, 0x3ff}, {0x7, 0x4, 0x3f, 0x100}]}) (async) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f00000001c0)={0x0, @motion_det}) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{0x401, 0x7, 0x7, 0x3aa7}, {0xb5b, 0x0, 0x0, 0xfffff535}, {0x4, 0x0, 0x20, 0x1f}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r1, 0x11, 0x1, 0x200, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0]}, 0x40) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r3, 0x0, &(0x7f0000000100), 0x80000) (async) r4 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SIOCGETLINKNAME(r4, 0x89e0, &(0x7f0000000140)={0x0, 0x2}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={0x0, 0x2}) (async) openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) 00:45:27 executing program 2: syz_open_dev$floppy(0x0, 0xff1, 0x800) 00:45:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x13}, 0x48) [ 2640.743577][ T5719] FAULT_INJECTION: forcing a failure. [ 2640.743577][ T5719] name failslab, interval 1, probability 0, space 0, times 0 00:45:27 executing program 2: syz_open_dev$floppy(0x0, 0xff1, 0x800) [ 2640.750492][ T5719] CPU: 2 PID: 5719 Comm: syz-executor.1 Not tainted 6.6.0-rc6-syzkaller-00029-g213f891525c2 #0 [ 2640.754954][ T5719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2640.759751][ T5719] Call Trace: [ 2640.761396][ T5719] [ 2640.762840][ T5719] dump_stack_lvl+0x125/0x1b0 [ 2640.765185][ T5719] should_fail_ex+0x496/0x5b0 [ 2640.767473][ T5719] should_failslab+0x9/0x20 [ 2640.769292][ T5719] __kmem_cache_alloc_node+0x2f7/0x340 [ 2640.771425][ T5719] ? tomoyo_encode2+0x100/0x3d0 [ 2640.773415][ T5719] ? tomoyo_encode2+0x100/0x3d0 [ 2640.775706][ T5719] __kmalloc+0x4f/0x100 [ 2640.777588][ T5719] tomoyo_encode2+0x100/0x3d0 [ 2640.779883][ T5719] ? rcu_is_watching+0x12/0xb0 [ 2640.782152][ T5719] tomoyo_encode+0x29/0x50 [ 2640.784201][ T5719] tomoyo_realpath_from_path+0x196/0x710 [ 2640.787067][ T5719] tomoyo_path_number_perm+0x241/0x580 [ 2640.789149][ T5719] ? tomoyo_path_number_perm+0x22e/0x580 [ 2640.791308][ T5719] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2640.793845][ T5719] ? find_held_lock+0x2d/0x110 [ 2640.796138][ T5719] ? reacquire_held_locks+0x4b0/0x4b0 [ 2640.798719][ T5719] ? reacquire_held_locks+0x4b0/0x4b0 [ 2640.801410][ T5719] ? bit_wait_io_timeout+0x160/0x160 [ 2640.803973][ T5719] ? __fget_files+0x272/0x410 [ 2640.806250][ T5719] ? __fget_files+0x272/0x410 [ 2640.808512][ T5719] security_file_ioctl+0x72/0xb0 [ 2640.811034][ T5719] __do_compat_sys_ioctl+0x5d/0x330 [ 2640.813543][ T5719] __do_fast_syscall_32+0x61/0xe0 [ 2640.815928][ T5719] do_fast_syscall_32+0x33/0x70 [ 2640.817921][ T5719] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2640.820274][ T5719] RIP: 0023:0xf7f2a579 [ 2640.821807][ T5719] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2640.830892][ T5719] RSP: 002b:00000000f7f255ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2640.834087][ T5719] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000801c0204 [ 2640.838093][ T5719] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2640.841240][ T5719] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2640.844510][ T5719] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2640.848227][ T5719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2640.851734][ T5719] [ 2640.853426][ C2] vkms_vblank_simulate: vblank timer overrun [ 2640.860231][ T5719] ERROR: Out of memory at tomoyo_realpath_from_path. 00:45:27 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 00:45:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x14}, 0x48) 00:45:27 executing program 2: syz_open_dev$floppy(0x0, 0xff1, 0x800) 00:45:27 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 3) 00:45:27 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 00:45:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x15}, 0x48) 00:45:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x16}, 0x48) [ 2640.938601][ T5736] FAULT_INJECTION: forcing a failure. [ 2640.938601][ T5736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2640.945711][ T5736] CPU: 2 PID: 5736 Comm: syz-executor.1 Not tainted 6.6.0-rc6-syzkaller-00029-g213f891525c2 #0 00:45:27 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x800) [ 2640.950753][ T5736] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2640.955369][ T5736] Call Trace: [ 2640.956969][ T5736] [ 2640.958381][ T5736] dump_stack_lvl+0x125/0x1b0 [ 2640.960614][ T5736] should_fail_ex+0x496/0x5b0 [ 2640.962879][ T5736] _copy_to_user+0x30/0xb0 [ 2640.965121][ T5736] fd_compat_ioctl+0x1805/0x1d00 00:45:27 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) [ 2640.967477][ T5736] ? fd_ioctl+0x50/0x50 [ 2640.969588][ T5736] ? reacquire_held_locks+0x4b0/0x4b0 [ 2640.972186][ T5736] ? tomoyo_path_number_perm+0x190/0x580 [ 2640.974892][ T5736] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2640.977686][ T5736] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2640.980583][ T5736] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2640.983456][ T5736] ? blkdev_common_ioctl+0x1e0/0x1ce0 [ 2640.985995][ T5736] ? blkdev_pr_preempt+0x2f0/0x2f0 [ 2640.988234][ T5736] ? reacquire_held_locks+0x4b0/0x4b0 [ 2640.990785][ T5736] ? __might_fault+0xe6/0x1a0 [ 2640.993035][ T5736] ? fd_ioctl+0x50/0x50 [ 2640.995002][ T5736] compat_blkdev_ioctl+0x2fe/0x7c0 [ 2640.997425][ T5736] ? blkdev_ioctl+0x770/0x770 [ 2640.999480][ T5736] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2641.001349][ T5736] ? blkdev_ioctl+0x770/0x770 [ 2641.003136][ T5736] __do_compat_sys_ioctl+0x2bf/0x330 [ 2641.005122][ T5736] __do_fast_syscall_32+0x61/0xe0 [ 2641.007012][ T5736] do_fast_syscall_32+0x33/0x70 [ 2641.008872][ T5736] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2641.011261][ T5736] RIP: 0023:0xf7f2a579 [ 2641.012806][ T5736] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2641.020492][ T5736] RSP: 002b:00000000f7f255ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2641.023636][ T5736] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000801c0204 [ 2641.026805][ T5736] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2641.029794][ T5736] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2641.032832][ T5736] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2641.035795][ T5736] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2641.039042][ T5736] [ 2641.040343][ C2] vkms_vblank_simulate: vblank timer overrun 00:45:27 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x800) 00:45:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x17}, 0x48) 00:45:27 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 4) 00:45:27 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x800) 00:45:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x18}, 0x48) [ 2641.095046][ T5752] FAULT_INJECTION: forcing a failure. [ 2641.095046][ T5752] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:45:27 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x1) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ff2000/0xe000)=nil, &(0x7f0000fee000/0x12000)=nil, 0xe000}) [ 2641.103350][ T5752] CPU: 2 PID: 5752 Comm: syz-executor.1 Not tainted 6.6.0-rc6-syzkaller-00029-g213f891525c2 #0 [ 2641.108199][ T5752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2641.112131][ T5752] Call Trace: [ 2641.113375][ T5752] [ 2641.114468][ T5752] dump_stack_lvl+0x125/0x1b0 [ 2641.116241][ T5752] should_fail_ex+0x496/0x5b0 [ 2641.118008][ T5752] _copy_to_user+0x30/0xb0 [ 2641.119670][ T5752] simple_read_from_buffer+0xd0/0x150 [ 2641.121676][ T5752] proc_fail_nth_read+0x1b0/0x280 [ 2641.123533][ T5752] ? proc_tid_comm_permission+0x1f0/0x1f0 [ 2641.125622][ T5752] ? security_file_permission+0xdc/0x100 [ 2641.128080][ T5752] ? proc_tid_comm_permission+0x1f0/0x1f0 [ 2641.130264][ T5752] vfs_read+0x1ce/0x930 [ 2641.131834][ T5752] ? kernel_read+0x1b0/0x1b0 [ 2641.133589][ T5752] ? __might_fault+0xe6/0x1a0 00:45:27 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x1) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ff2000/0xe000)=nil, &(0x7f0000fee000/0x12000)=nil, 0xe000}) [ 2641.135351][ T5752] ? __fget_files+0x272/0x410 [ 2641.137936][ T5752] ksys_read+0x12f/0x250 [ 2641.139769][ T5752] ? vfs_write+0xe40/0xe40 [ 2641.141592][ T5752] __do_fast_syscall_32+0x61/0xe0 [ 2641.143488][ T5752] do_fast_syscall_32+0x33/0x70 [ 2641.145339][ T5752] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2641.147738][ T5752] RIP: 0023:0xf7f2a579 [ 2641.149244][ T5752] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2641.156360][ T5752] RSP: 002b:00000000f7f255e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2641.160219][ T5752] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f7f25670 [ 2641.163845][ T5752] RDX: 000000000000000f RSI: 00000000f7353ff4 RDI: 0000000000000000 [ 2641.167476][ T5752] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2641.171315][ T5752] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2641.175038][ T5752] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2641.178701][ T5752] 00:45:27 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) [ 2641.180134][ C2] vkms_vblank_simulate: vblank timer overrun 00:45:27 executing program 3: openat$damon_init_regions(0xffffff9c, &(0x7f0000000040), 0x40, 0x1) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ff2000/0xe000)=nil, &(0x7f0000fee000/0x12000)=nil, 0xe000}) 00:45:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x19}, 0x48) 00:45:27 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1a}, 0x48) 00:45:27 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:27 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) 00:45:27 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x800) 00:45:27 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:27 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) 00:45:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1b}, 0x48) 00:45:27 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x241, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:27 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x800) 00:45:27 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1c}, 0x48) 00:45:28 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:28 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (fail_nth: 1) 00:45:28 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x245, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1d}, 0x48) [ 2641.458887][ T5795] FAULT_INJECTION: forcing a failure. [ 2641.458887][ T5795] name failslab, interval 1, probability 0, space 0, times 0 [ 2641.463674][ T5795] CPU: 1 PID: 5795 Comm: syz-executor.3 Not tainted 6.6.0-rc6-syzkaller-00029-g213f891525c2 #0 [ 2641.467717][ T5795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2641.471553][ T5795] Call Trace: [ 2641.472933][ T5795] [ 2641.474113][ T5795] dump_stack_lvl+0x125/0x1b0 [ 2641.476066][ T5795] should_fail_ex+0x496/0x5b0 [ 2641.477945][ T5795] should_failslab+0x9/0x20 [ 2641.479729][ T5795] kmem_cache_alloc+0x334/0x3b0 [ 2641.481558][ T5795] getname_flags.part.0+0x50/0x4d0 [ 2641.483481][ T5795] getname+0x90/0xe0 [ 2641.484982][ T5795] do_sys_openat2+0x100/0x1e0 [ 2641.486817][ T5795] ? build_open_flags+0x690/0x690 [ 2641.488709][ T5795] __ia32_compat_sys_openat+0x16e/0x200 [ 2641.490869][ T5795] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 2641.492892][ T5795] ? ksys_write+0x1a7/0x250 [ 2641.494764][ T5795] __do_fast_syscall_32+0x61/0xe0 [ 2641.496895][ T5795] do_fast_syscall_32+0x33/0x70 [ 2641.499092][ T5795] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2641.502059][ T5795] RIP: 0023:0xf7fc3579 [ 2641.503776][ T5795] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2641.512547][ T5795] RSP: 002b:00000000f7fbe150 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 2641.516580][ T5795] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7fbe1a0 [ 2641.520032][ T5795] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00000000f7353ff4 [ 2641.523766][ T5795] RBP: 0000000000000800 R08: 0000000000000000 R09: 0000000000000000 [ 2641.527693][ T5795] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2641.531144][ T5795] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2641.534847][ T5795] 00:45:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1e}, 0x48) 00:45:28 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:28 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x247, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x21}, 0x48) 00:45:28 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (fail_nth: 2) 00:45:28 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x249, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:28 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x22}, 0x48) [ 2641.621273][ T5814] FAULT_INJECTION: forcing a failure. [ 2641.621273][ T5814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2641.627992][ T5814] CPU: 0 PID: 5814 Comm: syz-executor.3 Not tainted 6.6.0-rc6-syzkaller-00029-g213f891525c2 #0 [ 2641.632935][ T5814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2641.637933][ T5814] Call Trace: [ 2641.639571][ T5814] [ 2641.641027][ T5814] dump_stack_lvl+0x125/0x1b0 [ 2641.643464][ T5814] should_fail_ex+0x496/0x5b0 [ 2641.645813][ T5814] strncpy_from_user+0x38/0x300 [ 2641.648139][ T5814] getname_flags.part.0+0x93/0x4d0 [ 2641.650622][ T5814] getname+0x90/0xe0 [ 2641.652549][ T5814] do_sys_openat2+0x100/0x1e0 [ 2641.654818][ T5814] ? build_open_flags+0x690/0x690 [ 2641.657357][ T5814] __ia32_compat_sys_openat+0x16e/0x200 [ 2641.660017][ T5814] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 2641.662637][ T5814] ? ksys_write+0x1a7/0x250 [ 2641.664840][ T5814] __do_fast_syscall_32+0x61/0xe0 [ 2641.667277][ T5814] do_fast_syscall_32+0x33/0x70 [ 2641.669687][ T5814] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2641.672738][ T5814] RIP: 0023:0xf7fc3579 [ 2641.674739][ T5814] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2641.684036][ T5814] RSP: 002b:00000000f7fbe150 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 2641.687996][ T5814] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7fbe1a0 [ 2641.691720][ T5814] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00000000f7353ff4 [ 2641.695525][ T5814] RBP: 0000000000000800 R08: 0000000000000000 R09: 0000000000000000 [ 2641.699248][ T5814] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2641.702983][ T5814] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2641.706751][ T5814] 00:45:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x23}, 0x48) 00:45:28 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x24a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:28 executing program 2: ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:28 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (fail_nth: 3) 00:45:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x300}, 0x48) 00:45:28 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x24b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:28 executing program 2: ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2641.797110][ T5824] FAULT_INJECTION: forcing a failure. [ 2641.797110][ T5824] name failslab, interval 1, probability 0, space 0, times 0 [ 2641.802089][ T5824] CPU: 0 PID: 5824 Comm: syz-executor.3 Not tainted 6.6.0-rc6-syzkaller-00029-g213f891525c2 #0 00:45:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x500}, 0x48) [ 2641.806955][ T5824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2641.812161][ T5824] Call Trace: [ 2641.813885][ T5824] [ 2641.815089][ T5824] dump_stack_lvl+0x125/0x1b0 [ 2641.817175][ T5824] should_fail_ex+0x496/0x5b0 [ 2641.819171][ T5824] should_failslab+0x9/0x20 [ 2641.821082][ T5824] kmem_cache_alloc+0x334/0x3b0 [ 2641.823123][ T5824] alloc_empty_file+0x73/0x1d0 [ 2641.825133][ T5824] path_openat+0xdc/0x29c0 [ 2641.827010][ T5824] ? path_lookupat+0x770/0x770 [ 2641.829038][ T5824] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2641.831535][ T5824] do_filp_open+0x1de/0x430 [ 2641.833431][ T5824] ? may_open_dev+0xf0/0xf0 [ 2641.835328][ T5824] ? _raw_spin_unlock+0x28/0x40 [ 2641.837400][ T5824] ? alloc_fd+0x2da/0x6c0 [ 2641.839255][ T5824] do_sys_openat2+0x176/0x1e0 [ 2641.841332][ T5824] ? build_open_flags+0x690/0x690 [ 2641.843693][ T5824] __ia32_compat_sys_openat+0x16e/0x200 [ 2641.846224][ T5824] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 2641.848494][ T5824] ? ksys_write+0x1a7/0x250 [ 2641.850417][ T5824] __do_fast_syscall_32+0x61/0xe0 [ 2641.852540][ T5824] do_fast_syscall_32+0x33/0x70 [ 2641.854607][ T5824] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2641.857295][ T5824] RIP: 0023:0xf7fc3579 [ 2641.859000][ T5824] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2641.867033][ T5824] RSP: 002b:00000000f7fbe150 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 2641.870530][ T5824] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7fbe1a0 00:45:28 executing program 2: ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:28 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2641.873901][ T5824] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00000000f7353ff4 [ 2641.877406][ T5824] RBP: 0000000000000800 R08: 0000000000000000 R09: 0000000000000000 [ 2641.880696][ T5824] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2641.883974][ T5824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 00:45:28 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2641.887218][ T5824] 00:45:28 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (fail_nth: 4) 00:45:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x600}, 0x48) 00:45:28 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x254, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:28 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:28 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:28 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2641.991804][ T5846] FAULT_INJECTION: forcing a failure. [ 2641.991804][ T5846] name failslab, interval 1, probability 0, space 0, times 0 00:45:28 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x256, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2642.002750][ T5846] CPU: 0 PID: 5846 Comm: syz-executor.3 Not tainted 6.6.0-rc6-syzkaller-00029-g213f891525c2 #0 [ 2642.008032][ T5846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2642.012860][ T5846] Call Trace: [ 2642.014517][ T5846] [ 2642.016001][ T5846] dump_stack_lvl+0x125/0x1b0 [ 2642.018340][ T5846] should_fail_ex+0x496/0x5b0 [ 2642.020572][ T5846] should_failslab+0x9/0x20 [ 2642.022744][ T5846] kmem_cache_alloc+0x334/0x3b0 [ 2642.025031][ T5846] security_file_alloc+0x41/0x250 [ 2642.027395][ T5846] ? kmem_cache_alloc+0x348/0x3b0 [ 2642.029806][ T5846] init_file+0xb9/0x2d0 [ 2642.031781][ T5846] alloc_empty_file+0x91/0x1d0 [ 2642.034095][ T5846] path_openat+0xdc/0x29c0 [ 2642.036213][ T5846] ? path_lookupat+0x770/0x770 00:45:28 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2642.038546][ T5846] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2642.041822][ T5846] do_filp_open+0x1de/0x430 [ 2642.044001][ T5846] ? may_open_dev+0xf0/0xf0 [ 2642.046288][ T5846] ? _raw_spin_unlock+0x28/0x40 [ 2642.048534][ T5846] ? alloc_fd+0x2da/0x6c0 [ 2642.050584][ T5846] do_sys_openat2+0x176/0x1e0 [ 2642.052893][ T5846] ? build_open_flags+0x690/0x690 [ 2642.055366][ T5846] __ia32_compat_sys_openat+0x16e/0x200 [ 2642.058066][ T5846] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 2642.060730][ T5846] ? ksys_write+0x1a7/0x250 [ 2642.062949][ T5846] __do_fast_syscall_32+0x61/0xe0 [ 2642.065329][ T5846] do_fast_syscall_32+0x33/0x70 [ 2642.067614][ T5846] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2642.070643][ T5846] RIP: 0023:0xf7fc3579 [ 2642.072655][ T5846] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2642.081856][ T5846] RSP: 002b:00000000f7fbe150 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 2642.085875][ T5846] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7fbe1a0 [ 2642.089681][ T5846] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00000000f7353ff4 [ 2642.093592][ T5846] RBP: 0000000000000800 R08: 0000000000000000 R09: 0000000000000000 [ 2642.097608][ T5846] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2642.101302][ T5846] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2642.105135][ T5846] 00:45:28 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (fail_nth: 5) 00:45:28 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x700}, 0x48) 00:45:28 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x258, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:28 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x900}, 0x48) 00:45:28 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:28 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x10, 0x0) [ 2642.229534][ T5868] FAULT_INJECTION: forcing a failure. [ 2642.229534][ T5868] name failslab, interval 1, probability 0, space 0, times 0 [ 2642.247021][ T5868] CPU: 1 PID: 5868 Comm: syz-executor.3 Not tainted 6.6.0-rc6-syzkaller-00029-g213f891525c2 #0 [ 2642.251511][ T5868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2642.255359][ T5868] Call Trace: [ 2642.256638][ T5868] [ 2642.257768][ T5868] dump_stack_lvl+0x125/0x1b0 [ 2642.259529][ T5868] should_fail_ex+0x496/0x5b0 [ 2642.261354][ T5868] should_failslab+0x9/0x20 [ 2642.263109][ T5868] __kmem_cache_alloc_node+0x2f7/0x340 [ 2642.265462][ T5868] ? tomoyo_realpath_from_path+0xb9/0x710 [ 2642.268312][ T5868] ? tomoyo_realpath_from_path+0xb9/0x710 [ 2642.270604][ T5868] __kmalloc+0x4f/0x100 [ 2642.272202][ T5868] tomoyo_realpath_from_path+0xb9/0x710 [ 2642.274308][ T5868] tomoyo_check_open_permission+0x2a3/0x3b0 [ 2642.276491][ T5868] ? tomoyo_path_number_perm+0x580/0x580 [ 2642.278752][ T5868] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2642.281129][ T5868] ? hook_path_mknod+0x670/0x670 [ 2642.283026][ T5868] ? reacquire_held_locks+0x4b0/0x4b0 [ 2642.285016][ T5868] ? spin_bug+0x1d0/0x1d0 [ 2642.286617][ T5868] tomoyo_file_open+0xa8/0xd0 [ 2642.288394][ T5868] security_file_open+0x6a/0xe0 [ 2642.290258][ T5868] do_dentry_open+0x538/0x1730 [ 2642.292107][ T5868] ? may_open+0x1f2/0x400 [ 2642.293793][ T5868] path_openat+0x19af/0x29c0 [ 2642.295594][ T5868] ? path_lookupat+0x770/0x770 [ 2642.297482][ T5868] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2642.299922][ T5868] do_filp_open+0x1de/0x430 [ 2642.301740][ T5868] ? may_open_dev+0xf0/0xf0 [ 2642.303482][ T5868] ? _raw_spin_unlock+0x28/0x40 [ 2642.305297][ T5868] ? alloc_fd+0x2da/0x6c0 [ 2642.307059][ T5868] do_sys_openat2+0x176/0x1e0 [ 2642.308825][ T5868] ? build_open_flags+0x690/0x690 [ 2642.310710][ T5868] __ia32_compat_sys_openat+0x16e/0x200 [ 2642.312786][ T5868] ? __x64_compat_sys_open+0x1d0/0x1d0 [ 2642.314818][ T5868] ? ksys_write+0x1a7/0x250 [ 2642.316524][ T5868] __do_fast_syscall_32+0x61/0xe0 [ 2642.318426][ T5868] do_fast_syscall_32+0x33/0x70 [ 2642.320282][ T5868] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2642.322771][ T5868] RIP: 0023:0xf7fc3579 [ 2642.324374][ T5868] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2642.331599][ T5868] RSP: 002b:00000000f7fbe150 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 2642.334716][ T5868] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f7fbe1a0 [ 2642.337860][ T5868] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00000000f7353ff4 [ 2642.340953][ T5868] RBP: 0000000000000800 R08: 0000000000000000 R09: 0000000000000000 [ 2642.344035][ T5868] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2642.347054][ T5868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2642.349992][ T5868] [ 2642.351940][ T5868] ERROR: Out of memory at tomoyo_realpath_from_path. 00:45:28 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (fail_nth: 6) 00:45:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xa00}, 0x48) 00:45:28 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x249, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:28 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x259, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:28 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x249, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:28 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x25a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x249, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 2: ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x249, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (fail_nth: 7) 00:45:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xb00}, 0x48) 00:45:29 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x301, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 2: ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x249, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 2: ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x249, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x249, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2642.527505][ T5893] FAULT_INJECTION: forcing a failure. [ 2642.527505][ T5893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2642.533967][ T5893] CPU: 1 PID: 5893 Comm: syz-executor.3 Not tainted 6.6.0-rc6-syzkaller-00029-g213f891525c2 #0 [ 2642.538100][ T5893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2642.542196][ T5893] Call Trace: [ 2642.543557][ T5893] [ 2642.544735][ T5893] dump_stack_lvl+0x125/0x1b0 [ 2642.546645][ T5893] should_fail_ex+0x496/0x5b0 [ 2642.548668][ T5893] _copy_to_user+0x30/0xb0 [ 2642.550579][ T5893] simple_read_from_buffer+0xd0/0x150 [ 2642.552737][ T5893] proc_fail_nth_read+0x1b0/0x280 [ 2642.554820][ T5893] ? proc_tid_comm_permission+0x1f0/0x1f0 00:45:29 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x249, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2642.557124][ T5893] ? security_file_permission+0xdc/0x100 [ 2642.559602][ T5893] ? proc_tid_comm_permission+0x1f0/0x1f0 [ 2642.561825][ T5893] vfs_read+0x1ce/0x930 [ 2642.563392][ T5893] ? kernel_read+0x1b0/0x1b0 [ 2642.565173][ T5893] ? __fget_files+0x272/0x410 [ 2642.566956][ T5893] ksys_read+0x12f/0x250 00:45:29 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x125d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2642.568554][ T5893] ? vfs_write+0xe40/0xe40 [ 2642.570537][ T5893] __do_fast_syscall_32+0x61/0xe0 [ 2642.572505][ T5893] do_fast_syscall_32+0x33/0x70 [ 2642.574558][ T5893] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2642.577141][ T5893] RIP: 0023:0xf7fc3579 [ 2642.578781][ T5893] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2642.586370][ T5893] RSP: 002b:00000000f7fbe5e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2642.589708][ T5893] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f7fbe670 [ 2642.593092][ T5893] RDX: 000000000000000f RSI: 00000000f7353ff4 RDI: 0000000000000000 [ 2642.596258][ T5893] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2642.599363][ T5893] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2642.602790][ T5893] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2642.606609][ T5893] 00:45:29 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) 00:45:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xc00}, 0x48) 00:45:29 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x249, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x125e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xd00}, 0x48) 00:45:29 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x249, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xe00}, 0x48) 00:45:29 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x300) 00:45:29 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x125f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x249, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xf00}, 0x48) 00:45:29 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x500) 00:45:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1100}, 0x48) 00:45:29 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1260, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x249, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x600) 00:45:29 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x249, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1200}, 0x48) 00:45:29 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1261, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x700) 00:45:29 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x249, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1300}, 0x48) 00:45:29 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1262, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x249, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x802) 00:45:29 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x249, 0x0) 00:45:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1400}, 0x48) 00:45:29 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1263, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x803) 00:45:29 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1264, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1263, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1500}, 0x48) 00:45:29 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x804) 00:45:29 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1265, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1600}, 0x48) 00:45:29 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1263, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1267, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x805) 00:45:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1700}, 0x48) 00:45:29 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1263, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x806) 00:45:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1800}, 0x48) 00:45:29 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1268, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 2: ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x1263, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x807) 00:45:29 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1900}, 0x48) 00:45:29 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1269, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 2: ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x1263, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:29 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x818) 00:45:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1a00}, 0x48) 00:45:30 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1274, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 2: ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x1263, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1b00}, 0x48) 00:45:30 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0xe00f) 00:45:30 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1276, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1c00}, 0x48) 00:45:30 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1263, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x200) 00:45:30 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1277, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1d00}, 0x48) 00:45:30 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1263, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1e00}, 0x48) 00:45:30 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x200) 00:45:30 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1278, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1263, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x200) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x200) (async) 00:45:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1f00}, 0x48) 00:45:30 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1279, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1263, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000ffdb688e0200000005000600020000000800020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x800) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xfee, 0x80000) ioctl$FLOPPY_FDMSGOFF(0xffffffffffffffff, 0x246) ioctl$FLOPPY_FDFMTEND(r1, 0x249) syz_open_dev$floppy(&(0x7f0000000080), 0x5, 0x105800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000240)) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$FLOPPY_FDPOLLDRVSTAT(r2, 0x80340213, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x1}) 00:45:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000}, 0x48) 00:45:30 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x127a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1263, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2100}, 0x48) 00:45:30 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1263, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000ffdb688e0200000005000600020000000800020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x800) (async) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xfee, 0x80000) ioctl$FLOPPY_FDMSGOFF(0xffffffffffffffff, 0x246) (async) ioctl$FLOPPY_FDFMTEND(r1, 0x249) syz_open_dev$floppy(&(0x7f0000000080), 0x5, 0x105800) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000240)) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$FLOPPY_FDPOLLDRVSTAT(r2, 0x80340213, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x1}) 00:45:30 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x127b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2200}, 0x48) 00:45:30 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x127c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x1263, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000ffdb688e0200000005000600020000000800020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x800) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xfee, 0x80000) ioctl$FLOPPY_FDMSGOFF(0xffffffffffffffff, 0x246) ioctl$FLOPPY_FDFMTEND(r1, 0x249) syz_open_dev$floppy(&(0x7f0000000080), 0x5, 0x105800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000240)) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$FLOPPY_FDPOLLDRVSTAT(r2, 0x80340213, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x1}) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000ffdb688e0200000005000600020000000800020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x800) (async) syz_open_dev$floppy(&(0x7f0000000000), 0xfee, 0x80000) (async) ioctl$FLOPPY_FDMSGOFF(0xffffffffffffffff, 0x246) (async) ioctl$FLOPPY_FDFMTEND(r1, 0x249) (async) syz_open_dev$floppy(&(0x7f0000000080), 0x5, 0x105800) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000240)) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async) ioctl$FLOPPY_FDPOLLDRVSTAT(r2, 0x80340213, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x1}) (async) 00:45:30 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x127d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x1263, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2300}, 0x48) 00:45:30 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x1263, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x127e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x3, 0x3}) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$FLOPPY_FDFMTEND(r0, 0x249) 00:45:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1000000}, 0x48) 00:45:30 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1263, 0x0) 00:45:30 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x127f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x3, 0x3}) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$FLOPPY_FDFMTEND(r0, 0x249) 00:45:30 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1263, 0x0) 00:45:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000000}, 0x48) 00:45:30 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x5309, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1263, 0x0) 00:45:30 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x3, 0x3}) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) ioctl$FLOPPY_FDFMTEND(r0, 0x249) [ 2644.132426][ T6094] floppy1: obsolete eject ioctl [ 2644.134871][ T6094] floppy1: please use floppycontrol --eject 00:45:30 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x541b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x5309, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000}, 0x48) [ 2644.181902][ T6099] floppy1: obsolete eject ioctl [ 2644.183999][ T6099] floppy1: please use floppycontrol --eject 00:45:30 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r0 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x5, 0x2200c2) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xab6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x100) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x21, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffe}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x5}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0xb, 0x2, 0x6, 0x30}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4953, 0x0, 0x0, 0x0, 0x400}], &(0x7f0000000180)='GPL\x00', 0xb1ad, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000200)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xf, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x1, r1, r2, r3, r4, r5, r6, 0xffffffffffffffff, r7], &(0x7f0000000380)=[{0x4, 0x1, 0xb, 0x4}, {0x1, 0x3, 0x0, 0x7}, {0x2, 0x2, 0x0, 0x6}, {0x3, 0x1, 0x1, 0x9}, {0x2, 0x1, 0xa, 0x2}, {0x3, 0x2, 0xb, 0x4}, {0x1, 0x3, 0x0, 0x1}], 0x10, 0x3}, 0x90) 00:45:30 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x5309, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x5421, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) r0 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x5, 0x2200c2) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xab6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x100) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x21, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffe}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x5}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0xb, 0x2, 0x6, 0x30}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4953, 0x0, 0x0, 0x0, 0x400}], &(0x7f0000000180)='GPL\x00', 0xb1ad, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000200)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xf, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x1, r1, r2, r3, r4, r5, r6, 0xffffffffffffffff, r7], &(0x7f0000000380)=[{0x4, 0x1, 0xb, 0x4}, {0x1, 0x3, 0x0, 0x7}, {0x2, 0x2, 0x0, 0x6}, {0x3, 0x1, 0x1, 0x9}, {0x2, 0x1, 0xa, 0x2}, {0x3, 0x2, 0xb, 0x4}, {0x1, 0x3, 0x0, 0x1}], 0x10, 0x3}, 0x90) 00:45:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000}, 0x48) [ 2644.271758][ T6111] floppy1: obsolete eject ioctl [ 2644.273697][ T6111] floppy1: please use floppycontrol --eject 00:45:30 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x5309, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) r0 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x5, 0x2200c2) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async, rerun: 32) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xab6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x48) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r6 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0) (async) r7 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x100) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x21, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffe}, @printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x5}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0xb, 0x2, 0x6, 0x30}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4953, 0x0, 0x0, 0x0, 0x400}], &(0x7f0000000180)='GPL\x00', 0xb1ad, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000200)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xf, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x1, r1, r2, r3, r4, r5, r6, 0xffffffffffffffff, r7], &(0x7f0000000380)=[{0x4, 0x1, 0xb, 0x4}, {0x1, 0x3, 0x0, 0x7}, {0x2, 0x2, 0x0, 0x6}, {0x3, 0x1, 0x1, 0x9}, {0x2, 0x1, 0xa, 0x2}, {0x3, 0x2, 0xb, 0x4}, {0x1, 0x3, 0x0, 0x1}], 0x10, 0x3}, 0x90) 00:45:30 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x5450, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2644.326527][ T6119] floppy1: obsolete eject ioctl [ 2644.328489][ T6119] floppy1: please use floppycontrol --eject 00:45:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5000000}, 0x48) 00:45:30 executing program 2: ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x5309, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0x3, 0x400) 00:45:30 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x5451, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 2: ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x5309, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:30 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x6000000}, 0x48) 00:45:30 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0x3, 0x400) 00:45:31 executing program 2: ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x5309, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x5452, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0x3, 0x400) 00:45:31 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x5309, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x7000000}, 0x48) 00:45:31 executing program 3: syz_open_dev$floppy(&(0x7f0000000040), 0x8, 0x3) 00:45:31 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x5460, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 3: syz_open_dev$floppy(&(0x7f0000000040), 0x8, 0x3) 00:45:31 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x5309, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x8000000}, 0x48) 00:45:31 executing program 3: syz_open_dev$floppy(&(0x7f0000000040), 0x8, 0x3) 00:45:31 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x6470, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x5309, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0x8, 0x40000) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x6, 0x5, 0x9, 0x2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$MON_IOCX_GETX(r2, 0x400c920a, &(0x7f00000001c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/241, 0xf1}) ioctl$FLOPPY_FDMSGOFF(r0, 0x246) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x7ab8, 0x280) write$P9_RLOCK(r3, &(0x7f0000000340)={0x8, 0x35, 0x1}, 0x8) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) ioctl$FLOPPY_FDMSGOFF(r3, 0x246) 00:45:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x9000000}, 0x48) 00:45:31 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x5309, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2644.619866][ T6165] floppy1: obsolete eject ioctl [ 2644.626113][ T6165] floppy1: please use floppycontrol --eject 00:45:31 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x5309, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x8933, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0x8, 0x40000) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x6, 0x5, 0x9, 0x2}) (async, rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async, rerun: 64) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async) ioctl$MON_IOCX_GETX(r2, 0x400c920a, &(0x7f00000001c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/241, 0xf1}) (async, rerun: 64) ioctl$FLOPPY_FDMSGOFF(r0, 0x246) (async, rerun: 64) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x7ab8, 0x280) write$P9_RLOCK(r3, &(0x7f0000000340)={0x8, 0x35, 0x1}, 0x8) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async, rerun: 32) ioctl$FLOPPY_FDMSGOFF(r3, 0x246) (rerun: 32) 00:45:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xa000000}, 0x48) 00:45:31 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x5309, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x5309, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xb000000}, 0x48) 00:45:31 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40041271, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0x8, 0x40000) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x6, 0x5, 0x9, 0x2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async) ioctl$MON_IOCX_GETX(r2, 0x400c920a, &(0x7f00000001c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/241, 0xf1}) ioctl$FLOPPY_FDMSGOFF(r0, 0x246) (async, rerun: 64) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x7ab8, 0x280) (rerun: 64) write$P9_RLOCK(r3, &(0x7f0000000340)={0x8, 0x35, 0x1}, 0x8) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) (async) ioctl$FLOPPY_FDMSGOFF(r3, 0x246) 00:45:31 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x5309, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xc000000}, 0x48) 00:45:31 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x400448c9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x5309, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x5309, 0x0) 00:45:31 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x400448dd, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2644.858259][ T6205] floppy1: obsolete eject ioctl 00:45:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xd000000}, 0x48) [ 2644.862794][ T6205] floppy1: please use floppycontrol --eject 00:45:31 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)={0xd, 0x7, 0x2, {{}, 0x8}}, 0xd) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r1, 0x1, r0, 0x1, 0x80000}) pipe2$9p(&(0x7f0000000140), 0x0) 00:45:31 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40041271, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40041271, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40041271, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xe000000}, 0x48) 00:45:31 executing program 2: ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x40041271, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 2: ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x40041271, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x400454ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) write$P9_RLERRORu(r0, &(0x7f0000000040)={0xd, 0x7, 0x2, {{}, 0x8}}, 0xd) (async) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r1, 0x1, r0, 0x1, 0x80000}) (async) pipe2$9p(&(0x7f0000000140), 0x0) 00:45:31 executing program 2: ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x40041271, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40041271, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40046602, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40041271, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)={0xd, 0x7, 0x2, {{}, 0x8}}, 0xd) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r1, 0x1, r0, 0x1, 0x80000}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r1, 0x1, r0, 0x1, 0x80000}) pipe2$9p(&(0x7f0000000140), 0x0) (async) pipe2$9p(&(0x7f0000000140), 0x0) 00:45:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xf000000}, 0x48) 00:45:31 executing program 3: syz_open_dev$floppy(&(0x7f0000000040), 0xff7, 0x800) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) r1 = syz_open_dev$floppy(&(0x7f00000000c0), 0x8, 0x2000) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='/dev/fd#\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000080)) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0xffffffffffffffff, 0x1}, 0x10) 00:45:31 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40041271, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40049409, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10000000}, 0x48) 00:45:31 executing program 3: syz_open_dev$floppy(&(0x7f0000000040), 0xff7, 0x800) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) r1 = syz_open_dev$floppy(&(0x7f00000000c0), 0x8, 0x2000) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='/dev/fd#\x00'}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000080)) (async) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0xffffffffffffffff, 0x1}, 0x10) 00:45:31 executing program 3: syz_open_dev$floppy(&(0x7f0000000040), 0xff7, 0x800) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) r1 = syz_open_dev$floppy(&(0x7f00000000c0), 0x8, 0x2000) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='/dev/fd#\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000080)) (async) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0, 0xffffffffffffffff, 0x1}, 0x10) 00:45:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x11000000}, 0x48) 00:45:31 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40086602, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40041271, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x400c0248, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x12000000}, 0x48) 00:45:31 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40041271, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) syz_open_dev$floppy(&(0x7f00000000c0), 0xffe00, 0x800) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0xfffffff9, 0x0) ioctl$FLOPPY_FDPOLLDRVSTAT(r1, 0x80340213, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1}) 00:45:31 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40101283, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40041271, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40101286, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x13000000}, 0x48) 00:45:31 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x40041271, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) syz_open_dev$floppy(&(0x7f00000000c0), 0xffe00, 0x800) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0xfffffff9, 0x0) ioctl$FLOPPY_FDPOLLDRVSTAT(r1, 0x80340213, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1}) 00:45:31 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40101288, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x14000000}, 0x48) 00:45:31 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401070c9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:31 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) syz_open_dev$floppy(&(0x7f00000000c0), 0xffe00, 0x800) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0xfffffff9, 0x0) ioctl$FLOPPY_FDPOLLDRVSTAT(r1, 0x80340213, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1}) 00:45:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x15000000}, 0x48) 00:45:32 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x40041271, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x16000000}, 0x48) 00:45:32 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401070ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 3: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000040)) 00:45:32 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x40041271, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000040)) 00:45:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x17000000}, 0x48) 00:45:32 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40041271, 0x0) 00:45:32 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401070cd, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 3: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000040)) (async) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000040)) 00:45:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x18000000}, 0x48) 00:45:32 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40041271, 0x0) 00:45:32 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x4014024c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x19000000}, 0x48) 00:45:32 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40186366, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40041271, 0x0) 00:45:32 executing program 3: syz_open_dev$floppy(&(0x7f0000000040), 0x9, 0x800) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$FLOPPY_FDFMTEND(r0, 0x249) 00:45:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1a000000}, 0x48) 00:45:32 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401870c8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 3: syz_open_dev$floppy(&(0x7f0000000040), 0x9, 0x800) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$FLOPPY_FDFMTEND(r0, 0x249) 00:45:32 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401870cb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401870c8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1b000000}, 0x48) 00:45:32 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401870cc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401870c8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 3: syz_open_dev$floppy(&(0x7f0000000040), 0x9, 0x800) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$FLOPPY_FDFMTEND(r0, 0x249) syz_open_dev$floppy(&(0x7f0000000040), 0x9, 0x800) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) ioctl$FLOPPY_FDFMTEND(r0, 0x249) (async) 00:45:32 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401c0242, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1c000000}, 0x48) 00:45:32 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401870c8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 3: ioctl$FLOPPY_FDEJECT(0xffffffffffffffff, 0x25a) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x4000) 00:45:32 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401c0243, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 2: ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 3: ioctl$FLOPPY_FDEJECT(0xffffffffffffffff, 0x25a) (async) ioctl$FLOPPY_FDEJECT(0xffffffffffffffff, 0x25a) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x4000) 00:45:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1d000000}, 0x48) 00:45:32 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401c5820, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 2: ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 3: ioctl$FLOPPY_FDEJECT(0xffffffffffffffff, 0x25a) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x4000) ioctl$FLOPPY_FDEJECT(0xffffffffffffffff, 0x25a) (async) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x4000) (async) 00:45:32 executing program 2: ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1e000000}, 0x48) 00:45:32 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x4020940d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1f000000}, 0x48) 00:45:32 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401870c8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 3: r0 = syz_open_dev$floppy(&(0x7f0000000040), 0xfffd, 0x400) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x400c9206, &(0x7f00000000c0)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/31, 0x1f}) ioctl$FLOPPY_FDFMTEND(r0, 0x249) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x400c920a, &(0x7f0000001140)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/4096, 0x1000}) 00:45:32 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x20000000}, 0x48) 00:45:32 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401870c8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x21000000}, 0x48) 00:45:32 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x402c5829, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 3: r0 = syz_open_dev$floppy(&(0x7f0000000040), 0xfffd, 0x400) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x400c9206, &(0x7f00000000c0)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/31, 0x1f}) ioctl$FLOPPY_FDFMTEND(r0, 0x249) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x400c920a, &(0x7f0000001140)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/4096, 0x1000}) (async) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x400c920a, &(0x7f0000001140)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/4096, 0x1000}) 00:45:32 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401870c8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x22000000}, 0x48) 00:45:32 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x402c582a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 3: r0 = syz_open_dev$floppy(&(0x7f0000000040), 0xfffd, 0x400) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x400c9206, &(0x7f00000000c0)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000080)=""/31, 0x1f}) ioctl$FLOPPY_FDFMTEND(r0, 0x249) (async) ioctl$FLOPPY_FDFMTEND(r0, 0x249) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x400c920a, &(0x7f0000001140)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/4096, 0x1000}) 00:45:32 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401870c8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x23000000}, 0x48) 00:45:32 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401870c8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0}, 0x48) 00:45:32 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x402c582b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 3: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r1 = getuid() r2 = getgid() ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f00000001c0)) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000040)={0xa0, 0x19, 0x2, {0x8, {0x80, 0x2, 0x7}, 0x0, r1, r2, 0x3, 0xffffffffffff0000, 0xa54c, 0x6, 0x0, 0xfffffffffffffff7, 0x6, 0x80, 0xe, 0x7, 0x1, 0x1f, 0x8, 0xffffffffffffffff, 0xfffffffffffffff8}}, 0xa0) write$capi20_data(0xffffffffffffffff, &(0x7f0000000100)={{0x10, 0x5, 0xff, 0x82, 0x6}, 0x79, "1f48da4e30193988c9a5a02dec07d2ac22f5a203f4425f1b33fc256e18ecd794ea6a55774118db18f8890761720ea00c293a438c1e5155ac0e52d260e878dfd091581c1451ef963c9d992a7579e6949007412e8be223b32a8592641f2f9232f09534aa1920a332c70193ee8356bf304c8934f4cfcc5545604c"}, 0x8b) 00:45:32 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401870c8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x402c5839, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:45:32 executing program 3: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) r1 = getuid() r2 = getgid() ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f00000001c0)) (async) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000040)={0xa0, 0x19, 0x2, {0x8, {0x80, 0x2, 0x7}, 0x0, r1, r2, 0x3, 0xffffffffffff0000, 0xa54c, 0x6, 0x0, 0xfffffffffffffff7, 0x6, 0x80, 0xe, 0x7, 0x1, 0x1f, 0x8, 0xffffffffffffffff, 0xfffffffffffffff8}}, 0xa0) write$capi20_data(0xffffffffffffffff, &(0x7f0000000100)={{0x10, 0x5, 0xff, 0x82, 0x6}, 0x79, "1f48da4e30193988c9a5a02dec07d2ac22f5a203f4425f1b33fc256e18ecd794ea6a55774118db18f8890761720ea00c293a438c1e5155ac0e52d260e878dfd091581c1451ef963c9d992a7579e6949007412e8be223b32a8592641f2f9232f09534aa1920a332c70193ee8356bf304c8934f4cfcc5545604c"}, 0x8b) 00:45:32 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40580290, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:45:33 executing program 3: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) r1 = getuid() (async) r2 = getgid() ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f00000001c0)) (async) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000040)={0xa0, 0x19, 0x2, {0x8, {0x80, 0x2, 0x7}, 0x0, r1, r2, 0x3, 0xffffffffffff0000, 0xa54c, 0x6, 0x0, 0xfffffffffffffff7, 0x6, 0x80, 0xe, 0x7, 0x1, 0x1f, 0x8, 0xffffffffffffffff, 0xfffffffffffffff8}}, 0xa0) (async) write$capi20_data(0xffffffffffffffff, &(0x7f0000000100)={{0x10, 0x5, 0xff, 0x82, 0x6}, 0x79, "1f48da4e30193988c9a5a02dec07d2ac22f5a203f4425f1b33fc256e18ecd794ea6a55774118db18f8890761720ea00c293a438c1e5155ac0e52d260e878dfd091581c1451ef963c9d992a7579e6949007412e8be223b32a8592641f2f9232f09534aa1920a332c70193ee8356bf304c8934f4cfcc5545604c"}, 0x8b) 00:45:33 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x80041270, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2646.439354][ T969] [ 2646.440446][ T969] floppy driver state [ 2646.442000][ T969] ------------------- [ 2646.443471][ T969] now=4295201784 last interrupt=4294967499 diff=234285 last called handler=main_command_interrupt 00:45:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) [ 2646.455623][ T969] timeout_message=lock fdc [ 2646.457764][ T969] last output bytes: [ 2646.459389][ T969] 0 90 4294967496 [ 2646.460922][ T969] 1 90 4294967496 [ 2646.462433][ T969] 2 90 4294967496 [ 2646.464243][ T969] 12 90 4294967496 [ 2646.465768][ T969] 1b 90 4294967496 [ 2646.468404][ T969] ff 90 4294967496 [ 2646.470239][ T969] 12 80 4294967499 [ 2646.471817][ T969] 3 90 4294967499 [ 2646.473364][ T969] 3 80 4294967499 [ 2646.474864][ T969] a1 90 4294967499 [ 2646.476891][ T969] 1e 90 4294967499 [ 2646.478577][ T969] e6 80 4294967499 [ 2646.480037][ T969] 1 90 4294967499 [ 2646.481519][ T969] 0 90 4294967499 [ 2646.482976][ T969] 0 90 4294967499 [ 2646.484435][ T969] 1 90 4294967499 [ 2646.485949][ T969] 2 90 4294967499 [ 2646.487660][ T969] 24 90 4294967499 [ 2646.489169][ T969] 1b 90 4294967499 00:45:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) [ 2646.490794][ T969] ff 90 4294967499 [ 2646.492457][ T969] last result at 4295201781 [ 2646.494353][ T969] last redo_fd_request at 4295201781 [ 2646.496661][ T969] status=80 [ 2646.498110][ T969] fdc_busy=1 [ 2646.499384][ T969] floppy_work.func=floppy_work_workfn [ 2646.501388][ T969] cont=ffffffff8b1391e0 [ 2646.502917][ T969] current_req=0000000000000000 [ 2646.504690][ T969] command_status=-1 [ 2646.506204][ T969] [ 2646.507583][ T969] floppy1: floppy timeout called [ 2646.516277][ T969] [ 2646.518617][ T969] floppy driver state 00:45:33 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$FLOPPY_FDFMTBEG(r0, 0x247) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) [ 2646.520621][ T969] ------------------- 00:45:33 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2646.522631][ T969] now=4295201792 last interrupt=4294967499 diff=234293 last called handler=main_command_interrupt [ 2646.528087][ T969] timeout_message=lock fdc [ 2646.529969][ T969] last output bytes: [ 2646.531511][ T969] 0 90 4294967496 [ 2646.532969][ T969] 1 90 4294967496 [ 2646.534581][ T969] 2 90 4294967496 [ 2646.536627][ T969] 12 90 4294967496 [ 2646.538731][ T969] 1b 90 4294967496 [ 2646.541016][ T969] ff 90 4294967496 [ 2646.542970][ T969] 12 80 4294967499 [ 2646.544930][ T969] 3 90 4294967499 00:45:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x48) [ 2646.546988][ T969] 3 80 4294967499 [ 2646.549107][ T969] a1 90 4294967499 [ 2646.551042][ T969] 1e 90 4294967499 [ 2646.552959][ T969] e6 80 4294967499 [ 2646.554851][ T969] 1 90 4294967499 [ 2646.557623][ T969] 0 90 4294967499 [ 2646.559553][ T969] 0 90 4294967499 [ 2646.561597][ T969] 1 90 4294967499 [ 2646.563588][ T969] 2 90 4294967499 [ 2646.565612][ T969] 24 90 4294967499 [ 2646.568035][ T969] 1b 90 4294967499 [ 2646.569990][ T969] ff 90 4294967499 [ 2646.571952][ T969] last result at 4295201781 [ 2646.574212][ T969] last redo_fd_request at 4295201791 [ 2646.577006][ T969] status=80 [ 2646.578618][ T969] fdc_busy=1 [ 2646.579971][ T969] floppy_work.func=floppy_work_workfn [ 2646.582311][ T969] cont=ffffffff8b1391e0 [ 2646.583984][ T969] current_req=0000000000000000 [ 2646.585980][ T969] command_status=-1 00:45:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) [ 2646.587800][ T969] [ 2646.589360][ T969] floppy1: floppy timeout called [ 2646.593395][ T969] [ 2646.595250][ T969] floppy driver state [ 2646.597470][ T969] ------------------- [ 2646.599541][ T969] now=4295201800 last interrupt=4294967499 diff=234301 last called handler=main_command_interrupt [ 2646.603952][ T969] timeout_message=lock fdc [ 2646.606001][ T969] last output bytes: [ 2646.607870][ T969] 0 90 4294967496 [ 2646.609691][ T969] 1 90 4294967496 [ 2646.611481][ T969] 2 90 4294967496 [ 2646.613680][ T969] 12 90 4294967496 [ 2646.615812][ T969] 1b 90 4294967496 [ 2646.617816][ T969] ff 90 4294967496 00:45:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x48) [ 2646.619747][ T969] 12 80 4294967499 [ 2646.621692][ T969] 3 90 4294967499 [ 2646.623514][ T969] 3 80 4294967499 [ 2646.625298][ T969] a1 90 4294967499 [ 2646.627432][ T969] 1e 90 4294967499 [ 2646.629429][ T969] e6 80 4294967499 [ 2646.631495][ T969] 1 90 4294967499 [ 2646.633428][ T969] 0 90 4294967499 [ 2646.635250][ T969] 0 90 4294967499 [ 2646.637192][ T969] 1 90 4294967499 [ 2646.639001][ T969] 2 90 4294967499 [ 2646.640847][ T969] 24 90 4294967499 [ 2646.642613][ T969] 1b 90 4294967499 [ 2646.644114][ T969] ff 90 4294967499 [ 2646.645561][ T969] last result at 4295201781 [ 2646.647667][ T969] last redo_fd_request at 4295201799 [ 2646.650239][ T969] status=80 [ 2646.651768][ T969] fdc_busy=1 [ 2646.653344][ T969] floppy_work.func=floppy_work_workfn [ 2646.656124][ T969] cont=ffffffff8b1391e0 [ 2646.658213][ T969] current_req=0000000000000000 [ 2646.660525][ T969] command_status=-1 [ 2646.662384][ T969] [ 2646.663591][ T969] floppy1: floppy timeout called [ 2646.667753][ T969] [ 2646.675424][ T969] floppy driver state [ 2646.677399][ T969] ------------------- [ 2646.679273][ T969] now=4295201808 last interrupt=4294967499 diff=234309 last called handler=main_command_interrupt [ 2646.684225][ T969] timeout_message=lock fdc [ 2646.686517][ T969] last output bytes: 00:45:33 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x80041272, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x48) 00:45:33 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$FLOPPY_FDFMTBEG(r0, 0x247) (async) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) 00:45:33 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2646.688369][ T969] 0 90 4294967496 [ 2646.690293][ T969] 1 90 4294967496 [ 2646.692044][ T969] 2 90 4294967496 [ 2646.693779][ T969] 12 90 4294967496 [ 2646.695560][ T969] 1b 90 4294967496 [ 2646.697547][ T969] ff 90 4294967496 [ 2646.699332][ T969] 12 80 4294967499 [ 2646.701115][ T969] 3 90 4294967499 [ 2646.702675][ T969] 3 80 4294967499 [ 2646.704462][ T969] a1 90 4294967499 [ 2646.706963][ T969] 1e 90 4294967499 [ 2646.708782][ T969] e6 80 4294967499 [ 2646.710549][ T969] 1 90 4294967499 [ 2646.711934][ T969] 0 90 4294967499 [ 2646.713336][ T969] 0 90 4294967499 [ 2646.714724][ T969] 1 90 4294967499 [ 2646.719611][ T969] 2 90 4294967499 [ 2646.721368][ T969] 24 90 4294967499 [ 2646.722901][ T969] 1b 90 4294967499 [ 2646.724289][ T969] ff 90 4294967499 [ 2646.725695][ T969] last result at 4295201781 [ 2646.727521][ T969] last redo_fd_request at 4295201807 [ 2646.730052][ T969] status=80 [ 2646.731600][ T969] fdc_busy=1 [ 2646.733160][ T969] floppy_work.func=floppy_work_workfn [ 2646.735679][ T969] cont=ffffffff8b1391e0 [ 2646.737808][ T969] current_req=0000000000000000 [ 2646.740056][ T969] command_status=-1 [ 2646.741627][ T969] 00:45:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xa}, 0x48) [ 2646.742596][ T969] floppy1: floppy timeout called [ 2646.745972][ T969] [ 2646.747132][ T969] floppy driver state [ 2646.749016][ T969] ------------------- [ 2646.750892][ T969] now=4295201815 last interrupt=4294967499 diff=234316 last called handler=main_command_interrupt [ 2646.761378][ T969] timeout_message=lock fdc [ 2646.763120][ T969] last output bytes: [ 2646.764958][ T969] 0 90 4294967496 [ 2646.766921][ T969] 1 90 4294967496 [ 2646.768696][ T969] 2 90 4294967496 [ 2646.770574][ T969] 12 90 4294967496 [ 2646.772943][ T969] 1b 90 4294967496 [ 2646.774758][ T969] ff 90 4294967496 [ 2646.776496][ T969] 12 80 4294967499 [ 2646.778119][ T969] 3 90 4294967499 00:45:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xb}, 0x48) [ 2646.779767][ T969] 3 80 4294967499 [ 2646.781712][ T969] a1 90 4294967499 [ 2646.783376][ T969] 1e 90 4294967499 [ 2646.784797][ T969] e6 80 4294967499 [ 2646.786414][ T969] 1 90 4294967499 [ 2646.788095][ T969] 0 90 4294967499 [ 2646.789537][ T969] 0 90 4294967499 [ 2646.791228][ T969] 1 90 4294967499 [ 2646.793047][ T969] 2 90 4294967499 [ 2646.794824][ T969] 24 90 4294967499 [ 2646.796796][ T969] 1b 90 4294967499 [ 2646.798574][ T969] ff 90 4294967499 [ 2646.800383][ T969] last result at 4295201781 [ 2646.802555][ T969] last redo_fd_request at 4295201814 [ 2646.805046][ T969] status=80 [ 2646.806338][ T969] fdc_busy=1 [ 2646.807689][ T969] floppy_work.func=floppy_work_workfn [ 2646.810271][ T969] cont=ffffffff8b1391e0 [ 2646.812116][ T969] current_req=0000000000000000 00:45:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xc}, 0x48) [ 2646.814006][ T969] command_status=-1 [ 2646.816103][ T969] [ 2646.817342][ T969] floppy1: floppy timeout called [ 2646.825113][ T969] [ 2646.826275][ T969] floppy driver state [ 2646.827957][ T969] ------------------- 00:45:33 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x80041284, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2646.829910][ T969] now=4295201823 last interrupt=4294967499 diff=234324 last called handler=main_command_interrupt [ 2646.834829][ T969] timeout_message=lock fdc [ 2646.837254][ T969] last output bytes: [ 2646.839134][ T969] 0 90 4294967496 [ 2646.840958][ T969] 1 90 4294967496 [ 2646.842743][ T969] 2 90 4294967496 [ 2646.844471][ T969] 12 90 4294967496 [ 2646.846029][ T969] 1b 90 4294967496 [ 2646.847608][ T969] ff 90 4294967496 [ 2646.849422][ T969] 12 80 4294967499 [ 2646.851207][ T969] 3 90 4294967499 [ 2646.853008][ T969] 3 80 4294967499 [ 2646.854766][ T969] a1 90 4294967499 [ 2646.856777][ T969] 1e 90 4294967499 [ 2646.858561][ T969] e6 80 4294967499 [ 2646.860340][ T969] 1 90 4294967499 [ 2646.862128][ T969] 0 90 4294967499 [ 2646.863908][ T969] 0 90 4294967499 [ 2646.865699][ T969] 1 90 4294967499 [ 2646.867752][ T969] 2 90 4294967499 [ 2646.869611][ T969] 24 90 4294967499 [ 2646.871427][ T969] 1b 90 4294967499 [ 2646.873208][ T969] ff 90 4294967499 [ 2646.874990][ T969] last result at 4295201781 [ 2646.877292][ T969] last redo_fd_request at 4295201822 00:45:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x48) [ 2646.879811][ T969] status=80 [ 2646.881491][ T969] fdc_busy=1 [ 2646.883042][ T969] floppy_work.func=floppy_work_workfn [ 2646.885552][ T969] cont=ffffffff8b1391e0 [ 2646.887595][ T969] current_req=0000000000000000 [ 2646.889859][ T969] command_status=-1 [ 2646.891325][ T969] [ 2646.892372][ T969] floppy1: floppy timeout called [ 2646.895714][ T969] [ 2646.896993][ T969] floppy driver state [ 2646.898860][ T969] ------------------- 00:45:33 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) ioctl$FLOPPY_FDFMTBEG(r0, 0x247) (async) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) [ 2646.905480][ T969] now=4295201830 last interrupt=4294967499 diff=234331 last called handler=main_command_interrupt 00:45:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xe}, 0x48) [ 2646.909999][ T969] timeout_message=lock fdc [ 2646.911937][ T969] last output bytes: [ 2646.913805][ T969] 0 90 4294967496 [ 2646.915587][ T969] 1 90 4294967496 [ 2646.917547][ T969] 2 90 4294967496 [ 2646.919340][ T969] 12 90 4294967496 [ 2646.921149][ T969] 1b 90 4294967496 [ 2646.922938][ T969] ff 90 4294967496 [ 2646.924697][ T969] 12 80 4294967499 [ 2646.926597][ T969] 3 90 4294967499 [ 2646.928342][ T969] 3 80 4294967499 [ 2646.930117][ T969] a1 90 4294967499 [ 2646.931895][ T969] 1e 90 4294967499 [ 2646.933618][ T969] e6 80 4294967499 [ 2646.935089][ T969] 1 90 4294967499 [ 2646.936450][ T969] 0 90 4294967499 [ 2646.938186][ T969] 0 90 4294967499 [ 2646.939955][ T969] 1 90 4294967499 [ 2646.941657][ T969] 2 90 4294967499 [ 2646.943055][ T969] 24 90 4294967499 [ 2646.944464][ T969] 1b 90 4294967499 [ 2646.946318][ T969] ff 90 4294967499 [ 2646.948063][ T969] last result at 4295201781 [ 2646.949751][ T969] last redo_fd_request at 4295201829 [ 2646.951739][ T969] status=80 [ 2646.952945][ T969] fdc_busy=1 [ 2646.954470][ T969] floppy_work.func=floppy_work_workfn [ 2646.957076][ T969] cont=ffffffff8b1391e0 [ 2646.959043][ T969] current_req=0000000000000000 [ 2646.961451][ T969] command_status=-1 [ 2646.963281][ T969] [ 2646.964476][ T969] floppy1: floppy timeout called [ 2646.969670][ T969] [ 2646.971338][ T969] floppy driver state [ 2646.973282][ T969] ------------------- [ 2646.975172][ T969] now=4295201837 last interrupt=4294967499 diff=234338 last called handler=main_command_interrupt [ 2646.982984][ T969] timeout_message=lock fdc [ 2646.984686][ T969] last output bytes: [ 2646.986245][ T969] 0 90 4294967496 [ 2646.987650][ T969] 1 90 4294967496 [ 2646.989050][ T969] 2 90 4294967496 [ 2646.990456][ T969] 12 90 4294967496 [ 2646.991881][ T969] 1b 90 4294967496 [ 2646.993295][ T969] ff 90 4294967496 [ 2646.994693][ T969] 12 80 4294967499 [ 2646.996218][ T969] 3 90 4294967499 [ 2646.997641][ T969] 3 80 4294967499 [ 2646.999051][ T969] a1 90 4294967499 00:45:33 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401870c8, 0x0) 00:45:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xf}, 0x48) 00:45:33 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x80041285, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:33 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0x5da8, 0x80000) [ 2647.000454][ T969] 1e 90 4294967499 [ 2647.002209][ T969] e6 80 4294967499 [ 2647.003930][ T969] 1 90 4294967499 [ 2647.005960][ T969] 0 90 4294967499 [ 2647.007594][ T969] 0 90 4294967499 [ 2647.009000][ T969] 1 90 4294967499 [ 2647.010647][ T969] 2 90 4294967499 [ 2647.012383][ T969] 24 90 4294967499 [ 2647.013962][ T969] 1b 90 4294967499 00:45:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10}, 0x48) [ 2647.026029][ T969] ff 90 4294967499 [ 2647.027616][ T969] last result at 4295201781 [ 2647.031080][ T969] last redo_fd_request at 4295201837 [ 2647.033324][ T969] status=80 [ 2647.034578][ T969] fdc_busy=1 [ 2647.035812][ T969] floppy_work.func=floppy_work_workfn [ 2647.038465][ T969] cont=ffffffff8b1391e0 [ 2647.040137][ T969] current_req=0000000000000000 [ 2647.042104][ T969] command_status=-1 [ 2647.043696][ T969] [ 2647.044870][ T969] floppy1: floppy timeout called [ 2647.047401][ T969] [ 2647.048445][ T969] floppy driver state [ 2647.050048][ T969] ------------------- 00:45:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x48) [ 2647.051662][ T969] now=4295201845 last interrupt=4294967499 diff=234346 last called handler=main_command_interrupt [ 2647.056788][ T969] timeout_message=lock fdc [ 2647.059100][ T969] last output bytes: [ 2647.061105][ T969] 0 90 4294967496 [ 2647.062988][ T969] 1 90 4294967496 [ 2647.064841][ T969] 2 90 4294967496 00:45:33 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0x5da8, 0x80000) [ 2647.066613][ T969] 12 90 4294967496 [ 2647.068236][ T969] 1b 90 4294967496 [ 2647.069808][ T969] ff 90 4294967496 [ 2647.071289][ T969] 12 80 4294967499 [ 2647.072947][ T969] 3 90 4294967499 [ 2647.074493][ T969] 3 80 4294967499 [ 2647.076128][ T969] a1 90 4294967499 [ 2647.077588][ T969] 1e 90 4294967499 [ 2647.080289][ T969] e6 80 4294967499 [ 2647.084353][ T969] 1 90 4294967499 [ 2647.086326][ T969] 0 90 4294967499 [ 2647.088214][ T969] 0 90 4294967499 [ 2647.090167][ T969] 1 90 4294967499 00:45:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x12}, 0x48) [ 2647.093270][ T969] 2 90 4294967499 [ 2647.095419][ T969] 24 90 4294967499 [ 2647.097963][ T969] 1b 90 4294967499 [ 2647.100120][ T969] ff 90 4294967499 [ 2647.102061][ T969] last result at 4295201781 [ 2647.104228][ T969] last redo_fd_request at 4295201845 [ 2647.106846][ T969] status=80 [ 2647.108157][ T969] fdc_busy=1 [ 2647.109510][ T969] floppy_work.func=floppy_work_workfn [ 2647.111615][ T969] cont=ffffffff8b1391e0 [ 2647.113299][ T969] current_req=0000000000000000 [ 2647.115160][ T969] command_status=-1 [ 2647.117247][ T969] [ 2647.120832][ T969] floppy1: floppy timeout called [ 2647.123174][ T969] [ 2647.124375][ T969] floppy driver state [ 2647.126032][ T969] ------------------- [ 2647.127665][ T969] now=4295201853 last interrupt=4294967499 diff=234354 last called handler=main_command_interrupt [ 2647.131870][ T969] timeout_message=lock fdc [ 2647.134722][ T969] last output bytes: [ 2647.136386][ T969] 0 90 4294967496 [ 2647.138569][ T969] 1 90 4294967496 [ 2647.140052][ T969] 2 90 4294967496 [ 2647.141493][ T969] 12 90 4294967496 [ 2647.143278][ T969] 1b 90 4294967496 [ 2647.145601][ T969] ff 90 4294967496 [ 2647.147444][ T969] 12 80 4294967499 [ 2647.148907][ T969] 3 90 4294967499 [ 2647.150327][ T969] 3 80 4294967499 [ 2647.151726][ T969] a1 90 4294967499 [ 2647.153134][ T969] 1e 90 4294967499 [ 2647.154516][ T969] e6 80 4294967499 [ 2647.155959][ T969] 1 90 4294967499 [ 2647.157552][ T969] 0 90 4294967499 [ 2647.158983][ T969] 0 90 4294967499 [ 2647.160454][ T969] 1 90 4294967499 [ 2647.161913][ T969] 2 90 4294967499 [ 2647.163423][ T969] 24 90 4294967499 [ 2647.164853][ T969] 1b 90 4294967499 [ 2647.166396][ T969] ff 90 4294967499 [ 2647.167791][ T969] last result at 4295201781 [ 2647.169511][ T969] last redo_fd_request at 4295201852 [ 2647.171523][ T969] status=80 [ 2647.172738][ T969] fdc_busy=1 [ 2647.173957][ T969] floppy_work.func=floppy_work_workfn [ 2647.176015][ T969] cont=ffffffff8b1391e0 [ 2647.177593][ T969] current_req=0000000000000000 [ 2647.179387][ T969] command_status=-1 [ 2647.181206][ T969] [ 2647.182153][ T969] floppy1: floppy timeout called [ 2647.188289][T19958] [ 2647.189589][T19958] floppy driver state [ 2647.191519][T19958] ------------------- 00:45:33 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401870c8, 0x0) 00:45:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x13}, 0x48) 00:45:33 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0x5da8, 0x80000) syz_open_dev$floppy(&(0x7f0000000000), 0x5da8, 0x80000) (async) 00:45:33 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x80046601, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2647.196066][T19958] now=4295201860 last interrupt=4294967499 diff=234361 last called handler=main_command_interrupt [ 2647.201217][T19958] timeout_message=lock fdc [ 2647.202939][T19958] last output bytes: [ 2647.204635][T19958] 0 90 4294967496 [ 2647.209963][T19958] 1 90 4294967496 [ 2647.211777][T19958] 2 90 4294967496 [ 2647.213530][T19958] 12 90 4294967496 [ 2647.215294][T19958] 1b 90 4294967496 [ 2647.217172][T19958] ff 90 4294967496 [ 2647.218544][T19958] 12 80 4294967499 [ 2647.219909][T19958] 3 90 4294967499 [ 2647.221282][T19958] 3 80 4294967499 [ 2647.222654][T19958] a1 90 4294967499 [ 2647.224005][T19958] 1e 90 4294967499 [ 2647.225407][T19958] e6 80 4294967499 [ 2647.228434][T19958] 1 90 4294967499 [ 2647.229846][T19958] 0 90 4294967499 [ 2647.231231][T19958] 0 90 4294967499 [ 2647.232594][T19958] 1 90 4294967499 [ 2647.233990][T19958] 2 90 4294967499 [ 2647.235358][T19958] 24 90 4294967499 [ 2647.236861][T19958] 1b 90 4294967499 [ 2647.238230][T19958] ff 90 4294967499 [ 2647.239597][T19958] last result at 4295201781 [ 2647.241259][T19958] last redo_fd_request at 4295201858 [ 2647.243196][T19958] status=80 [ 2647.244366][T19958] fdc_busy=1 [ 2647.245578][T19958] floppy_work.func=floppy_work_workfn [ 2647.248245][T19958] cont=ffffffff8b1391e0 [ 2647.249862][T19958] current_req=0000000000000000 [ 2647.251648][T19958] command_status=-1 [ 2647.253076][T19958] [ 2647.253993][T19958] floppy1: floppy timeout called 00:45:33 executing program 3: openat$pidfd(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) [ 2647.256799][T19958] [ 2647.257769][T19958] floppy driver state [ 2647.259221][T19958] ------------------- [ 2647.260692][T19958] now=4295201866 last interrupt=4294967499 diff=234367 last called handler=main_command_interrupt [ 2647.264564][T19958] timeout_message=lock fdc [ 2647.266627][T19958] last output bytes: [ 2647.268068][T19958] 0 90 4294967496 [ 2647.269448][T19958] 1 90 4294967496 [ 2647.270815][T19958] 2 90 4294967496 [ 2647.272285][T19958] 12 90 4294967496 [ 2647.273708][T19958] 1b 90 4294967496 [ 2647.275073][T19958] ff 90 4294967496 00:45:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x14}, 0x48) [ 2647.276973][T19958] 12 80 4294967499 [ 2647.278386][T19958] 3 90 4294967499 [ 2647.279754][T19958] 3 80 4294967499 [ 2647.281134][T19958] a1 90 4294967499 [ 2647.282512][T19958] 1e 90 4294967499 [ 2647.284210][T19958] e6 80 4294967499 [ 2647.285608][T19958] 1 90 4294967499 [ 2647.287676][T19958] 0 90 4294967499 [ 2647.289143][T19958] 0 90 4294967499 [ 2647.290542][T19958] 1 90 4294967499 [ 2647.291923][T19958] 2 90 4294967499 [ 2647.293315][T19958] 24 90 4294967499 [ 2647.294792][T19958] 1b 90 4294967499 [ 2647.296743][T19958] ff 90 4294967499 [ 2647.298151][T19958] last result at 4295201781 [ 2647.299801][T19958] last redo_fd_request at 4295201866 [ 2647.301760][T19958] status=80 [ 2647.302960][T19958] fdc_busy=1 [ 2647.304215][T19958] floppy_work.func=floppy_work_workfn [ 2647.306896][T19958] cont=ffffffff8b1391e0 [ 2647.308404][T19958] current_req=0000000000000000 [ 2647.310163][T19958] command_status=-1 [ 2647.311574][T19958] 00:45:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x15}, 0x48) [ 2647.312495][T19958] floppy1: floppy timeout called [ 2647.314968][T19958] [ 2647.316021][T19958] floppy driver state [ 2647.317898][T19958] ------------------- [ 2647.319806][T19958] now=4295201872 last interrupt=4294967499 diff=234373 last called handler=main_command_interrupt [ 2647.324863][T19958] timeout_message=lock fdc [ 2647.327349][T19958] last output bytes: [ 2647.329294][T19958] 0 90 4294967496 [ 2647.330921][T19958] 1 90 4294967496 [ 2647.332448][T19958] 2 90 4294967496 [ 2647.334253][T19958] 12 90 4294967496 [ 2647.336181][T19958] 1b 90 4294967496 [ 2647.337990][T19958] ff 90 4294967496 [ 2647.339768][T19958] 12 80 4294967499 [ 2647.341574][T19958] 3 90 4294967499 [ 2647.343240][T19958] 3 80 4294967499 [ 2647.344908][T19958] a1 90 4294967499 00:45:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x16}, 0x48) [ 2647.346717][T19958] 1e 90 4294967499 [ 2647.348555][T19958] e6 80 4294967499 [ 2647.350260][T19958] 1 90 4294967499 [ 2647.351772][T19958] 0 90 4294967499 [ 2647.353224][T19958] 0 90 4294967499 [ 2647.354826][T19958] 1 90 4294967499 [ 2647.356699][T19958] 2 90 4294967499 [ 2647.358554][T19958] 24 90 4294967499 [ 2647.360333][T19958] 1b 90 4294967499 [ 2647.362343][T19958] ff 90 4294967499 [ 2647.364136][T19958] last result at 4295201781 [ 2647.366568][T19958] last redo_fd_request at 4295201871 [ 2647.369372][T19958] status=80 [ 2647.371021][T19958] fdc_busy=1 [ 2647.372766][T19958] floppy_work.func=floppy_work_workfn [ 2647.375019][T19958] cont=ffffffff8b1391e0 [ 2647.376815][T19958] current_req=0000000000000000 [ 2647.379153][T19958] command_status=-1 [ 2647.381054][T19958] [ 2647.382304][T19958] floppy1: floppy timeout called [ 2647.387548][T19958] [ 2647.388748][T19958] floppy driver state [ 2647.395258][T19958] ------------------- [ 2647.396995][T19958] now=4295201880 last interrupt=4294967499 diff=234381 last called handler=main_command_interrupt 00:45:33 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401870c8, 0x0) 00:45:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x17}, 0x48) [ 2647.401770][T19958] timeout_message=lock fdc [ 2647.404039][T19958] last output bytes: [ 2647.406749][T19958] 0 90 4294967496 [ 2647.408520][T19958] 1 90 4294967496 [ 2647.410313][T19958] 2 90 4294967496 [ 2647.412092][T19958] 12 90 4294967496 [ 2647.414801][T19958] 1b 90 4294967496 00:45:34 executing program 3: openat$pidfd(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) [ 2647.417161][T19958] ff 90 4294967496 [ 2647.418770][T19958] 12 80 4294967499 [ 2647.420217][T19958] 3 90 4294967499 [ 2647.421662][T19958] 3 80 4294967499 [ 2647.423372][T19958] a1 90 4294967499 00:45:34 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x80081280, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2647.425151][T19958] 1e 90 4294967499 [ 2647.427598][T19958] e6 80 4294967499 [ 2647.429386][T19958] 1 90 4294967499 [ 2647.431162][T19958] 0 90 4294967499 [ 2647.432940][T19958] 0 90 4294967499 [ 2647.434698][T19958] 1 90 4294967499 [ 2647.436959][T19958] 2 90 4294967499 [ 2647.438751][T19958] 24 90 4294967499 [ 2647.440533][T19958] 1b 90 4294967499 [ 2647.442135][T19958] ff 90 4294967499 [ 2647.443593][T19958] last result at 4295201781 [ 2647.445465][T19958] last redo_fd_request at 4295201878 [ 2647.448208][T19958] status=80 [ 2647.449744][T19958] fdc_busy=1 [ 2647.451306][T19958] floppy_work.func=floppy_work_workfn [ 2647.453845][T19958] cont=ffffffff8b1391e0 [ 2647.456265][T19958] current_req=0000000000000000 [ 2647.458565][T19958] command_status=-1 [ 2647.460390][T19958] [ 2647.461585][T19958] floppy1: floppy timeout called [ 2647.464177][T19958] [ 2647.465279][T19958] floppy driver state [ 2647.468148][T19958] ------------------- [ 2647.470079][T19958] now=4295201887 last interrupt=4294967499 diff=234388 last called handler=main_command_interrupt [ 2647.475160][T19958] timeout_message=lock fdc [ 2647.477394][T19958] last output bytes: [ 2647.479281][T19958] 0 90 4294967496 [ 2647.481094][T19958] 1 90 4294967496 [ 2647.482868][T19958] 2 90 4294967496 00:45:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x48) [ 2647.484518][T19958] 12 90 4294967496 [ 2647.487400][T19958] 1b 90 4294967496 [ 2647.489212][T19958] ff 90 4294967496 [ 2647.490824][T19958] 12 80 4294967499 [ 2647.492590][T19958] 3 90 4294967499 [ 2647.494486][T19958] 3 80 4294967499 [ 2647.496665][T19958] a1 90 4294967499 [ 2647.498487][T19958] 1e 90 4294967499 [ 2647.500251][T19958] e6 80 4294967499 [ 2647.502044][T19958] 1 90 4294967499 [ 2647.503801][T19958] 0 90 4294967499 [ 2647.505318][T19958] 0 90 4294967499 [ 2647.507297][T19958] 1 90 4294967499 [ 2647.509172][T19958] 2 90 4294967499 [ 2647.510959][T19958] 24 90 4294967499 [ 2647.512678][T19958] 1b 90 4294967499 [ 2647.514474][T19958] ff 90 4294967499 [ 2647.516361][T19958] last result at 4295201781 [ 2647.518248][T19958] last redo_fd_request at 4295201886 00:45:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x19}, 0x48) [ 2647.520562][T19958] status=80 [ 2647.522309][T19958] fdc_busy=1 [ 2647.523874][T19958] floppy_work.func=floppy_work_workfn [ 2647.527060][T19958] cont=ffffffff8b1391e0 [ 2647.529063][T19958] current_req=0000000000000000 [ 2647.531374][T19958] command_status=-1 [ 2647.533548][T19958] [ 2647.534766][T19958] floppy1: floppy timeout called [ 2647.538446][T19958] [ 2647.539662][T19958] floppy driver state [ 2647.541457][T19958] ------------------- [ 2647.543290][T19958] now=4295201894 last interrupt=4294967499 diff=234395 last called handler=main_command_interrupt [ 2647.548934][T19958] timeout_message=lock fdc [ 2647.551065][T19958] last output bytes: [ 2647.553123][T19958] 0 90 4294967496 [ 2647.555042][T19958] 1 90 4294967496 [ 2647.557417][T19958] 2 90 4294967496 00:45:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a}, 0x48) [ 2647.559255][T19958] 12 90 4294967496 [ 2647.561257][T19958] 1b 90 4294967496 [ 2647.562846][T19958] ff 90 4294967496 [ 2647.564546][T19958] 12 80 4294967499 [ 2647.566896][T19958] 3 90 4294967499 [ 2647.568661][T19958] 3 80 4294967499 [ 2647.570086][T19958] a1 90 4294967499 [ 2647.571489][T19958] 1e 90 4294967499 [ 2647.572902][T19958] e6 80 4294967499 [ 2647.574850][T19958] 1 90 4294967499 [ 2647.577401][T19958] 0 90 4294967499 [ 2647.579233][T19958] 0 90 4294967499 [ 2647.581073][T19958] 1 90 4294967499 [ 2647.582954][T19958] 2 90 4294967499 [ 2647.584749][T19958] 24 90 4294967499 [ 2647.586994][T19958] 1b 90 4294967499 [ 2647.588826][T19958] ff 90 4294967499 [ 2647.590732][T19958] last result at 4295201781 [ 2647.592922][T19958] last redo_fd_request at 4295201894 [ 2647.595575][T19958] status=80 [ 2647.597854][T19958] fdc_busy=1 [ 2647.599507][T19958] floppy_work.func=floppy_work_workfn 00:45:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1b}, 0x48) [ 2647.602156][T19958] cont=ffffffff8b1391e0 [ 2647.604032][T19958] current_req=0000000000000000 [ 2647.606802][T19958] command_status=-1 [ 2647.608649][T19958] [ 2647.609877][T19958] floppy1: floppy timeout called [ 2647.612752][T19958] [ 2647.613923][T19958] floppy driver state [ 2647.616528][T19958] ------------------- [ 2647.618764][T19958] now=4295201902 last interrupt=4294967499 diff=234403 last called handler=main_command_interrupt 00:45:34 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x80046601, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2647.625154][T19958] timeout_message=lock fdc [ 2647.627680][T19958] last output bytes: [ 2647.629591][T19958] 0 90 4294967496 [ 2647.631372][T19958] 1 90 4294967496 [ 2647.633176][T19958] 2 90 4294967496 [ 2647.634944][T19958] 12 90 4294967496 [ 2647.637568][T19958] 1b 90 4294967496 [ 2647.639431][T19958] ff 90 4294967496 [ 2647.641265][T19958] 12 80 4294967499 [ 2647.643092][T19958] 3 90 4294967499 [ 2647.644922][T19958] 3 80 4294967499 [ 2647.647291][T19958] a1 90 4294967499 [ 2647.649132][T19958] 1e 90 4294967499 00:45:34 executing program 3: openat$pidfd(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) openat$pidfd(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) [ 2647.651071][T19958] e6 80 4294967499 [ 2647.652727][T19958] 1 90 4294967499 [ 2647.654186][T19958] 0 90 4294967499 [ 2647.655681][T19958] 0 90 4294967499 [ 2647.657390][T19958] 1 90 4294967499 [ 2647.658841][T19958] 2 90 4294967499 [ 2647.660630][T19958] 24 90 4294967499 [ 2647.662546][T19958] 1b 90 4294967499 00:45:34 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x80086301, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2647.664432][T19958] ff 90 4294967499 [ 2647.667169][T19958] last result at 4295201781 [ 2647.669492][T19958] last redo_fd_request at 4295201901 [ 2647.672170][T19958] status=80 [ 2647.673839][T19958] fdc_busy=1 [ 2647.675497][T19958] floppy_work.func=floppy_work_workfn [ 2647.678791][T19958] cont=ffffffff8b1391e0 [ 2647.680921][T19958] current_req=0000000000000000 [ 2647.683323][T19958] command_status=-1 [ 2647.685201][T19958] [ 2647.686710][T19958] floppy1: floppy timeout called [ 2647.689472][T19958] [ 2647.690742][T19958] floppy driver state [ 2647.692662][T19958] ------------------- [ 2647.694758][T19958] now=4295201909 last interrupt=4294967499 diff=234410 last called handler=main_command_interrupt [ 2647.699986][T19958] timeout_message=lock fdc [ 2647.702243][T19958] last output bytes: [ 2647.704196][T19958] 0 90 4294967496 [ 2647.706406][T19958] 1 90 4294967496 00:45:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1c}, 0x48) [ 2647.709139][T19958] 2 90 4294967496 [ 2647.711102][T19958] 12 90 4294967496 [ 2647.712621][T19958] 1b 90 4294967496 [ 2647.714347][T19958] ff 90 4294967496 [ 2647.716341][T19958] 12 80 4294967499 [ 2647.717870][T19958] 3 90 4294967499 [ 2647.719616][T19958] 3 80 4294967499 [ 2647.721545][T19958] a1 90 4294967499 [ 2647.723441][T19958] 1e 90 4294967499 [ 2647.725326][T19958] e6 80 4294967499 [ 2647.727654][T19958] 1 90 4294967499 00:45:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1d}, 0x48) [ 2647.730490][T19958] 0 90 4294967499 [ 2647.732500][T19958] 0 90 4294967499 [ 2647.734570][T19958] 1 90 4294967499 [ 2647.737459][T19958] 2 90 4294967499 [ 2647.739600][T19958] 24 90 4294967499 [ 2647.741666][T19958] 1b 90 4294967499 [ 2647.743661][T19958] ff 90 4294967499 [ 2647.745573][T19958] last result at 4295201781 [ 2647.747692][T19958] last redo_fd_request at 4295201909 [ 2647.749854][T19958] status=80 [ 2647.751446][T19958] fdc_busy=1 00:45:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1e}, 0x48) [ 2647.752787][T19958] floppy_work.func=floppy_work_workfn [ 2647.755559][T19958] cont=ffffffff8b1391e0 [ 2647.758109][T19958] current_req=0000000000000000 [ 2647.760449][T19958] command_status=-1 [ 2647.762270][T19958] [ 2647.763437][T19958] floppy1: floppy timeout called [ 2647.767113][T19958] [ 2647.768305][T19958] floppy driver state [ 2647.770054][T19958] ------------------- [ 2647.771583][T19958] now=4295201917 last interrupt=4294967499 diff=234418 last called handler=main_command_interrupt 00:45:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x21}, 0x48) [ 2647.776259][T19958] timeout_message=lock fdc [ 2647.778458][T19958] last output bytes: [ 2647.780311][T19958] 0 90 4294967496 [ 2647.782097][T19958] 1 90 4294967496 [ 2647.783842][T19958] 2 90 4294967496 [ 2647.785344][T19958] 12 90 4294967496 [ 2647.787216][T19958] 1b 90 4294967496 [ 2647.788649][T19958] ff 90 4294967496 [ 2647.790069][T19958] 12 80 4294967499 [ 2647.791472][T19958] 3 90 4294967499 [ 2647.792879][T19958] 3 80 4294967499 [ 2647.794495][T19958] a1 90 4294967499 [ 2647.797490][T19958] 1e 90 4294967499 [ 2647.799255][T19958] e6 80 4294967499 [ 2647.800653][T19958] 1 90 4294967499 [ 2647.802069][T19958] 0 90 4294967499 [ 2647.803452][T19958] 0 90 4294967499 [ 2647.805205][T19958] 1 90 4294967499 00:45:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x22}, 0x48) [ 2647.807469][T19958] 2 90 4294967499 [ 2647.809375][T19958] 24 90 4294967499 [ 2647.811197][T19958] 1b 90 4294967499 [ 2647.812997][T19958] ff 90 4294967499 [ 2647.814773][T19958] last result at 4295201781 [ 2647.816879][T19958] last redo_fd_request at 4295201917 [ 2647.818857][T19958] status=80 [ 2647.820029][T19958] fdc_busy=1 [ 2647.821236][T19958] floppy_work.func=floppy_work_workfn [ 2647.823604][T19958] cont=ffffffff8b1391e0 [ 2647.825581][T19958] current_req=0000000000000000 [ 2647.828282][T19958] command_status=-1 [ 2647.829851][T19958] [ 2647.830777][T19958] floppy1: floppy timeout called [ 2647.834216][T19958] [ 2647.835394][T19958] floppy driver state 00:45:34 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x80046601, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2647.837790][T19958] ------------------- [ 2647.839943][T19958] now=4295201924 last interrupt=4294967499 diff=234425 last called handler=main_command_interrupt [ 2647.844841][T19958] timeout_message=lock fdc [ 2647.847192][T19958] last output bytes: [ 2647.849122][T19958] 0 90 4294967496 [ 2647.850882][T19958] 1 90 4294967496 [ 2647.852590][T19958] 2 90 4294967496 [ 2647.854129][T19958] 12 90 4294967496 00:45:34 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xfffffffc, 0x101000) [ 2647.856652][T19958] 1b 90 4294967496 [ 2647.858426][T19958] ff 90 4294967496 [ 2647.860269][T19958] 12 80 4294967499 [ 2647.861928][T19958] 3 90 4294967499 [ 2647.863602][T19958] 3 80 4294967499 00:45:34 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x80086601, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2647.865394][T19958] a1 90 4294967499 [ 2647.868623][T19958] 1e 90 4294967499 [ 2647.870118][T19958] e6 80 4294967499 [ 2647.871691][T19958] 1 90 4294967499 [ 2647.873540][T19958] 0 90 4294967499 [ 2647.875281][T19958] 0 90 4294967499 [ 2647.878077][T19958] 1 90 4294967499 [ 2647.879959][T19958] 2 90 4294967499 [ 2647.881801][T19958] 24 90 4294967499 [ 2647.883444][T19958] 1b 90 4294967499 [ 2647.885074][T19958] ff 90 4294967499 00:45:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x23}, 0x48) [ 2647.887726][T19958] last result at 4295201781 [ 2647.889903][T19958] last redo_fd_request at 4295201923 [ 2647.892351][T19958] status=80 [ 2647.893859][T19958] fdc_busy=1 [ 2647.895116][T19958] floppy_work.func=floppy_work_workfn [ 2647.897434][T19958] cont=ffffffff8b1391e0 [ 2647.899361][T19958] current_req=0000000000000000 [ 2647.901682][T19958] command_status=-1 [ 2647.903533][T19958] [ 2647.904788][T19958] floppy1: floppy timeout called [ 2647.908809][T19958] [ 2647.909992][T19958] floppy driver state [ 2647.911885][T19958] ------------------- [ 2647.913866][T19958] now=4295201931 last interrupt=4294967499 diff=234432 last called handler=main_command_interrupt [ 2647.918734][T19958] timeout_message=lock fdc [ 2647.920468][T19958] last output bytes: [ 2647.922186][T19958] 0 90 4294967496 [ 2647.924095][T19958] 1 90 4294967496 [ 2647.926041][T19958] 2 90 4294967496 [ 2647.927832][T19958] 12 90 4294967496 [ 2647.929620][T19958] 1b 90 4294967496 [ 2647.931439][T19958] ff 90 4294967496 [ 2647.933269][T19958] 12 80 4294967499 [ 2647.935183][T19958] 3 90 4294967499 [ 2647.937122][T19958] 3 80 4294967499 [ 2647.938922][T19958] a1 90 4294967499 [ 2647.940786][T19958] 1e 90 4294967499 [ 2647.942595][T19958] e6 80 4294967499 [ 2647.944392][T19958] 1 90 4294967499 [ 2647.946142][T19958] 0 90 4294967499 [ 2647.947937][T19958] 0 90 4294967499 [ 2647.949759][T19958] 1 90 4294967499 [ 2647.951568][T19958] 2 90 4294967499 [ 2647.953314][T19958] 24 90 4294967499 [ 2647.954900][T19958] 1b 90 4294967499 [ 2647.956667][T19958] ff 90 4294967499 [ 2647.958283][T19958] last result at 4295201781 [ 2647.960015][T19958] last redo_fd_request at 4295201931 [ 2647.962162][T19958] status=80 [ 2647.963627][T19958] fdc_busy=1 [ 2647.965210][T19958] floppy_work.func=floppy_work_workfn [ 2647.968045][T19958] cont=ffffffff8b1391e0 [ 2647.970066][T19958] current_req=0000000000000000 [ 2647.972390][T19958] command_status=-1 [ 2647.974244][T19958] [ 2647.975477][T19958] floppy1: floppy timeout called [ 2647.980476][ T969] [ 2647.981479][ T969] floppy driver state [ 2647.983119][ T969] ------------------- [ 2647.984805][ T969] now=4295201938 last interrupt=4294967499 diff=234439 last called handler=main_command_interrupt 00:45:34 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x80046601, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2647.996292][ T969] timeout_message=lock fdc [ 2647.998710][ T969] last output bytes: [ 2648.000454][ T969] 0 90 4294967496 [ 2648.002288][ T969] 1 90 4294967496 [ 2648.004081][ T969] 2 90 4294967496 [ 2648.006210][ T969] 12 90 4294967496 [ 2648.008028][ T969] 1b 90 4294967496 [ 2648.009864][ T969] ff 90 4294967496 [ 2648.011688][ T969] 12 80 4294967499 [ 2648.013266][ T969] 3 90 4294967499 [ 2648.014831][ T969] 3 80 4294967499 [ 2648.018523][ T969] a1 90 4294967499 [ 2648.020092][ T969] 1e 90 4294967499 [ 2648.021712][ T969] e6 80 4294967499 [ 2648.023294][ T969] 1 90 4294967499 [ 2648.025093][ T969] 0 90 4294967499 [ 2648.027049][ T969] 0 90 4294967499 [ 2648.028858][ T969] 1 90 4294967499 [ 2648.030626][ T969] 2 90 4294967499 [ 2648.032395][ T969] 24 90 4294967499 [ 2648.034189][ T969] 1b 90 4294967499 [ 2648.038490][ T969] ff 90 4294967499 [ 2648.039980][ T969] last result at 4295201781 [ 2648.041812][ T969] last redo_fd_request at 4295201938 [ 2648.044345][ T969] status=80 [ 2648.046045][ T969] fdc_busy=1 [ 2648.047629][ T969] floppy_work.func=floppy_work_workfn [ 2648.050198][ T969] cont=ffffffff8b1391e0 [ 2648.052279][ T969] current_req=0000000000000000 [ 2648.054566][ T969] command_status=-1 00:45:34 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xfffffffc, 0x101000) syz_open_dev$floppy(&(0x7f0000000000), 0xfffffffc, 0x101000) (async) [ 2648.058124][ T969] [ 2648.059215][ T969] floppy1: floppy timeout called [ 2648.062009][ T969] [ 2648.063099][ T969] floppy driver state 00:45:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x300}, 0x48) [ 2648.064902][ T969] ------------------- [ 2648.067064][ T969] now=4295201947 last interrupt=4294967499 diff=234448 last called handler=main_command_interrupt [ 2648.071963][ T969] timeout_message=lock fdc [ 2648.074122][ T969] last output bytes: [ 2648.079940][ T969] 0 90 4294967496 [ 2648.081818][ T969] 1 90 4294967496 [ 2648.083592][ T969] 2 90 4294967496 [ 2648.085391][ T969] 12 90 4294967496 [ 2648.087881][ T969] 1b 90 4294967496 [ 2648.089608][ T969] ff 90 4294967496 [ 2648.091304][ T969] 12 80 4294967499 [ 2648.092751][ T969] 3 90 4294967499 [ 2648.094351][ T969] 3 80 4294967499 [ 2648.100006][ T969] a1 90 4294967499 [ 2648.102065][ T969] 1e 90 4294967499 [ 2648.103882][ T969] e6 80 4294967499 [ 2648.105736][ T969] 1 90 4294967499 [ 2648.107738][ T969] 0 90 4294967499 [ 2648.109552][ T969] 0 90 4294967499 [ 2648.111359][ T969] 1 90 4294967499 [ 2648.113187][ T969] 2 90 4294967499 [ 2648.114993][ T969] 24 90 4294967499 [ 2648.117088][ T969] 1b 90 4294967499 [ 2648.118915][ T969] ff 90 4294967499 [ 2648.120635][ T969] last result at 4295201781 [ 2648.122852][ T969] last redo_fd_request at 4295201946 [ 2648.125391][ T969] status=80 [ 2648.129728][ T969] fdc_busy=1 [ 2648.131053][ T969] floppy_work.func=floppy_work_workfn [ 2648.133134][ T969] cont=ffffffff8b1391e0 [ 2648.135118][ T969] current_req=0000000000000000 [ 2648.137520][ T969] command_status=-1 [ 2648.139373][ T969] [ 2648.140612][ T969] floppy1: floppy timeout called [ 2648.143209][ T969] [ 2648.144414][ T969] floppy driver state [ 2648.149852][ T969] ------------------- [ 2648.151819][ T969] now=4295201955 last interrupt=4294967499 diff=234456 last called handler=main_command_interrupt 00:45:34 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xfffffffc, 0x101000) syz_open_dev$floppy(&(0x7f0000000000), 0xfffffffc, 0x101000) (async) [ 2648.156784][ T969] timeout_message=lock fdc [ 2648.159032][ T969] last output bytes: [ 2648.160925][ T969] 0 90 4294967496 [ 2648.162719][ T969] 1 90 4294967496 [ 2648.164495][ T969] 2 90 4294967496 [ 2648.168973][ T969] 12 90 4294967496 [ 2648.170844][ T969] 1b 90 4294967496 [ 2648.172612][ T969] ff 90 4294967496 [ 2648.174263][ T969] 12 80 4294967499 [ 2648.175697][ T969] 3 90 4294967499 [ 2648.177236][ T969] 3 80 4294967499 [ 2648.178670][ T969] a1 90 4294967499 [ 2648.180069][ T969] 1e 90 4294967499 [ 2648.181510][ T969] e6 80 4294967499 [ 2648.182957][ T969] 1 90 4294967499 [ 2648.184350][ T969] 0 90 4294967499 [ 2648.185769][ T969] 0 90 4294967499 00:45:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x500}, 0x48) [ 2648.187317][ T969] 1 90 4294967499 [ 2648.188920][ T969] 2 90 4294967499 [ 2648.190354][ T969] 24 90 4294967499 [ 2648.191774][ T969] 1b 90 4294967499 [ 2648.193194][ T969] ff 90 4294967499 [ 2648.194600][ T969] last result at 4295201781 [ 2648.199235][ T969] last redo_fd_request at 4295201954 [ 2648.201304][ T969] status=80 [ 2648.202537][ T969] fdc_busy=1 [ 2648.203732][ T969] floppy_work.func=floppy_work_workfn [ 2648.205724][ T969] cont=ffffffff8b1391e0 [ 2648.207422][ T969] current_req=0000000000000000 [ 2648.209245][ T969] command_status=-1 [ 2648.210673][ T969] [ 2648.211620][ T969] floppy1: floppy timeout called [ 2648.213896][ T969] [ 2648.214901][ T969] floppy driver state [ 2648.219126][ T969] ------------------- [ 2648.220659][ T969] now=4295201962 last interrupt=4294967499 diff=234463 last called handler=main_command_interrupt [ 2648.224575][ T969] timeout_message=lock fdc [ 2648.228935][ T969] last output bytes: [ 2648.230479][ T969] 0 90 4294967496 [ 2648.231967][ T969] 1 90 4294967496 00:45:34 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x8010020f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2648.233410][ T969] 2 90 4294967496 [ 2648.235093][ T969] 12 90 4294967496 [ 2648.238418][ T969] 1b 90 4294967496 [ 2648.240048][ T969] ff 90 4294967496 [ 2648.241847][ T969] 12 80 4294967499 [ 2648.243474][ T969] 3 90 4294967499 [ 2648.244912][ T969] 3 80 4294967499 00:45:34 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) [ 2648.246407][ T969] a1 90 4294967499 [ 2648.248075][ T969] 1e 90 4294967499 [ 2648.249570][ T969] e6 80 4294967499 [ 2648.250992][ T969] 1 90 4294967499 [ 2648.254890][ T969] 0 90 4294967499 [ 2648.258336][ T969] 0 90 4294967499 [ 2648.259790][ T969] 1 90 4294967499 [ 2648.261201][ T969] 2 90 4294967499 [ 2648.262666][ T969] 24 90 4294967499 [ 2648.264087][ T969] 1b 90 4294967499 [ 2648.265515][ T969] ff 90 4294967499 [ 2648.267090][ T969] last result at 4295201781 00:45:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x600}, 0x48) [ 2648.268775][ T969] last redo_fd_request at 4295201961 [ 2648.271065][ T969] status=80 [ 2648.272258][ T969] fdc_busy=1 [ 2648.273500][ T969] floppy_work.func=floppy_work_workfn [ 2648.275487][ T969] cont=ffffffff8b1391e0 [ 2648.277207][ T969] current_req=0000000000000000 [ 2648.278990][ T969] command_status=-1 [ 2648.280421][ T969] [ 2648.281365][ T969] floppy1: floppy timeout called [ 2648.284088][ T969] [ 2648.285033][ T969] floppy driver state [ 2648.287541][ T969] ------------------- 00:45:34 executing program 3: ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) [ 2648.289077][ T969] now=4295201969 last interrupt=4294967499 diff=234470 last called handler=main_command_interrupt [ 2648.293258][ T969] timeout_message=lock fdc [ 2648.294925][ T969] last output bytes: [ 2648.297307][ T969] 0 90 4294967496 [ 2648.298715][ T969] 1 90 4294967496 [ 2648.300130][ T969] 2 90 4294967496 [ 2648.301555][ T969] 12 90 4294967496 [ 2648.302988][ T969] 1b 90 4294967496 [ 2648.304382][ T969] ff 90 4294967496 [ 2648.307053][ T969] 12 80 4294967499 [ 2648.308503][ T969] 3 90 4294967499 [ 2648.309948][ T969] 3 80 4294967499 [ 2648.311388][ T969] a1 90 4294967499 [ 2648.312815][ T969] 1e 90 4294967499 [ 2648.314231][ T969] e6 80 4294967499 00:45:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x700}, 0x48) [ 2648.315627][ T969] 1 90 4294967499 [ 2648.318229][ T969] 0 90 4294967499 [ 2648.319667][ T969] 0 90 4294967499 [ 2648.321103][ T969] 1 90 4294967499 [ 2648.322548][ T969] 2 90 4294967499 [ 2648.323996][ T969] 24 90 4294967499 [ 2648.325408][ T969] 1b 90 4294967499 [ 2648.327750][ T969] ff 90 4294967499 [ 2648.329186][ T969] last result at 4295201781 [ 2648.330879][ T969] last redo_fd_request at 4295201968 [ 2648.332934][ T969] status=80 [ 2648.334148][ T969] fdc_busy=1 [ 2648.335381][ T969] floppy_work.func=floppy_work_workfn [ 2648.338369][ T969] cont=ffffffff8b1391e0 00:45:34 executing program 3: ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) [ 2648.339937][ T969] current_req=0000000000000000 [ 2648.342168][ T969] command_status=-1 [ 2648.343676][ T969] [ 2648.344612][ T969] floppy1: floppy timeout called [ 2648.347670][ T969] [ 2648.348600][ T969] floppy driver state [ 2648.350124][ T969] ------------------- [ 2648.351633][ T969] now=4295201975 last interrupt=4294967499 diff=234476 last called handler=main_command_interrupt [ 2648.355484][ T969] timeout_message=lock fdc [ 2648.358029][ T969] last output bytes: [ 2648.359498][ T969] 0 90 4294967496 [ 2648.360898][ T969] 1 90 4294967496 [ 2648.362430][ T969] 2 90 4294967496 [ 2648.363849][ T969] 12 90 4294967496 [ 2648.365280][ T969] 1b 90 4294967496 [ 2648.367624][ T969] ff 90 4294967496 [ 2648.369164][ T969] 12 80 4294967499 00:45:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x900}, 0x48) [ 2648.370648][ T969] 3 90 4294967499 [ 2648.372274][ T969] 3 80 4294967499 [ 2648.373742][ T969] a1 90 4294967499 [ 2648.375114][ T969] 1e 90 4294967499 [ 2648.377429][ T969] e6 80 4294967499 [ 2648.378827][ T969] 1 90 4294967499 [ 2648.380215][ T969] 0 90 4294967499 [ 2648.381606][ T969] 0 90 4294967499 [ 2648.383032][ T969] 1 90 4294967499 [ 2648.384420][ T969] 2 90 4294967499 [ 2648.385818][ T969] 24 90 4294967499 [ 2648.388222][ T969] 1b 90 4294967499 [ 2648.389662][ T969] ff 90 4294967499 [ 2648.391054][ T969] last result at 4295201781 [ 2648.392764][ T969] last redo_fd_request at 4295201975 [ 2648.394732][ T969] status=80 [ 2648.396032][ T969] fdc_busy=1 [ 2648.397280][ T969] floppy_work.func=floppy_work_workfn [ 2648.399277][ T969] cont=ffffffff8b1391e0 [ 2648.400858][ T969] current_req=0000000000000000 00:45:34 executing program 3: ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) [ 2648.402793][ T969] command_status=-1 [ 2648.404404][ T969] [ 2648.405464][ T969] floppy1: floppy timeout called [ 2648.409655][ T969] [ 2648.410603][ T969] floppy driver state [ 2648.412092][ T969] ------------------- [ 2648.413649][ T969] now=4295201981 last interrupt=4294967499 diff=234482 last called handler=main_command_interrupt [ 2648.417637][ T969] timeout_message=lock fdc [ 2648.419339][ T969] last output bytes: [ 2648.420825][ T969] 0 90 4294967496 [ 2648.422226][ T969] 1 90 4294967496 00:45:35 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x8014020e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:35 executing program 2: syz_open_dev$floppy(0x0, 0xff1, 0x0) [ 2648.423778][ T969] 2 90 4294967496 [ 2648.425317][ T969] 12 90 4294967496 [ 2648.427188][ T969] 1b 90 4294967496 [ 2648.428602][ T969] ff 90 4294967496 [ 2648.429992][ T969] 12 80 4294967499 [ 2648.431394][ T969] 3 90 4294967499 [ 2648.432796][ T969] 3 80 4294967499 [ 2648.434177][ T969] a1 90 4294967499 00:45:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xa00}, 0x48) [ 2648.435559][ T969] 1e 90 4294967499 [ 2648.437296][ T969] e6 80 4294967499 [ 2648.438842][ T969] 1 90 4294967499 [ 2648.440247][ T969] 0 90 4294967499 [ 2648.441660][ T969] 0 90 4294967499 [ 2648.443088][ T969] 1 90 4294967499 [ 2648.444469][ T969] 2 90 4294967499 [ 2648.448436][ T969] 24 90 4294967499 [ 2648.450354][ T969] 1b 90 4294967499 [ 2648.451783][ T969] ff 90 4294967499 00:45:35 executing program 2: syz_open_dev$floppy(0x0, 0xff1, 0x0) [ 2648.453182][ T969] last result at 4295201781 [ 2648.455048][ T969] last redo_fd_request at 4295201981 [ 2648.457175][ T969] status=80 [ 2648.458388][ T969] fdc_busy=1 [ 2648.459595][ T969] floppy_work.func=floppy_work_workfn [ 2648.461588][ T969] cont=ffffffff8b1391e0 [ 2648.463154][ T969] current_req=0000000000000000 [ 2648.465004][ T969] command_status=-1 [ 2648.466625][ T969] [ 2648.467571][ T969] floppy1: floppy timeout called [ 2648.469634][ T969] [ 2648.470535][ T969] floppy driver state [ 2648.472030][ T969] ------------------- [ 2648.473511][ T969] now=4295201987 last interrupt=4294967499 diff=234488 last called handler=main_command_interrupt [ 2648.477499][ T969] timeout_message=lock fdc 00:45:35 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = getgid() write$P9_RGETATTR(r0, &(0x7f0000000040)={0xa0, 0x19, 0x2, {0x20, {0x20, 0x4, 0x5}, 0x8, 0xee00, r1, 0x3, 0xd2, 0x100000000, 0xfffffffffffff001, 0xdee, 0x10001, 0xfffffffffffffff7, 0xffffffffffffffff, 0xfffffffffffffff7, 0x3, 0x3, 0x4, 0x2, 0xc8, 0x61}}, 0xa0) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDFMTEND(0xffffffffffffffff, 0x249) [ 2648.479157][ T969] last output bytes: [ 2648.480884][ T969] 0 90 4294967496 00:45:35 executing program 2: syz_open_dev$floppy(0x0, 0xff1, 0x0) [ 2648.482327][ T969] 1 90 4294967496 [ 2648.483989][ T969] 2 90 4294967496 [ 2648.485425][ T969] 12 90 4294967496 [ 2648.487737][ T969] 1b 90 4294967496 [ 2648.489185][ T969] ff 90 4294967496 [ 2648.490584][ T969] 12 80 4294967499 [ 2648.491996][ T969] 3 90 4294967499 [ 2648.493411][ T969] 3 80 4294967499 [ 2648.494814][ T969] a1 90 4294967499 [ 2648.499120][ T969] 1e 90 4294967499 [ 2648.500555][ T969] e6 80 4294967499 [ 2648.502001][ T969] 1 90 4294967499 [ 2648.503485][ T969] 0 90 4294967499 [ 2648.504892][ T969] 0 90 4294967499 [ 2648.507290][ T969] 1 90 4294967499 [ 2648.508742][ T969] 2 90 4294967499 [ 2648.510169][ T969] 24 90 4294967499 00:45:35 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x0) 00:45:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xb00}, 0x48) [ 2648.511572][ T969] 1b 90 4294967499 [ 2648.513152][ T969] ff 90 4294967499 [ 2648.514533][ T969] last result at 4295201781 [ 2648.516880][ T969] last redo_fd_request at 4295201987 [ 2648.518857][ T969] status=80 [ 2648.520043][ T969] fdc_busy=1 [ 2648.521261][ T969] floppy_work.func=floppy_work_workfn [ 2648.523319][ T969] cont=ffffffff8b1391e0 [ 2648.524867][ T969] current_req=0000000000000000 [ 2648.527356][ T969] command_status=-1 [ 2648.528845][ T969] [ 2648.529969][ T969] floppy1: floppy timeout called [ 2648.534324][ T969] [ 2648.535445][ T969] floppy driver state [ 2648.537594][ T969] ------------------- [ 2648.539406][ T969] now=4295201994 last interrupt=4294967499 diff=234495 last called handler=main_command_interrupt [ 2648.544239][ T969] timeout_message=lock fdc [ 2648.546873][ T969] last output bytes: [ 2648.548675][ T969] 0 90 4294967496 [ 2648.550166][ T969] 1 90 4294967496 [ 2648.551584][ T969] 2 90 4294967496 [ 2648.553288][ T969] 12 90 4294967496 [ 2648.554974][ T969] 1b 90 4294967496 00:45:35 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x80180217, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:35 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x0) 00:45:35 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) getgid() (async) r1 = getgid() write$P9_RGETATTR(r0, &(0x7f0000000040)={0xa0, 0x19, 0x2, {0x20, {0x20, 0x4, 0x5}, 0x8, 0xee00, r1, 0x3, 0xd2, 0x100000000, 0xfffffffffffff001, 0xdee, 0x10001, 0xfffffffffffffff7, 0xffffffffffffffff, 0xfffffffffffffff7, 0x3, 0x3, 0x4, 0x2, 0xc8, 0x61}}, 0xa0) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDFMTEND(0xffffffffffffffff, 0x249) [ 2648.557370][ T969] ff 90 4294967496 [ 2648.559159][ T969] 12 80 4294967499 [ 2648.560886][ T969] 3 90 4294967499 [ 2648.562721][ T969] 3 80 4294967499 [ 2648.564559][ T969] a1 90 4294967499 [ 2648.566659][ T969] 1e 90 4294967499 [ 2648.568094][ T969] e6 80 4294967499 [ 2648.569506][ T969] 1 90 4294967499 [ 2648.570955][ T969] 0 90 4294967499 [ 2648.572371][ T969] 0 90 4294967499 [ 2648.573810][ T969] 1 90 4294967499 00:45:35 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x0) [ 2648.575205][ T969] 2 90 4294967499 [ 2648.577440][ T969] 24 90 4294967499 [ 2648.578899][ T969] 1b 90 4294967499 [ 2648.580291][ T969] ff 90 4294967499 [ 2648.581708][ T969] last result at 4295201781 [ 2648.583435][ T969] last redo_fd_request at 4295201993 [ 2648.585421][ T969] status=80 00:45:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xc00}, 0x48) [ 2648.587220][ T969] fdc_busy=1 [ 2648.588732][ T969] floppy_work.func=floppy_work_workfn [ 2648.590842][ T969] cont=ffffffff8b1391e0 [ 2648.592409][ T969] current_req=0000000000000000 [ 2648.594187][ T969] command_status=-1 [ 2648.595617][ T969] [ 2648.597446][ T969] floppy1: floppy timeout called [ 2648.599568][ T969] [ 2648.600478][ T969] floppy driver state [ 2648.601973][ T969] ------------------- [ 2648.603527][ T969] now=4295202000 last interrupt=4294967499 diff=234501 last called handler=main_command_interrupt [ 2648.608846][ T969] timeout_message=lock fdc [ 2648.610824][ T969] last output bytes: [ 2648.612441][ T969] 0 90 4294967496 [ 2648.613940][ T969] 1 90 4294967496 [ 2648.615364][ T969] 2 90 4294967496 [ 2648.617439][ T969] 12 90 4294967496 [ 2648.619102][ T969] 1b 90 4294967496 [ 2648.620646][ T969] ff 90 4294967496 [ 2648.622070][ T969] 12 80 4294967499 [ 2648.623521][ T969] 3 90 4294967499 [ 2648.624941][ T969] 3 80 4294967499 [ 2648.626899][ T969] a1 90 4294967499 [ 2648.628330][ T969] 1e 90 4294967499 [ 2648.629737][ T969] e6 80 4294967499 [ 2648.631143][ T969] 1 90 4294967499 [ 2648.632542][ T969] 0 90 4294967499 [ 2648.633950][ T969] 0 90 4294967499 [ 2648.635343][ T969] 1 90 4294967499 00:45:35 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x8014020e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2648.638269][ T969] 2 90 4294967499 [ 2648.639974][ T969] 24 90 4294967499 [ 2648.641553][ T969] 1b 90 4294967499 [ 2648.643115][ T969] ff 90 4294967499 [ 2648.644619][ T969] last result at 4295201781 00:45:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xd00}, 0x48) [ 2648.649787][ T969] last redo_fd_request at 4295202000 [ 2648.652240][ T969] status=80 [ 2648.653688][ T969] fdc_busy=1 [ 2648.655153][ T969] floppy_work.func=floppy_work_workfn [ 2648.657634][ T969] cont=ffffffff8b1391e0 [ 2648.659202][ T969] current_req=0000000000000000 [ 2648.661124][ T969] command_status=-1 [ 2648.662720][ T969] [ 2648.663670][ T969] floppy1: floppy timeout called [ 2648.665827][ T969] [ 2648.667362][ T969] floppy driver state [ 2648.669035][ T969] ------------------- [ 2648.670546][ T969] now=4295202007 last interrupt=4294967499 diff=234508 last called handler=main_command_interrupt [ 2648.674430][ T969] timeout_message=lock fdc [ 2648.677217][ T969] last output bytes: [ 2648.679015][ T969] 0 90 4294967496 [ 2648.680737][ T969] 1 90 4294967496 [ 2648.682354][ T969] 2 90 4294967496 00:45:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xe00}, 0x48) [ 2648.684075][ T969] 12 90 4294967496 [ 2648.686295][ T969] 1b 90 4294967496 [ 2648.687961][ T969] ff 90 4294967496 [ 2648.689677][ T969] 12 80 4294967499 [ 2648.691389][ T969] 3 90 4294967499 [ 2648.693175][ T969] 3 80 4294967499 [ 2648.695264][ T969] a1 90 4294967499 [ 2648.697273][ T969] 1e 90 4294967499 [ 2648.698979][ T969] e6 80 4294967499 [ 2648.700779][ T969] 1 90 4294967499 [ 2648.702474][ T969] 0 90 4294967499 [ 2648.704151][ T969] 0 90 4294967499 [ 2648.706567][ T969] 1 90 4294967499 [ 2648.708484][ T969] 2 90 4294967499 [ 2648.710312][ T969] 24 90 4294967499 [ 2648.712069][ T969] 1b 90 4294967499 [ 2648.713802][ T969] ff 90 4294967499 [ 2648.715588][ T969] last result at 4295201781 [ 2648.717802][ T969] last redo_fd_request at 4295202006 [ 2648.720296][ T969] status=80 [ 2648.721863][ T969] fdc_busy=1 [ 2648.723363][ T969] floppy_work.func=floppy_work_workfn [ 2648.725617][ T969] cont=ffffffff8b1391e0 [ 2648.727468][ T969] current_req=0000000000000000 [ 2648.729378][ T969] command_status=-1 [ 2648.730878][ T969] [ 2648.731844][ T969] floppy1: floppy timeout called [ 2648.734427][ T969] [ 2648.735466][ T969] floppy driver state [ 2648.737225][ T969] ------------------- [ 2648.738805][ T969] now=4295202014 last interrupt=4294967499 diff=234515 last called handler=main_command_interrupt [ 2648.742779][ T969] timeout_message=lock fdc [ 2648.744522][ T969] last output bytes: [ 2648.746120][ T969] 0 90 4294967496 [ 2648.747633][ T969] 1 90 4294967496 [ 2648.749119][ T969] 2 90 4294967496 [ 2648.750581][ T969] 12 90 4294967496 [ 2648.752061][ T969] 1b 90 4294967496 [ 2648.753532][ T969] ff 90 4294967496 [ 2648.755023][ T969] 12 80 4294967499 [ 2648.757215][ T969] 3 90 4294967499 [ 2648.758814][ T969] 3 80 4294967499 [ 2648.760316][ T969] a1 90 4294967499 [ 2648.761842][ T969] 1e 90 4294967499 [ 2648.763355][ T969] e6 80 4294967499 [ 2648.764819][ T969] 1 90 4294967499 [ 2648.766398][ T969] 0 90 4294967499 [ 2648.767972][ T969] 0 90 4294967499 [ 2648.769464][ T969] 1 90 4294967499 [ 2648.771018][ T969] 2 90 4294967499 [ 2648.772555][ T969] 24 90 4294967499 [ 2648.774060][ T969] 1b 90 4294967499 [ 2648.775532][ T969] ff 90 4294967499 [ 2648.777113][ T969] last result at 4295201781 [ 2648.778876][ T969] last redo_fd_request at 4295202013 [ 2648.780933][ T969] status=80 [ 2648.782199][ T969] fdc_busy=1 [ 2648.783530][ T969] floppy_work.func=floppy_work_workfn [ 2648.785619][ T969] cont=ffffffff8b1391e0 [ 2648.787446][ T969] current_req=0000000000000000 [ 2648.789331][ T969] command_status=-1 [ 2648.790865][ T969] [ 2648.791834][ T969] floppy1: floppy timeout called [ 2648.794466][ T969] [ 2648.796565][ T969] floppy driver state [ 2648.798116][ T969] ------------------- [ 2648.799622][ T969] now=4295202020 last interrupt=4294967499 diff=234521 last called handler=main_command_interrupt [ 2648.803530][ T969] timeout_message=lock fdc [ 2648.805275][ T969] last output bytes: [ 2648.806903][ T969] 0 90 4294967496 00:45:35 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) 00:45:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xf00}, 0x48) [ 2648.808317][ T969] 1 90 4294967496 [ 2648.810058][ T969] 2 90 4294967496 [ 2648.811523][ T969] 12 90 4294967496 [ 2648.812981][ T969] 1b 90 4294967496 [ 2648.814370][ T969] ff 90 4294967496 [ 2648.815755][ T969] 12 80 4294967499 [ 2648.817215][ T969] 3 90 4294967499 [ 2648.818602][ T969] 3 80 4294967499 [ 2648.819989][ T969] a1 90 4294967499 [ 2648.821406][ T969] 1e 90 4294967499 [ 2648.822834][ T969] e6 80 4294967499 [ 2648.824219][ T969] 1 90 4294967499 [ 2648.825633][ T969] 0 90 4294967499 00:45:35 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) r1 = getgid() write$P9_RGETATTR(r0, &(0x7f0000000040)={0xa0, 0x19, 0x2, {0x20, {0x20, 0x4, 0x5}, 0x8, 0xee00, r1, 0x3, 0xd2, 0x100000000, 0xfffffffffffff001, 0xdee, 0x10001, 0xfffffffffffffff7, 0xffffffffffffffff, 0xfffffffffffffff7, 0x3, 0x3, 0x4, 0x2, 0xc8, 0x61}}, 0xa0) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDFMTEND(0xffffffffffffffff, 0x249) 00:45:35 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0202, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2648.827253][ T969] 0 90 4294967499 [ 2648.828817][ T969] 1 90 4294967499 [ 2648.830252][ T969] 2 90 4294967499 [ 2648.831684][ T969] 24 90 4294967499 [ 2648.833088][ T969] 1b 90 4294967499 [ 2648.834481][ T969] ff 90 4294967499 [ 2648.835949][ T969] last result at 4295201781 [ 2648.837715][ T969] last redo_fd_request at 4295202019 [ 2648.839677][ T969] status=80 [ 2648.840883][ T969] fdc_busy=1 [ 2648.842090][ T969] floppy_work.func=floppy_work_workfn [ 2648.844092][ T969] cont=ffffffff8b1391e0 [ 2648.845645][ T969] current_req=0000000000000000 [ 2648.847784][ T969] command_status=-1 [ 2648.849263][ T969] [ 2648.850197][ T969] floppy1: floppy timeout called [ 2648.852271][ T969] [ 2648.853191][ T969] floppy driver state [ 2648.854681][ T969] ------------------- [ 2648.856237][ T969] now=4295202026 last interrupt=4294967499 diff=234527 last called handler=main_command_interrupt [ 2648.860186][ T969] timeout_message=lock fdc [ 2648.861855][ T969] last output bytes: [ 2648.863359][ T969] 0 90 4294967496 [ 2648.864773][ T969] 1 90 4294967496 [ 2648.866304][ T969] 2 90 4294967496 [ 2648.867765][ T969] 12 90 4294967496 [ 2648.869173][ T969] 1b 90 4294967496 [ 2648.870563][ T969] ff 90 4294967496 [ 2648.871963][ T969] 12 80 4294967499 [ 2648.873376][ T969] 3 90 4294967499 [ 2648.874793][ T969] 3 80 4294967499 [ 2648.876299][ T969] a1 90 4294967499 [ 2648.877717][ T969] 1e 90 4294967499 [ 2648.879117][ T969] e6 80 4294967499 [ 2648.880535][ T969] 1 90 4294967499 [ 2648.881968][ T969] 0 90 4294967499 [ 2648.883476][ T969] 0 90 4294967499 [ 2648.884911][ T969] 1 90 4294967499 00:45:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1100}, 0x48) [ 2648.886388][ T969] 2 90 4294967499 [ 2648.888068][ T969] 24 90 4294967499 [ 2648.889500][ T969] 1b 90 4294967499 [ 2648.890905][ T969] ff 90 4294967499 [ 2648.892332][ T969] last result at 4295201781 [ 2648.894116][ T969] last redo_fd_request at 4295202025 [ 2648.896270][ T969] status=80 [ 2648.897580][ T969] fdc_busy=1 [ 2648.898823][ T969] floppy_work.func=floppy_work_workfn [ 2648.900895][ T969] cont=ffffffff8b1391e0 [ 2648.902530][ T969] current_req=0000000000000000 [ 2648.904352][ T969] command_status=-1 [ 2648.905787][ T969] [ 2648.906827][ T969] floppy1: floppy timeout called [ 2648.909589][ T969] [ 2648.910529][ T969] floppy driver state [ 2648.912033][ T969] ------------------- 00:45:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1200}, 0x48) [ 2648.913532][ T969] now=4295202031 last interrupt=4294967499 diff=234532 last called handler=main_command_interrupt [ 2648.917926][ T969] timeout_message=lock fdc [ 2648.919619][ T969] last output bytes: [ 2648.921096][ T969] 0 90 4294967496 [ 2648.922575][ T969] 1 90 4294967496 [ 2648.924094][ T969] 2 90 4294967496 [ 2648.925567][ T969] 12 90 4294967496 [ 2648.927099][ T969] 1b 90 4294967496 [ 2648.928506][ T969] ff 90 4294967496 [ 2648.929920][ T969] 12 80 4294967499 [ 2648.931340][ T969] 3 90 4294967499 [ 2648.932749][ T969] 3 80 4294967499 [ 2648.934146][ T969] a1 90 4294967499 [ 2648.935542][ T969] 1e 90 4294967499 [ 2648.937016][ T969] e6 80 4294967499 [ 2648.938408][ T969] 1 90 4294967499 [ 2648.939799][ T969] 0 90 4294967499 [ 2648.941195][ T969] 0 90 4294967499 [ 2648.942586][ T969] 1 90 4294967499 [ 2648.944008][ T969] 2 90 4294967499 [ 2648.945406][ T969] 24 90 4294967499 [ 2648.946947][ T969] 1b 90 4294967499 [ 2648.948355][ T969] ff 90 4294967499 00:45:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1300}, 0x48) [ 2648.949764][ T969] last result at 4295201781 [ 2648.951715][ T969] last redo_fd_request at 4295202031 [ 2648.953773][ T969] status=80 [ 2648.954966][ T969] fdc_busy=1 [ 2648.956257][ T969] floppy_work.func=floppy_work_workfn [ 2648.958295][ T969] cont=ffffffff8b1391e0 [ 2648.959883][ T969] current_req=0000000000000000 [ 2648.961568][ T969] command_status=-1 [ 2648.963073][ T969] [ 2648.964008][ T969] floppy1: floppy timeout called [ 2648.966846][ T969] [ 2648.967782][ T969] floppy driver state [ 2648.969416][ T969] ------------------- [ 2648.970926][ T969] now=4295202037 last interrupt=4294967499 diff=234538 last called handler=main_command_interrupt [ 2648.974891][ T969] timeout_message=lock fdc [ 2648.976652][ T969] last output bytes: [ 2648.978155][ T969] 0 90 4294967496 [ 2648.979557][ T969] 1 90 4294967496 00:45:35 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) [ 2648.980982][ T969] 2 90 4294967496 [ 2648.982654][ T969] 12 90 4294967496 00:45:35 executing program 3: connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x1}}, 0x10) r0 = syz_open_dev$floppy(&(0x7f0000000140), 0x2005, 0x800) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='/dev/fd#\x00'}) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='/dev/fd#\x00'}) [ 2648.984089][ T969] 1b 90 4294967496 [ 2648.985734][ T969] ff 90 4294967496 [ 2648.987419][ T969] 12 80 4294967499 [ 2648.988854][ T969] 3 90 4294967499 [ 2648.990323][ T969] 3 80 4294967499 [ 2648.991771][ T969] a1 90 4294967499 00:45:35 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0203, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2648.993175][ T969] 1e 90 4294967499 [ 2648.994852][ T969] e6 80 4294967499 [ 2648.996359][ T969] 1 90 4294967499 [ 2648.997804][ T969] 0 90 4294967499 [ 2648.999337][ T969] 0 90 4294967499 [ 2649.000776][ T969] 1 90 4294967499 [ 2649.002171][ T969] 2 90 4294967499 00:45:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1400}, 0x48) [ 2649.003603][ T969] 24 90 4294967499 [ 2649.005307][ T969] 1b 90 4294967499 [ 2649.006883][ T969] ff 90 4294967499 [ 2649.008282][ T969] last result at 4295201781 [ 2649.009984][ T969] last redo_fd_request at 4295202037 [ 2649.011968][ T969] status=80 [ 2649.013178][ T969] fdc_busy=1 [ 2649.014404][ T969] floppy_work.func=floppy_work_workfn [ 2649.016489][ T969] cont=ffffffff8b1391e0 [ 2649.018074][ T969] current_req=0000000000000000 [ 2649.019918][ T969] command_status=-1 [ 2649.021363][ T969] [ 2649.022291][ T969] floppy1: floppy timeout called [ 2649.024360][ T969] [ 2649.025294][ T969] floppy driver state [ 2649.026912][ T969] ------------------- [ 2649.028458][ T969] now=4295202043 last interrupt=4294967499 diff=234544 last called handler=main_command_interrupt [ 2649.032317][ T969] timeout_message=lock fdc [ 2649.033974][ T969] last output bytes: [ 2649.035422][ T969] 0 90 4294967496 [ 2649.036898][ T969] 1 90 4294967496 [ 2649.038302][ T969] 2 90 4294967496 [ 2649.039708][ T969] 12 90 4294967496 [ 2649.041405][ T969] 1b 90 4294967496 [ 2649.042960][ T969] ff 90 4294967496 [ 2649.044351][ T969] 12 80 4294967499 [ 2649.045746][ T969] 3 90 4294967499 [ 2649.047387][ T969] 3 80 4294967499 [ 2649.048886][ T969] a1 90 4294967499 [ 2649.050376][ T969] 1e 90 4294967499 [ 2649.051870][ T969] e6 80 4294967499 00:45:35 executing program 3: connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x1}}, 0x10) r0 = syz_open_dev$floppy(&(0x7f0000000140), 0x2005, 0x800) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='/dev/fd#\x00'}) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='/dev/fd#\x00'}) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x1}}, 0x10) (async) syz_open_dev$floppy(&(0x7f0000000140), 0x2005, 0x800) (async) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='/dev/fd#\x00'}) (async) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='/dev/fd#\x00'}) (async) [ 2649.053377][ T969] 1 90 4294967499 [ 2649.055040][ T969] 0 90 4294967499 [ 2649.056595][ T969] 0 90 4294967499 [ 2649.058095][ T969] 1 90 4294967499 [ 2649.059569][ T969] 2 90 4294967499 [ 2649.061067][ T969] 24 90 4294967499 [ 2649.062541][ T969] 1b 90 4294967499 [ 2649.064047][ T969] ff 90 4294967499 [ 2649.065536][ T969] last result at 4295201781 00:45:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1500}, 0x48) [ 2649.067337][ T969] last redo_fd_request at 4295202042 [ 2649.069590][ T969] status=80 [ 2649.070887][ T969] fdc_busy=1 [ 2649.072213][ T969] floppy_work.func=floppy_work_workfn [ 2649.074314][ T969] cont=ffffffff8b1391e0 [ 2649.075967][ T969] current_req=0000000000000000 [ 2649.077812][ T969] command_status=-1 [ 2649.079320][ T969] [ 2649.080249][ T969] floppy1: floppy timeout called [ 2649.082387][ T969] [ 2649.083425][ T969] floppy driver state [ 2649.085016][ T969] ------------------- [ 2649.086686][ T969] now=4295202049 last interrupt=4294967499 diff=234550 last called handler=main_command_interrupt [ 2649.090636][ T969] timeout_message=lock fdc [ 2649.092393][ T969] last output bytes: [ 2649.093970][ T969] 0 90 4294967496 [ 2649.095363][ T969] 1 90 4294967496 [ 2649.096966][ T969] 2 90 4294967496 [ 2649.098630][ T969] 12 90 4294967496 [ 2649.100143][ T969] 1b 90 4294967496 [ 2649.101663][ T969] ff 90 4294967496 [ 2649.103187][ T969] 12 80 4294967499 [ 2649.104585][ T969] 3 90 4294967499 [ 2649.106087][ T969] 3 80 4294967499 [ 2649.107608][ T969] a1 90 4294967499 [ 2649.109045][ T969] 1e 90 4294967499 [ 2649.110461][ T969] e6 80 4294967499 [ 2649.111896][ T969] 1 90 4294967499 [ 2649.113320][ T969] 0 90 4294967499 [ 2649.114718][ T969] 0 90 4294967499 [ 2649.116193][ T969] 1 90 4294967499 [ 2649.117608][ T969] 2 90 4294967499 [ 2649.119003][ T969] 24 90 4294967499 [ 2649.120407][ T969] 1b 90 4294967499 [ 2649.121817][ T969] ff 90 4294967499 [ 2649.123252][ T969] last result at 4295201781 00:45:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1600}, 0x48) [ 2649.124937][ T969] last redo_fd_request at 4295202048 [ 2649.127283][ T969] status=80 [ 2649.128479][ T969] fdc_busy=1 [ 2649.129713][ T969] floppy_work.func=floppy_work_workfn [ 2649.131721][ T969] cont=ffffffff8b1391e0 [ 2649.133324][ T969] current_req=0000000000000000 [ 2649.135131][ T969] command_status=-1 00:45:35 executing program 3: connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x1}}, 0x10) (async) r0 = syz_open_dev$floppy(&(0x7f0000000140), 0x2005, 0x800) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='/dev/fd#\x00'}) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='/dev/fd#\x00'}) [ 2649.136638][ T969] [ 2649.137765][ T969] floppy1: floppy timeout called [ 2649.140388][ T969] [ 2649.141492][ T969] floppy driver state [ 2649.142988][ T969] ------------------- [ 2649.144473][ T969] now=4295202054 last interrupt=4294967499 diff=234555 last called handler=main_command_interrupt [ 2649.149320][ T969] timeout_message=lock fdc [ 2649.151005][ T969] last output bytes: [ 2649.152475][ T969] 0 90 4294967496 [ 2649.153879][ T969] 1 90 4294967496 [ 2649.155280][ T969] 2 90 4294967496 [ 2649.157082][ T969] 12 90 4294967496 [ 2649.158490][ T969] 1b 90 4294967496 [ 2649.159874][ T969] ff 90 4294967496 [ 2649.161267][ T969] 12 80 4294967499 [ 2649.162666][ T969] 3 90 4294967499 [ 2649.164081][ T969] 3 80 4294967499 [ 2649.165495][ T969] a1 90 4294967499 [ 2649.167018][ T969] 1e 90 4294967499 [ 2649.168422][ T969] e6 80 4294967499 [ 2649.169814][ T969] 1 90 4294967499 [ 2649.171226][ T969] 0 90 4294967499 [ 2649.172620][ T969] 0 90 4294967499 [ 2649.174026][ T969] 1 90 4294967499 [ 2649.175416][ T969] 2 90 4294967499 [ 2649.176890][ T969] 24 90 4294967499 [ 2649.178275][ T969] 1b 90 4294967499 [ 2649.179673][ T969] ff 90 4294967499 [ 2649.181047][ T969] last result at 4295201781 [ 2649.182756][ T969] last redo_fd_request at 4295202054 [ 2649.184741][ T969] status=80 [ 2649.186004][ T969] fdc_busy=1 [ 2649.187253][ T969] floppy_work.func=floppy_work_workfn [ 2649.189237][ T969] cont=ffffffff8b1391e0 [ 2649.190767][ T969] current_req=0000000000000000 [ 2649.192540][ T969] command_status=-1 [ 2649.193950][ T969] [ 2649.194873][ T969] floppy1: floppy timeout called [ 2649.197347][ T969] [ 2649.198535][ T969] floppy driver state [ 2649.200569][ T969] ------------------- 00:45:35 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) 00:45:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1700}, 0x48) [ 2649.202513][ T969] now=4295202060 last interrupt=4294967499 diff=234561 last called handler=main_command_interrupt 00:45:35 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0205, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2649.207788][ T969] timeout_message=lock fdc [ 2649.210086][ T969] last output bytes: [ 2649.211956][ T969] 0 90 4294967496 [ 2649.213751][ T969] 1 90 4294967496 [ 2649.215531][ T969] 2 90 4294967496 [ 2649.217423][ T969] 12 90 4294967496 [ 2649.219207][ T969] 1b 90 4294967496 [ 2649.220930][ T969] ff 90 4294967496 [ 2649.222779][ T969] 12 80 4294967499 [ 2649.224601][ T969] 3 90 4294967499 [ 2649.226599][ T969] 3 80 4294967499 [ 2649.228393][ T969] a1 90 4294967499 [ 2649.230195][ T969] 1e 90 4294967499 [ 2649.231976][ T969] e6 80 4294967499 [ 2649.233772][ T969] 1 90 4294967499 [ 2649.235549][ T969] 0 90 4294967499 [ 2649.237464][ T969] 0 90 4294967499 [ 2649.239246][ T969] 1 90 4294967499 [ 2649.240997][ T969] 2 90 4294967499 [ 2649.242780][ T969] 24 90 4294967499 [ 2649.244568][ T969] 1b 90 4294967499 00:45:35 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDFMTEND(0xffffffffffffffff, 0x249) [ 2649.246823][ T969] ff 90 4294967499 [ 2649.248875][ T969] last result at 4295201781 [ 2649.251069][ T969] last redo_fd_request at 4295202060 [ 2649.253633][ T969] status=80 [ 2649.255322][ T969] fdc_busy=1 [ 2649.257075][ T969] floppy_work.func=floppy_work_workfn [ 2649.259615][ T969] cont=ffffffff8b1391e0 [ 2649.261510][ T969] current_req=0000000000000000 [ 2649.263778][ T969] command_status=-1 [ 2649.265636][ T969] [ 2649.266895][ T969] floppy1: floppy timeout called [ 2649.269238][ T969] [ 2649.270299][ T969] floppy driver state [ 2649.272101][ T969] ------------------- [ 2649.273756][ T969] now=4295202067 last interrupt=4294967499 diff=234568 last called handler=main_command_interrupt [ 2649.277577][ T969] timeout_message=lock fdc [ 2649.279159][ T969] last output bytes: [ 2649.280556][ T969] 0 90 4294967496 [ 2649.281898][ T969] 1 90 4294967496 00:45:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x48) [ 2649.283270][ T969] 2 90 4294967496 [ 2649.285087][ T969] 12 90 4294967496 [ 2649.287002][ T969] 1b 90 4294967496 [ 2649.288809][ T969] ff 90 4294967496 [ 2649.290599][ T969] 12 80 4294967499 [ 2649.292405][ T969] 3 90 4294967499 [ 2649.294197][ T969] 3 80 4294967499 [ 2649.296091][ T969] a1 90 4294967499 [ 2649.297885][ T969] 1e 90 4294967499 [ 2649.299653][ T969] e6 80 4294967499 [ 2649.301452][ T969] 1 90 4294967499 [ 2649.303225][ T969] 0 90 4294967499 [ 2649.305009][ T969] 0 90 4294967499 [ 2649.306945][ T969] 1 90 4294967499 [ 2649.308737][ T969] 2 90 4294967499 [ 2649.310511][ T969] 24 90 4294967499 [ 2649.312321][ T969] 1b 90 4294967499 [ 2649.314115][ T969] ff 90 4294967499 [ 2649.315971][ T969] last result at 4295201781 [ 2649.318147][ T969] last redo_fd_request at 4295202067 [ 2649.320630][ T969] status=80 [ 2649.322145][ T969] fdc_busy=1 00:45:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1900}, 0x48) [ 2649.323684][ T969] floppy_work.func=floppy_work_workfn [ 2649.326502][ T969] cont=ffffffff8b1391e0 [ 2649.328480][ T969] current_req=0000000000000000 [ 2649.330731][ T969] command_status=-1 [ 2649.332559][ T969] [ 2649.333746][ T969] floppy1: floppy timeout called [ 2649.337203][ T969] [ 2649.338434][ T969] floppy driver state [ 2649.340357][ T969] ------------------- [ 2649.342257][ T969] now=4295202074 last interrupt=4294967499 diff=234575 last called handler=main_command_interrupt [ 2649.347366][ T969] timeout_message=lock fdc [ 2649.349691][ T969] last output bytes: [ 2649.351771][ T969] 0 90 4294967496 [ 2649.353692][ T969] 1 90 4294967496 [ 2649.355585][ T969] 2 90 4294967496 [ 2649.357548][ T969] 12 90 4294967496 [ 2649.359443][ T969] 1b 90 4294967496 [ 2649.361346][ T969] ff 90 4294967496 [ 2649.363210][ T969] 12 80 4294967499 [ 2649.365093][ T969] 3 90 4294967499 00:45:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a00}, 0x48) [ 2649.366992][ T969] 3 80 4294967499 [ 2649.369074][ T969] a1 90 4294967499 [ 2649.370962][ T969] 1e 90 4294967499 [ 2649.372873][ T969] e6 80 4294967499 [ 2649.374778][ T969] 1 90 4294967499 [ 2649.376731][ T969] 0 90 4294967499 [ 2649.378620][ T969] 0 90 4294967499 [ 2649.380533][ T969] 1 90 4294967499 [ 2649.382452][ T969] 2 90 4294967499 [ 2649.384348][ T969] 24 90 4294967499 [ 2649.386285][ T969] 1b 90 4294967499 [ 2649.388164][ T969] ff 90 4294967499 [ 2649.390069][ T969] last result at 4295201781 [ 2649.392333][ T969] last redo_fd_request at 4295202074 [ 2649.394970][ T969] status=80 [ 2649.396672][ T969] fdc_busy=1 [ 2649.398372][ T969] floppy_work.func=floppy_work_workfn [ 2649.401022][ T969] cont=ffffffff8b1391e0 00:45:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1b00}, 0x48) [ 2649.403034][ T969] current_req=0000000000000000 [ 2649.405561][ T969] command_status=-1 [ 2649.407483][ T969] [ 2649.408806][ T969] floppy1: floppy timeout called [ 2649.413002][ T969] [ 2649.414230][ T969] floppy driver state [ 2649.416285][ T969] ------------------- [ 2649.418287][ T969] now=4295202082 last interrupt=4294967499 diff=234583 last called handler=main_command_interrupt 00:45:36 executing program 2: syz_open_dev$floppy(0x0, 0xff1, 0x0) [ 2649.425968][ T969] timeout_message=lock fdc [ 2649.428097][ T969] last output bytes: [ 2649.429951][ T969] 0 90 4294967496 [ 2649.431738][ T969] 1 90 4294967496 [ 2649.433514][ T969] 2 90 4294967496 [ 2649.435313][ T969] 12 90 4294967496 [ 2649.437212][ T969] 1b 90 4294967496 00:45:36 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) ioctl$FLOPPY_FDFMTEND(0xffffffffffffffff, 0x249) [ 2649.438998][ T969] ff 90 4294967496 [ 2649.441005][ T969] 12 80 4294967499 [ 2649.442799][ T969] 3 90 4294967499 [ 2649.444502][ T969] 3 80 4294967499 [ 2649.446391][ T969] a1 90 4294967499 [ 2649.448116][ T969] 1e 90 4294967499 [ 2649.449897][ T969] e6 80 4294967499 [ 2649.451663][ T969] 1 90 4294967499 [ 2649.453443][ T969] 0 90 4294967499 [ 2649.455191][ T969] 0 90 4294967499 [ 2649.457053][ T969] 1 90 4294967499 [ 2649.458840][ T969] 2 90 4294967499 [ 2649.460629][ T969] 24 90 4294967499 [ 2649.462413][ T969] 1b 90 4294967499 [ 2649.464196][ T969] ff 90 4294967499 00:45:36 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0206, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2649.466596][ T969] last result at 4295201781 [ 2649.468942][ T969] last redo_fd_request at 4295202081 [ 2649.471519][ T969] status=80 [ 2649.473053][ T969] fdc_busy=1 [ 2649.474586][ T969] floppy_work.func=floppy_work_workfn [ 2649.477815][ T969] cont=ffffffff8b1391e0 [ 2649.479781][ T969] current_req=0000000000000000 [ 2649.482030][ T969] command_status=-1 [ 2649.483841][ T969] [ 2649.485027][ T969] floppy1: floppy timeout called 00:45:36 executing program 2: syz_open_dev$floppy(0x0, 0xff1, 0x0) 00:45:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1c00}, 0x48) [ 2649.511567][ T969] [ 2649.512836][ T969] floppy driver state [ 2649.514782][ T969] ------------------- [ 2649.516885][ T969] now=4295202092 last interrupt=4294967499 diff=234593 last called handler=main_command_interrupt [ 2649.521809][ T969] timeout_message=lock fdc 00:45:36 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) ioctl$FLOPPY_FDFMTEND(0xffffffffffffffff, 0x249) [ 2649.523924][ T969] last output bytes: 00:45:36 executing program 2: syz_open_dev$floppy(0x0, 0xff1, 0x0) [ 2649.526721][ T969] 0 90 4294967496 [ 2649.528712][ T969] 1 90 4294967496 [ 2649.530516][ T969] 2 90 4294967496 [ 2649.532299][ T969] 12 90 4294967496 00:45:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1d00}, 0x48) [ 2649.534082][ T969] 1b 90 4294967496 [ 2649.536798][ T969] ff 90 4294967496 [ 2649.538589][ T969] 12 80 4294967499 [ 2649.540367][ T969] 3 90 4294967499 [ 2649.542165][ T969] 3 80 4294967499 [ 2649.543932][ T969] a1 90 4294967499 [ 2649.545730][ T969] 1e 90 4294967499 [ 2649.548348][ T969] e6 80 4294967499 [ 2649.550197][ T969] 1 90 4294967499 [ 2649.551995][ T969] 0 90 4294967499 [ 2649.553769][ T969] 0 90 4294967499 [ 2649.555547][ T969] 1 90 4294967499 [ 2649.565921][ T969] 2 90 4294967499 [ 2649.567901][ T969] 24 90 4294967499 [ 2649.569720][ T969] 1b 90 4294967499 [ 2649.571520][ T969] ff 90 4294967499 [ 2649.573361][ T969] last result at 4295201781 [ 2649.575526][ T969] last redo_fd_request at 4295202089 00:45:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1e00}, 0x48) [ 2649.580567][ T969] status=80 00:45:36 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x0) [ 2649.582313][ T969] fdc_busy=1 [ 2649.583999][ T969] floppy_work.func=floppy_work_workfn [ 2649.587170][ T969] cont=ffffffff8b1391e0 [ 2649.589240][ T969] current_req=0000000000000000 [ 2649.591545][ T969] command_status=-1 [ 2649.593403][ T969] [ 2649.594612][ T969] floppy1: floppy timeout called [ 2649.599222][ T969] [ 2649.600415][ T969] floppy driver state [ 2649.602332][ T969] ------------------- [ 2649.604248][ T969] now=4295202100 last interrupt=4294967499 diff=234601 last called handler=main_command_interrupt [ 2649.609564][ T969] timeout_message=lock fdc [ 2649.611793][ T969] last output bytes: [ 2649.613704][ T969] 0 90 4294967496 [ 2649.615508][ T969] 1 90 4294967496 [ 2649.618391][ T969] 2 90 4294967496 [ 2649.620228][ T969] 12 90 4294967496 [ 2649.622024][ T969] 1b 90 4294967496 [ 2649.623813][ T969] ff 90 4294967496 [ 2649.625615][ T969] 12 80 4294967499 [ 2649.628160][ T969] 3 90 4294967499 [ 2649.629977][ T969] 3 80 4294967499 [ 2649.631782][ T969] a1 90 4294967499 [ 2649.633560][ T969] 1e 90 4294967499 [ 2649.635334][ T969] e6 80 4294967499 [ 2649.638021][ T969] 1 90 4294967499 [ 2649.639966][ T969] 0 90 4294967499 [ 2649.641752][ T969] 0 90 4294967499 [ 2649.643537][ T969] 1 90 4294967499 [ 2649.645325][ T969] 2 90 4294967499 [ 2649.647806][ T969] 24 90 4294967499 [ 2649.649614][ T969] 1b 90 4294967499 [ 2649.651415][ T969] ff 90 4294967499 [ 2649.653223][ T969] last result at 4295201781 [ 2649.655376][ T969] last redo_fd_request at 4295202100 [ 2649.658719][ T969] status=80 [ 2649.660261][ T969] fdc_busy=1 [ 2649.661835][ T969] floppy_work.func=floppy_work_workfn [ 2649.664393][ T969] cont=ffffffff8b1391e0 [ 2649.667048][ T969] current_req=0000000000000000 [ 2649.669373][ T969] command_status=-1 [ 2649.671213][ T969] [ 2649.672538][ T969] floppy1: floppy timeout called [ 2649.676895][ T969] [ 2649.678066][ T969] floppy driver state [ 2649.679952][ T969] ------------------- 00:45:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1f00}, 0x48) [ 2649.681829][ T969] now=4295202108 last interrupt=4294967499 diff=234609 last called handler=main_command_interrupt [ 2649.687033][ T969] timeout_message=lock fdc [ 2649.689183][ T969] last output bytes: [ 2649.691041][ T969] 0 90 4294967496 [ 2649.692854][ T969] 1 90 4294967496 [ 2649.694625][ T969] 2 90 4294967496 00:45:36 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x0) 00:45:36 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0207, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2649.700366][ T969] 12 90 4294967496 [ 2649.702330][ T969] 1b 90 4294967496 [ 2649.704146][ T969] ff 90 4294967496 [ 2649.706297][ T969] 12 80 4294967499 [ 2649.708104][ T969] 3 90 4294967499 [ 2649.709889][ T969] 3 80 4294967499 [ 2649.711699][ T969] a1 90 4294967499 [ 2649.713559][ T969] 1e 90 4294967499 [ 2649.715422][ T969] e6 80 4294967499 [ 2649.717692][ T969] 1 90 4294967499 [ 2649.719492][ T969] 0 90 4294967499 00:45:36 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x48000) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc04c5609, &(0x7f00000000c0)={0x2, 0xa, 0x4, 0x40, 0x20, {r1, r2/1000+10000}, {0x3, 0x8, 0x40, 0xd6, 0x6, 0x4, ';Q)2'}, 0x1, 0x4, {}, 0xaf3a, 0x0, r3}) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) 00:45:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000}, 0x48) 00:45:36 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x0) [ 2649.721275][ T969] 0 90 4294967499 [ 2649.723303][ T969] 1 90 4294967499 [ 2649.725192][ T969] 2 90 4294967499 [ 2649.727432][ T969] 24 90 4294967499 [ 2649.729224][ T969] 1b 90 4294967499 [ 2649.730994][ T969] ff 90 4294967499 [ 2649.732806][ T969] last result at 4295201781 [ 2649.734945][ T969] last redo_fd_request at 4295202107 [ 2649.737843][ T969] status=80 [ 2649.739380][ T969] fdc_busy=1 [ 2649.741006][ T969] floppy_work.func=floppy_work_workfn [ 2649.743523][ T969] cont=ffffffff8b1391e0 [ 2649.745491][ T969] current_req=0000000000000000 [ 2649.748126][ T969] command_status=-1 [ 2649.749958][ T969] [ 2649.751172][ T969] floppy1: floppy timeout called [ 2649.753904][ T969] [ 2649.755051][ T969] floppy driver state [ 2649.757470][ T969] ------------------- 00:45:36 executing program 2: syz_open_dev$floppy(0x0, 0xff1, 0x0) 00:45:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2100}, 0x48) [ 2649.759458][ T969] now=4295202116 last interrupt=4294967499 diff=234617 last called handler=main_command_interrupt [ 2649.765103][ T969] timeout_message=lock fdc [ 2649.767962][ T969] last output bytes: [ 2649.769942][ T969] 0 90 4294967496 [ 2649.772549][ T969] 1 90 4294967496 [ 2649.774033][ T969] 2 90 4294967496 [ 2649.776407][ T969] 12 90 4294967496 [ 2649.778217][ T969] 1b 90 4294967496 [ 2649.779997][ T969] ff 90 4294967496 [ 2649.781786][ T969] 12 80 4294967499 [ 2649.783566][ T969] 3 90 4294967499 [ 2649.785367][ T969] 3 80 4294967499 [ 2649.788008][ T969] a1 90 4294967499 [ 2649.789829][ T969] 1e 90 4294967499 [ 2649.791627][ T969] e6 80 4294967499 [ 2649.793415][ T969] 1 90 4294967499 00:45:36 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0202, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2200}, 0x48) [ 2649.795265][ T969] 0 90 4294967499 [ 2649.797848][ T969] 0 90 4294967499 [ 2649.799636][ T969] 1 90 4294967499 [ 2649.801407][ T969] 2 90 4294967499 [ 2649.803175][ T969] 24 90 4294967499 [ 2649.804976][ T969] 1b 90 4294967499 [ 2649.807472][ T969] ff 90 4294967499 [ 2649.809274][ T969] last result at 4295201781 [ 2649.811420][ T969] last redo_fd_request at 4295202115 [ 2649.813926][ T969] status=80 [ 2649.815435][ T969] fdc_busy=1 [ 2649.817926][ T969] floppy_work.func=floppy_work_workfn [ 2649.820471][ T969] cont=ffffffff8b1391e0 [ 2649.822192][ T969] current_req=0000000000000000 [ 2649.824076][ T969] command_status=-1 [ 2649.826246][ T969] [ 2649.827454][ T969] floppy1: floppy timeout called [ 2649.830202][ T969] [ 2649.831376][ T969] floppy driver state [ 2649.833285][ T969] ------------------- [ 2649.835191][ T969] now=4295202123 last interrupt=4294967499 diff=234624 last called handler=main_command_interrupt [ 2649.840195][ T969] timeout_message=lock fdc [ 2649.842165][ T969] last output bytes: [ 2649.844003][ T969] 0 90 4294967496 [ 2649.845795][ T969] 1 90 4294967496 [ 2649.847585][ T969] 2 90 4294967496 [ 2649.849033][ T969] 12 90 4294967496 [ 2649.850455][ T969] 1b 90 4294967496 [ 2649.852062][ T969] ff 90 4294967496 [ 2649.853871][ T969] 12 80 4294967499 [ 2649.855763][ T969] 3 90 4294967499 [ 2649.857630][ T969] 3 80 4294967499 [ 2649.859360][ T969] a1 90 4294967499 [ 2649.860789][ T969] 1e 90 4294967499 [ 2649.862212][ T969] e6 80 4294967499 [ 2649.863648][ T969] 1 90 4294967499 [ 2649.865314][ T969] 0 90 4294967499 [ 2649.867193][ T969] 0 90 4294967499 [ 2649.869002][ T969] 1 90 4294967499 [ 2649.870774][ T969] 2 90 4294967499 [ 2649.872563][ T969] 24 90 4294967499 [ 2649.874359][ T969] 1b 90 4294967499 [ 2649.876240][ T969] ff 90 4294967499 [ 2649.878043][ T969] last result at 4295201781 [ 2649.880178][ T969] last redo_fd_request at 4295202123 [ 2649.882285][ T969] status=80 [ 2649.883635][ T969] fdc_busy=1 [ 2649.885222][ T969] floppy_work.func=floppy_work_workfn [ 2649.887920][ T969] cont=ffffffff8b1391e0 [ 2649.889890][ T969] current_req=0000000000000000 [ 2649.892150][ T969] command_status=-1 [ 2649.893971][ T969] [ 2649.895176][ T969] floppy1: floppy timeout called [ 2649.906162][ T969] [ 2649.907380][ T969] floppy driver state [ 2649.909343][ T969] ------------------- [ 2649.911390][ T969] now=4295202131 last interrupt=4294967499 diff=234632 last called handler=main_command_interrupt [ 2649.916392][ T969] timeout_message=lock fdc [ 2649.918538][ T969] last output bytes: [ 2649.920400][ T969] 0 90 4294967496 [ 2649.921919][ T969] 1 90 4294967496 [ 2649.923346][ T969] 2 90 4294967496 [ 2649.924774][ T969] 12 90 4294967496 00:45:36 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0208, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2300}, 0x48) 00:45:36 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x8010020f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:36 executing program 3: syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x48000) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc04c5609, &(0x7f00000000c0)={0x2, 0xa, 0x4, 0x40, 0x20, {r1, r2/1000+10000}, {0x3, 0x8, 0x40, 0xd6, 0x6, 0x4, ';Q)2'}, 0x1, 0x4, {}, 0xaf3a, 0x0, r3}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc04c5609, &(0x7f00000000c0)={0x2, 0xa, 0x4, 0x40, 0x20, {r1, r2/1000+10000}, {0x3, 0x8, 0x40, 0xd6, 0x6, 0x4, ';Q)2'}, 0x1, 0x4, {}, 0xaf3a, 0x0, r3}) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) [ 2649.926942][ T969] 1b 90 4294967496 [ 2649.929237][ T969] ff 90 4294967496 [ 2649.931024][ T969] 12 80 4294967499 [ 2649.932824][ T969] 3 90 4294967499 [ 2649.934596][ T969] 3 80 4294967499 [ 2649.936822][ T969] a1 90 4294967499 [ 2649.938608][ T969] 1e 90 4294967499 [ 2649.940467][ T969] e6 80 4294967499 [ 2649.942134][ T969] 1 90 4294967499 [ 2649.943671][ T969] 0 90 4294967499 [ 2649.945410][ T969] 0 90 4294967499 [ 2649.947689][ T969] 1 90 4294967499 [ 2649.949493][ T969] 2 90 4294967499 [ 2649.951274][ T969] 24 90 4294967499 [ 2649.953020][ T969] 1b 90 4294967499 [ 2649.954793][ T969] ff 90 4294967499 [ 2649.956973][ T969] last result at 4295201781 [ 2649.958690][ T969] last redo_fd_request at 4295202130 [ 2649.960668][ T969] status=80 [ 2649.961890][ T969] fdc_busy=1 [ 2649.963364][ T969] floppy_work.func=floppy_work_workfn [ 2649.966621][ T969] cont=ffffffff8b1391e0 [ 2649.968290][ T969] current_req=0000000000000000 [ 2649.970376][ T969] command_status=-1 [ 2649.972117][ T969] [ 2649.973312][ T969] floppy1: floppy timeout called [ 2649.977733][ T969] [ 2649.978915][ T969] floppy driver state [ 2649.980776][ T969] ------------------- [ 2649.982646][ T969] now=4295202138 last interrupt=4294967499 diff=234639 last called handler=main_command_interrupt [ 2649.982677][ T969] timeout_message=lock fdc [ 2649.982684][ T969] last output bytes: [ 2649.982690][ T969] 0 90 4294967496 00:45:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1000000}, 0x48) [ 2649.982700][ T969] 1 90 4294967496 [ 2649.982710][ T969] 2 90 4294967496 [ 2649.982720][ T969] 12 90 4294967496 [ 2649.982729][ T969] 1b 90 4294967496 [ 2649.982740][ T969] ff 90 4294967496 [ 2649.982750][ T969] 12 80 4294967499 [ 2649.982760][ T969] 3 90 4294967499 [ 2649.982768][ T969] 3 80 4294967499 [ 2649.982776][ T969] a1 90 4294967499 [ 2649.982784][ T969] 1e 90 4294967499 [ 2649.982791][ T969] e6 80 4294967499 [ 2649.982799][ T969] 1 90 4294967499 [ 2650.015457][ T969] 0 90 4294967499 [ 2650.017464][ T969] 0 90 4294967499 [ 2650.018982][ T969] 1 90 4294967499 [ 2650.020787][ T969] 2 90 4294967499 [ 2650.022580][ T969] 24 90 4294967499 [ 2650.024312][ T969] 1b 90 4294967499 [ 2650.025713][ T969] ff 90 4294967499 [ 2650.027313][ T969] last result at 4295201781 [ 2650.029524][ T969] last redo_fd_request at 4295202137 00:45:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x48) [ 2650.031900][ T969] status=80 [ 2650.033374][ T969] fdc_busy=1 [ 2650.034564][ T969] floppy_work.func=floppy_work_workfn [ 2650.036392][ T969] cont=ffffffff8b1391e0 [ 2650.038139][ T969] current_req=0000000000000000 [ 2650.040117][ T969] command_status=-1 [ 2650.041719][ T969] [ 2650.042776][ T969] floppy1: floppy timeout called [ 2650.045168][ T969] [ 2650.046237][ T969] floppy driver state [ 2650.047907][ T969] ------------------- [ 2650.049585][ T969] now=4295202145 last interrupt=4294967499 diff=234646 last called handler=main_command_interrupt [ 2650.053978][ T969] timeout_message=lock fdc [ 2650.058391][ T969] last output bytes: [ 2650.059974][ T969] 0 90 4294967496 [ 2650.061550][ T969] 1 90 4294967496 [ 2650.063114][ T969] 2 90 4294967496 [ 2650.064670][ T969] 12 90 4294967496 [ 2650.066372][ T969] 1b 90 4294967496 [ 2650.067726][ T969] ff 90 4294967496 [ 2650.069048][ T969] 12 80 4294967499 [ 2650.070353][ T969] 3 90 4294967499 [ 2650.071665][ T969] 3 80 4294967499 [ 2650.072980][ T969] a1 90 4294967499 00:45:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3000000}, 0x48) [ 2650.074291][ T969] 1e 90 4294967499 [ 2650.077643][ T969] e6 80 4294967499 [ 2650.078967][ T969] 1 90 4294967499 [ 2650.080230][ T969] 0 90 4294967499 [ 2650.081549][ T969] 0 90 4294967499 [ 2650.082853][ T969] 1 90 4294967499 [ 2650.084180][ T969] 2 90 4294967499 [ 2650.085506][ T969] 24 90 4294967499 [ 2650.086938][ T969] 1b 90 4294967499 [ 2650.088241][ T969] ff 90 4294967499 [ 2650.089563][ T969] last result at 4295201781 [ 2650.091156][ T969] last redo_fd_request at 4295202144 [ 2650.093287][ T969] status=80 [ 2650.094612][ T969] fdc_busy=1 [ 2650.097668][ T969] floppy_work.func=floppy_work_workfn [ 2650.099920][ T969] cont=ffffffff8b1391e0 [ 2650.101656][ T969] current_req=0000000000000000 [ 2650.103649][ T969] command_status=-1 [ 2650.105262][ T969] [ 2650.106374][ T969] floppy1: floppy timeout called [ 2650.108922][ T969] [ 2650.110000][ T969] floppy driver state [ 2650.111538][ T969] ------------------- 00:45:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4000000}, 0x48) [ 2650.113336][ T969] now=4295202151 last interrupt=4294967499 diff=234652 last called handler=main_command_interrupt [ 2650.121755][ T969] timeout_message=lock fdc [ 2650.123882][ T969] last output bytes: [ 2650.125755][ T969] 0 90 4294967496 [ 2650.127640][ T969] 1 90 4294967496 00:45:36 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x80086601, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2650.129424][ T969] 2 90 4294967496 [ 2650.131373][ T969] 12 90 4294967496 [ 2650.133183][ T969] 1b 90 4294967496 [ 2650.134961][ T969] ff 90 4294967496 00:45:36 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x48000) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc04c5609, &(0x7f00000000c0)={0x2, 0xa, 0x4, 0x40, 0x20, {r1, r2/1000+10000}, {0x3, 0x8, 0x40, 0xd6, 0x6, 0x4, ';Q)2'}, 0x1, 0x4, {}, 0xaf3a, 0x0, r3}) (async) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) 00:45:36 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0209, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2650.138497][ T969] 12 80 4294967499 [ 2650.140311][ T969] 3 90 4294967499 [ 2650.142292][ T969] 3 80 4294967499 [ 2650.144089][ T969] a1 90 4294967499 [ 2650.146338][ T969] 1e 90 4294967499 [ 2650.147803][ T969] e6 80 4294967499 [ 2650.149483][ T969] 1 90 4294967499 [ 2650.151278][ T969] 0 90 4294967499 [ 2650.153057][ T969] 0 90 4294967499 [ 2650.154816][ T969] 1 90 4294967499 [ 2650.157172][ T969] 2 90 4294967499 [ 2650.158987][ T969] 24 90 4294967499 [ 2650.160727][ T969] 1b 90 4294967499 [ 2650.162492][ T969] ff 90 4294967499 [ 2650.164301][ T969] last result at 4295201781 [ 2650.169762][ T969] last redo_fd_request at 4295202151 [ 2650.172208][ T969] status=80 [ 2650.173675][ T969] fdc_busy=1 [ 2650.175113][ T969] floppy_work.func=floppy_work_workfn [ 2650.177664][ T969] cont=ffffffff8b1391e0 [ 2650.179246][ T969] current_req=0000000000000000 [ 2650.181071][ T969] command_status=-1 [ 2650.182560][ T969] [ 2650.183517][ T969] floppy1: floppy timeout called [ 2650.185652][ T969] [ 2650.188294][ T969] floppy driver state [ 2650.189819][ T969] ------------------- [ 2650.191316][ T969] now=4295202159 last interrupt=4294967499 diff=234660 last called handler=main_command_interrupt [ 2650.195261][ T969] timeout_message=lock fdc [ 2650.197085][ T969] last output bytes: [ 2650.198542][ T969] 0 90 4294967496 [ 2650.199942][ T969] 1 90 4294967496 [ 2650.201423][ T969] 2 90 4294967496 [ 2650.202863][ T969] 12 90 4294967496 [ 2650.204260][ T969] 1b 90 4294967496 [ 2650.205681][ T969] ff 90 4294967496 00:45:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5000000}, 0x48) [ 2650.207281][ T969] 12 80 4294967499 [ 2650.208937][ T969] 3 90 4294967499 [ 2650.210499][ T969] 3 80 4294967499 [ 2650.210509][ T969] a1 90 4294967499 [ 2650.210514][ T969] 1e 90 4294967499 [ 2650.210520][ T969] e6 80 4294967499 [ 2650.210525][ T969] 1 90 4294967499 [ 2650.210530][ T969] 0 90 4294967499 [ 2650.210535][ T969] 0 90 4294967499 [ 2650.210541][ T969] 1 90 4294967499 [ 2650.210546][ T969] 2 90 4294967499 [ 2650.210551][ T969] 24 90 4294967499 [ 2650.210556][ T969] 1b 90 4294967499 [ 2650.210562][ T969] ff 90 4294967499 [ 2650.210567][ T969] last result at 4295201781 [ 2650.210571][ T969] last redo_fd_request at 4295202158 [ 2650.210601][ T969] status=80 [ 2650.232773][ T969] fdc_busy=1 00:45:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x6000000}, 0x48) [ 2650.234023][ T969] floppy_work.func=floppy_work_workfn [ 2650.236273][ T969] cont=ffffffff8b1391e0 [ 2650.238287][ T969] current_req=0000000000000000 [ 2650.240194][ T969] command_status=-1 [ 2650.241643][ T969] [ 2650.242616][ T969] floppy1: floppy timeout called [ 2650.244772][ T969] [ 2650.245721][ T969] floppy driver state [ 2650.247441][ T969] ------------------- [ 2650.249003][ T969] now=4295202165 last interrupt=4294967499 diff=234666 last called handler=main_command_interrupt [ 2650.253026][ T969] timeout_message=lock fdc [ 2650.254715][ T969] last output bytes: [ 2650.256261][ T969] 0 90 4294967496 [ 2650.257745][ T969] 1 90 4294967496 [ 2650.259161][ T969] 2 90 4294967496 [ 2650.260582][ T969] 12 90 4294967496 [ 2650.262057][ T969] 1b 90 4294967496 [ 2650.263553][ T969] ff 90 4294967496 [ 2650.265008][ T969] 12 80 4294967499 [ 2650.266554][ T969] 3 90 4294967499 [ 2650.268001][ T969] 3 80 4294967499 [ 2650.269444][ T969] a1 90 4294967499 [ 2650.270855][ T969] 1e 90 4294967499 [ 2650.272313][ T969] e6 80 4294967499 [ 2650.273763][ T969] 1 90 4294967499 [ 2650.275207][ T969] 0 90 4294967499 [ 2650.276987][ T969] 0 90 4294967499 [ 2650.278427][ T969] 1 90 4294967499 00:45:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7000000}, 0x48) [ 2650.279953][ T969] 2 90 4294967499 [ 2650.281486][ T969] 24 90 4294967499 [ 2650.282937][ T969] 1b 90 4294967499 [ 2650.284369][ T969] ff 90 4294967499 [ 2650.285807][ T969] last result at 4295201781 [ 2650.287753][ T969] last redo_fd_request at 4295202164 [ 2650.289842][ T969] status=80 [ 2650.291068][ T969] fdc_busy=1 [ 2650.292336][ T969] floppy_work.func=floppy_work_workfn [ 2650.294423][ T969] cont=ffffffff8b1391e0 [ 2650.296092][ T969] current_req=0000000000000000 [ 2650.297962][ T969] command_status=-1 [ 2650.299425][ T969] [ 2650.300382][ T969] floppy1: floppy timeout called [ 2650.305493][ T969] [ 2650.306582][ T969] floppy driver state [ 2650.308302][ T969] ------------------- [ 2650.309861][ T969] now=4295202171 last interrupt=4294967499 diff=234672 last called handler=main_command_interrupt [ 2650.313863][ T969] timeout_message=lock fdc 00:45:36 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0208, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:36 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c581f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2650.315560][ T969] last output bytes: [ 2650.317340][ T969] 0 90 4294967496 [ 2650.318760][ T969] 1 90 4294967496 [ 2650.320195][ T969] 2 90 4294967496 [ 2650.321618][ T969] 12 90 4294967496 [ 2650.323072][ T969] 1b 90 4294967496 [ 2650.324482][ T969] ff 90 4294967496 [ 2650.326060][ T969] 12 80 4294967499 [ 2650.327506][ T969] 3 90 4294967499 [ 2650.328963][ T969] 3 80 4294967499 [ 2650.330383][ T969] a1 90 4294967499 [ 2650.331878][ T969] 1e 90 4294967499 [ 2650.333325][ T969] e6 80 4294967499 [ 2650.334887][ T969] 1 90 4294967499 [ 2650.336755][ T969] 0 90 4294967499 [ 2650.338316][ T969] 0 90 4294967499 [ 2650.339755][ T969] 1 90 4294967499 [ 2650.341220][ T969] 2 90 4294967499 [ 2650.342700][ T969] 24 90 4294967499 [ 2650.344121][ T969] 1b 90 4294967499 [ 2650.345570][ T969] ff 90 4294967499 [ 2650.347620][ T969] last result at 4295201781 [ 2650.349411][ T969] last redo_fd_request at 4295202170 [ 2650.351475][ T969] status=80 [ 2650.352711][ T969] fdc_busy=1 [ 2650.353954][ T969] floppy_work.func=floppy_work_workfn [ 2650.357748][ T969] cont=ffffffff8b1391e0 [ 2650.359400][ T969] current_req=0000000000000000 [ 2650.361210][ T969] command_status=-1 [ 2650.362723][ T969] [ 2650.363654][ T969] floppy1: floppy timeout called [ 2650.368889][ T969] [ 2650.370018][ T969] floppy driver state [ 2650.371550][ T969] ------------------- [ 2650.373072][ T969] now=4295202177 last interrupt=4294967499 diff=234678 last called handler=main_command_interrupt 00:45:36 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff4, 0x3) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000040)={0x0, @motion_det}) [ 2650.377510][ T969] timeout_message=lock fdc [ 2650.379595][ T969] last output bytes: [ 2650.381112][ T969] 0 90 4294967496 [ 2650.382566][ T969] 1 90 4294967496 00:45:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48) [ 2650.383994][ T969] 2 90 4294967496 [ 2650.385608][ T969] 12 90 4294967496 [ 2650.390569][ T969] 1b 90 4294967496 [ 2650.392066][ T969] ff 90 4294967496 [ 2650.393471][ T969] 12 80 4294967499 [ 2650.394869][ T969] 3 90 4294967499 [ 2650.396943][ T969] 3 80 4294967499 [ 2650.398375][ T969] a1 90 4294967499 [ 2650.399774][ T969] 1e 90 4294967499 [ 2650.401178][ T969] e6 80 4294967499 [ 2650.402638][ T969] 1 90 4294967499 [ 2650.404031][ T969] 0 90 4294967499 [ 2650.405428][ T969] 0 90 4294967499 [ 2650.408229][ T969] 1 90 4294967499 [ 2650.409935][ T969] 2 90 4294967499 [ 2650.411344][ T969] 24 90 4294967499 [ 2650.412745][ T969] 1b 90 4294967499 [ 2650.414276][ T969] ff 90 4294967499 [ 2650.415683][ T969] last result at 4295201781 [ 2650.418379][ T969] last redo_fd_request at 4295202176 [ 2650.420451][ T969] status=80 [ 2650.421680][ T969] fdc_busy=1 [ 2650.422968][ T969] floppy_work.func=floppy_work_workfn [ 2650.425022][ T969] cont=ffffffff8b1391e0 [ 2650.427148][ T969] current_req=0000000000000000 [ 2650.429006][ T969] command_status=-1 [ 2650.430470][ T969] [ 2650.431440][ T969] floppy1: floppy timeout called 00:45:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x9000000}, 0x48) [ 2650.434329][ T969] [ 2650.435299][ T969] floppy driver state [ 2650.437929][ T969] ------------------- [ 2650.439761][ T969] now=4295202184 last interrupt=4294967499 diff=234685 last called handler=main_command_interrupt [ 2650.443933][ T969] timeout_message=lock fdc [ 2650.445659][ T969] last output bytes: [ 2650.447670][ T969] 0 90 4294967496 [ 2650.449134][ T969] 1 90 4294967496 [ 2650.450557][ T969] 2 90 4294967496 [ 2650.452000][ T969] 12 90 4294967496 [ 2650.453436][ T969] 1b 90 4294967496 00:45:37 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff4, 0x3) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000040)={0x0, @motion_det}) (async) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000040)={0x0, @motion_det}) [ 2650.454858][ T969] ff 90 4294967496 [ 2650.457307][ T969] 12 80 4294967499 [ 2650.458751][ T969] 3 90 4294967499 [ 2650.460149][ T969] 3 80 4294967499 [ 2650.461556][ T969] a1 90 4294967499 [ 2650.462976][ T969] 1e 90 4294967499 [ 2650.464383][ T969] e6 80 4294967499 [ 2650.465809][ T969] 1 90 4294967499 [ 2650.468004][ T969] 0 90 4294967499 [ 2650.469430][ T969] 0 90 4294967499 [ 2650.470833][ T969] 1 90 4294967499 [ 2650.472234][ T969] 2 90 4294967499 [ 2650.473644][ T969] 24 90 4294967499 [ 2650.475036][ T969] 1b 90 4294967499 [ 2650.476898][ T969] ff 90 4294967499 [ 2650.478321][ T969] last result at 4295201781 [ 2650.480008][ T969] last redo_fd_request at 4295202183 [ 2650.482006][ T969] status=80 [ 2650.483317][ T969] fdc_busy=1 [ 2650.484548][ T969] floppy_work.func=floppy_work_workfn [ 2650.487136][ T969] cont=ffffffff8b1391e0 [ 2650.488726][ T969] current_req=0000000000000000 [ 2650.490507][ T969] command_status=-1 [ 2650.491936][ T969] [ 2650.492880][ T969] floppy1: floppy timeout called [ 2650.495115][ T969] [ 2650.496595][ T969] floppy driver state [ 2650.498109][ T969] ------------------- [ 2650.499586][ T969] now=4295202190 last interrupt=4294967499 diff=234691 last called handler=main_command_interrupt [ 2650.503476][ T969] timeout_message=lock fdc [ 2650.505152][ T969] last output bytes: 00:45:37 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0208, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2650.507074][ T969] 0 90 4294967496 [ 2650.508925][ T969] 1 90 4294967496 [ 2650.510352][ T969] 2 90 4294967496 [ 2650.511793][ T969] 12 90 4294967496 [ 2650.513225][ T969] 1b 90 4294967496 [ 2650.514632][ T969] ff 90 4294967496 00:45:37 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x80200215, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2650.516646][ T969] 12 80 4294967499 [ 2650.518328][ T969] 3 90 4294967499 [ 2650.519798][ T969] 3 80 4294967499 [ 2650.521282][ T969] a1 90 4294967499 [ 2650.522709][ T969] 1e 90 4294967499 [ 2650.524137][ T969] e6 80 4294967499 00:45:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xa000000}, 0x48) [ 2650.528923][ T969] 1 90 4294967499 [ 2650.530387][ T969] 0 90 4294967499 [ 2650.531794][ T969] 0 90 4294967499 [ 2650.533203][ T969] 1 90 4294967499 [ 2650.534640][ T969] 2 90 4294967499 [ 2650.536114][ T969] 24 90 4294967499 [ 2650.537917][ T969] 1b 90 4294967499 [ 2650.539394][ T969] ff 90 4294967499 [ 2650.540836][ T969] last result at 4295201781 [ 2650.542523][ T969] last redo_fd_request at 4295202189 [ 2650.544556][ T969] status=80 [ 2650.545762][ T969] fdc_busy=1 00:45:37 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff4, 0x3) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000040)={0x0, @motion_det}) (async) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f0000000040)={0x0, @motion_det}) [ 2650.547098][ T969] floppy_work.func=floppy_work_workfn [ 2650.549266][ T969] cont=ffffffff8b1391e0 [ 2650.550957][ T969] current_req=0000000000000000 [ 2650.552795][ T969] command_status=-1 [ 2650.554222][ T969] [ 2650.555161][ T969] floppy1: floppy timeout called [ 2650.557339][ T969] [ 2650.558276][ T969] floppy driver state [ 2650.559775][ T969] ------------------- [ 2650.561326][ T969] now=4295202196 last interrupt=4294967499 diff=234697 last called handler=main_command_interrupt [ 2650.565331][ T969] timeout_message=lock fdc [ 2650.567154][ T969] last output bytes: [ 2650.568661][ T969] 0 90 4294967496 [ 2650.570112][ T969] 1 90 4294967496 [ 2650.571566][ T969] 2 90 4294967496 [ 2650.572983][ T969] 12 90 4294967496 [ 2650.574387][ T969] 1b 90 4294967496 [ 2650.575806][ T969] ff 90 4294967496 [ 2650.577368][ T969] 12 80 4294967499 [ 2650.578791][ T969] 3 90 4294967499 [ 2650.580278][ T969] 3 80 4294967499 [ 2650.581692][ T969] a1 90 4294967499 [ 2650.583131][ T969] 1e 90 4294967499 [ 2650.584570][ T969] e6 80 4294967499 [ 2650.586274][ T969] 1 90 4294967499 [ 2650.588006][ T969] 0 90 4294967499 [ 2650.589441][ T969] 0 90 4294967499 [ 2650.591026][ T969] 1 90 4294967499 [ 2650.592448][ T969] 2 90 4294967499 [ 2650.593909][ T969] 24 90 4294967499 [ 2650.595467][ T969] 1b 90 4294967499 [ 2650.597262][ T969] ff 90 4294967499 [ 2650.598700][ T969] last result at 4295201781 [ 2650.600413][ T969] last redo_fd_request at 4295202196 [ 2650.602471][ T969] status=80 [ 2650.603676][ T969] fdc_busy=1 00:45:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xb000000}, 0x48) [ 2650.604921][ T969] floppy_work.func=floppy_work_workfn [ 2650.607474][ T969] cont=ffffffff8b1391e0 [ 2650.609063][ T969] current_req=0000000000000000 [ 2650.610850][ T969] command_status=-1 [ 2650.612295][ T969] [ 2650.613263][ T969] floppy1: floppy timeout called [ 2650.615386][ T969] [ 2650.616559][ T969] floppy driver state [ 2650.618362][ T969] ------------------- 00:45:37 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r0 = gettid() r1 = getpgid(r0) sched_rr_get_interval(r1, &(0x7f0000000100)) wait4(r0, &(0x7f0000000040), 0x20000000, &(0x7f0000000080)) [ 2650.620152][ T969] now=4295202202 last interrupt=4294967499 diff=234703 last called handler=main_command_interrupt [ 2650.625026][ T969] timeout_message=lock fdc [ 2650.626833][ T969] last output bytes: [ 2650.628596][ T969] 0 90 4294967496 [ 2650.630326][ T969] 1 90 4294967496 [ 2650.632029][ T969] 2 90 4294967496 [ 2650.633727][ T969] 12 90 4294967496 [ 2650.635415][ T969] 1b 90 4294967496 [ 2650.637248][ T969] ff 90 4294967496 [ 2650.638752][ T969] 12 80 4294967499 [ 2650.640161][ T969] 3 90 4294967499 [ 2650.641606][ T969] 3 80 4294967499 [ 2650.643034][ T969] a1 90 4294967499 [ 2650.644432][ T969] 1e 90 4294967499 [ 2650.645912][ T969] e6 80 4294967499 [ 2650.647336][ T969] 1 90 4294967499 [ 2650.648753][ T969] 0 90 4294967499 [ 2650.650165][ T969] 0 90 4294967499 [ 2650.651602][ T969] 1 90 4294967499 [ 2650.653022][ T969] 2 90 4294967499 [ 2650.654440][ T969] 24 90 4294967499 [ 2650.655928][ T969] 1b 90 4294967499 [ 2650.657360][ T969] ff 90 4294967499 00:45:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xc000000}, 0x48) [ 2650.658767][ T969] last result at 4295201781 [ 2650.660729][ T969] last redo_fd_request at 4295202201 [ 2650.663111][ T969] status=80 [ 2650.664534][ T969] fdc_busy=1 [ 2650.666068][ T969] floppy_work.func=floppy_work_workfn [ 2650.668466][ T969] cont=ffffffff8b1391e0 [ 2650.670338][ T969] current_req=0000000000000000 [ 2650.672476][ T969] command_status=-1 [ 2650.674191][ T969] [ 2650.675301][ T969] floppy1: floppy timeout called [ 2650.679139][ T969] [ 2650.680253][ T969] floppy driver state [ 2650.682056][ T969] ------------------- 00:45:37 executing program 2: openat$pidfd(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) [ 2650.683867][ T969] now=4295202208 last interrupt=4294967499 diff=234709 last called handler=main_command_interrupt [ 2650.688858][ T969] timeout_message=lock fdc [ 2650.690863][ T969] last output bytes: [ 2650.692624][ T969] 0 90 4294967496 [ 2650.694336][ T969] 1 90 4294967496 [ 2650.696092][ T969] 2 90 4294967496 00:45:37 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x80340212, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2650.697884][ T969] 12 90 4294967496 [ 2650.699640][ T969] 1b 90 4294967496 [ 2650.701352][ T969] ff 90 4294967496 [ 2650.703034][ T969] 12 80 4294967499 00:45:37 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) gettid() (async) r0 = gettid() r1 = getpgid(r0) sched_rr_get_interval(r1, &(0x7f0000000100)) wait4(r0, &(0x7f0000000040), 0x20000000, &(0x7f0000000080)) [ 2650.704748][ T969] 3 90 4294967499 [ 2650.706881][ T969] 3 80 4294967499 [ 2650.708586][ T969] a1 90 4294967499 [ 2650.710307][ T969] 1e 90 4294967499 [ 2650.712023][ T969] e6 80 4294967499 [ 2650.713715][ T969] 1 90 4294967499 [ 2650.715399][ T969] 0 90 4294967499 [ 2650.717833][ T969] 0 90 4294967499 [ 2650.719738][ T969] 1 90 4294967499 00:45:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xd000000}, 0x48) [ 2650.721482][ T969] 2 90 4294967499 [ 2650.723307][ T969] 24 90 4294967499 [ 2650.724729][ T969] 1b 90 4294967499 [ 2650.726248][ T969] ff 90 4294967499 [ 2650.727657][ T969] last result at 4295201781 [ 2650.729354][ T969] last redo_fd_request at 4295202208 [ 2650.731334][ T969] status=80 [ 2650.732526][ T969] fdc_busy=1 [ 2650.733749][ T969] floppy_work.func=floppy_work_workfn [ 2650.735728][ T969] cont=ffffffff8b1391e0 [ 2650.738049][ T969] current_req=0000000000000000 [ 2650.739863][ T969] command_status=-1 [ 2650.741435][ T969] [ 2650.742396][ T969] floppy1: floppy timeout called [ 2650.745325][ T969] [ 2650.746728][ T969] floppy driver state [ 2650.748264][ T969] ------------------- 00:45:37 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x80041285, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2650.749776][ T969] now=4295202215 last interrupt=4294967499 diff=234716 last called handler=main_command_interrupt [ 2650.753944][ T969] timeout_message=lock fdc [ 2650.755628][ T969] last output bytes: [ 2650.757603][ T969] 0 90 4294967496 [ 2650.759028][ T969] 1 90 4294967496 [ 2650.760463][ T969] 2 90 4294967496 [ 2650.761878][ T969] 12 90 4294967496 [ 2650.763314][ T969] 1b 90 4294967496 [ 2650.764738][ T969] ff 90 4294967496 [ 2650.767477][ T969] 12 80 4294967499 [ 2650.769195][ T969] 3 90 4294967499 [ 2650.770876][ T969] 3 80 4294967499 [ 2650.772597][ T969] a1 90 4294967499 [ 2650.776322][ T969] 1e 90 4294967499 [ 2650.778057][ T969] e6 80 4294967499 [ 2650.779741][ T969] 1 90 4294967499 [ 2650.781433][ T969] 0 90 4294967499 [ 2650.783122][ T969] 0 90 4294967499 [ 2650.784812][ T969] 1 90 4294967499 [ 2650.787875][ T969] 2 90 4294967499 [ 2650.789596][ T969] 24 90 4294967499 [ 2650.791297][ T969] 1b 90 4294967499 00:45:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xe000000}, 0x48) [ 2650.792998][ T969] ff 90 4294967499 [ 2650.794763][ T969] last result at 4295201781 [ 2650.797137][ T969] last redo_fd_request at 4295202214 [ 2650.799293][ T969] status=80 [ 2650.800595][ T969] fdc_busy=1 [ 2650.801848][ T969] floppy_work.func=floppy_work_workfn [ 2650.803920][ T969] cont=ffffffff8b1391e0 [ 2650.805511][ T969] current_req=0000000000000000 [ 2650.807696][ T969] command_status=-1 [ 2650.809207][ T969] [ 2650.810153][ T969] floppy1: floppy timeout called [ 2650.812874][ T969] [ 2650.813826][ T969] floppy driver state [ 2650.815318][ T969] ------------------- [ 2650.817200][ T969] now=4295202222 last interrupt=4294967499 diff=234723 last called handler=main_command_interrupt 00:45:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xf000000}, 0x48) [ 2650.821123][ T969] timeout_message=lock fdc [ 2650.823009][ T969] last output bytes: [ 2650.824470][ T969] 0 90 4294967496 [ 2650.826450][ T969] 1 90 4294967496 [ 2650.828028][ T969] 2 90 4294967496 [ 2650.829458][ T969] 12 90 4294967496 [ 2650.830871][ T969] 1b 90 4294967496 [ 2650.832309][ T969] ff 90 4294967496 [ 2650.833741][ T969] 12 80 4294967499 [ 2650.835233][ T969] 3 90 4294967499 [ 2650.839417][ T969] 3 80 4294967499 [ 2650.841384][ T969] a1 90 4294967499 [ 2650.843335][ T969] 1e 90 4294967499 [ 2650.845252][ T969] e6 80 4294967499 [ 2650.847300][ T969] 1 90 4294967499 [ 2650.849771][ T969] 0 90 4294967499 [ 2650.851721][ T969] 0 90 4294967499 00:45:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000000}, 0x48) [ 2650.853667][ T969] 1 90 4294967499 [ 2650.855772][ T969] 2 90 4294967499 [ 2650.858145][ T969] 24 90 4294967499 [ 2650.860102][ T969] 1b 90 4294967499 [ 2650.862174][ T969] ff 90 4294967499 [ 2650.864139][ T969] last result at 4295201781 [ 2650.866872][ T969] last redo_fd_request at 4295202221 [ 2650.869601][ T969] status=80 00:45:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11000000}, 0x48) [ 2650.871295][ T969] fdc_busy=1 [ 2650.873161][ T969] floppy_work.func=floppy_work_workfn [ 2650.876062][ T969] cont=ffffffff8b1391e0 [ 2650.878179][ T969] current_req=0000000000000000 [ 2650.880586][ T969] command_status=-1 [ 2650.882560][ T969] [ 2650.883871][ T969] floppy1: floppy timeout called [ 2650.887597][T19958] [ 2650.888910][T19958] floppy driver state [ 2650.890919][T19958] ------------------- [ 2650.892945][T19958] now=4295202229 last interrupt=4294967499 diff=234730 last called handler=main_command_interrupt [ 2650.898463][T19958] timeout_message=lock fdc [ 2650.900727][T19958] last output bytes: [ 2650.902653][T19958] 0 90 4294967496 [ 2650.904433][T19958] 1 90 4294967496 [ 2650.906900][T19958] 2 90 4294967496 [ 2650.908813][T19958] 12 90 4294967496 [ 2650.910707][T19958] 1b 90 4294967496 [ 2650.912728][T19958] ff 90 4294967496 [ 2650.914680][T19958] 12 80 4294967499 [ 2650.917636][T19958] 3 90 4294967499 [ 2650.919076][T19958] 3 80 4294967499 [ 2650.920588][T19958] a1 90 4294967499 [ 2650.922041][T19958] 1e 90 4294967499 [ 2650.923489][T19958] e6 80 4294967499 [ 2650.924944][T19958] 1 90 4294967499 [ 2650.926564][T19958] 0 90 4294967499 [ 2650.927981][T19958] 0 90 4294967499 [ 2650.929411][T19958] 1 90 4294967499 [ 2650.930876][T19958] 2 90 4294967499 [ 2650.932307][T19958] 24 90 4294967499 [ 2650.933735][T19958] 1b 90 4294967499 [ 2650.935179][T19958] ff 90 4294967499 [ 2650.938273][T19958] last result at 4295201781 [ 2650.939998][T19958] last redo_fd_request at 4295202229 [ 2650.941987][T19958] status=80 [ 2650.943225][T19958] fdc_busy=1 [ 2650.944442][T19958] floppy_work.func=floppy_work_workfn [ 2650.946548][T19958] cont=ffffffff8b1391e0 [ 2650.948107][T19958] current_req=0000000000000000 [ 2650.949936][T19958] command_status=-1 [ 2650.951395][T19958] [ 2650.952332][T19958] floppy1: floppy timeout called [ 2650.954484][T19958] [ 2650.955462][T19958] floppy driver state [ 2650.958715][T19958] ------------------- [ 2650.960286][T19958] now=4295202236 last interrupt=4294967499 diff=234737 last called handler=main_command_interrupt [ 2650.964248][T19958] timeout_message=lock fdc [ 2650.966004][T19958] last output bytes: 00:45:37 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x80340213, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2650.967467][T19958] 0 90 4294967496 [ 2650.969330][T19958] 1 90 4294967496 [ 2650.970994][T19958] 2 90 4294967496 [ 2650.972409][T19958] 12 90 4294967496 [ 2650.973829][T19958] 1b 90 4294967496 [ 2650.975222][T19958] ff 90 4294967496 [ 2650.978788][T19958] 12 80 4294967499 [ 2650.980309][T19958] 3 90 4294967499 [ 2650.981744][T19958] 3 80 4294967499 [ 2650.983186][T19958] a1 90 4294967499 00:45:37 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) r0 = gettid() r1 = getpgid(r0) sched_rr_get_interval(r1, &(0x7f0000000100)) (async) wait4(r0, &(0x7f0000000040), 0x20000000, &(0x7f0000000080)) 00:45:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x12000000}, 0x48) 00:45:37 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2650.984592][T19958] 1e 90 4294967499 [ 2650.986466][T19958] e6 80 4294967499 [ 2650.987925][T19958] 1 90 4294967499 [ 2650.989373][T19958] 0 90 4294967499 [ 2650.991069][T19958] 0 90 4294967499 [ 2650.992915][T19958] 1 90 4294967499 [ 2650.994371][T19958] 2 90 4294967499 [ 2651.001239][T19958] 24 90 4294967499 [ 2651.002690][T19958] 1b 90 4294967499 [ 2651.004231][T19958] ff 90 4294967499 [ 2651.005671][T19958] last result at 4295201781 [ 2651.008117][T19958] last redo_fd_request at 4295202235 [ 2651.010280][T19958] status=80 [ 2651.011876][T19958] fdc_busy=1 [ 2651.013347][T19958] floppy_work.func=floppy_work_workfn [ 2651.015374][T19958] cont=ffffffff8b1391e0 [ 2651.017178][T19958] current_req=0000000000000000 [ 2651.019100][T19958] command_status=-1 [ 2651.020745][T19958] 00:45:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x13000000}, 0x48) [ 2651.022000][T19958] floppy1: floppy timeout called [ 2651.024759][ T969] [ 2651.025777][ T969] floppy driver state [ 2651.027429][ T969] ------------------- [ 2651.028945][ T969] now=4295202243 last interrupt=4294967499 diff=234744 last called handler=main_command_interrupt [ 2651.032852][ T969] timeout_message=lock fdc [ 2651.034511][ T969] last output bytes: [ 2651.036559][ T969] 0 90 4294967496 [ 2651.037975][ T969] 1 90 4294967496 [ 2651.039379][ T969] 2 90 4294967496 [ 2651.040788][ T969] 12 90 4294967496 [ 2651.042175][ T969] 1b 90 4294967496 [ 2651.043608][ T969] ff 90 4294967496 [ 2651.045013][ T969] 12 80 4294967499 [ 2651.047026][ T969] 3 90 4294967499 [ 2651.048455][ T969] 3 80 4294967499 [ 2651.049853][ T969] a1 90 4294967499 [ 2651.051269][ T969] 1e 90 4294967499 [ 2651.052658][ T969] e6 80 4294967499 [ 2651.054073][ T969] 1 90 4294967499 [ 2651.055472][ T969] 0 90 4294967499 [ 2651.057387][ T969] 0 90 4294967499 [ 2651.058857][ T969] 1 90 4294967499 [ 2651.060278][ T969] 2 90 4294967499 [ 2651.061681][ T969] 24 90 4294967499 00:45:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x14000000}, 0x48) [ 2651.063134][ T969] 1b 90 4294967499 [ 2651.064755][ T969] ff 90 4294967499 [ 2651.066880][ T969] last result at 4295201781 [ 2651.068599][ T969] last redo_fd_request at 4295202242 [ 2651.070574][ T969] status=80 [ 2651.071770][ T969] fdc_busy=1 [ 2651.072989][ T969] floppy_work.func=floppy_work_workfn [ 2651.074981][ T969] cont=ffffffff8b1391e0 [ 2651.077186][ T969] current_req=0000000000000000 [ 2651.078980][ T969] command_status=-1 [ 2651.080395][ T969] [ 2651.081332][ T969] floppy1: floppy timeout called [ 2651.083549][ T969] [ 2651.084446][ T969] floppy driver state [ 2651.086460][ T969] ------------------- [ 2651.087990][ T969] now=4295202249 last interrupt=4294967499 diff=234750 last called handler=main_command_interrupt [ 2651.091867][ T969] timeout_message=lock fdc [ 2651.093576][ T969] last output bytes: [ 2651.095032][ T969] 0 90 4294967496 [ 2651.096986][ T969] 1 90 4294967496 [ 2651.098405][ T969] 2 90 4294967496 [ 2651.099787][ T969] 12 90 4294967496 [ 2651.101179][ T969] 1b 90 4294967496 00:45:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x15000000}, 0x48) [ 2651.102560][ T969] ff 90 4294967496 [ 2651.104166][ T969] 12 80 4294967499 [ 2651.105654][ T969] 3 90 4294967499 [ 2651.108180][ T969] 3 80 4294967499 [ 2651.109646][ T969] a1 90 4294967499 [ 2651.111032][ T969] 1e 90 4294967499 [ 2651.112435][ T969] e6 80 4294967499 [ 2651.113835][ T969] 1 90 4294967499 [ 2651.115212][ T969] 0 90 4294967499 [ 2651.117192][ T969] 0 90 4294967499 [ 2651.118636][ T969] 1 90 4294967499 [ 2651.120023][ T969] 2 90 4294967499 [ 2651.121429][ T969] 24 90 4294967499 [ 2651.122873][ T969] 1b 90 4294967499 [ 2651.124284][ T969] ff 90 4294967499 [ 2651.125707][ T969] last result at 4295201781 [ 2651.128013][ T969] last redo_fd_request at 4295202248 [ 2651.130002][ T969] status=80 [ 2651.131201][ T969] fdc_busy=1 [ 2651.132415][ T969] floppy_work.func=floppy_work_workfn [ 2651.134420][ T969] cont=ffffffff8b1391e0 00:45:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x16000000}, 0x48) [ 2651.136043][ T969] current_req=0000000000000000 [ 2651.138105][ T969] command_status=-1 [ 2651.139611][ T969] [ 2651.140743][ T969] floppy1: floppy timeout called [ 2651.143796][ T969] [ 2651.144942][ T969] floppy driver state [ 2651.146843][ T969] ------------------- [ 2651.151985][ T969] now=4295202255 last interrupt=4294967499 diff=234756 last called handler=main_command_interrupt [ 2651.156894][ T969] timeout_message=lock fdc [ 2651.159113][ T969] last output bytes: [ 2651.160701][ T969] 0 90 4294967496 [ 2651.162139][ T969] 1 90 4294967496 [ 2651.163603][ T969] 2 90 4294967496 [ 2651.165040][ T969] 12 90 4294967496 [ 2651.166563][ T969] 1b 90 4294967496 [ 2651.167995][ T969] ff 90 4294967496 00:45:37 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x80340212, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:37 executing program 3: syz_open_dev$floppy(&(0x7f0000000040), 0x80000ff1, 0x80000) r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x7, 0x80000) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000080)) [ 2651.169426][ T969] 12 80 4294967499 [ 2651.171264][ T969] 3 90 4294967499 [ 2651.172778][ T969] 3 80 4294967499 00:45:37 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x80580211, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2651.174191][ T969] a1 90 4294967499 [ 2651.175798][ T969] 1e 90 4294967499 [ 2651.177392][ T969] e6 80 4294967499 [ 2651.178807][ T969] 1 90 4294967499 [ 2651.180204][ T969] 0 90 4294967499 [ 2651.181650][ T969] 0 90 4294967499 [ 2651.183116][ T969] 1 90 4294967499 [ 2651.184585][ T969] 2 90 4294967499 [ 2651.186450][ T969] 24 90 4294967499 [ 2651.187948][ T969] 1b 90 4294967499 [ 2651.189503][ T969] ff 90 4294967499 [ 2651.191165][ T969] last result at 4295201781 [ 2651.192884][ T969] last redo_fd_request at 4295202254 [ 2651.194857][ T969] status=80 [ 2651.196638][ T969] fdc_busy=1 [ 2651.197891][ T969] floppy_work.func=floppy_work_workfn [ 2651.199906][ T969] cont=ffffffff8b1391e0 [ 2651.201516][ T969] current_req=0000000000000000 [ 2651.203326][ T969] command_status=-1 [ 2651.205107][ T969] [ 2651.207123][ T969] floppy1: floppy timeout called [ 2651.217460][T19958] [ 2651.218810][T19958] floppy driver state [ 2651.220700][T19958] ------------------- [ 2651.222543][T19958] now=4295202262 last interrupt=4294967499 diff=234763 last called handler=main_command_interrupt 00:45:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x17000000}, 0x48) [ 2651.227448][T19958] timeout_message=lock fdc [ 2651.229461][T19958] last output bytes: [ 2651.231117][T19958] 0 90 4294967496 [ 2651.232524][T19958] 1 90 4294967496 [ 2651.233956][T19958] 2 90 4294967496 [ 2651.235377][T19958] 12 90 4294967496 [ 2651.237241][T19958] 1b 90 4294967496 [ 2651.238665][T19958] ff 90 4294967496 [ 2651.240192][T19958] 12 80 4294967499 [ 2651.241669][T19958] 3 90 4294967499 [ 2651.243897][T19958] 3 80 4294967499 [ 2651.245339][T19958] a1 90 4294967499 [ 2651.247067][T19958] 1e 90 4294967499 [ 2651.248497][T19958] e6 80 4294967499 [ 2651.249976][T19958] 1 90 4294967499 [ 2651.251446][T19958] 0 90 4294967499 [ 2651.252884][T19958] 0 90 4294967499 [ 2651.254339][T19958] 1 90 4294967499 [ 2651.256557][T19958] 2 90 4294967499 [ 2651.258042][T19958] 24 90 4294967499 [ 2651.259454][T19958] 1b 90 4294967499 [ 2651.260901][T19958] ff 90 4294967499 00:45:37 executing program 3: syz_open_dev$floppy(&(0x7f0000000040), 0x80000ff1, 0x80000) r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x7, 0x80000) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000080)) syz_open_dev$floppy(&(0x7f0000000040), 0x80000ff1, 0x80000) (async) syz_open_dev$floppy(&(0x7f0000000000), 0x7, 0x80000) (async) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000080)) (async) [ 2651.262354][T19958] last result at 4295201781 [ 2651.264312][T19958] last redo_fd_request at 4295202262 [ 2651.267084][T19958] status=80 [ 2651.268309][T19958] fdc_busy=1 00:45:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18000000}, 0x48) [ 2651.269558][T19958] floppy_work.func=floppy_work_workfn [ 2651.271853][T19958] cont=ffffffff8b1391e0 [ 2651.273428][T19958] current_req=0000000000000000 [ 2651.275245][T19958] command_status=-1 [ 2651.276825][T19958] [ 2651.277812][T19958] floppy1: floppy timeout called [ 2651.280483][T19958] [ 2651.281465][T19958] floppy driver state [ 2651.283016][T19958] ------------------- [ 2651.284554][T19958] now=4295202268 last interrupt=4294967499 diff=234769 last called handler=main_command_interrupt [ 2651.288601][T19958] timeout_message=lock fdc [ 2651.290303][T19958] last output bytes: [ 2651.291831][T19958] 0 90 4294967496 [ 2651.293238][T19958] 1 90 4294967496 [ 2651.294634][T19958] 2 90 4294967496 [ 2651.296108][T19958] 12 90 4294967496 [ 2651.297519][T19958] 1b 90 4294967496 [ 2651.298907][T19958] ff 90 4294967496 [ 2651.300303][T19958] 12 80 4294967499 [ 2651.301688][T19958] 3 90 4294967499 [ 2651.303109][T19958] 3 80 4294967499 [ 2651.304491][T19958] a1 90 4294967499 [ 2651.305993][T19958] 1e 90 4294967499 [ 2651.307381][T19958] e6 80 4294967499 [ 2651.308782][T19958] 1 90 4294967499 [ 2651.310167][T19958] 0 90 4294967499 [ 2651.311572][T19958] 0 90 4294967499 [ 2651.312988][T19958] 1 90 4294967499 00:45:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x19000000}, 0x48) [ 2651.314402][T19958] 2 90 4294967499 [ 2651.316080][T19958] 24 90 4294967499 [ 2651.317761][T19958] 1b 90 4294967499 [ 2651.319331][T19958] ff 90 4294967499 [ 2651.320778][T19958] last result at 4295201781 [ 2651.322440][T19958] last redo_fd_request at 4295202268 [ 2651.324641][T19958] status=80 [ 2651.326020][T19958] fdc_busy=1 [ 2651.327311][T19958] floppy_work.func=floppy_work_workfn [ 2651.329408][T19958] cont=ffffffff8b1391e0 [ 2651.331123][T19958] current_req=0000000000000000 [ 2651.332948][T19958] command_status=-1 [ 2651.334675][T19958] [ 2651.335802][T19958] floppy1: floppy timeout called [ 2651.338340][T19958] [ 2651.339425][T19958] floppy driver state 00:45:37 executing program 3: syz_open_dev$floppy(&(0x7f0000000040), 0x80000ff1, 0x80000) (async) r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x7, 0x80000) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000080)) [ 2651.341394][T19958] ------------------- [ 2651.343315][T19958] now=4295202274 last interrupt=4294967499 diff=234775 last called handler=main_command_interrupt 00:45:37 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x80041272, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2651.351163][T19958] timeout_message=lock fdc [ 2651.353137][T19958] last output bytes: [ 2651.354628][T19958] 0 90 4294967496 [ 2651.356104][T19958] 1 90 4294967496 [ 2651.357546][T19958] 2 90 4294967496 [ 2651.358949][T19958] 12 90 4294967496 [ 2651.360371][T19958] 1b 90 4294967496 [ 2651.361802][T19958] ff 90 4294967496 [ 2651.363237][T19958] 12 80 4294967499 [ 2651.364630][T19958] 3 90 4294967499 [ 2651.366097][T19958] 3 80 4294967499 [ 2651.367481][T19958] a1 90 4294967499 [ 2651.368898][T19958] 1e 90 4294967499 [ 2651.370294][T19958] e6 80 4294967499 [ 2651.371707][T19958] 1 90 4294967499 [ 2651.373112][T19958] 0 90 4294967499 [ 2651.374494][T19958] 0 90 4294967499 00:45:37 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0xc0045878, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2651.375967][T19958] 1 90 4294967499 [ 2651.377644][T19958] 2 90 4294967499 [ 2651.379115][T19958] 24 90 4294967499 [ 2651.380508][T19958] 1b 90 4294967499 [ 2651.381946][T19958] ff 90 4294967499 [ 2651.383471][T19958] last result at 4295201781 [ 2651.385661][T19958] last redo_fd_request at 4295202274 [ 2651.388933][T19958] status=80 [ 2651.390935][T19958] fdc_busy=1 00:45:37 executing program 3: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDEJECT(r0, 0x25a) [ 2651.392613][T19958] floppy_work.func=floppy_work_workfn [ 2651.395245][T19958] cont=ffffffff8b1391e0 [ 2651.397419][T19958] current_req=0000000000000000 [ 2651.399360][T19958] command_status=-1 [ 2651.400897][T19958] [ 2651.401909][T19958] floppy1: floppy timeout called [ 2651.403986][T19958] [ 2651.405004][T19958] floppy driver state [ 2651.407112][T19958] ------------------- [ 2651.408635][T19958] now=4295202281 last interrupt=4294967499 diff=234782 last called handler=main_command_interrupt [ 2651.412337][T19958] timeout_message=lock fdc [ 2651.414158][T19958] last output bytes: 00:45:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x48) [ 2651.415623][T19958] 0 90 4294967496 [ 2651.417769][T19958] 1 90 4294967496 [ 2651.419752][T19958] 2 90 4294967496 [ 2651.421298][T19958] 12 90 4294967496 [ 2651.422827][T19958] 1b 90 4294967496 [ 2651.424437][T19958] ff 90 4294967496 [ 2651.426990][T19958] 12 80 4294967499 [ 2651.428532][T19958] 3 90 4294967499 [ 2651.429992][T19958] 3 80 4294967499 [ 2651.431466][T19958] a1 90 4294967499 [ 2651.432932][T19958] 1e 90 4294967499 [ 2651.434464][T19958] e6 80 4294967499 [ 2651.436070][T19958] 1 90 4294967499 [ 2651.437583][T19958] 0 90 4294967499 [ 2651.439075][T19958] 0 90 4294967499 [ 2651.440571][T19958] 1 90 4294967499 [ 2651.442242][T19958] 2 90 4294967499 [ 2651.443724][T19958] 24 90 4294967499 [ 2651.445197][T19958] 1b 90 4294967499 [ 2651.446729][T19958] ff 90 4294967499 [ 2651.448210][T19958] last result at 4295201781 [ 2651.450026][T19958] last redo_fd_request at 4295202280 00:45:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1b000000}, 0x48) [ 2651.452164][T19958] status=80 [ 2651.453640][T19958] fdc_busy=1 [ 2651.454991][T19958] floppy_work.func=floppy_work_workfn [ 2651.457227][T19958] cont=ffffffff8b1391e0 [ 2651.458858][T19958] current_req=0000000000000000 [ 2651.460789][T19958] command_status=-1 [ 2651.462379][T19958] [ 2651.463363][T19958] floppy1: floppy timeout called [ 2651.470399][T19958] 00:45:38 executing program 3: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDEJECT(r0, 0x25a) (async) ioctl$FLOPPY_FDEJECT(r0, 0x25a) [ 2651.471545][T19958] floppy driver state [ 2651.473771][T19958] ------------------- 00:45:38 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x80041270, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2651.475457][T19958] now=4295202287 last interrupt=4294967499 diff=234788 last called handler=main_command_interrupt [ 2651.479840][T19958] timeout_message=lock fdc [ 2651.481699][T19958] last output bytes: [ 2651.483691][T19958] 0 90 4294967496 [ 2651.485281][T19958] 1 90 4294967496 [ 2651.486861][T19958] 2 90 4294967496 [ 2651.488431][T19958] 12 90 4294967496 [ 2651.489952][T19958] 1b 90 4294967496 [ 2651.491481][T19958] ff 90 4294967496 [ 2651.492996][T19958] 12 80 4294967499 [ 2651.494817][T19958] 3 90 4294967499 [ 2651.496629][T19958] 3 80 4294967499 [ 2651.500869][T19958] a1 90 4294967499 00:45:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1c000000}, 0x48) [ 2651.502374][T19958] 1e 90 4294967499 [ 2651.503997][T19958] e6 80 4294967499 [ 2651.505447][T19958] 1 90 4294967499 [ 2651.507119][T19958] 0 90 4294967499 [ 2651.508531][T19958] 0 90 4294967499 [ 2651.509959][T19958] 1 90 4294967499 [ 2651.511368][T19958] 2 90 4294967499 [ 2651.512761][T19958] 24 90 4294967499 [ 2651.514149][T19958] 1b 90 4294967499 [ 2651.515597][T19958] ff 90 4294967499 [ 2651.517152][T19958] last result at 4295201781 [ 2651.518910][T19958] last redo_fd_request at 4295202286 [ 2651.520937][T19958] status=80 [ 2651.522189][T19958] fdc_busy=1 [ 2651.523567][T19958] floppy_work.func=floppy_work_workfn 00:45:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1d000000}, 0x48) [ 2651.525804][T19958] cont=ffffffff8b1391e0 [ 2651.527578][T19958] current_req=0000000000000000 [ 2651.529445][T19958] command_status=-1 [ 2651.530871][T19958] [ 2651.531822][T19958] floppy1: floppy timeout called [ 2651.534251][T19958] [ 2651.535218][T19958] floppy driver state [ 2651.536872][T19958] ------------------- [ 2651.538591][T19958] now=4295202294 last interrupt=4294967499 diff=234795 last called handler=main_command_interrupt [ 2651.542647][T19958] timeout_message=lock fdc [ 2651.544312][T19958] last output bytes: [ 2651.545785][T19958] 0 90 4294967496 [ 2651.547415][T19958] 1 90 4294967496 [ 2651.548946][T19958] 2 90 4294967496 [ 2651.550460][T19958] 12 90 4294967496 [ 2651.552617][T19958] 1b 90 4294967496 [ 2651.554143][T19958] ff 90 4294967496 [ 2651.555557][T19958] 12 80 4294967499 [ 2651.557359][T19958] 3 90 4294967499 [ 2651.558846][T19958] 3 80 4294967499 [ 2651.560356][T19958] a1 90 4294967499 [ 2651.561899][T19958] 1e 90 4294967499 [ 2651.563470][T19958] e6 80 4294967499 [ 2651.565022][T19958] 1 90 4294967499 [ 2651.566675][T19958] 0 90 4294967499 [ 2651.568171][T19958] 0 90 4294967499 [ 2651.569665][T19958] 1 90 4294967499 [ 2651.571189][T19958] 2 90 4294967499 [ 2651.572583][T19958] 24 90 4294967499 [ 2651.574069][T19958] 1b 90 4294967499 [ 2651.575469][T19958] ff 90 4294967499 [ 2651.576987][T19958] last result at 4295201781 [ 2651.578742][T19958] last redo_fd_request at 4295202293 [ 2651.580917][T19958] status=80 [ 2651.582353][T19958] fdc_busy=1 [ 2651.583667][T19958] floppy_work.func=floppy_work_workfn [ 2651.585824][T19958] cont=ffffffff8b1391e0 [ 2651.587519][T19958] current_req=0000000000000000 [ 2651.589565][T19958] command_status=-1 [ 2651.591318][T19958] [ 2651.592493][T19958] floppy1: floppy timeout called [ 2651.595208][T19958] [ 2651.596482][T19958] floppy driver state [ 2651.598516][T19958] ------------------- [ 2651.600480][T19958] now=4295202300 last interrupt=4294967499 diff=234801 last called handler=main_command_interrupt [ 2651.605952][T19958] timeout_message=lock fdc 00:45:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1e000000}, 0x48) [ 2651.607690][T19958] last output bytes: 00:45:38 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0xc0045878, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2651.609600][T19958] 0 90 4294967496 [ 2651.611537][T19958] 1 90 4294967496 [ 2651.613286][T19958] 2 90 4294967496 [ 2651.615067][T19958] 12 90 4294967496 [ 2651.619755][T19958] 1b 90 4294967496 00:45:38 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2651.621488][T19958] ff 90 4294967496 [ 2651.623432][T19958] 12 80 4294967499 [ 2651.624955][T19958] 3 90 4294967499 00:45:38 executing program 3: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDEJECT(r0, 0x25a) [ 2651.626675][T19958] 3 80 4294967499 [ 2651.628498][T19958] a1 90 4294967499 [ 2651.629967][T19958] 1e 90 4294967499 [ 2651.631776][T19958] e6 80 4294967499 [ 2651.633412][T19958] 1 90 4294967499 [ 2651.634891][T19958] 0 90 4294967499 [ 2651.636647][T19958] 0 90 4294967499 [ 2651.638168][T19958] 1 90 4294967499 [ 2651.639596][T19958] 2 90 4294967499 [ 2651.641118][T19958] 24 90 4294967499 [ 2651.642569][T19958] 1b 90 4294967499 [ 2651.644055][T19958] ff 90 4294967499 [ 2651.645570][T19958] last result at 4295201781 [ 2651.647347][T19958] last redo_fd_request at 4295202299 [ 2651.649415][T19958] status=80 [ 2651.650609][T19958] fdc_busy=1 [ 2651.651859][T19958] floppy_work.func=floppy_work_workfn [ 2651.653858][T19958] cont=ffffffff8b1391e0 [ 2651.655533][T19958] current_req=0000000000000000 00:45:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1f000000}, 0x48) [ 2651.657593][T19958] command_status=-1 [ 2651.659196][T19958] [ 2651.660132][T19958] floppy1: floppy timeout called [ 2651.662237][T19958] [ 2651.663155][T19958] floppy driver state [ 2651.666487][T19958] ------------------- [ 2651.668334][T19958] now=4295202307 last interrupt=4294967499 diff=234808 last called handler=main_command_interrupt [ 2651.673135][T19958] timeout_message=lock fdc [ 2651.675170][T19958] last output bytes: [ 2651.677727][T19958] 0 90 4294967496 [ 2651.679428][T19958] 1 90 4294967496 [ 2651.681139][T19958] 2 90 4294967496 [ 2651.682829][T19958] 12 90 4294967496 [ 2651.684526][T19958] 1b 90 4294967496 [ 2651.686303][T19958] ff 90 4294967496 [ 2651.687979][T19958] 12 80 4294967499 [ 2651.689696][T19958] 3 90 4294967499 00:45:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000000}, 0x48) [ 2651.691428][T19958] 3 80 4294967499 [ 2651.693290][T19958] a1 90 4294967499 [ 2651.694991][T19958] 1e 90 4294967499 [ 2651.696778][T19958] e6 80 4294967499 [ 2651.698506][T19958] 1 90 4294967499 [ 2651.700203][T19958] 0 90 4294967499 [ 2651.701888][T19958] 0 90 4294967499 [ 2651.703580][T19958] 1 90 4294967499 [ 2651.705289][T19958] 2 90 4294967499 [ 2651.707056][T19958] 24 90 4294967499 [ 2651.708729][T19958] 1b 90 4294967499 [ 2651.710433][T19958] ff 90 4294967499 00:45:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x21000000}, 0x48) [ 2651.712157][T19958] last result at 4295201781 [ 2651.714429][T19958] last redo_fd_request at 4295202306 [ 2651.716901][T19958] status=80 [ 2651.718352][T19958] fdc_busy=1 [ 2651.719838][T19958] floppy_work.func=floppy_work_workfn [ 2651.722269][T19958] cont=ffffffff8b1391e0 [ 2651.724153][T19958] current_req=0000000000000000 [ 2651.726413][T19958] command_status=-1 [ 2651.728791][T19958] [ 2651.730112][T19958] floppy1: floppy timeout called [ 2651.732681][T19958] [ 2651.733859][T19958] floppy driver state [ 2651.735743][T19958] ------------------- 00:45:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x22000000}, 0x48) [ 2651.737719][T19958] now=4295202314 last interrupt=4294967499 diff=234815 last called handler=main_command_interrupt [ 2651.742637][T19958] timeout_message=lock fdc [ 2651.744896][T19958] last output bytes: [ 2651.747038][T19958] 0 90 4294967496 [ 2651.748986][T19958] 1 90 4294967496 [ 2651.750901][T19958] 2 90 4294967496 [ 2651.752984][T19958] 12 90 4294967496 [ 2651.754928][T19958] 1b 90 4294967496 [ 2651.756697][T19958] ff 90 4294967496 [ 2651.759084][T19958] 12 80 4294967499 [ 2651.761676][T19958] 3 90 4294967499 00:45:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x23000000}, 0x48) [ 2651.764383][T19958] 3 80 4294967499 [ 2651.766444][T19958] a1 90 4294967499 [ 2651.768363][T19958] 1e 90 4294967499 [ 2651.770288][T19958] e6 80 4294967499 [ 2651.772221][T19958] 1 90 4294967499 [ 2651.774012][T19958] 0 90 4294967499 [ 2651.775972][T19958] 0 90 4294967499 [ 2651.777566][T19958] 1 90 4294967499 [ 2651.779076][T19958] 2 90 4294967499 [ 2651.780593][T19958] 24 90 4294967499 [ 2651.782191][T19958] 1b 90 4294967499 [ 2651.784024][T19958] ff 90 4294967499 [ 2651.786079][T19958] last result at 4295201781 [ 2651.788245][T19958] last redo_fd_request at 4295202313 [ 2651.790879][T19958] status=80 [ 2651.792490][T19958] fdc_busy=1 [ 2651.794096][T19958] floppy_work.func=floppy_work_workfn [ 2651.796804][T19958] cont=ffffffff8b1391e0 [ 2651.798813][T19958] current_req=0000000000000000 [ 2651.801125][T19958] command_status=-1 [ 2651.802564][T19958] [ 2651.803496][T19958] floppy1: floppy timeout called [ 2651.806581][T31887] [ 2651.809659][T31887] floppy driver state [ 2651.812937][T31887] ------------------- [ 2651.816763][T31887] now=4295202322 last interrupt=4294967499 diff=234823 last called handler=main_command_interrupt [ 2651.827643][T31887] timeout_message=lock fdc [ 2651.829383][T31887] last output bytes: [ 2651.830837][T31887] 0 90 4294967496 [ 2651.832310][T31887] 1 90 4294967496 [ 2651.833742][T31887] 2 90 4294967496 [ 2651.835138][T31887] 12 90 4294967496 [ 2651.836654][T31887] 1b 90 4294967496 [ 2651.838167][T31887] ff 90 4294967496 [ 2651.839658][T31887] 12 80 4294967499 [ 2651.841086][T31887] 3 90 4294967499 [ 2651.842550][T31887] 3 80 4294967499 [ 2651.843947][T31887] a1 90 4294967499 [ 2651.845366][T31887] 1e 90 4294967499 [ 2651.847035][T31887] e6 80 4294967499 [ 2651.848496][T31887] 1 90 4294967499 [ 2651.849906][T31887] 0 90 4294967499 [ 2651.851366][T31887] 0 90 4294967499 [ 2651.852878][T31887] 1 90 4294967499 [ 2651.854296][T31887] 2 90 4294967499 [ 2651.855704][T31887] 24 90 4294967499 [ 2651.857209][T31887] 1b 90 4294967499 [ 2651.858665][T31887] ff 90 4294967499 [ 2651.860181][T31887] last result at 4295201781 [ 2651.861930][T31887] last redo_fd_request at 4295202321 [ 2651.863915][T31887] status=80 [ 2651.865117][T31887] fdc_busy=1 [ 2651.866424][T31887] floppy_work.func=floppy_work_workfn [ 2651.868422][T31887] cont=ffffffff8b1391e0 [ 2651.869990][T31887] current_req=0000000000000000 [ 2651.871783][T31887] command_status=-1 [ 2651.873227][T31887] [ 2651.874221][T31887] floppy1: floppy timeout called [ 2651.877587][T31887] [ 2651.878539][T31887] floppy driver state [ 2651.880069][T31887] ------------------- [ 2651.881605][T31887] now=4295202328 last interrupt=4294967499 diff=234829 last called handler=main_command_interrupt [ 2651.885687][T31887] timeout_message=lock fdc [ 2651.887463][T31887] last output bytes: [ 2651.889005][T31887] 0 90 4294967496 [ 2651.890438][T31887] 1 90 4294967496 [ 2651.891855][T31887] 2 90 4294967496 [ 2651.893269][T31887] 12 90 4294967496 [ 2651.894651][T31887] 1b 90 4294967496 [ 2651.896129][T31887] ff 90 4294967496 [ 2651.897595][T31887] 12 80 4294967499 [ 2651.898998][T31887] 3 90 4294967499 [ 2651.900443][T31887] 3 80 4294967499 [ 2651.901914][T31887] a1 90 4294967499 [ 2651.903388][T31887] 1e 90 4294967499 [ 2651.904823][T31887] e6 80 4294967499 [ 2651.906589][T31887] 1 90 4294967499 00:45:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0}, 0x48) 00:45:38 executing program 3: userfaultfd(0x0) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x6}) 00:45:38 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40580290, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:38 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0xc0101282, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2651.908075][T31887] 0 90 4294967499 [ 2651.909769][T31887] 0 90 4294967499 [ 2651.911180][T31887] 1 90 4294967499 [ 2651.912607][T31887] 2 90 4294967499 [ 2651.914024][T31887] 24 90 4294967499 [ 2651.915487][T31887] 1b 90 4294967499 [ 2651.917311][T31887] ff 90 4294967499 [ 2651.918807][T31887] last result at 4295201781 [ 2651.920498][T31887] last redo_fd_request at 4295202328 [ 2651.922547][T31887] status=80 [ 2651.923764][T31887] fdc_busy=1 [ 2651.925000][T31887] floppy_work.func=floppy_work_workfn [ 2651.927531][T31887] cont=ffffffff8b1391e0 [ 2651.929125][T31887] current_req=0000000000000000 [ 2651.930901][T31887] command_status=-1 [ 2651.932355][T31887] [ 2651.933345][T31887] floppy1: floppy timeout called [ 2651.947007][T19958] [ 2651.948069][T19958] floppy driver state [ 2651.949648][T19958] ------------------- [ 2651.951434][T19958] now=4295202335 last interrupt=4294967499 diff=234836 last called handler=main_command_interrupt [ 2651.955418][T19958] timeout_message=lock fdc [ 2651.958718][T19958] last output bytes: [ 2651.960590][T19958] 0 90 4294967496 [ 2651.962384][T19958] 1 90 4294967496 [ 2651.964178][T19958] 2 90 4294967496 00:45:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) [ 2651.975056][T19958] 12 90 4294967496 [ 2651.977319][T19958] 1b 90 4294967496 [ 2651.979296][T19958] ff 90 4294967496 [ 2651.981228][T19958] 12 80 4294967499 [ 2651.983155][T19958] 3 90 4294967499 [ 2651.985097][T19958] 3 80 4294967499 [ 2651.987401][T19958] a1 90 4294967499 [ 2651.989355][T19958] 1e 90 4294967499 [ 2651.991320][T19958] e6 80 4294967499 [ 2651.993218][T19958] 1 90 4294967499 [ 2651.995486][T19958] 0 90 4294967499 [ 2651.997974][T19958] 0 90 4294967499 [ 2651.999856][T19958] 1 90 4294967499 [ 2652.001782][T19958] 2 90 4294967499 [ 2652.003677][T19958] 24 90 4294967499 [ 2652.005566][T19958] 1b 90 4294967499 [ 2652.008037][T19958] ff 90 4294967499 [ 2652.009937][T19958] last result at 4295201781 [ 2652.012138][T19958] last redo_fd_request at 4295202335 00:45:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 2652.014674][T19958] status=80 [ 2652.017085][T19958] fdc_busy=1 [ 2652.018674][T19958] floppy_work.func=floppy_work_workfn [ 2652.021242][T19958] cont=ffffffff8b1391e0 [ 2652.023188][T19958] current_req=0000000000000000 [ 2652.025262][T19958] command_status=-1 [ 2652.027205][T19958] [ 2652.028183][T19958] floppy1: floppy timeout called [ 2652.030572][T19958] [ 2652.031647][T19958] floppy driver state [ 2652.033308][T19958] ------------------- [ 2652.034991][T19958] now=4295202343 last interrupt=4294967499 diff=234844 last called handler=main_command_interrupt [ 2652.039332][T19958] timeout_message=lock fdc [ 2652.041100][T19958] last output bytes: [ 2652.042571][T19958] 0 90 4294967496 [ 2652.043986][T19958] 1 90 4294967496 [ 2652.045448][T19958] 2 90 4294967496 [ 2652.047537][T19958] 12 90 4294967496 [ 2652.048982][T19958] 1b 90 4294967496 [ 2652.050438][T19958] ff 90 4294967496 [ 2652.051836][T19958] 12 80 4294967499 [ 2652.053249][T19958] 3 90 4294967499 00:45:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) [ 2652.054638][T19958] 3 80 4294967499 [ 2652.057777][T19958] a1 90 4294967499 [ 2652.059669][T19958] 1e 90 4294967499 [ 2652.061486][T19958] e6 80 4294967499 [ 2652.063334][T19958] 1 90 4294967499 [ 2652.065257][T19958] 0 90 4294967499 [ 2652.067982][T19958] 0 90 4294967499 [ 2652.069876][T19958] 1 90 4294967499 [ 2652.071742][T19958] 2 90 4294967499 [ 2652.073542][T19958] 24 90 4294967499 [ 2652.075361][T19958] 1b 90 4294967499 [ 2652.077812][T19958] ff 90 4294967499 [ 2652.079381][T19958] last result at 4295201781 [ 2652.081558][T19958] last redo_fd_request at 4295202343 [ 2652.083817][T19958] status=80 [ 2652.085353][T19958] fdc_busy=1 [ 2652.087840][T19958] floppy_work.func=floppy_work_workfn 00:45:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) [ 2652.090504][T19958] cont=ffffffff8b1391e0 [ 2652.092814][T19958] current_req=0000000000000000 [ 2652.095070][T19958] command_status=-1 [ 2652.097610][T19958] [ 2652.098611][T19958] floppy1: floppy timeout called [ 2652.100973][T19958] [ 2652.102198][T19958] floppy driver state [ 2652.104145][T19958] ------------------- 00:45:38 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40580290, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2652.106610][T19958] now=4295202351 last interrupt=4294967499 diff=234852 last called handler=main_command_interrupt [ 2652.110982][T19958] timeout_message=lock fdc [ 2652.113048][T19958] last output bytes: [ 2652.114836][T19958] 0 90 4294967496 [ 2652.117154][T19958] 1 90 4294967496 [ 2652.118861][T19958] 2 90 4294967496 [ 2652.120559][T19958] 12 90 4294967496 [ 2652.122034][T19958] 1b 90 4294967496 [ 2652.123443][T19958] ff 90 4294967496 [ 2652.124863][T19958] 12 80 4294967499 [ 2652.126980][T19958] 3 90 4294967499 [ 2652.128700][T19958] 3 80 4294967499 [ 2652.130426][T19958] a1 90 4294967499 [ 2652.132136][T19958] 1e 90 4294967499 [ 2652.133977][T19958] e6 80 4294967499 [ 2652.135686][T19958] 1 90 4294967499 00:45:38 executing program 3: userfaultfd(0x0) (async) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x6}) 00:45:38 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2652.137731][T19958] 0 90 4294967499 [ 2652.139267][T19958] 0 90 4294967499 [ 2652.140703][T19958] 1 90 4294967499 [ 2652.142162][T19958] 2 90 4294967499 [ 2652.143624][T19958] 24 90 4294967499 [ 2652.145146][T19958] 1b 90 4294967499 [ 2652.147274][T19958] ff 90 4294967499 [ 2652.148697][T19958] last result at 4295201781 [ 2652.150413][T19958] last redo_fd_request at 4295202350 [ 2652.152413][T19958] status=80 [ 2652.153619][T19958] fdc_busy=1 [ 2652.154818][T19958] floppy_work.func=floppy_work_workfn [ 2652.157431][T19958] cont=ffffffff8b1391e0 [ 2652.159002][T19958] current_req=0000000000000000 00:45:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6}, 0x48) [ 2652.160767][T19958] command_status=-1 [ 2652.162505][T19958] [ 2652.163688][T19958] floppy1: floppy timeout called [ 2652.166818][T19958] [ 2652.167961][T19958] floppy driver state [ 2652.169882][T19958] ------------------- [ 2652.171795][T19958] now=4295202357 last interrupt=4294967499 diff=234858 last called handler=main_command_interrupt [ 2652.177176][T19958] timeout_message=lock fdc [ 2652.179138][T19958] last output bytes: [ 2652.180871][T19958] 0 90 4294967496 [ 2652.182385][T19958] 1 90 4294967496 [ 2652.184160][T19958] 2 90 4294967496 [ 2652.186012][T19958] 12 90 4294967496 [ 2652.187723][T19958] 1b 90 4294967496 [ 2652.189398][T19958] ff 90 4294967496 [ 2652.190917][T19958] 12 80 4294967499 [ 2652.192425][T19958] 3 90 4294967499 [ 2652.194003][T19958] 3 80 4294967499 [ 2652.195748][T19958] a1 90 4294967499 [ 2652.197442][T19958] 1e 90 4294967499 [ 2652.199536][T19958] e6 80 4294967499 [ 2652.201261][T19958] 1 90 4294967499 [ 2652.203079][T19958] 0 90 4294967499 [ 2652.204913][T19958] 0 90 4294967499 00:45:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x48) [ 2652.206822][T19958] 1 90 4294967499 [ 2652.208778][T19958] 2 90 4294967499 [ 2652.210477][T19958] 24 90 4294967499 [ 2652.212207][T19958] 1b 90 4294967499 [ 2652.213958][T19958] ff 90 4294967499 [ 2652.215740][T19958] last result at 4295201781 [ 2652.218103][T19958] last redo_fd_request at 4295202357 [ 2652.220728][T19958] status=80 [ 2652.222254][T19958] fdc_busy=1 [ 2652.223822][T19958] floppy_work.func=floppy_work_workfn [ 2652.226473][T19958] cont=ffffffff8b1391e0 [ 2652.228463][T19958] current_req=0000000000000000 [ 2652.230746][T19958] command_status=-1 [ 2652.232450][T19958] [ 2652.233502][T19958] floppy1: floppy timeout called [ 2652.236339][T19958] [ 2652.237519][T19958] floppy driver state [ 2652.239093][T19958] ------------------- [ 2652.240686][T19958] now=4295202364 last interrupt=4294967499 diff=234865 last called handler=main_command_interrupt [ 2652.244907][T19958] timeout_message=lock fdc 00:45:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x48) [ 2652.246971][T19958] last output bytes: [ 2652.249437][T19958] 0 90 4294967496 [ 2652.251256][T19958] 1 90 4294967496 [ 2652.253040][T19958] 2 90 4294967496 [ 2652.254817][T19958] 12 90 4294967496 [ 2652.256710][T19958] 1b 90 4294967496 [ 2652.258520][T19958] ff 90 4294967496 [ 2652.260345][T19958] 12 80 4294967499 [ 2652.262121][T19958] 3 90 4294967499 [ 2652.263927][T19958] 3 80 4294967499 [ 2652.265765][T19958] a1 90 4294967499 [ 2652.267643][T19958] 1e 90 4294967499 [ 2652.269240][T19958] e6 80 4294967499 [ 2652.270782][T19958] 1 90 4294967499 [ 2652.272541][T19958] 0 90 4294967499 [ 2652.274407][T19958] 0 90 4294967499 [ 2652.276348][T19958] 1 90 4294967499 [ 2652.277942][T19958] 2 90 4294967499 [ 2652.279746][T19958] 24 90 4294967499 00:45:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x48) [ 2652.281288][T19958] 1b 90 4294967499 [ 2652.283265][T19958] ff 90 4294967499 [ 2652.285099][T19958] last result at 4295201781 [ 2652.287343][T19958] last redo_fd_request at 4295202363 [ 2652.289948][T19958] status=80 [ 2652.291548][T19958] fdc_busy=1 [ 2652.292988][T19958] floppy_work.func=floppy_work_workfn [ 2652.295438][T19958] cont=ffffffff8b1391e0 [ 2652.297591][T19958] current_req=0000000000000000 [ 2652.299876][T19958] command_status=-1 [ 2652.302162][T19958] 00:45:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa}, 0x48) [ 2652.303375][T19958] floppy1: floppy timeout called [ 2652.306397][T31887] [ 2652.309382][T31887] floppy driver state [ 2652.311342][T31887] ------------------- [ 2652.313315][T31887] now=4295202371 last interrupt=4294967499 diff=234872 last called handler=main_command_interrupt [ 2652.318101][T31887] timeout_message=lock fdc [ 2652.319847][T31887] last output bytes: [ 2652.321328][T31887] 0 90 4294967496 [ 2652.322754][T31887] 1 90 4294967496 [ 2652.324485][T31887] 2 90 4294967496 00:45:38 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40580290, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2652.328001][T31887] 12 90 4294967496 [ 2652.330008][T31887] 1b 90 4294967496 [ 2652.331841][T31887] ff 90 4294967496 00:45:38 executing program 3: userfaultfd(0x0) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x6}) userfaultfd(0x0) (async) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x6}) (async) 00:45:38 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0xc020660b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2652.334817][T31887] 12 80 4294967499 [ 2652.337423][T31887] 3 90 4294967499 [ 2652.339237][T31887] 3 80 4294967499 [ 2652.341391][T31887] a1 90 4294967499 [ 2652.343193][T31887] 1e 90 4294967499 [ 2652.344919][T31887] e6 80 4294967499 [ 2652.347905][T31887] 1 90 4294967499 [ 2652.349735][T31887] 0 90 4294967499 [ 2652.351554][T31887] 0 90 4294967499 [ 2652.353357][T31887] 1 90 4294967499 [ 2652.354875][T31887] 2 90 4294967499 [ 2652.357321][T31887] 24 90 4294967499 [ 2652.359114][T31887] 1b 90 4294967499 [ 2652.360909][T31887] ff 90 4294967499 [ 2652.362676][T31887] last result at 4295201781 [ 2652.364765][T31887] last redo_fd_request at 4295202371 [ 2652.368002][T31887] status=80 [ 2652.369567][T31887] fdc_busy=1 [ 2652.371179][T31887] floppy_work.func=floppy_work_workfn [ 2652.373779][T31887] cont=ffffffff8b1391e0 [ 2652.375694][T31887] current_req=0000000000000000 [ 2652.378431][T31887] command_status=-1 [ 2652.380167][T31887] [ 2652.381352][T31887] floppy1: floppy timeout called [ 2652.383963][T31887] [ 2652.385137][T31887] floppy driver state [ 2652.387332][T31887] ------------------- [ 2652.388949][T31887] now=4295202379 last interrupt=4294967499 diff=234880 last called handler=main_command_interrupt 00:45:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xb}, 0x48) [ 2652.393827][T31887] timeout_message=lock fdc [ 2652.396564][T31887] last output bytes: [ 2652.398465][T31887] 0 90 4294967496 [ 2652.400265][T31887] 1 90 4294967496 [ 2652.402086][T31887] 2 90 4294967496 [ 2652.403868][T31887] 12 90 4294967496 [ 2652.405668][T31887] 1b 90 4294967496 [ 2652.407927][T31887] ff 90 4294967496 [ 2652.409770][T31887] 12 80 4294967499 [ 2652.411584][T31887] 3 90 4294967499 [ 2652.413381][T31887] 3 80 4294967499 [ 2652.415169][T31887] a1 90 4294967499 [ 2652.416989][T31887] 1e 90 4294967499 [ 2652.418472][T31887] e6 80 4294967499 [ 2652.419925][T31887] 1 90 4294967499 [ 2652.421502][T31887] 0 90 4294967499 00:45:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc}, 0x48) [ 2652.423074][T31887] 0 90 4294967499 [ 2652.425132][T31887] 1 90 4294967499 [ 2652.427396][T31887] 2 90 4294967499 [ 2652.429212][T31887] 24 90 4294967499 [ 2652.430760][T31887] 1b 90 4294967499 [ 2652.432575][T31887] ff 90 4294967499 [ 2652.434370][T31887] last result at 4295201781 [ 2652.436958][T31887] last redo_fd_request at 4295202378 [ 2652.439441][T31887] status=80 [ 2652.440910][T31887] fdc_busy=1 [ 2652.442470][T31887] floppy_work.func=floppy_work_workfn [ 2652.444989][T31887] cont=ffffffff8b1391e0 [ 2652.447467][T31887] current_req=0000000000000000 [ 2652.449762][T31887] command_status=-1 [ 2652.451578][T31887] [ 2652.452778][T31887] floppy1: floppy timeout called [ 2652.455320][T31887] [ 2652.456890][T31887] floppy driver state [ 2652.458722][T31887] ------------------- [ 2652.460538][T31887] now=4295202386 last interrupt=4294967499 diff=234887 last called handler=main_command_interrupt 00:45:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xd}, 0x48) [ 2652.465269][T31887] timeout_message=lock fdc [ 2652.467966][T31887] last output bytes: [ 2652.469849][T31887] 0 90 4294967496 [ 2652.471447][T31887] 1 90 4294967496 [ 2652.472864][T31887] 2 90 4294967496 [ 2652.474506][T31887] 12 90 4294967496 [ 2652.476275][T31887] 1b 90 4294967496 [ 2652.477794][T31887] ff 90 4294967496 [ 2652.479211][T31887] 12 80 4294967499 [ 2652.480622][T31887] 3 90 4294967499 [ 2652.482074][T31887] 3 80 4294967499 [ 2652.483503][T31887] a1 90 4294967499 [ 2652.484953][T31887] 1e 90 4294967499 [ 2652.487323][T31887] e6 80 4294967499 [ 2652.489139][T31887] 1 90 4294967499 [ 2652.490932][T31887] 0 90 4294967499 [ 2652.492753][T31887] 0 90 4294967499 [ 2652.494536][T31887] 1 90 4294967499 00:45:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe}, 0x48) [ 2652.496758][T31887] 2 90 4294967499 [ 2652.498776][T31887] 24 90 4294967499 [ 2652.500560][T31887] 1b 90 4294967499 [ 2652.502403][T31887] ff 90 4294967499 [ 2652.504121][T31887] last result at 4295201781 [ 2652.505813][T31887] last redo_fd_request at 4295202385 [ 2652.508132][T31887] status=80 [ 2652.509337][T31887] fdc_busy=1 [ 2652.510550][T31887] floppy_work.func=floppy_work_workfn [ 2652.512568][T31887] cont=ffffffff8b1391e0 [ 2652.514452][T31887] current_req=0000000000000000 [ 2652.517314][T31887] command_status=-1 [ 2652.518760][T31887] [ 2652.519726][T31887] floppy1: floppy timeout called [ 2652.523116][T31887] [ 2652.524146][T31887] floppy driver state [ 2652.526046][T31887] ------------------- 00:45:39 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401c0242, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2652.527998][T31887] now=4295202393 last interrupt=4294967499 diff=234894 last called handler=main_command_interrupt [ 2652.533183][T31887] timeout_message=lock fdc [ 2652.535014][T31887] last output bytes: [ 2652.537099][T31887] 0 90 4294967496 [ 2652.538896][T31887] 1 90 4294967496 [ 2652.540383][T31887] 2 90 4294967496 [ 2652.541957][T31887] 12 90 4294967496 [ 2652.543471][T31887] 1b 90 4294967496 [ 2652.545008][T31887] ff 90 4294967496 [ 2652.547024][T31887] 12 80 4294967499 [ 2652.548740][T31887] 3 90 4294967499 00:45:39 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r0 = openat$capi20(0xffffff9c, &(0x7f0000000100), 0x765204, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0084320, &(0x7f00000000c0)={0x5, &(0x7f0000000040)="b49c6fd1bd0dd30ab4e5867f659564ccfba6a2f9aaba78c0034f49f96d2b6cbe72b701f23b92fc475323fa7073f6b7ed598394a65251d24a03e54aa403dadaaaffa35765c6dfa2"}) 00:45:39 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0xc0401273, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2652.550269][T31887] 3 80 4294967499 [ 2652.551906][T31887] a1 90 4294967499 [ 2652.553372][T31887] 1e 90 4294967499 [ 2652.554800][T31887] e6 80 4294967499 [ 2652.556995][T31887] 1 90 4294967499 [ 2652.558485][T31887] 0 90 4294967499 [ 2652.560226][T31887] 0 90 4294967499 [ 2652.561744][T31887] 1 90 4294967499 [ 2652.563212][T31887] 2 90 4294967499 [ 2652.564690][T31887] 24 90 4294967499 [ 2652.566925][T31887] 1b 90 4294967499 [ 2652.568466][T31887] ff 90 4294967499 [ 2652.569990][T31887] last result at 4295201781 [ 2652.571779][T31887] last redo_fd_request at 4295202392 [ 2652.573897][T31887] status=80 [ 2652.575186][T31887] fdc_busy=1 [ 2652.576952][T31887] floppy_work.func=floppy_work_workfn [ 2652.579013][T31887] cont=ffffffff8b1391e0 [ 2652.580640][T31887] current_req=0000000000000000 [ 2652.582501][T31887] command_status=-1 [ 2652.583954][T31887] [ 2652.584929][T31887] floppy1: floppy timeout called [ 2652.587671][T31887] [ 2652.588906][T31887] floppy driver state [ 2652.590512][T31887] ------------------- 00:45:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xf}, 0x48) [ 2652.592036][T31887] now=4295202399 last interrupt=4294967499 diff=234900 last called handler=main_command_interrupt [ 2652.596628][T31887] timeout_message=lock fdc [ 2652.598441][T31887] last output bytes: [ 2652.599967][T31887] 0 90 4294967496 [ 2652.601443][T31887] 1 90 4294967496 [ 2652.602936][T31887] 2 90 4294967496 [ 2652.604411][T31887] 12 90 4294967496 [ 2652.610522][T31887] 1b 90 4294967496 [ 2652.612070][T31887] ff 90 4294967496 [ 2652.613518][T31887] 12 80 4294967499 [ 2652.614954][T31887] 3 90 4294967499 [ 2652.616768][T31887] 3 80 4294967499 [ 2652.618432][T31887] a1 90 4294967499 [ 2652.620113][T31887] 1e 90 4294967499 [ 2652.621551][T31887] e6 80 4294967499 [ 2652.623013][T31887] 1 90 4294967499 [ 2652.624464][T31887] 0 90 4294967499 [ 2652.626404][T31887] 0 90 4294967499 [ 2652.627963][T31887] 1 90 4294967499 [ 2652.629405][T31887] 2 90 4294967499 [ 2652.630947][T31887] 24 90 4294967499 [ 2652.632561][T31887] 1b 90 4294967499 00:45:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10}, 0x48) [ 2652.634079][T31887] ff 90 4294967499 [ 2652.635957][T31887] last result at 4295201781 [ 2652.637704][T31887] last redo_fd_request at 4295202399 [ 2652.639714][T31887] status=80 [ 2652.640933][T31887] fdc_busy=1 [ 2652.642176][T31887] floppy_work.func=floppy_work_workfn [ 2652.644186][T31887] cont=ffffffff8b1391e0 [ 2652.645765][T31887] current_req=0000000000000000 [ 2652.648311][T31887] command_status=-1 [ 2652.650154][T31887] [ 2652.651345][T31887] floppy1: floppy timeout called [ 2652.654501][T31887] [ 2652.655673][T31887] floppy driver state [ 2652.658073][T31887] ------------------- [ 2652.660015][T31887] now=4295202406 last interrupt=4294967499 diff=234907 last called handler=main_command_interrupt [ 2652.664113][T31887] timeout_message=lock fdc [ 2652.666589][T31887] last output bytes: [ 2652.668438][T31887] 0 90 4294967496 [ 2652.670211][T31887] 1 90 4294967496 00:45:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x11}, 0x48) [ 2652.671744][T31887] 2 90 4294967496 [ 2652.673427][T31887] 12 90 4294967496 [ 2652.675147][T31887] 1b 90 4294967496 [ 2652.677236][T31887] ff 90 4294967496 [ 2652.678935][T31887] 12 80 4294967499 [ 2652.680359][T31887] 3 90 4294967499 [ 2652.681795][T31887] 3 80 4294967499 [ 2652.683255][T31887] a1 90 4294967499 [ 2652.684684][T31887] 1e 90 4294967499 [ 2652.686385][T31887] e6 80 4294967499 [ 2652.687786][T31887] 1 90 4294967499 [ 2652.689229][T31887] 0 90 4294967499 [ 2652.690629][T31887] 0 90 4294967499 [ 2652.692069][T31887] 1 90 4294967499 [ 2652.693502][T31887] 2 90 4294967499 [ 2652.694924][T31887] 24 90 4294967499 [ 2652.696738][T31887] 1b 90 4294967499 [ 2652.698161][T31887] ff 90 4294967499 [ 2652.699617][T31887] last result at 4295201781 [ 2652.701464][T31887] last redo_fd_request at 4295202405 [ 2652.703481][T31887] status=80 [ 2652.704684][T31887] fdc_busy=1 [ 2652.705968][T31887] floppy_work.func=floppy_work_workfn [ 2652.707983][T31887] cont=ffffffff8b1391e0 [ 2652.709543][T31887] current_req=0000000000000000 00:45:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x12}, 0x48) [ 2652.711362][T31887] command_status=-1 [ 2652.713252][T31887] [ 2652.714438][T31887] floppy1: floppy timeout called [ 2652.718688][ T969] [ 2652.719947][ T969] floppy driver state [ 2652.726357][ T969] ------------------- [ 2652.728215][ T969] now=4295202413 last interrupt=4294967499 diff=234914 last called handler=main_command_interrupt 00:45:39 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x14) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:39 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0xc0401273, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2652.738142][ T969] timeout_message=lock fdc [ 2652.740269][ T969] last output bytes: 00:45:39 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r0 = openat$capi20(0xffffff9c, &(0x7f0000000100), 0x765204, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0084320, &(0x7f00000000c0)={0x5, &(0x7f0000000040)="b49c6fd1bd0dd30ab4e5867f659564ccfba6a2f9aaba78c0034f49f96d2b6cbe72b701f23b92fc475323fa7073f6b7ed598394a65251d24a03e54aa403dadaaaffa35765c6dfa2"}) (async) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0084320, &(0x7f00000000c0)={0x5, &(0x7f0000000040)="b49c6fd1bd0dd30ab4e5867f659564ccfba6a2f9aaba78c0034f49f96d2b6cbe72b701f23b92fc475323fa7073f6b7ed598394a65251d24a03e54aa403dadaaaffa35765c6dfa2"}) [ 2652.742153][ T969] 0 90 4294967496 [ 2652.744057][ T969] 1 90 4294967496 [ 2652.745800][ T969] 2 90 4294967496 [ 2652.747646][ T969] 12 90 4294967496 [ 2652.749302][ T969] 1b 90 4294967496 [ 2652.756632][ T969] ff 90 4294967496 [ 2652.758288][ T969] 12 80 4294967499 [ 2652.760069][ T969] 3 90 4294967499 [ 2652.761835][ T969] 3 80 4294967499 [ 2652.775939][ T969] a1 90 4294967499 [ 2652.777815][ T969] 1e 90 4294967499 [ 2652.779594][ T969] e6 80 4294967499 [ 2652.781382][ T969] 1 90 4294967499 [ 2652.783159][ T969] 0 90 4294967499 [ 2652.784914][ T969] 0 90 4294967499 [ 2652.786889][ T969] 1 90 4294967499 00:45:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x13}, 0x48) [ 2652.788687][ T969] 2 90 4294967499 [ 2652.790606][ T969] 24 90 4294967499 [ 2652.792377][ T969] 1b 90 4294967499 [ 2652.794156][ T969] ff 90 4294967499 [ 2652.799125][ T969] last result at 4295201781 [ 2652.801353][ T969] last redo_fd_request at 4295202412 [ 2652.803837][ T969] status=80 [ 2652.805376][ T969] fdc_busy=1 [ 2652.807182][ T969] floppy_work.func=floppy_work_workfn [ 2652.809722][ T969] cont=ffffffff8b1391e0 [ 2652.811700][ T969] current_req=0000000000000000 [ 2652.813953][ T969] command_status=-1 [ 2652.815766][ T969] [ 2652.819096][ T969] floppy1: floppy timeout called [ 2652.822272][ T969] [ 2652.823390][ T969] floppy driver state [ 2652.825151][ T969] ------------------- [ 2652.827109][ T969] now=4295202423 last interrupt=4294967499 diff=234924 last called handler=main_command_interrupt [ 2652.832500][ T969] timeout_message=lock fdc [ 2652.834767][ T969] last output bytes: 00:45:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x14}, 0x48) [ 2652.837210][ T969] 0 90 4294967496 [ 2652.839277][ T969] 1 90 4294967496 [ 2652.841074][ T969] 2 90 4294967496 [ 2652.842820][ T969] 12 90 4294967496 [ 2652.844608][ T969] 1b 90 4294967496 [ 2652.849891][ T969] ff 90 4294967496 [ 2652.851732][ T969] 12 80 4294967499 [ 2652.853337][ T969] 3 90 4294967499 [ 2652.854785][ T969] 3 80 4294967499 [ 2652.857052][ T969] a1 90 4294967499 [ 2652.858535][ T969] 1e 90 4294967499 00:45:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x15}, 0x48) [ 2652.859970][ T969] e6 80 4294967499 [ 2652.861895][ T969] 1 90 4294967499 [ 2652.863631][ T969] 0 90 4294967499 [ 2652.865037][ T969] 0 90 4294967499 [ 2652.868777][ T969] 1 90 4294967499 [ 2652.870302][ T969] 2 90 4294967499 [ 2652.871806][ T969] 24 90 4294967499 [ 2652.873191][ T969] 1b 90 4294967499 [ 2652.874577][ T969] ff 90 4294967499 [ 2652.876299][ T969] last result at 4295201781 [ 2652.877995][ T969] last redo_fd_request at 4295202422 [ 2652.879991][ T969] status=80 [ 2652.881506][ T969] fdc_busy=1 [ 2652.883072][ T969] floppy_work.func=floppy_work_workfn [ 2652.885072][ T969] cont=ffffffff8b1391e0 00:45:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x16}, 0x48) [ 2652.888857][ T969] current_req=0000000000000000 [ 2652.890669][ T969] command_status=-1 [ 2652.892090][ T969] [ 2652.893032][ T969] floppy1: floppy timeout called [ 2652.895245][ T969] [ 2652.896410][ T969] floppy driver state [ 2652.897930][ T969] ------------------- [ 2652.899439][ T969] now=4295202430 last interrupt=4294967499 diff=234931 last called handler=main_command_interrupt [ 2652.903964][ T969] timeout_message=lock fdc [ 2652.905631][ T969] last output bytes: [ 2652.909202][ T969] 0 90 4294967496 [ 2652.910654][ T969] 1 90 4294967496 [ 2652.912091][ T969] 2 90 4294967496 [ 2652.913520][ T969] 12 90 4294967496 [ 2652.914919][ T969] 1b 90 4294967496 00:45:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x17}, 0x48) [ 2652.921043][ T969] ff 90 4294967496 [ 2652.923036][ T969] 12 80 4294967499 [ 2652.924547][ T969] 3 90 4294967499 [ 2652.926698][ T969] 3 80 4294967499 [ 2652.928421][ T969] a1 90 4294967499 [ 2652.930151][ T969] 1e 90 4294967499 [ 2652.931928][ T969] e6 80 4294967499 [ 2652.933711][ T969] 1 90 4294967499 [ 2652.935488][ T969] 0 90 4294967499 [ 2652.937991][ T969] 0 90 4294967499 [ 2652.939783][ T969] 1 90 4294967499 [ 2652.941619][ T969] 2 90 4294967499 [ 2652.943375][ T969] 24 90 4294967499 [ 2652.945133][ T969] 1b 90 4294967499 [ 2652.947348][ T969] ff 90 4294967499 [ 2652.949168][ T969] last result at 4295201781 [ 2652.951309][ T969] last redo_fd_request at 4295202429 [ 2652.953828][ T969] status=80 [ 2652.955350][ T969] fdc_busy=1 [ 2652.957300][ T969] floppy_work.func=floppy_work_workfn [ 2652.959859][ T969] cont=ffffffff8b1391e0 [ 2652.961849][ T969] current_req=0000000000000000 [ 2652.964112][ T969] command_status=-1 [ 2652.966403][ T969] [ 2652.967619][ T969] floppy1: floppy timeout called [ 2652.972733][ T969] [ 2652.973896][ T969] floppy driver state [ 2652.975777][ T969] ------------------- [ 2652.978055][ T969] now=4295202438 last interrupt=4294967499 diff=234939 last called handler=main_command_interrupt [ 2652.982402][ T969] timeout_message=lock fdc [ 2652.984064][ T969] last output bytes: [ 2652.985547][ T969] 0 90 4294967496 [ 2652.987195][ T969] 1 90 4294967496 [ 2652.988601][ T969] 2 90 4294967496 [ 2652.990087][ T969] 12 90 4294967496 [ 2652.991876][ T969] 1b 90 4294967496 [ 2652.993689][ T969] ff 90 4294967496 [ 2652.995114][ T969] 12 80 4294967499 [ 2652.996923][ T969] 3 90 4294967499 [ 2652.998333][ T969] 3 80 4294967499 [ 2652.999721][ T969] a1 90 4294967499 [ 2653.001195][ T969] 1e 90 4294967499 [ 2653.002571][ T969] e6 80 4294967499 [ 2653.003945][ T969] 1 90 4294967499 [ 2653.005342][ T969] 0 90 4294967499 [ 2653.007043][ T969] 0 90 4294967499 [ 2653.008452][ T969] 1 90 4294967499 [ 2653.009860][ T969] 2 90 4294967499 [ 2653.011377][ T969] 24 90 4294967499 [ 2653.012761][ T969] 1b 90 4294967499 [ 2653.014183][ T969] ff 90 4294967499 [ 2653.015600][ T969] last result at 4295201781 00:45:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x18}, 0x48) 00:45:39 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r0 = openat$capi20(0xffffff9c, &(0x7f0000000100), 0x765204, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0084320, &(0x7f00000000c0)={0x5, &(0x7f0000000040)="b49c6fd1bd0dd30ab4e5867f659564ccfba6a2f9aaba78c0034f49f96d2b6cbe72b701f23b92fc475323fa7073f6b7ed598394a65251d24a03e54aa403dadaaaffa35765c6dfa2"}) (async) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0084320, &(0x7f00000000c0)={0x5, &(0x7f0000000040)="b49c6fd1bd0dd30ab4e5867f659564ccfba6a2f9aaba78c0034f49f96d2b6cbe72b701f23b92fc475323fa7073f6b7ed598394a65251d24a03e54aa403dadaaaffa35765c6dfa2"}) 00:45:39 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x14) (async) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:39 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401870cc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2653.017623][ T969] last redo_fd_request at 4295202437 [ 2653.020022][ T969] status=80 [ 2653.021623][ T969] fdc_busy=1 [ 2653.023071][ T969] floppy_work.func=floppy_work_workfn [ 2653.025309][ T969] cont=ffffffff8b1391e0 [ 2653.027296][ T969] current_req=0000000000000000 [ 2653.029163][ T969] command_status=-1 [ 2653.030689][ T969] [ 2653.031663][ T969] floppy1: floppy timeout called [ 2653.038657][ T969] [ 2653.039580][ T969] floppy driver state [ 2653.041387][ T969] ------------------- [ 2653.043245][ T969] now=4295202444 last interrupt=4294967499 diff=234945 last called handler=main_command_interrupt [ 2653.048402][ T969] timeout_message=lock fdc [ 2653.050513][ T969] last output bytes: [ 2653.052237][ T969] 0 90 4294967496 [ 2653.053699][ T969] 1 90 4294967496 [ 2653.055114][ T969] 2 90 4294967496 00:45:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x48) [ 2653.057637][ T969] 12 90 4294967496 [ 2653.059395][ T969] 1b 90 4294967496 [ 2653.060921][ T969] ff 90 4294967496 [ 2653.062376][ T969] 12 80 4294967499 [ 2653.063814][ T969] 3 90 4294967499 [ 2653.065229][ T969] 3 80 4294967499 [ 2653.067174][ T969] a1 90 4294967499 [ 2653.068622][ T969] 1e 90 4294967499 [ 2653.070074][ T969] e6 80 4294967499 [ 2653.071504][ T969] 1 90 4294967499 [ 2653.072921][ T969] 0 90 4294967499 [ 2653.074335][ T969] 0 90 4294967499 [ 2653.075745][ T969] 1 90 4294967499 [ 2653.078099][ T969] 2 90 4294967499 [ 2653.079585][ T969] 24 90 4294967499 [ 2653.081186][ T969] 1b 90 4294967499 [ 2653.082612][ T969] ff 90 4294967499 [ 2653.084045][ T969] last result at 4295201781 [ 2653.085784][ T969] last redo_fd_request at 4295202444 [ 2653.088459][ T969] status=80 00:45:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1a}, 0x48) [ 2653.089694][ T969] fdc_busy=1 [ 2653.091124][ T969] floppy_work.func=floppy_work_workfn [ 2653.093141][ T969] cont=ffffffff8b1391e0 [ 2653.094710][ T969] current_req=0000000000000000 [ 2653.097044][ T969] command_status=-1 [ 2653.098501][ T969] [ 2653.099441][ T969] floppy1: floppy timeout called [ 2653.101574][ T969] [ 2653.102498][ T969] floppy driver state [ 2653.103991][ T969] ------------------- [ 2653.105498][ T969] now=4295202450 last interrupt=4294967499 diff=234951 last called handler=main_command_interrupt [ 2653.109812][ T969] timeout_message=lock fdc [ 2653.111530][ T969] last output bytes: [ 2653.113024][ T969] 0 90 4294967496 [ 2653.114452][ T969] 1 90 4294967496 [ 2653.116371][ T969] 2 90 4294967496 [ 2653.117823][ T969] 12 90 4294967496 [ 2653.119237][ T969] 1b 90 4294967496 [ 2653.120636][ T969] ff 90 4294967496 [ 2653.122056][ T969] 12 80 4294967499 [ 2653.123643][ T969] 3 90 4294967499 [ 2653.125102][ T969] 3 80 4294967499 [ 2653.127124][ T969] a1 90 4294967499 00:45:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1b}, 0x48) [ 2653.128549][ T969] 1e 90 4294967499 [ 2653.130171][ T969] e6 80 4294967499 [ 2653.131586][ T969] 1 90 4294967499 [ 2653.133018][ T969] 0 90 4294967499 [ 2653.134563][ T969] 0 90 4294967499 [ 2653.136370][ T969] 1 90 4294967499 [ 2653.137807][ T969] 2 90 4294967499 [ 2653.139199][ T969] 24 90 4294967499 [ 2653.140622][ T969] 1b 90 4294967499 [ 2653.142080][ T969] ff 90 4294967499 [ 2653.143473][ T969] last result at 4295201781 [ 2653.145194][ T969] last redo_fd_request at 4295202450 [ 2653.147361][ T969] status=80 [ 2653.148562][ T969] fdc_busy=1 [ 2653.149811][ T969] floppy_work.func=floppy_work_workfn [ 2653.151826][ T969] cont=ffffffff8b1391e0 [ 2653.153390][ T969] current_req=0000000000000000 [ 2653.155167][ T969] command_status=-1 [ 2653.156888][ T969] [ 2653.157899][ T969] floppy1: floppy timeout called [ 2653.160675][T31887] [ 2653.161756][T31887] floppy driver state [ 2653.163581][T31887] ------------------- 00:45:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x18}, 0x48) [ 2653.165395][T31887] now=4295202456 last interrupt=4294967499 diff=234957 last called handler=main_command_interrupt [ 2653.172473][T31887] timeout_message=lock fdc 00:45:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1c}, 0x48) [ 2653.174523][T31887] last output bytes: [ 2653.177416][T31887] 0 90 4294967496 [ 2653.179103][T31887] 1 90 4294967496 00:45:39 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$FLOPPY_FDEJECT(r0, 0x25a) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) write$P9_RVERSION(r0, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x1f, 0x6, '9P2000'}, 0x13) [ 2653.180828][T31887] 2 90 4294967496 [ 2653.182704][T31887] 12 90 4294967496 [ 2653.184404][T31887] 1b 90 4294967496 00:45:39 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x14) (async) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2653.187884][T31887] ff 90 4294967496 [ 2653.189580][T31887] 12 80 4294967499 [ 2653.191014][T31887] 3 90 4294967499 [ 2653.192606][T31887] 3 80 4294967499 [ 2653.194355][T31887] a1 90 4294967499 00:45:39 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401870cb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2653.197813][T31887] 1e 90 4294967499 [ 2653.199517][T31887] e6 80 4294967499 [ 2653.201028][T31887] 1 90 4294967499 [ 2653.202485][T31887] 0 90 4294967499 [ 2653.203913][T31887] 0 90 4294967499 [ 2653.205349][T31887] 1 90 4294967499 [ 2653.207984][T31887] 2 90 4294967499 [ 2653.209446][T31887] 24 90 4294967499 [ 2653.210875][T31887] 1b 90 4294967499 [ 2653.212325][T31887] ff 90 4294967499 [ 2653.213762][T31887] last result at 4295201781 [ 2653.215488][T31887] last redo_fd_request at 4295202456 [ 2653.218689][T31887] status=80 [ 2653.219917][T31887] fdc_busy=1 [ 2653.221175][T31887] floppy_work.func=floppy_work_workfn [ 2653.223225][T31887] cont=ffffffff8b1391e0 [ 2653.224804][T31887] current_req=0000000000000000 [ 2653.228907][T31887] command_status=-1 [ 2653.230730][T31887] [ 2653.231927][T31887] floppy1: floppy timeout called [ 2653.234570][T31887] [ 2653.235703][T31887] floppy driver state [ 2653.239542][T31887] ------------------- [ 2653.241415][T31887] now=4295202464 last interrupt=4294967499 diff=234965 last called handler=main_command_interrupt [ 2653.246359][T31887] timeout_message=lock fdc 00:45:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1d}, 0x48) [ 2653.248432][T31887] last output bytes: [ 2653.250471][T31887] 0 90 4294967496 [ 2653.252241][T31887] 1 90 4294967496 [ 2653.254004][T31887] 2 90 4294967496 [ 2653.255747][T31887] 12 90 4294967496 [ 2653.259034][T31887] 1b 90 4294967496 [ 2653.260484][T31887] ff 90 4294967496 [ 2653.261932][T31887] 12 80 4294967499 [ 2653.263368][T31887] 3 90 4294967499 [ 2653.264795][T31887] 3 80 4294967499 [ 2653.266336][T31887] a1 90 4294967499 [ 2653.267767][T31887] 1e 90 4294967499 [ 2653.269211][T31887] e6 80 4294967499 [ 2653.270668][T31887] 1 90 4294967499 [ 2653.272143][T31887] 0 90 4294967499 [ 2653.273591][T31887] 0 90 4294967499 [ 2653.275070][T31887] 1 90 4294967499 [ 2653.276886][T31887] 2 90 4294967499 [ 2653.278338][T31887] 24 90 4294967499 [ 2653.280059][T31887] 1b 90 4294967499 [ 2653.281500][T31887] ff 90 4294967499 00:45:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1e}, 0x48) [ 2653.282907][T31887] last result at 4295201781 [ 2653.284919][T31887] last redo_fd_request at 4295202463 [ 2653.287016][T31887] status=80 [ 2653.288316][T31887] fdc_busy=1 [ 2653.289560][T31887] floppy_work.func=floppy_work_workfn [ 2653.291587][T31887] cont=ffffffff8b1391e0 [ 2653.293150][T31887] current_req=0000000000000000 [ 2653.294930][T31887] command_status=-1 [ 2653.296418][T31887] [ 2653.297349][T31887] floppy1: floppy timeout called [ 2653.299565][T31887] [ 2653.300612][T31887] floppy driver state [ 2653.302435][T31887] ------------------- [ 2653.304267][T31887] now=4295202470 last interrupt=4294967499 diff=234971 last called handler=main_command_interrupt [ 2653.309247][T31887] timeout_message=lock fdc [ 2653.311035][T31887] last output bytes: [ 2653.312582][T31887] 0 90 4294967496 00:45:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x21}, 0x48) [ 2653.314093][T31887] 1 90 4294967496 [ 2653.316971][T31887] 2 90 4294967496 [ 2653.318794][T31887] 12 90 4294967496 [ 2653.320595][T31887] 1b 90 4294967496 [ 2653.322417][T31887] ff 90 4294967496 [ 2653.324216][T31887] 12 80 4294967499 [ 2653.326826][T31887] 3 90 4294967499 [ 2653.328684][T31887] 3 80 4294967499 [ 2653.330489][T31887] a1 90 4294967499 [ 2653.332101][T31887] 1e 90 4294967499 [ 2653.333655][T31887] e6 80 4294967499 [ 2653.335378][T31887] 1 90 4294967499 [ 2653.337565][T31887] 0 90 4294967499 [ 2653.339382][T31887] 0 90 4294967499 [ 2653.341398][T31887] 1 90 4294967499 [ 2653.343349][T31887] 2 90 4294967499 [ 2653.345264][T31887] 24 90 4294967499 [ 2653.347179][T31887] 1b 90 4294967499 [ 2653.348996][T31887] ff 90 4294967499 [ 2653.350813][T31887] last result at 4295201781 [ 2653.352817][T31887] last redo_fd_request at 4295202470 00:45:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x22}, 0x48) [ 2653.355004][T31887] status=80 [ 2653.356868][T31887] fdc_busy=1 [ 2653.358425][T31887] floppy_work.func=floppy_work_workfn [ 2653.360985][T31887] cont=ffffffff8b1391e0 [ 2653.362927][T31887] current_req=0000000000000000 [ 2653.364929][T31887] command_status=-1 [ 2653.366895][T31887] [ 2653.368096][T31887] floppy1: floppy timeout called [ 2653.371931][T31887] [ 2653.373129][T31887] floppy driver state [ 2653.375034][T31887] ------------------- 00:45:39 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40041271, 0x0) [ 2653.377137][T31887] now=4295202478 last interrupt=4294967499 diff=234979 last called handler=main_command_interrupt [ 2653.382323][T31887] timeout_message=lock fdc [ 2653.384332][T31887] last output bytes: [ 2653.386330][T31887] 0 90 4294967496 [ 2653.388080][T31887] 1 90 4294967496 [ 2653.389579][T31887] 2 90 4294967496 [ 2653.391386][T31887] 12 90 4294967496 [ 2653.393198][T31887] 1b 90 4294967496 [ 2653.395004][T31887] ff 90 4294967496 [ 2653.396957][T31887] 12 80 4294967499 [ 2653.398866][T31887] 3 90 4294967499 [ 2653.400684][T31887] 3 80 4294967499 [ 2653.402498][T31887] a1 90 4294967499 [ 2653.404304][T31887] 1e 90 4294967499 00:45:39 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) ioctl$FLOPPY_FDEJECT(r0, 0x25a) (async) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) write$P9_RVERSION(r0, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x1f, 0x6, '9P2000'}, 0x13) 00:45:39 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2653.409845][T31887] e6 80 4294967499 [ 2653.411949][T31887] 1 90 4294967499 [ 2653.413827][T31887] 0 90 4294967499 [ 2653.415708][T31887] 0 90 4294967499 [ 2653.417639][T31887] 1 90 4294967499 [ 2653.419431][T31887] 2 90 4294967499 [ 2653.421226][T31887] 24 90 4294967499 [ 2653.422993][T31887] 1b 90 4294967499 [ 2653.424792][T31887] ff 90 4294967499 00:45:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x23}, 0x48) [ 2653.426819][T31887] last result at 4295201781 [ 2653.429171][T31887] last redo_fd_request at 4295202477 [ 2653.431708][T31887] status=80 [ 2653.433252][T31887] fdc_busy=1 [ 2653.434803][T31887] floppy_work.func=floppy_work_workfn [ 2653.437455][T31887] cont=ffffffff8b1391e0 [ 2653.439407][T31887] current_req=0000000000000000 [ 2653.441688][T31887] command_status=-1 [ 2653.443476][T31887] [ 2653.444688][T31887] floppy1: floppy timeout called [ 2653.449588][T31887] [ 2653.450754][T31887] floppy driver state [ 2653.452680][T31887] ------------------- [ 2653.454575][T31887] now=4295202485 last interrupt=4294967499 diff=234986 last called handler=main_command_interrupt [ 2653.459648][T31887] timeout_message=lock fdc [ 2653.461559][T31887] last output bytes: [ 2653.463244][T31887] 0 90 4294967496 [ 2653.465074][T31887] 1 90 4294967496 [ 2653.467921][T31887] 2 90 4294967496 [ 2653.469888][T31887] 12 90 4294967496 00:45:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x300}, 0x48) [ 2653.471559][T31887] 1b 90 4294967496 [ 2653.473697][T31887] ff 90 4294967496 [ 2653.475502][T31887] 12 80 4294967499 [ 2653.477505][T31887] 3 90 4294967499 [ 2653.479413][T31887] 3 80 4294967499 [ 2653.481333][T31887] a1 90 4294967499 [ 2653.483244][T31887] 1e 90 4294967499 [ 2653.485168][T31887] e6 80 4294967499 [ 2653.487160][T31887] 1 90 4294967499 [ 2653.489127][T31887] 0 90 4294967499 [ 2653.491017][T31887] 0 90 4294967499 [ 2653.492956][T31887] 1 90 4294967499 [ 2653.494836][T31887] 2 90 4294967499 [ 2653.496949][T31887] 24 90 4294967499 [ 2653.498686][T31887] 1b 90 4294967499 [ 2653.500211][T31887] ff 90 4294967499 [ 2653.502100][T31887] last result at 4295201781 [ 2653.504411][T31887] last redo_fd_request at 4295202485 00:45:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x500}, 0x48) [ 2653.507085][T31887] status=80 [ 2653.508883][T31887] fdc_busy=1 [ 2653.510564][T31887] floppy_work.func=floppy_work_workfn [ 2653.513251][T31887] cont=ffffffff8b1391e0 [ 2653.515328][T31887] current_req=0000000000000000 [ 2653.517801][T31887] command_status=-1 [ 2653.519758][T31887] [ 2653.521124][T31887] floppy1: floppy timeout called [ 2653.523794][T31887] [ 2653.524756][T31887] floppy driver state [ 2653.526378][T31887] ------------------- [ 2653.528071][T31887] now=4295202493 last interrupt=4294967499 diff=234994 last called handler=main_command_interrupt [ 2653.533051][T31887] timeout_message=lock fdc [ 2653.535173][T31887] last output bytes: [ 2653.537341][T31887] 0 90 4294967496 [ 2653.539418][T31887] 1 90 4294967496 [ 2653.541396][T31887] 2 90 4294967496 [ 2653.543309][T31887] 12 90 4294967496 [ 2653.544964][T31887] 1b 90 4294967496 [ 2653.547030][T31887] ff 90 4294967496 00:45:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x600}, 0x48) [ 2653.549477][T31887] 12 80 4294967499 [ 2653.551342][T31887] 3 90 4294967499 [ 2653.553175][T31887] 3 80 4294967499 [ 2653.554959][T31887] a1 90 4294967499 [ 2653.557187][T31887] 1e 90 4294967499 [ 2653.558989][T31887] e6 80 4294967499 [ 2653.560782][T31887] 1 90 4294967499 [ 2653.562864][T31887] 0 90 4294967499 [ 2653.564509][T31887] 0 90 4294967499 [ 2653.566772][T31887] 1 90 4294967499 [ 2653.568589][T31887] 2 90 4294967499 [ 2653.570410][T31887] 24 90 4294967499 [ 2653.572214][T31887] 1b 90 4294967499 [ 2653.574007][T31887] ff 90 4294967499 [ 2653.575808][T31887] last result at 4295201781 [ 2653.578380][T31887] last redo_fd_request at 4295202492 [ 2653.580939][T31887] status=80 [ 2653.582460][T31887] fdc_busy=1 [ 2653.583775][T31887] floppy_work.func=floppy_work_workfn [ 2653.586609][T31887] cont=ffffffff8b1391e0 [ 2653.588615][T31887] current_req=0000000000000000 00:45:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x700}, 0x48) [ 2653.590862][T31887] command_status=-1 [ 2653.593052][T31887] [ 2653.594271][T31887] floppy1: floppy timeout called [ 2653.597268][T31887] [ 2653.598471][T31887] floppy driver state [ 2653.600521][T31887] ------------------- [ 2653.602450][T31887] now=4295202500 last interrupt=4294967499 diff=235001 last called handler=main_command_interrupt [ 2653.608119][T31887] timeout_message=lock fdc [ 2653.615998][T31887] last output bytes: [ 2653.618220][T31887] 0 90 4294967496 [ 2653.619749][T31887] 1 90 4294967496 [ 2653.621177][T31887] 2 90 4294967496 [ 2653.622570][T31887] 12 90 4294967496 [ 2653.624014][T31887] 1b 90 4294967496 00:45:40 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:40 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$FLOPPY_FDEJECT(r0, 0x25a) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) write$P9_RVERSION(r0, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x1f, 0x6, '9P2000'}, 0x13) [ 2653.625475][T31887] ff 90 4294967496 00:45:40 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40041271, 0x0) [ 2653.627616][T31887] 12 80 4294967499 [ 2653.629537][T31887] 3 90 4294967499 [ 2653.631328][T31887] 3 80 4294967499 [ 2653.633129][T31887] a1 90 4294967499 [ 2653.634931][T31887] 1e 90 4294967499 [ 2653.638107][T31887] e6 80 4294967499 [ 2653.639929][T31887] 1 90 4294967499 [ 2653.641831][T31887] 0 90 4294967499 [ 2653.643650][T31887] 0 90 4294967499 [ 2653.645466][T31887] 1 90 4294967499 [ 2653.648253][T31887] 2 90 4294967499 [ 2653.649884][T31887] 24 90 4294967499 [ 2653.651306][T31887] 1b 90 4294967499 [ 2653.652722][T31887] ff 90 4294967499 [ 2653.654432][T31887] last result at 4295201781 [ 2653.656727][T31887] last redo_fd_request at 4295202500 [ 2653.659313][T31887] status=80 [ 2653.660837][T31887] fdc_busy=1 [ 2653.662076][T31887] floppy_work.func=floppy_work_workfn [ 2653.664151][T31887] cont=ffffffff8b1391e0 [ 2653.665709][T31887] current_req=0000000000000000 [ 2653.668960][T31887] command_status=-1 [ 2653.670854][T31887] [ 2653.672071][T31887] floppy1: floppy timeout called [ 2653.674652][T31887] [ 2653.675816][T31887] floppy driver state [ 2653.678357][T31887] ------------------- 00:45:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x900}, 0x48) [ 2653.679880][T31887] now=4295202508 last interrupt=4294967499 diff=235009 last called handler=main_command_interrupt [ 2653.684307][T31887] timeout_message=lock fdc [ 2653.687020][T31887] last output bytes: [ 2653.688817][T31887] 0 90 4294967496 [ 2653.690611][T31887] 1 90 4294967496 [ 2653.692022][T31887] 2 90 4294967496 [ 2653.693800][T31887] 12 90 4294967496 [ 2653.695602][T31887] 1b 90 4294967496 [ 2653.698207][T31887] ff 90 4294967496 [ 2653.699763][T31887] 12 80 4294967499 [ 2653.701481][T31887] 3 90 4294967499 [ 2653.703277][T31887] 3 80 4294967499 [ 2653.705120][T31887] a1 90 4294967499 [ 2653.707093][T31887] 1e 90 4294967499 [ 2653.708902][T31887] e6 80 4294967499 [ 2653.710740][T31887] 1 90 4294967499 [ 2653.712571][T31887] 0 90 4294967499 [ 2653.714116][T31887] 0 90 4294967499 [ 2653.715401][T31887] 1 90 4294967499 [ 2653.718003][T31887] 2 90 4294967499 [ 2653.719474][T31887] 24 90 4294967499 [ 2653.720913][T31887] 1b 90 4294967499 [ 2653.722530][T31887] ff 90 4294967499 [ 2653.724319][T31887] last result at 4295201781 00:45:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa00}, 0x48) [ 2653.727241][T31887] last redo_fd_request at 4295202507 [ 2653.730000][T31887] status=80 [ 2653.731512][T31887] fdc_busy=1 [ 2653.733002][T31887] floppy_work.func=floppy_work_workfn [ 2653.734973][T31887] cont=ffffffff8b1391e0 [ 2653.737194][T31887] current_req=0000000000000000 [ 2653.739441][T31887] command_status=-1 [ 2653.740919][T31887] [ 2653.741880][T31887] floppy1: floppy timeout called [ 2653.744067][T31887] [ 2653.745190][T31887] floppy driver state [ 2653.748068][T31887] ------------------- [ 2653.749976][T31887] now=4295202515 last interrupt=4294967499 diff=235016 last called handler=main_command_interrupt [ 2653.754632][T31887] timeout_message=lock fdc 00:45:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xb00}, 0x48) [ 2653.757352][T31887] last output bytes: [ 2653.759457][T31887] 0 90 4294967496 [ 2653.761232][T31887] 1 90 4294967496 [ 2653.762760][T31887] 2 90 4294967496 [ 2653.764475][T31887] 12 90 4294967496 [ 2653.767012][T31887] 1b 90 4294967496 [ 2653.768833][T31887] ff 90 4294967496 [ 2653.770601][T31887] 12 80 4294967499 [ 2653.772364][T31887] 3 90 4294967499 [ 2653.774094][T31887] 3 80 4294967499 [ 2653.775801][T31887] a1 90 4294967499 [ 2653.778557][T31887] 1e 90 4294967499 [ 2653.780370][T31887] e6 80 4294967499 [ 2653.782177][T31887] 1 90 4294967499 [ 2653.783956][T31887] 0 90 4294967499 [ 2653.785746][T31887] 0 90 4294967499 [ 2653.787455][T31887] 1 90 4294967499 [ 2653.789067][T31887] 2 90 4294967499 00:45:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc00}, 0x48) [ 2653.790682][T31887] 24 90 4294967499 [ 2653.792360][T31887] 1b 90 4294967499 [ 2653.793964][T31887] ff 90 4294967499 [ 2653.795550][T31887] last result at 4295201781 [ 2653.797848][T31887] last redo_fd_request at 4295202514 [ 2653.800393][T31887] status=80 [ 2653.801931][T31887] fdc_busy=1 [ 2653.803515][T31887] floppy_work.func=floppy_work_workfn [ 2653.806187][T31887] cont=ffffffff8b1391e0 [ 2653.808196][T31887] current_req=0000000000000000 [ 2653.810437][T31887] command_status=-1 [ 2653.812290][T31887] [ 2653.813492][T31887] floppy1: floppy timeout called [ 2653.817293][ T969] [ 2653.818508][ T969] floppy driver state [ 2653.820401][ T969] ------------------- [ 2653.822310][ T969] now=4295202522 last interrupt=4294967499 diff=235023 last called handler=main_command_interrupt 00:45:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xd00}, 0x48) [ 2653.837062][ T969] timeout_message=lock fdc [ 2653.839202][ T969] last output bytes: [ 2653.841076][ T969] 0 90 4294967496 [ 2653.842836][ T969] 1 90 4294967496 [ 2653.844597][ T969] 2 90 4294967496 [ 2653.847282][ T969] 12 90 4294967496 [ 2653.848900][ T969] 1b 90 4294967496 [ 2653.850622][ T969] ff 90 4294967496 [ 2653.852171][ T969] 12 80 4294967499 [ 2653.853738][ T969] 3 90 4294967499 00:45:40 executing program 1: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) (async) r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x300}, 0x48) 00:45:40 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) [ 2653.855261][ T969] 3 80 4294967499 [ 2653.857359][ T969] a1 90 4294967499 [ 2653.859161][ T969] 1e 90 4294967499 [ 2653.860965][ T969] e6 80 4294967499 [ 2653.862761][ T969] 1 90 4294967499 [ 2653.864555][ T969] 0 90 4294967499 [ 2653.867047][ T969] 0 90 4294967499 [ 2653.868868][ T969] 1 90 4294967499 [ 2653.870635][ T969] 2 90 4294967499 [ 2653.872435][ T969] 24 90 4294967499 [ 2653.874198][ T969] 1b 90 4294967499 00:45:40 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401070cd, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2653.877597][ T969] ff 90 4294967499 [ 2653.879550][ T969] last result at 4295201781 [ 2653.881738][ T969] last redo_fd_request at 4295202522 [ 2653.884227][ T969] status=80 [ 2653.885626][ T969] fdc_busy=1 [ 2653.891821][ T969] floppy_work.func=floppy_work_workfn [ 2653.894395][ T969] cont=ffffffff8b1391e0 [ 2653.896663][ T969] current_req=0000000000000000 [ 2653.898919][ T969] command_status=-1 [ 2653.900690][ T969] [ 2653.901902][ T969] floppy1: floppy timeout called [ 2653.904461][ T969] [ 2653.905657][ T969] floppy driver state [ 2653.908119][ T969] ------------------- [ 2653.910048][ T969] now=4295202531 last interrupt=4294967499 diff=235032 last called handler=main_command_interrupt [ 2653.914426][ T969] timeout_message=lock fdc [ 2653.916725][ T969] last output bytes: [ 2653.918212][ T969] 0 90 4294967496 [ 2653.919657][ T969] 1 90 4294967496 00:45:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe00}, 0x48) [ 2653.921200][ T969] 2 90 4294967496 [ 2653.922797][ T969] 12 90 4294967496 [ 2653.924402][ T969] 1b 90 4294967496 [ 2653.927371][ T969] ff 90 4294967496 [ 2653.928840][ T969] 12 80 4294967499 [ 2653.930390][ T969] 3 90 4294967499 [ 2653.932052][ T969] 3 80 4294967499 [ 2653.933526][ T969] a1 90 4294967499 [ 2653.935344][ T969] 1e 90 4294967499 [ 2653.937815][ T969] e6 80 4294967499 [ 2653.940007][ T969] 1 90 4294967499 [ 2653.942820][ T969] 0 90 4294967499 [ 2653.944921][ T969] 0 90 4294967499 [ 2653.947097][ T969] 1 90 4294967499 [ 2653.948903][ T969] 2 90 4294967499 00:45:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xf00}, 0x48) [ 2653.950668][ T969] 24 90 4294967499 [ 2653.952690][ T969] 1b 90 4294967499 [ 2653.954462][ T969] ff 90 4294967499 [ 2653.956620][ T969] last result at 4295201781 [ 2653.958935][ T969] last redo_fd_request at 4295202530 [ 2653.961468][ T969] status=80 [ 2653.962788][ T969] fdc_busy=1 [ 2653.964293][ T969] floppy_work.func=floppy_work_workfn [ 2653.966965][ T969] cont=ffffffff8b1391e0 [ 2653.968933][ T969] current_req=0000000000000000 [ 2653.971025][ T969] command_status=-1 [ 2653.973003][ T969] [ 2653.974325][ T969] floppy1: floppy timeout called [ 2653.977406][ T969] [ 2653.979664][ T969] floppy driver state 00:45:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1100}, 0x48) [ 2653.981595][ T969] ------------------- [ 2653.983695][ T969] now=4295202538 last interrupt=4294967499 diff=235039 last called handler=main_command_interrupt [ 2653.989136][ T969] timeout_message=lock fdc [ 2653.991327][ T969] last output bytes: [ 2653.993157][ T969] 0 90 4294967496 [ 2653.994912][ T969] 1 90 4294967496 [ 2653.997153][ T969] 2 90 4294967496 [ 2653.998933][ T969] 12 90 4294967496 [ 2654.000706][ T969] 1b 90 4294967496 [ 2654.002168][ T969] ff 90 4294967496 [ 2654.003599][ T969] 12 80 4294967499 [ 2654.005139][ T969] 3 90 4294967499 [ 2654.007233][ T969] 3 80 4294967499 [ 2654.008702][ T969] a1 90 4294967499 [ 2654.010249][ T969] 1e 90 4294967499 [ 2654.011773][ T969] e6 80 4294967499 [ 2654.013288][ T969] 1 90 4294967499 00:45:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1200}, 0x48) [ 2654.014766][ T969] 0 90 4294967499 [ 2654.017221][ T969] 0 90 4294967499 [ 2654.018986][ T969] 1 90 4294967499 [ 2654.020774][ T969] 2 90 4294967499 [ 2654.022814][ T969] 24 90 4294967499 [ 2654.024623][ T969] 1b 90 4294967499 [ 2654.026891][ T969] ff 90 4294967499 [ 2654.028710][ T969] last result at 4295201781 [ 2654.030820][ T969] last redo_fd_request at 4295202538 [ 2654.033403][ T969] status=80 [ 2654.034909][ T969] fdc_busy=1 [ 2654.042060][ T969] floppy_work.func=floppy_work_workfn [ 2654.044090][ T969] cont=ffffffff8b1391e0 [ 2654.045644][ T969] current_req=0000000000000000 [ 2654.047647][ T969] command_status=-1 [ 2654.049103][ T969] [ 2654.050038][ T969] floppy1: floppy timeout called [ 2654.052078][ T969] [ 2654.053004][ T969] floppy driver state [ 2654.054484][ T969] ------------------- [ 2654.056234][ T969] now=4295202546 last interrupt=4294967499 diff=235047 last called handler=main_command_interrupt [ 2654.060100][ T969] timeout_message=lock fdc [ 2654.062094][ T969] last output bytes: [ 2654.063989][ T969] 0 90 4294967496 [ 2654.065726][ T969] 1 90 4294967496 [ 2654.067739][ T969] 2 90 4294967496 [ 2654.069452][ T969] 12 90 4294967496 [ 2654.071171][ T969] 1b 90 4294967496 [ 2654.072854][ T969] ff 90 4294967496 [ 2654.074405][ T969] 12 80 4294967499 [ 2654.075813][ T969] 3 90 4294967499 [ 2654.077591][ T969] 3 80 4294967499 [ 2654.079030][ T969] a1 90 4294967499 [ 2654.080440][ T969] 1e 90 4294967499 [ 2654.081881][ T969] e6 80 4294967499 [ 2654.083295][ T969] 1 90 4294967499 [ 2654.084718][ T969] 0 90 4294967499 [ 2654.086517][ T969] 0 90 4294967499 [ 2654.088306][ T969] 1 90 4294967499 [ 2654.090042][ T969] 2 90 4294967499 [ 2654.091747][ T969] 24 90 4294967499 [ 2654.093559][ T969] 1b 90 4294967499 [ 2654.095280][ T969] ff 90 4294967499 [ 2654.097069][ T969] last result at 4295201781 [ 2654.099107][ T969] last redo_fd_request at 4295202545 [ 2654.101512][ T969] status=80 [ 2654.102947][ T969] fdc_busy=1 [ 2654.104413][ T969] floppy_work.func=floppy_work_workfn [ 2654.106967][ T969] cont=ffffffff8b1391e0 [ 2654.108663][ T969] current_req=0000000000000000 [ 2654.110476][ T969] command_status=-1 [ 2654.111894][ T969] [ 2654.112851][ T969] floppy1: floppy timeout called [ 2654.114970][ T969] [ 2654.115997][ T969] floppy driver state [ 2654.117586][ T969] ------------------- [ 2654.119099][ T969] now=4295202552 last interrupt=4294967499 diff=235053 last called handler=main_command_interrupt [ 2654.123130][ T969] timeout_message=lock fdc [ 2654.124826][ T969] last output bytes: [ 2654.126602][ T969] 0 90 4294967496 [ 2654.128078][ T969] 1 90 4294967496 [ 2654.129503][ T969] 2 90 4294967496 [ 2654.130906][ T969] 12 90 4294967496 [ 2654.132334][ T969] 1b 90 4294967496 [ 2654.134025][ T969] ff 90 4294967496 [ 2654.135555][ T969] 12 80 4294967499 [ 2654.137105][ T969] 3 90 4294967499 [ 2654.138551][ T969] 3 80 4294967499 [ 2654.140167][ T969] a1 90 4294967499 [ 2654.141784][ T969] 1e 90 4294967499 [ 2654.143215][ T969] e6 80 4294967499 00:45:40 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) syz_open_dev$floppy(&(0x7f0000000040), 0x401, 0x2) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1300}, 0x48) [ 2654.144914][ T969] 1 90 4294967499 [ 2654.147192][ T969] 0 90 4294967499 [ 2654.149073][ T969] 0 90 4294967499 [ 2654.150938][ T969] 1 90 4294967499 00:45:40 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x0) (async, rerun: 64) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) (async, rerun: 64) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) 00:45:40 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40041271, 0x0) [ 2654.152791][ T969] 2 90 4294967499 [ 2654.154519][ T969] 24 90 4294967499 [ 2654.156535][ T969] 1b 90 4294967499 [ 2654.158131][ T969] ff 90 4294967499 [ 2654.159805][ T969] last result at 4295201781 [ 2654.161581][ T969] last redo_fd_request at 4295202551 [ 2654.163746][ T969] status=80 [ 2654.165334][ T969] fdc_busy=1 [ 2654.167057][ T969] floppy_work.func=floppy_work_workfn [ 2654.169685][ T969] cont=ffffffff8b1391e0 [ 2654.171678][ T969] current_req=0000000000000000 [ 2654.174048][ T969] command_status=-1 [ 2654.176014][ T969] [ 2654.177286][ T969] floppy1: floppy timeout called [ 2654.180014][ T969] [ 2654.181220][ T969] floppy driver state [ 2654.183162][ T969] ------------------- [ 2654.185101][ T969] now=4295202558 last interrupt=4294967499 diff=235059 last called handler=main_command_interrupt [ 2654.189265][ T969] timeout_message=lock fdc [ 2654.190943][ T969] last output bytes: [ 2654.192581][ T969] 0 90 4294967496 [ 2654.194174][ T969] 1 90 4294967496 00:45:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1400}, 0x48) [ 2654.196150][ T969] 2 90 4294967496 [ 2654.198210][ T969] 12 90 4294967496 [ 2654.200035][ T969] 1b 90 4294967496 [ 2654.201908][ T969] ff 90 4294967496 [ 2654.203614][ T969] 12 80 4294967499 [ 2654.205455][ T969] 3 90 4294967499 [ 2654.207423][ T969] 3 80 4294967499 [ 2654.209030][ T969] a1 90 4294967499 [ 2654.210432][ T969] 1e 90 4294967499 [ 2654.211912][ T969] e6 80 4294967499 [ 2654.213397][ T969] 1 90 4294967499 [ 2654.214994][ T969] 0 90 4294967499 [ 2654.216508][ T969] 0 90 4294967499 [ 2654.217949][ T969] 1 90 4294967499 [ 2654.219673][ T969] 2 90 4294967499 [ 2654.221506][ T969] 24 90 4294967499 [ 2654.223319][ T969] 1b 90 4294967499 [ 2654.225187][ T969] ff 90 4294967499 [ 2654.228252][ T969] last result at 4295201781 [ 2654.230266][ T969] last redo_fd_request at 4295202558 [ 2654.232284][ T969] status=80 [ 2654.233531][ T969] fdc_busy=1 [ 2654.235124][ T969] floppy_work.func=floppy_work_workfn [ 2654.237898][ T969] cont=ffffffff8b1391e0 [ 2654.239941][ T969] current_req=0000000000000000 [ 2654.242095][ T969] command_status=-1 [ 2654.243532][ T969] [ 2654.244526][ T969] floppy1: floppy timeout called [ 2654.247759][ T969] [ 2654.248942][ T969] floppy driver state [ 2654.250879][ T969] ------------------- 00:45:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1500}, 0x48) [ 2654.252873][ T969] now=4295202565 last interrupt=4294967499 diff=235066 last called handler=main_command_interrupt [ 2654.258293][ T969] timeout_message=lock fdc [ 2654.260498][ T969] last output bytes: [ 2654.262455][ T969] 0 90 4294967496 [ 2654.264271][ T969] 1 90 4294967496 [ 2654.266198][ T969] 2 90 4294967496 [ 2654.268052][ T969] 12 90 4294967496 [ 2654.269899][ T969] 1b 90 4294967496 [ 2654.271610][ T969] ff 90 4294967496 [ 2654.273096][ T969] 12 80 4294967499 [ 2654.274836][ T969] 3 90 4294967499 [ 2654.276811][ T969] 3 80 4294967499 [ 2654.278469][ T969] a1 90 4294967499 [ 2654.280356][ T969] 1e 90 4294967499 [ 2654.282205][ T969] e6 80 4294967499 [ 2654.284002][ T969] 1 90 4294967499 [ 2654.285938][ T969] 0 90 4294967499 [ 2654.287777][ T969] 0 90 4294967499 00:45:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1600}, 0x48) [ 2654.289779][ T969] 1 90 4294967499 [ 2654.291725][ T969] 2 90 4294967499 [ 2654.293431][ T969] 24 90 4294967499 [ 2654.295241][ T969] 1b 90 4294967499 [ 2654.297147][ T969] ff 90 4294967499 [ 2654.298662][ T969] last result at 4295201781 [ 2654.300481][ T969] last redo_fd_request at 4295202565 [ 2654.302594][ T969] status=80 [ 2654.303940][ T969] fdc_busy=1 [ 2654.305569][ T969] floppy_work.func=floppy_work_workfn [ 2654.308314][ T969] cont=ffffffff8b1391e0 [ 2654.310339][ T969] current_req=0000000000000000 [ 2654.312693][ T969] command_status=-1 [ 2654.314523][ T969] [ 2654.315795][ T969] floppy1: floppy timeout called [ 2654.318844][ T969] [ 2654.320125][ T969] floppy driver state [ 2654.322071][ T969] ------------------- [ 2654.324032][ T969] now=4295202572 last interrupt=4294967499 diff=235073 last called handler=main_command_interrupt 00:45:40 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401070ca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2654.336213][ T969] timeout_message=lock fdc [ 2654.338042][ T969] last output bytes: 00:45:40 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) syz_open_dev$floppy(&(0x7f0000000040), 0x401, 0x2) (async) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1700}, 0x48) [ 2654.339524][ T969] 0 90 4294967496 00:45:40 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x0) (async) accept4$tipc(r0, 0x0, 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) [ 2654.341407][ T969] 1 90 4294967496 [ 2654.343271][ T969] 2 90 4294967496 [ 2654.344825][ T969] 12 90 4294967496 [ 2654.348843][ T969] 1b 90 4294967496 [ 2654.350334][ T969] ff 90 4294967496 [ 2654.351761][ T969] 12 80 4294967499 [ 2654.353178][ T969] 3 90 4294967499 [ 2654.354578][ T969] 3 80 4294967499 [ 2654.356218][ T969] a1 90 4294967499 [ 2654.357669][ T969] 1e 90 4294967499 [ 2654.359074][ T969] e6 80 4294967499 [ 2654.360483][ T969] 1 90 4294967499 [ 2654.361889][ T969] 0 90 4294967499 [ 2654.363357][ T969] 0 90 4294967499 [ 2654.364747][ T969] 1 90 4294967499 [ 2654.366411][ T969] 2 90 4294967499 [ 2654.367819][ T969] 24 90 4294967499 [ 2654.369253][ T969] 1b 90 4294967499 [ 2654.370650][ T969] ff 90 4294967499 [ 2654.372055][ T969] last result at 4295201781 [ 2654.373781][ T969] last redo_fd_request at 4295202572 [ 2654.375781][ T969] status=80 [ 2654.377075][ T969] fdc_busy=1 [ 2654.378297][ T969] floppy_work.func=floppy_work_workfn [ 2654.380338][ T969] cont=ffffffff8b1391e0 [ 2654.381987][ T969] current_req=0000000000000000 [ 2654.383826][ T969] command_status=-1 [ 2654.385255][ T969] [ 2654.386269][ T969] floppy1: floppy timeout called [ 2654.388447][ T969] [ 2654.389380][ T969] floppy driver state [ 2654.390849][ T969] ------------------- [ 2654.392353][ T969] now=4295202579 last interrupt=4294967499 diff=235080 last called handler=main_command_interrupt [ 2654.396354][ T969] timeout_message=lock fdc [ 2654.398044][ T969] last output bytes: [ 2654.399504][ T969] 0 90 4294967496 [ 2654.400917][ T969] 1 90 4294967496 [ 2654.402333][ T969] 2 90 4294967496 [ 2654.403900][ T969] 12 90 4294967496 [ 2654.405340][ T969] 1b 90 4294967496 [ 2654.407256][ T969] ff 90 4294967496 [ 2654.408672][ T969] 12 80 4294967499 [ 2654.410424][ T969] 3 90 4294967499 [ 2654.411876][ T969] 3 80 4294967499 [ 2654.413295][ T969] a1 90 4294967499 [ 2654.414683][ T969] 1e 90 4294967499 00:45:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1800}, 0x48) [ 2654.418263][ T969] e6 80 4294967499 [ 2654.419685][ T969] 1 90 4294967499 [ 2654.421090][ T969] 0 90 4294967499 [ 2654.422536][ T969] 0 90 4294967499 [ 2654.424084][ T969] 1 90 4294967499 [ 2654.425688][ T969] 2 90 4294967499 [ 2654.427138][ T969] 24 90 4294967499 [ 2654.428546][ T969] 1b 90 4294967499 [ 2654.429941][ T969] ff 90 4294967499 [ 2654.431369][ T969] last result at 4295201781 [ 2654.433142][ T969] last redo_fd_request at 4295202579 [ 2654.435185][ T969] status=80 [ 2654.438844][ T969] fdc_busy=1 [ 2654.440084][ T969] floppy_work.func=floppy_work_workfn [ 2654.442094][ T969] cont=ffffffff8b1391e0 [ 2654.443884][ T969] current_req=0000000000000000 [ 2654.445670][ T969] command_status=-1 [ 2654.447570][ T969] [ 2654.448526][ T969] floppy1: floppy timeout called [ 2654.450608][ T969] [ 2654.451534][ T969] floppy driver state 00:45:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1900}, 0x48) [ 2654.453033][ T969] ------------------- [ 2654.454760][ T969] now=4295202585 last interrupt=4294967499 diff=235086 last called handler=main_command_interrupt [ 2654.460822][ T969] timeout_message=lock fdc [ 2654.462549][ T969] last output bytes: [ 2654.464045][ T969] 0 90 4294967496 [ 2654.465531][ T969] 1 90 4294967496 [ 2654.467285][ T969] 2 90 4294967496 [ 2654.468712][ T969] 12 90 4294967496 [ 2654.470067][ T969] 1b 90 4294967496 [ 2654.471471][ T969] ff 90 4294967496 [ 2654.472885][ T969] 12 80 4294967499 [ 2654.474283][ T969] 3 90 4294967499 [ 2654.475687][ T969] 3 80 4294967499 [ 2654.477891][ T969] a1 90 4294967499 [ 2654.479306][ T969] 1e 90 4294967499 [ 2654.480719][ T969] e6 80 4294967499 [ 2654.482103][ T969] 1 90 4294967499 [ 2654.483570][ T969] 0 90 4294967499 [ 2654.484967][ T969] 0 90 4294967499 [ 2654.486698][ T969] 1 90 4294967499 [ 2654.488145][ T969] 2 90 4294967499 [ 2654.489619][ T969] 24 90 4294967499 00:45:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1a00}, 0x48) [ 2654.491071][ T969] 1b 90 4294967499 [ 2654.492771][ T969] ff 90 4294967499 [ 2654.494187][ T969] last result at 4295201781 [ 2654.496361][ T969] last redo_fd_request at 4295202585 [ 2654.498400][ T969] status=80 [ 2654.499606][ T969] fdc_busy=1 [ 2654.500949][ T969] floppy_work.func=floppy_work_workfn [ 2654.503032][ T969] cont=ffffffff8b1391e0 [ 2654.504591][ T969] current_req=0000000000000000 [ 2654.506748][ T969] command_status=-1 [ 2654.508194][ T969] [ 2654.509138][ T969] floppy1: floppy timeout called [ 2654.514207][ T969] [ 2654.515133][ T969] floppy driver state 00:45:41 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000040)) [ 2654.517170][ T969] ------------------- [ 2654.519018][ T969] now=4295202592 last interrupt=4294967499 diff=235093 last called handler=main_command_interrupt [ 2654.523262][ T969] timeout_message=lock fdc [ 2654.524958][ T969] last output bytes: [ 2654.526684][ T969] 0 90 4294967496 [ 2654.528107][ T969] 1 90 4294967496 [ 2654.529537][ T969] 2 90 4294967496 [ 2654.530968][ T969] 12 90 4294967496 00:45:41 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0x400, 0x40000) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)={0xf, 0x7, 0x2, {{0x2, '${'}, 0x7}}, 0xf) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080)) [ 2654.532520][ T969] 1b 90 4294967496 [ 2654.534241][ T969] ff 90 4294967496 [ 2654.535810][ T969] 12 80 4294967499 [ 2654.538016][ T969] 3 90 4294967499 [ 2654.539489][ T969] 3 80 4294967499 [ 2654.540986][ T969] a1 90 4294967499 [ 2654.542516][ T969] 1e 90 4294967499 [ 2654.544179][ T969] e6 80 4294967499 [ 2654.548150][ T969] 1 90 4294967499 [ 2654.549619][ T969] 0 90 4294967499 [ 2654.551013][ T969] 0 90 4294967499 [ 2654.552433][ T969] 1 90 4294967499 [ 2654.553842][ T969] 2 90 4294967499 [ 2654.555383][ T969] 24 90 4294967499 [ 2654.556867][ T969] 1b 90 4294967499 [ 2654.558284][ T969] ff 90 4294967499 [ 2654.559708][ T969] last result at 4295201781 [ 2654.561406][ T969] last redo_fd_request at 4295202591 [ 2654.563462][ T969] status=80 [ 2654.564653][ T969] fdc_busy=1 [ 2654.565944][ T969] floppy_work.func=floppy_work_workfn [ 2654.567969][ T969] cont=ffffffff8b1391e0 [ 2654.569803][ T969] current_req=0000000000000000 00:45:41 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) syz_open_dev$floppy(&(0x7f0000000040), 0x401, 0x2) (async) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2654.571624][ T969] command_status=-1 [ 2654.573365][ T969] [ 2654.574356][ T969] floppy1: floppy timeout called [ 2654.602234][T19958] [ 2654.603112][T19958] floppy driver state [ 2654.604579][T19958] ------------------- 00:45:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1b00}, 0x48) 00:45:41 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000040)) [ 2654.614102][T19958] now=4295202601 last interrupt=4294967499 diff=235102 last called handler=main_command_interrupt [ 2654.618864][T19958] timeout_message=lock fdc [ 2654.620711][T19958] last output bytes: [ 2654.622306][T19958] 0 90 4294967496 [ 2654.623967][T19958] 1 90 4294967496 [ 2654.625570][T19958] 2 90 4294967496 [ 2654.627705][T19958] 12 90 4294967496 [ 2654.629269][T19958] 1b 90 4294967496 [ 2654.630850][T19958] ff 90 4294967496 [ 2654.632698][T19958] 12 80 4294967499 00:45:41 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0x400, 0x40000) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)={0xf, 0x7, 0x2, {{0x2, '${'}, 0x7}}, 0xf) (async) write$P9_RLERRORu(r0, &(0x7f0000000040)={0xf, 0x7, 0x2, {{0x2, '${'}, 0x7}}, 0xf) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080)) [ 2654.634316][T19958] 3 90 4294967499 [ 2654.636739][T19958] 3 80 4294967499 [ 2654.638343][T19958] a1 90 4294967499 [ 2654.639880][T19958] 1e 90 4294967499 [ 2654.641471][T19958] e6 80 4294967499 [ 2654.643115][T19958] 1 90 4294967499 [ 2654.644725][T19958] 0 90 4294967499 [ 2654.646587][T19958] 0 90 4294967499 [ 2654.647895][T19958] 1 90 4294967499 [ 2654.649217][T19958] 2 90 4294967499 [ 2654.650501][T19958] 24 90 4294967499 [ 2654.651792][T19958] 1b 90 4294967499 [ 2654.653137][T19958] ff 90 4294967499 [ 2654.654433][T19958] last result at 4295201781 [ 2654.657341][T19958] last redo_fd_request at 4295202600 [ 2654.659184][T19958] status=80 [ 2654.660296][T19958] fdc_busy=1 [ 2654.661426][T19958] floppy_work.func=floppy_work_workfn [ 2654.663265][T19958] cont=ffffffff8b1391e0 [ 2654.664691][T19958] current_req=0000000000000000 [ 2654.666974][T19958] command_status=-1 [ 2654.668317][T19958] [ 2654.669190][T19958] floppy1: floppy timeout called [ 2654.678079][T19958] 00:45:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1c00}, 0x48) [ 2654.680153][T19958] floppy driver state [ 2654.682634][T19958] ------------------- [ 2654.685288][T19958] now=4295202608 last interrupt=4294967499 diff=235109 last called handler=main_command_interrupt [ 2654.690770][T19958] timeout_message=lock fdc [ 2654.693173][T19958] last output bytes: [ 2654.695451][T19958] 0 90 4294967496 00:45:41 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0x400, 0x40000) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000040)={0xf, 0x7, 0x2, {{0x2, '${'}, 0x7}}, 0xf) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080)) syz_open_dev$floppy(&(0x7f0000000000), 0x400, 0x40000) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) write$P9_RLERRORu(r0, &(0x7f0000000040)={0xf, 0x7, 0x2, {{0x2, '${'}, 0x7}}, 0xf) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080)) (async) [ 2654.700237][T19958] 1 90 4294967496 [ 2654.703641][T19958] 2 90 4294967496 [ 2654.705448][T19958] 12 90 4294967496 [ 2654.707650][T19958] 1b 90 4294967496 [ 2654.709454][T19958] ff 90 4294967496 [ 2654.711411][T19958] 12 80 4294967499 [ 2654.713933][T19958] 3 90 4294967499 [ 2654.717483][T19958] 3 80 4294967499 [ 2654.719762][T19958] a1 90 4294967499 00:45:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1d00}, 0x48) [ 2654.721981][T19958] 1e 90 4294967499 [ 2654.724224][T19958] e6 80 4294967499 [ 2654.727371][T19958] 1 90 4294967499 [ 2654.730153][T19958] 0 90 4294967499 [ 2654.732395][T19958] 0 90 4294967499 [ 2654.734515][T19958] 1 90 4294967499 [ 2654.736850][T19958] 2 90 4294967499 [ 2654.739042][T19958] 24 90 4294967499 [ 2654.740953][T19958] 1b 90 4294967499 [ 2654.742739][T19958] ff 90 4294967499 [ 2654.744402][T19958] last result at 4295201781 [ 2654.747283][T19958] last redo_fd_request at 4295202607 [ 2654.750323][T19958] status=80 [ 2654.751973][T19958] fdc_busy=1 00:45:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1e00}, 0x48) [ 2654.759848][T19958] floppy_work.func=floppy_work_workfn [ 2654.762718][T19958] cont=ffffffff8b1391e0 [ 2654.765230][T19958] current_req=0000000000000000 [ 2654.767969][T19958] command_status=-1 [ 2654.769971][T19958] [ 2654.772411][T19958] floppy1: floppy timeout called [ 2654.785716][T19958] [ 2654.790921][T19958] floppy driver state [ 2654.792451][T19958] ------------------- [ 2654.793937][T19958] now=4295202619 last interrupt=4294967499 diff=235120 last called handler=main_command_interrupt 00:45:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8048010}, 0x20000010) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x10001, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x28}}, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="a15f4f4e81f862485be376d24a7dc801008fa67438e89bd78ef1d360cc2dcef1f14a8ddb9cb9f2959a75c34251c5de7dcc8ee5d0a695d6d0bc07a17c2367e5559f938f44e730ba24afb6e58f6e6ceea80b1e0a6616706fe36a094e386f8a3483437dcca3af18a1e3a0"], 0x16) write$P9_RUNLINKAT(r2, &(0x7f0000000100)={0x7, 0x4d, 0xf7fe}, 0x7) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f00000000c0)) r5 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x200) ioctl$FLOPPY_FDGETPRM(r5, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2654.799146][T19958] timeout_message=lock fdc [ 2654.800977][T19958] last output bytes: [ 2654.802884][T19958] 0 90 4294967496 [ 2654.804275][T19958] 1 90 4294967496 00:45:41 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000040)) 00:45:41 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0x481, 0x87c9c402f12974ef) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x7, 0x4a0000) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000080)) [ 2654.805694][T19958] 2 90 4294967496 [ 2654.814693][T19958] 12 90 4294967496 [ 2654.816729][T19958] 1b 90 4294967496 [ 2654.818690][T19958] ff 90 4294967496 [ 2654.820251][T19958] 12 80 4294967499 [ 2654.821823][T19958] 3 90 4294967499 [ 2654.823383][T19958] 3 80 4294967499 [ 2654.824935][T19958] a1 90 4294967499 [ 2654.828499][T19958] 1e 90 4294967499 00:45:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f00}, 0x48) [ 2654.830532][T19958] e6 80 4294967499 [ 2654.833442][T19958] 1 90 4294967499 [ 2654.835595][T19958] 0 90 4294967499 [ 2654.838115][T19958] 0 90 4294967499 [ 2654.839819][T19958] 1 90 4294967499 [ 2654.841583][T19958] 2 90 4294967499 [ 2654.843442][T19958] 24 90 4294967499 [ 2654.845230][T19958] 1b 90 4294967499 [ 2654.848569][T19958] ff 90 4294967499 [ 2654.850581][T19958] last result at 4295201781 00:45:41 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0x481, 0x87c9c402f12974ef) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x7, 0x4a0000) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000080)) [ 2654.856002][T19958] last redo_fd_request at 4295202617 [ 2654.858601][T19958] status=80 [ 2654.861144][T19958] fdc_busy=1 [ 2654.863357][T19958] floppy_work.func=floppy_work_workfn [ 2654.867399][T19958] cont=ffffffff8b1391e0 [ 2654.876549][T19958] current_req=0000000000000000 [ 2654.878910][T19958] command_status=-1 [ 2654.880548][T19958] [ 2654.881494][T19958] floppy1: floppy timeout called 00:45:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000}, 0x48) [ 2654.883889][T19958] [ 2654.885364][T19958] floppy driver state [ 2654.887342][T19958] ------------------- [ 2654.889103][T19958] now=4295202629 last interrupt=4294967499 diff=235130 last called handler=main_command_interrupt [ 2654.894016][T19958] timeout_message=lock fdc [ 2654.896902][T19958] last output bytes: 00:45:41 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0x481, 0x87c9c402f12974ef) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x7, 0x4a0000) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000080)) [ 2654.899048][T19958] 0 90 4294967496 [ 2654.910318][T19958] 1 90 4294967496 [ 2654.913604][T19958] 2 90 4294967496 00:45:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2100}, 0x48) [ 2654.915531][T19958] 12 90 4294967496 [ 2654.917736][T19958] 1b 90 4294967496 [ 2654.919676][T19958] ff 90 4294967496 [ 2654.921313][T19958] 12 80 4294967499 [ 2654.923053][T19958] 3 90 4294967499 [ 2654.924820][T19958] 3 80 4294967499 [ 2654.928018][T19958] a1 90 4294967499 [ 2654.931899][T19958] 1e 90 4294967499 [ 2654.936008][T19958] e6 80 4294967499 [ 2654.937606][T19958] 1 90 4294967499 [ 2654.938963][T19958] 0 90 4294967499 [ 2654.940375][T19958] 0 90 4294967499 [ 2654.941812][T19958] 1 90 4294967499 [ 2654.943258][T19958] 2 90 4294967499 [ 2654.944708][T19958] 24 90 4294967499 [ 2654.953556][T19958] 1b 90 4294967499 [ 2654.955039][T19958] ff 90 4294967499 [ 2654.956783][T19958] last result at 4295201781 [ 2654.958538][T19958] last redo_fd_request at 4295202628 [ 2654.960507][T19958] status=80 [ 2654.961707][T19958] fdc_busy=1 [ 2654.962926][T19958] floppy_work.func=floppy_work_workfn [ 2654.965375][T19958] cont=ffffffff8b1391e0 [ 2654.969124][T19958] current_req=0000000000000000 [ 2654.970979][T19958] command_status=-1 [ 2654.972479][T19958] [ 2654.973432][T19958] floppy1: floppy timeout called [ 2654.977543][T19958] [ 2654.978507][T19958] floppy driver state [ 2654.980039][T19958] ------------------- [ 2654.981548][T19958] now=4295202638 last interrupt=4294967499 diff=235139 last called handler=main_command_interrupt [ 2654.985733][T19958] timeout_message=lock fdc [ 2654.992061][T19958] last output bytes: [ 2654.993973][T19958] 0 90 4294967496 [ 2654.995811][T19958] 1 90 4294967496 00:45:41 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x954}) syz_open_dev$floppy(&(0x7f0000000000), 0x24db467c, 0x40000) 00:45:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2200}, 0x48) 00:45:41 executing program 2: ioctl$FLOPPY_FDGETMAXERRS(0xffffffffffffffff, 0x8014020e, &(0x7f0000000040)) [ 2655.002137][T19958] 2 90 4294967496 [ 2655.004012][T19958] 12 90 4294967496 [ 2655.007729][T19958] 1b 90 4294967496 [ 2655.011408][T19958] ff 90 4294967496 00:45:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8048010}, 0x20000010) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x10001, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x28}}, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="a15f4f4e81f862485be376d24a7dc801008fa67438e89bd78ef1d360cc2dcef1f14a8ddb9cb9f2959a75c34251c5de7dcc8ee5d0a695d6d0bc07a17c2367e5559f938f44e730ba24afb6e58f6e6ceea80b1e0a6616706fe36a094e386f8a3483437dcca3af18a1e3a0"], 0x16) write$P9_RUNLINKAT(r2, &(0x7f0000000100)={0x7, 0x4d, 0xf7fe}, 0x7) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f00000000c0)) r5 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x200) ioctl$FLOPPY_FDGETPRM(r5, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8048010}, 0x20000010) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x10001, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x28}}, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) (async) write$P9_RLERRORu(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="a15f4f4e81f862485be376d24a7dc801008fa67438e89bd78ef1d360cc2dcef1f14a8ddb9cb9f2959a75c34251c5de7dcc8ee5d0a695d6d0bc07a17c2367e5559f938f44e730ba24afb6e58f6e6ceea80b1e0a6616706fe36a094e386f8a3483437dcca3af18a1e3a0"], 0x16) (async) write$P9_RUNLINKAT(r2, &(0x7f0000000100)={0x7, 0x4d, 0xf7fe}, 0x7) (async) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f00000000c0)) (async) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x200) (async) ioctl$FLOPPY_FDGETPRM(r5, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) [ 2655.013267][T19958] 12 80 4294967499 [ 2655.016486][T19958] 3 90 4294967499 [ 2655.022111][T19958] 3 80 4294967499 00:45:41 executing program 2: ioctl$FLOPPY_FDGETMAXERRS(0xffffffffffffffff, 0x8014020e, &(0x7f0000000040)) [ 2655.036561][T19958] a1 90 4294967499 [ 2655.044681][T19958] 1e 90 4294967499 00:45:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2300}, 0x48) 00:45:41 executing program 2: ioctl$FLOPPY_FDGETMAXERRS(0xffffffffffffffff, 0x8014020e, &(0x7f0000000040)) [ 2655.064074][T19958] e6 80 4294967499 [ 2655.068736][T19958] 1 90 4294967499 00:45:41 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x954}) syz_open_dev$floppy(&(0x7f0000000000), 0x24db467c, 0x40000) (async) syz_open_dev$floppy(&(0x7f0000000000), 0x24db467c, 0x40000) [ 2655.078947][T19958] 0 90 4294967499 [ 2655.080822][T19958] 0 90 4294967499 [ 2655.082621][T19958] 1 90 4294967499 [ 2655.084459][T19958] 2 90 4294967499 00:45:41 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x800) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000040)) [ 2655.086962][T19958] 24 90 4294967499 [ 2655.090516][T19958] 1b 90 4294967499 [ 2655.092399][T19958] ff 90 4294967499 [ 2655.093853][T19958] last result at 4295201781 [ 2655.095530][T19958] last redo_fd_request at 4295202637 00:45:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000000}, 0x48) [ 2655.102633][T19958] status=80 [ 2655.104180][T19958] fdc_busy=1 [ 2655.108778][T19958] floppy_work.func=floppy_work_workfn [ 2655.112296][T19958] cont=ffffffff8b1391e0 [ 2655.114650][T19958] current_req=0000000000000000 [ 2655.118350][T19958] command_status=-1 [ 2655.119978][T19958] [ 2655.120972][T19958] floppy1: floppy timeout called [ 2655.123300][T19958] [ 2655.124599][T19958] floppy driver state [ 2655.128015][T19958] ------------------- [ 2655.129641][T19958] now=4295202653 last interrupt=4294967499 diff=235154 last called handler=main_command_interrupt [ 2655.133575][T19958] timeout_message=lock fdc [ 2655.135562][T19958] last output bytes: 00:45:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000}, 0x48) [ 2655.139017][T19958] 0 90 4294967496 [ 2655.141356][T19958] 1 90 4294967496 [ 2655.142971][T19958] 2 90 4294967496 [ 2655.144527][T19958] 12 90 4294967496 [ 2655.148047][T19958] 1b 90 4294967496 [ 2655.151213][T19958] ff 90 4294967496 [ 2655.153215][T19958] 12 80 4294967499 [ 2655.154771][T19958] 3 90 4294967499 [ 2655.157730][T19958] 3 80 4294967499 [ 2655.159221][T19958] a1 90 4294967499 [ 2655.160664][T19958] 1e 90 4294967499 [ 2655.162051][T19958] e6 80 4294967499 [ 2655.163654][T19958] 1 90 4294967499 [ 2655.165422][T19958] 0 90 4294967499 [ 2655.172956][T19958] 0 90 4294967499 [ 2655.186110][T19958] 1 90 4294967499 [ 2655.187905][T19958] 2 90 4294967499 [ 2655.189735][T19958] 24 90 4294967499 [ 2655.191566][T19958] 1b 90 4294967499 [ 2655.193397][T19958] ff 90 4294967499 [ 2655.195142][T19958] last result at 4295201781 [ 2655.201058][T19958] last redo_fd_request at 4295202652 [ 2655.203675][T19958] status=80 [ 2655.205193][T19958] fdc_busy=1 [ 2655.207213][T19958] floppy_work.func=floppy_work_workfn [ 2655.209764][T19958] cont=ffffffff8b1391e0 [ 2655.211739][T19958] current_req=0000000000000000 [ 2655.214019][T19958] command_status=-1 [ 2655.215824][T19958] [ 2655.220700][T19958] floppy1: floppy timeout called [ 2655.230763][ T969] 00:45:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8048010}, 0x20000010) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x10001, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x28}}, 0x0) (async) r4 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="a15f4f4e81f862485be376d24a7dc801008fa67438e89bd78ef1d360cc2dcef1f14a8ddb9cb9f2959a75c34251c5de7dcc8ee5d0a695d6d0bc07a17c2367e5559f938f44e730ba24afb6e58f6e6ceea80b1e0a6616706fe36a094e386f8a3483437dcca3af18a1e3a0"], 0x16) (async) write$P9_RUNLINKAT(r2, &(0x7f0000000100)={0x7, 0x4d, 0xf7fe}, 0x7) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f00000000c0)) r5 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x200) ioctl$FLOPPY_FDGETPRM(r5, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2655.231971][ T969] floppy driver state [ 2655.233947][ T969] ------------------- 00:45:41 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x954}) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x954}) syz_open_dev$floppy(&(0x7f0000000000), 0x24db467c, 0x40000) 00:45:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3000000}, 0x48) 00:45:41 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x800) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000040)) [ 2655.235439][ T969] now=4295202663 last interrupt=4294967499 diff=235164 last called handler=main_command_interrupt [ 2655.243100][ T969] timeout_message=lock fdc [ 2655.244809][ T969] last output bytes: [ 2655.249081][ T969] 0 90 4294967496 [ 2655.250780][ T969] 1 90 4294967496 [ 2655.252546][ T969] 2 90 4294967496 [ 2655.254459][ T969] 12 90 4294967496 [ 2655.259299][ T969] 1b 90 4294967496 [ 2655.261290][ T969] ff 90 4294967496 [ 2655.263450][ T969] 12 80 4294967499 [ 2655.265489][ T969] 3 90 4294967499 [ 2655.270634][ T969] 3 80 4294967499 00:45:41 executing program 2: r0 = syz_open_dev$floppy(0x0, 0xff1, 0x800) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000040)) [ 2655.272377][ T969] a1 90 4294967499 00:45:41 executing program 3: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDEJECT(r0, 0x25a) [ 2655.285951][ T969] 1e 90 4294967499 [ 2655.295309][ T969] e6 80 4294967499 00:45:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4000000}, 0x48) [ 2655.296965][ T969] 1 90 4294967499 [ 2655.303390][ T969] 0 90 4294967499 [ 2655.304897][ T969] 0 90 4294967499 [ 2655.307308][ T969] 1 90 4294967499 [ 2655.308761][ T969] 2 90 4294967499 [ 2655.310169][ T969] 24 90 4294967499 [ 2655.311613][ T969] 1b 90 4294967499 [ 2655.313469][ T969] ff 90 4294967499 [ 2655.315203][ T969] last result at 4295201781 [ 2655.317603][ T969] last redo_fd_request at 4295202662 [ 2655.319969][ T969] status=80 [ 2655.321389][ T969] fdc_busy=1 [ 2655.322864][ T969] floppy_work.func=floppy_work_workfn [ 2655.325198][ T969] cont=ffffffff8b1391e0 [ 2655.328235][ T969] current_req=0000000000000000 [ 2655.330360][ T969] command_status=-1 [ 2655.331879][ T969] [ 2655.332895][ T969] floppy1: floppy timeout called [ 2655.335385][ T969] [ 2655.339793][ T969] floppy driver state [ 2655.341725][ T969] ------------------- 00:45:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5000000}, 0x48) [ 2655.343615][ T969] now=4295202674 last interrupt=4294967499 diff=235175 last called handler=main_command_interrupt [ 2655.349095][ T969] timeout_message=lock fdc [ 2655.351045][ T969] last output bytes: [ 2655.352656][ T969] 0 90 4294967496 [ 2655.354360][ T969] 1 90 4294967496 [ 2655.356340][ T969] 2 90 4294967496 [ 2655.358023][ T969] 12 90 4294967496 [ 2655.359708][ T969] 1b 90 4294967496 [ 2655.361402][ T969] ff 90 4294967496 [ 2655.363084][ T969] 12 80 4294967499 [ 2655.364806][ T969] 3 90 4294967499 [ 2655.366855][ T969] 3 80 4294967499 [ 2655.368483][ T969] a1 90 4294967499 [ 2655.370193][ T969] 1e 90 4294967499 [ 2655.371889][ T969] e6 80 4294967499 [ 2655.374019][ T969] 1 90 4294967499 [ 2655.375700][ T969] 0 90 4294967499 [ 2655.377956][ T969] 0 90 4294967499 [ 2655.379662][ T969] 1 90 4294967499 [ 2655.381466][ T969] 2 90 4294967499 [ 2655.383633][ T969] 24 90 4294967499 [ 2655.385349][ T969] 1b 90 4294967499 [ 2655.387370][ T969] ff 90 4294967499 [ 2655.389062][ T969] last result at 4295201781 [ 2655.391183][ T969] last redo_fd_request at 4295202673 [ 2655.393621][ T969] status=80 [ 2655.395173][ T969] fdc_busy=1 [ 2655.397085][ T969] floppy_work.func=floppy_work_workfn [ 2655.399491][ T969] cont=ffffffff8b1391e0 [ 2655.401378][ T969] current_req=0000000000000000 [ 2655.403557][ T969] command_status=-1 [ 2655.405073][ T969] [ 2655.406299][ T969] floppy1: floppy timeout called [ 2655.409466][T19958] [ 2655.410397][T19958] floppy driver state [ 2655.412198][T19958] ------------------- [ 2655.414001][T19958] now=4295202681 last interrupt=4294967499 diff=235182 last called handler=main_command_interrupt [ 2655.425383][T19958] timeout_message=lock fdc 00:45:42 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$FLOPPY_FDPOLLDRVSTAT(r1, 0x80340213, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1}) openat$fuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) 00:45:42 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x800) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000040)) 00:45:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6000000}, 0x48) 00:45:42 executing program 3: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDEJECT(r0, 0x25a) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) ioctl$FLOPPY_FDEJECT(r0, 0x25a) (async) [ 2655.436888][T19958] last output bytes: [ 2655.438705][T19958] 0 90 4294967496 [ 2655.440400][T19958] 1 90 4294967496 [ 2655.442162][T19958] 2 90 4294967496 [ 2655.443872][T19958] 12 90 4294967496 [ 2655.445384][T19958] 1b 90 4294967496 [ 2655.447539][T19958] ff 90 4294967496 [ 2655.453756][T19958] 12 80 4294967499 [ 2655.455624][T19958] 3 90 4294967499 [ 2655.458512][T19958] 3 80 4294967499 [ 2655.460175][T19958] a1 90 4294967499 [ 2655.461867][T19958] 1e 90 4294967499 [ 2655.463548][T19958] e6 80 4294967499 00:45:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7000000}, 0x48) [ 2655.465024][T19958] 1 90 4294967499 [ 2655.468201][T19958] 0 90 4294967499 [ 2655.470020][T19958] 0 90 4294967499 [ 2655.471713][T19958] 1 90 4294967499 [ 2655.473491][T19958] 2 90 4294967499 [ 2655.475631][T19958] 24 90 4294967499 [ 2655.478661][T19958] 1b 90 4294967499 [ 2655.480232][T19958] ff 90 4294967499 [ 2655.481774][T19958] last result at 4295201781 [ 2655.483600][T19958] last redo_fd_request at 4295202681 [ 2655.485652][T19958] status=80 00:45:42 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x800) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000040)) [ 2655.488232][T19958] fdc_busy=1 [ 2655.489631][T19958] floppy_work.func=floppy_work_workfn [ 2655.491724][T19958] cont=ffffffff8b1391e0 [ 2655.493413][T19958] current_req=0000000000000000 [ 2655.495305][T19958] command_status=-1 00:45:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8000000}, 0x48) [ 2655.498073][T19958] [ 2655.499277][T19958] floppy1: floppy timeout called [ 2655.501570][T19958] [ 2655.502567][T19958] floppy driver state [ 2655.504109][T19958] ------------------- [ 2655.505660][T19958] now=4295202690 last interrupt=4294967499 diff=235191 last called handler=main_command_interrupt [ 2655.510415][T19958] timeout_message=lock fdc [ 2655.512563][T19958] last output bytes: [ 2655.514492][T19958] 0 90 4294967496 00:45:42 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0x0, 0x800) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000040)) [ 2655.517349][T19958] 1 90 4294967496 [ 2655.519225][T19958] 2 90 4294967496 [ 2655.520779][T19958] 12 90 4294967496 [ 2655.522337][T19958] 1b 90 4294967496 [ 2655.523847][T19958] ff 90 4294967496 [ 2655.525346][T19958] 12 80 4294967499 [ 2655.528057][T19958] 3 90 4294967499 [ 2655.529625][T19958] 3 80 4294967499 [ 2655.531136][T19958] a1 90 4294967499 [ 2655.532705][T19958] 1e 90 4294967499 [ 2655.534196][T19958] e6 80 4294967499 [ 2655.535706][T19958] 1 90 4294967499 [ 2655.539001][T19958] 0 90 4294967499 [ 2655.541393][T19958] 0 90 4294967499 [ 2655.543539][T19958] 1 90 4294967499 [ 2655.545410][T19958] 2 90 4294967499 [ 2655.547319][T19958] 24 90 4294967499 [ 2655.551538][T19958] 1b 90 4294967499 [ 2655.553783][T19958] ff 90 4294967499 [ 2655.555694][T19958] last result at 4295201781 [ 2655.559662][T19958] last redo_fd_request at 4295202690 [ 2655.562377][T19958] status=80 [ 2655.564048][T19958] fdc_busy=1 [ 2655.565812][T19958] floppy_work.func=floppy_work_workfn [ 2655.569159][T19958] cont=ffffffff8b1391e0 [ 2655.571325][T19958] current_req=0000000000000000 [ 2655.573740][T19958] command_status=-1 [ 2655.575689][T19958] [ 2655.579985][T19958] floppy1: floppy timeout called [ 2655.583502][T19958] [ 2655.584573][T19958] floppy driver state [ 2655.586508][T19958] ------------------- [ 2655.589334][T19958] now=4295202699 last interrupt=4294967499 diff=235200 last called handler=main_command_interrupt [ 2655.593176][T19958] timeout_message=lock fdc 00:45:42 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$FLOPPY_FDPOLLDRVSTAT(r1, 0x80340213, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1}) openat$fuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) (async) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) ioctl$FLOPPY_FDPOLLDRVSTAT(r1, 0x80340213, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1}) (async) openat$fuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) 00:45:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9000000}, 0x48) [ 2655.594804][T19958] last output bytes: 00:45:42 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000040)) 00:45:42 executing program 3: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDEJECT(r0, 0x25a) [ 2655.605984][T19958] 0 90 4294967496 [ 2655.607548][T19958] 1 90 4294967496 [ 2655.608944][T19958] 2 90 4294967496 [ 2655.610319][T19958] 12 90 4294967496 [ 2655.611710][T19958] 1b 90 4294967496 [ 2655.613118][T19958] ff 90 4294967496 [ 2655.614826][T19958] 12 80 4294967499 [ 2655.629341][T19958] 3 90 4294967499 [ 2655.630832][T19958] 3 80 4294967499 [ 2655.632266][T19958] a1 90 4294967499 [ 2655.633659][T19958] 1e 90 4294967499 [ 2655.635037][T19958] e6 80 4294967499 [ 2655.638487][T19958] 1 90 4294967499 [ 2655.640034][T19958] 0 90 4294967499 [ 2655.641654][T19958] 0 90 4294967499 [ 2655.643292][T19958] 1 90 4294967499 [ 2655.644830][T19958] 2 90 4294967499 [ 2655.648768][T19958] 24 90 4294967499 [ 2655.650365][T19958] 1b 90 4294967499 [ 2655.651885][T19958] ff 90 4294967499 [ 2655.653442][T19958] last result at 4295201781 00:45:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa000000}, 0x48) [ 2655.655211][T19958] last redo_fd_request at 4295202698 [ 2655.658687][T19958] status=80 [ 2655.660131][T19958] fdc_busy=1 [ 2655.661683][T19958] floppy_work.func=floppy_work_workfn [ 2655.664139][T19958] cont=ffffffff8b1391e0 [ 2655.667617][T19958] current_req=0000000000000000 [ 2655.669893][T19958] command_status=-1 [ 2655.671415][T19958] [ 2655.672338][T19958] floppy1: floppy timeout called 00:45:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xb000000}, 0x48) [ 2655.674605][T19958] [ 2655.675640][T19958] floppy driver state [ 2655.678044][T19958] ------------------- [ 2655.679645][T19958] now=4295202708 last interrupt=4294967499 diff=235209 last called handler=main_command_interrupt [ 2655.683846][T19958] timeout_message=lock fdc [ 2655.685623][T19958] last output bytes: [ 2655.687482][T19958] 0 90 4294967496 [ 2655.688951][T19958] 1 90 4294967496 [ 2655.690370][T19958] 2 90 4294967496 [ 2655.691784][T19958] 12 90 4294967496 [ 2655.693222][T19958] 1b 90 4294967496 [ 2655.694602][T19958] ff 90 4294967496 [ 2655.697115][T19958] 12 80 4294967499 [ 2655.699065][T19958] 3 90 4294967499 [ 2655.700601][T19958] 3 80 4294967499 [ 2655.702117][T19958] a1 90 4294967499 [ 2655.703870][T19958] 1e 90 4294967499 [ 2655.705690][T19958] e6 80 4294967499 [ 2655.707870][T19958] 1 90 4294967499 [ 2655.709516][T19958] 0 90 4294967499 [ 2655.711085][T19958] 0 90 4294967499 [ 2655.712672][T19958] 1 90 4294967499 00:45:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc000000}, 0x48) [ 2655.714154][T19958] 2 90 4294967499 [ 2655.715965][T19958] 24 90 4294967499 [ 2655.717747][T19958] 1b 90 4294967499 [ 2655.719325][T19958] ff 90 4294967499 [ 2655.720834][T19958] last result at 4295201781 [ 2655.722554][T19958] last redo_fd_request at 4295202707 [ 2655.724599][T19958] status=80 [ 2655.725957][T19958] fdc_busy=1 [ 2655.727282][T19958] floppy_work.func=floppy_work_workfn [ 2655.729362][T19958] cont=ffffffff8b1391e0 [ 2655.730920][T19958] current_req=0000000000000000 [ 2655.732839][T19958] command_status=-1 [ 2655.734301][T19958] [ 2655.735274][T19958] floppy1: floppy timeout called [ 2655.737518][T19958] [ 2655.738481][T19958] floppy driver state [ 2655.740003][T19958] ------------------- [ 2655.741576][T19958] now=4295202714 last interrupt=4294967499 diff=235215 last called handler=main_command_interrupt 00:45:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xd000000}, 0x48) [ 2655.745531][T19958] timeout_message=lock fdc [ 2655.747761][T19958] last output bytes: [ 2655.749460][T19958] 0 90 4294967496 [ 2655.751233][T19958] 1 90 4294967496 [ 2655.752840][T19958] 2 90 4294967496 [ 2655.754269][T19958] 12 90 4294967496 [ 2655.755703][T19958] 1b 90 4294967496 [ 2655.757270][T19958] ff 90 4294967496 [ 2655.758746][T19958] 12 80 4294967499 [ 2655.760149][T19958] 3 90 4294967499 [ 2655.761604][T19958] 3 80 4294967499 [ 2655.763087][T19958] a1 90 4294967499 [ 2655.764486][T19958] 1e 90 4294967499 [ 2655.765962][T19958] e6 80 4294967499 [ 2655.767405][T19958] 1 90 4294967499 [ 2655.768867][T19958] 0 90 4294967499 [ 2655.770316][T19958] 0 90 4294967499 [ 2655.771765][T19958] 1 90 4294967499 [ 2655.773229][T19958] 2 90 4294967499 [ 2655.774759][T19958] 24 90 4294967499 [ 2655.776537][T19958] 1b 90 4294967499 [ 2655.778117][T19958] ff 90 4294967499 [ 2655.779716][T19958] last result at 4295201781 [ 2655.781914][T19958] last redo_fd_request at 4295202714 [ 2655.785302][T19958] status=80 [ 2655.787084][T19958] fdc_busy=1 [ 2655.788938][T19958] floppy_work.func=floppy_work_workfn [ 2655.791667][T19958] cont=ffffffff8b1391e0 [ 2655.793798][T19958] current_req=0000000000000000 [ 2655.796007][T19958] command_status=-1 [ 2655.797832][T19958] [ 2655.799282][T19958] floppy1: floppy timeout called [ 2655.803063][T19958] [ 2655.804410][T19958] floppy driver state [ 2655.806457][T19958] ------------------- [ 2655.808504][T19958] now=4295202721 last interrupt=4294967499 diff=235222 last called handler=main_command_interrupt [ 2655.813656][T19958] timeout_message=lock fdc [ 2655.816569][T19958] last output bytes: [ 2655.818640][T19958] 0 90 4294967496 [ 2655.826015][T19958] 1 90 4294967496 [ 2655.827828][T19958] 2 90 4294967496 [ 2655.829596][T19958] 12 90 4294967496 [ 2655.831382][T19958] 1b 90 4294967496 [ 2655.833148][T19958] ff 90 4294967496 [ 2655.834900][T19958] 12 80 4294967499 [ 2655.844523][T19958] 3 90 4294967499 [ 2655.846817][T19958] 3 80 4294967499 [ 2655.848689][T19958] a1 90 4294967499 [ 2655.850486][T19958] 1e 90 4294967499 [ 2655.852260][T19958] e6 80 4294967499 [ 2655.853972][T19958] 1 90 4294967499 [ 2655.855727][T19958] 0 90 4294967499 [ 2655.857587][T19958] 0 90 4294967499 [ 2655.859350][T19958] 1 90 4294967499 [ 2655.861127][T19958] 2 90 4294967499 [ 2655.862888][T19958] 24 90 4294967499 [ 2655.864653][T19958] 1b 90 4294967499 [ 2655.867308][T19958] ff 90 4294967499 [ 2655.869078][T19958] last result at 4295201781 [ 2655.871205][T19958] last redo_fd_request at 4295202720 [ 2655.873671][T19958] status=80 [ 2655.875196][T19958] fdc_busy=1 [ 2655.877242][T19958] floppy_work.func=floppy_work_workfn [ 2655.879801][T19958] cont=ffffffff8b1391e0 [ 2655.881812][T19958] current_req=0000000000000000 [ 2655.884069][T19958] command_status=-1 [ 2655.886315][T19958] [ 2655.887521][T19958] floppy1: floppy timeout called [ 2655.890093][T19958] [ 2655.891245][T19958] floppy driver state [ 2655.893092][T19958] ------------------- [ 2655.894965][T19958] now=4295202729 last interrupt=4294967499 diff=235230 last called handler=main_command_interrupt [ 2655.900009][T19958] timeout_message=lock fdc 00:45:42 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$FLOPPY_FDPOLLDRVSTAT(r1, 0x80340213, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1}) (async) openat$fuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) 00:45:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe000000}, 0x48) 00:45:42 executing program 3: syz_open_dev$floppy(&(0x7f00000000c0), 0x1fc, 0x82c00) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x101000) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000080)) 00:45:42 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000040)) [ 2655.902107][T19958] last output bytes: [ 2655.907211][T19958] 0 90 4294967496 [ 2655.908984][T19958] 1 90 4294967496 [ 2655.910706][T19958] 2 90 4294967496 [ 2655.912450][T19958] 12 90 4294967496 [ 2655.914203][T19958] 1b 90 4294967496 [ 2655.916044][T19958] ff 90 4294967496 [ 2655.917969][T19958] 12 80 4294967499 [ 2655.919917][T19958] 3 90 4294967499 [ 2655.921896][T19958] 3 80 4294967499 [ 2655.923830][T19958] a1 90 4294967499 [ 2655.925822][T19958] 1e 90 4294967499 [ 2655.930390][T19958] e6 80 4294967499 [ 2655.932393][T19958] 1 90 4294967499 [ 2655.934404][T19958] 0 90 4294967499 [ 2655.936738][T19958] 0 90 4294967499 [ 2655.938737][T19958] 1 90 4294967499 [ 2655.940781][T19958] 2 90 4294967499 [ 2655.942692][T19958] 24 90 4294967499 [ 2655.944707][T19958] 1b 90 4294967499 [ 2655.946705][T19958] ff 90 4294967499 [ 2655.948550][T19958] last result at 4295201781 [ 2655.950861][T19958] last redo_fd_request at 4295202729 [ 2655.953145][T19958] status=80 [ 2655.954462][T19958] fdc_busy=1 [ 2655.955803][T19958] floppy_work.func=floppy_work_workfn [ 2655.958386][T19958] cont=ffffffff8b1391e0 [ 2655.960450][T19958] current_req=0000000000000000 [ 2655.962633][T19958] command_status=-1 [ 2655.964332][T19958] [ 2655.965295][T19958] floppy1: floppy timeout called [ 2655.969540][T19958] [ 2655.970813][T19958] floppy driver state [ 2655.972849][T19958] ------------------- [ 2655.974880][T19958] now=4295202737 last interrupt=4294967499 diff=235238 last called handler=main_command_interrupt [ 2655.980028][T19958] timeout_message=lock fdc [ 2655.983866][T19958] last output bytes: [ 2655.987452][T19958] 0 90 4294967496 [ 2655.989288][T19958] 1 90 4294967496 [ 2655.991108][T19958] 2 90 4294967496 [ 2655.992871][T19958] 12 90 4294967496 [ 2655.994629][T19958] 1b 90 4294967496 [ 2655.997379][T19958] ff 90 4294967496 [ 2655.999312][T19958] 12 80 4294967499 [ 2656.001197][T19958] 3 90 4294967499 [ 2656.003161][T19958] 3 80 4294967499 [ 2656.004993][T19958] a1 90 4294967499 [ 2656.009503][T19958] 1e 90 4294967499 [ 2656.011450][T19958] e6 80 4294967499 [ 2656.013422][T19958] 1 90 4294967499 [ 2656.015493][T19958] 0 90 4294967499 [ 2656.018747][T19958] 0 90 4294967499 [ 2656.021173][T19958] 1 90 4294967499 [ 2656.023093][T19958] 2 90 4294967499 [ 2656.025008][T19958] 24 90 4294967499 [ 2656.030646][T19958] 1b 90 4294967499 [ 2656.032650][T19958] ff 90 4294967499 [ 2656.034577][T19958] last result at 4295201781 [ 2656.037280][T19958] last redo_fd_request at 4295202737 [ 2656.039530][T19958] status=80 [ 2656.041172][T19958] fdc_busy=1 00:45:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xf000000}, 0x48) [ 2656.042796][T19958] floppy_work.func=floppy_work_workfn [ 2656.045548][T19958] cont=ffffffff8b1391e0 [ 2656.048388][T19958] current_req=0000000000000000 [ 2656.050771][T19958] command_status=-1 [ 2656.052507][T19958] [ 2656.053808][T19958] floppy1: floppy timeout called [ 2656.056865][ T1088] [ 2656.058223][ T1088] floppy driver state [ 2656.060323][ T1088] ------------------- [ 2656.062404][ T1088] now=4295202746 last interrupt=4294967499 diff=235247 last called handler=main_command_interrupt [ 2656.067671][ T1088] timeout_message=lock fdc [ 2656.069993][ T1088] last output bytes: [ 2656.071971][ T1088] 0 90 4294967496 [ 2656.073557][ T1088] 1 90 4294967496 [ 2656.075299][ T1088] 2 90 4294967496 00:45:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000000}, 0x48) [ 2656.077471][ T1088] 12 90 4294967496 [ 2656.079656][ T1088] 1b 90 4294967496 [ 2656.081363][ T1088] ff 90 4294967496 [ 2656.083004][ T1088] 12 80 4294967499 [ 2656.084546][ T1088] 3 90 4294967499 [ 2656.086654][ T1088] 3 80 4294967499 [ 2656.088712][ T1088] a1 90 4294967499 [ 2656.090748][ T1088] 1e 90 4294967499 [ 2656.092776][ T1088] e6 80 4294967499 [ 2656.094755][ T1088] 1 90 4294967499 [ 2656.096896][ T1088] 0 90 4294967499 [ 2656.098896][ T1088] 0 90 4294967499 [ 2656.100881][ T1088] 1 90 4294967499 [ 2656.102739][ T1088] 2 90 4294967499 [ 2656.104375][ T1088] 24 90 4294967499 [ 2656.106425][ T1088] 1b 90 4294967499 [ 2656.108369][ T1088] ff 90 4294967499 [ 2656.109948][ T1088] last result at 4295201781 [ 2656.111765][ T1088] last redo_fd_request at 4295202746 00:45:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x11000000}, 0x48) [ 2656.114093][ T1088] status=80 [ 2656.116306][ T1088] fdc_busy=1 [ 2656.118057][ T1088] floppy_work.func=floppy_work_workfn [ 2656.120948][ T1088] cont=ffffffff8b1391e0 [ 2656.122769][ T1088] current_req=0000000000000000 [ 2656.124705][ T1088] command_status=-1 [ 2656.126278][ T1088] [ 2656.127255][ T1088] floppy1: floppy timeout called [ 2656.129863][ T1088] [ 2656.131770][ T1088] floppy driver state [ 2656.133818][ T1088] ------------------- [ 2656.135995][ T1088] now=4295202754 last interrupt=4294967499 diff=235255 last called handler=main_command_interrupt [ 2656.141128][ T1088] timeout_message=lock fdc [ 2656.143327][ T1088] last output bytes: [ 2656.144929][ T1088] 0 90 4294967496 [ 2656.146747][ T1088] 1 90 4294967496 00:45:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x12000000}, 0x48) [ 2656.148746][ T1088] 2 90 4294967496 [ 2656.150902][ T1088] 12 90 4294967496 [ 2656.152866][ T1088] 1b 90 4294967496 [ 2656.154540][ T1088] ff 90 4294967496 [ 2656.156165][ T1088] 12 80 4294967499 [ 2656.157738][ T1088] 3 90 4294967499 [ 2656.159528][ T1088] 3 80 4294967499 [ 2656.161410][ T1088] a1 90 4294967499 [ 2656.163204][ T1088] 1e 90 4294967499 [ 2656.164673][ T1088] e6 80 4294967499 [ 2656.166605][ T1088] 1 90 4294967499 [ 2656.168393][ T1088] 0 90 4294967499 [ 2656.170191][ T1088] 0 90 4294967499 [ 2656.171996][ T1088] 1 90 4294967499 [ 2656.173791][ T1088] 2 90 4294967499 [ 2656.175571][ T1088] 24 90 4294967499 [ 2656.177755][ T1088] 1b 90 4294967499 [ 2656.179784][ T1088] ff 90 4294967499 [ 2656.181632][ T1088] last result at 4295201781 [ 2656.183797][ T1088] last redo_fd_request at 4295202753 [ 2656.186315][ T1088] status=80 [ 2656.187771][ T1088] fdc_busy=1 [ 2656.189330][ T1088] floppy_work.func=floppy_work_workfn [ 2656.191873][ T1088] cont=ffffffff8b1391e0 [ 2656.193875][ T1088] current_req=0000000000000000 [ 2656.196392][ T1088] command_status=-1 [ 2656.199879][ T1088] [ 2656.201578][ T1088] floppy1: floppy timeout called [ 2656.205639][ T1088] [ 2656.206780][ T1088] floppy driver state 00:45:42 executing program 1: r0 = getpid() ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={r0, 0x1, 0x6}) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2656.211437][ T1088] ------------------- 00:45:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x13000000}, 0x48) 00:45:42 executing program 3: syz_open_dev$floppy(&(0x7f00000000c0), 0x1fc, 0x82c00) (async) syz_open_dev$floppy(&(0x7f00000000c0), 0x1fc, 0x82c00) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x101000) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000080)) [ 2656.213776][ T1088] now=4295202761 last interrupt=4294967499 diff=235262 last called handler=main_command_interrupt [ 2656.228842][ T1088] timeout_message=lock fdc 00:45:42 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000040)) [ 2656.230645][ T1088] last output bytes: [ 2656.232391][ T1088] 0 90 4294967496 [ 2656.233945][ T1088] 1 90 4294967496 00:45:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x14000000}, 0x48) [ 2656.235512][ T1088] 2 90 4294967496 [ 2656.237140][ T1088] 12 90 4294967496 [ 2656.238932][ T1088] 1b 90 4294967496 [ 2656.240752][ T1088] ff 90 4294967496 [ 2656.242560][ T1088] 12 80 4294967499 [ 2656.244377][ T1088] 3 90 4294967499 [ 2656.246266][ T1088] 3 80 4294967499 [ 2656.248027][ T1088] a1 90 4294967499 [ 2656.249843][ T1088] 1e 90 4294967499 [ 2656.251424][ T1088] e6 80 4294967499 [ 2656.253031][ T1088] 1 90 4294967499 [ 2656.254838][ T1088] 0 90 4294967499 [ 2656.257024][ T1088] 0 90 4294967499 [ 2656.258684][ T1088] 1 90 4294967499 [ 2656.260094][ T1088] 2 90 4294967499 [ 2656.261510][ T1088] 24 90 4294967499 [ 2656.262934][ T1088] 1b 90 4294967499 [ 2656.264342][ T1088] ff 90 4294967499 [ 2656.265754][ T1088] last result at 4295201781 [ 2656.267983][ T1088] last redo_fd_request at 4295202760 [ 2656.270526][ T1088] status=80 [ 2656.271959][ T1088] fdc_busy=1 [ 2656.273439][ T1088] floppy_work.func=floppy_work_workfn [ 2656.276483][ T1088] cont=ffffffff8b1391e0 [ 2656.278330][ T1088] current_req=0000000000000000 [ 2656.280636][ T1088] command_status=-1 [ 2656.282464][ T1088] [ 2656.283665][ T1088] floppy1: floppy timeout called [ 2656.287831][ T1088] [ 2656.288842][ T1088] floppy driver state [ 2656.290479][ T1088] ------------------- [ 2656.292736][ T1088] now=4295202769 last interrupt=4294967499 diff=235270 last called handler=main_command_interrupt 00:45:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x15000000}, 0x48) [ 2656.297746][ T1088] timeout_message=lock fdc [ 2656.300080][ T1088] last output bytes: [ 2656.301936][ T1088] 0 90 4294967496 [ 2656.303748][ T1088] 1 90 4294967496 [ 2656.305546][ T1088] 2 90 4294967496 [ 2656.307454][ T1088] 12 90 4294967496 [ 2656.309282][ T1088] 1b 90 4294967496 [ 2656.311077][ T1088] ff 90 4294967496 [ 2656.312910][ T1088] 12 80 4294967499 [ 2656.314540][ T1088] 3 90 4294967499 [ 2656.316239][ T1088] 3 80 4294967499 [ 2656.318062][ T1088] a1 90 4294967499 [ 2656.319875][ T1088] 1e 90 4294967499 00:45:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x16000000}, 0x48) [ 2656.321758][ T1088] e6 80 4294967499 [ 2656.323876][ T1088] 1 90 4294967499 [ 2656.325700][ T1088] 0 90 4294967499 [ 2656.327586][ T1088] 0 90 4294967499 [ 2656.329392][ T1088] 1 90 4294967499 [ 2656.331172][ T1088] 2 90 4294967499 [ 2656.332902][ T1088] 24 90 4294967499 [ 2656.334747][ T1088] 1b 90 4294967499 [ 2656.336741][ T1088] ff 90 4294967499 [ 2656.338566][ T1088] last result at 4295201781 [ 2656.340754][ T1088] last redo_fd_request at 4295202769 [ 2656.343219][ T1088] status=80 [ 2656.344789][ T1088] fdc_busy=1 [ 2656.346485][ T1088] floppy_work.func=floppy_work_workfn [ 2656.349089][ T1088] cont=ffffffff8b1391e0 [ 2656.350981][ T1088] current_req=0000000000000000 [ 2656.352979][ T1088] command_status=-1 [ 2656.354637][ T1088] [ 2656.355766][ T1088] floppy1: floppy timeout called [ 2656.358079][ T1088] 00:45:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x17000000}, 0x48) [ 2656.359234][ T1088] floppy driver state [ 2656.361287][ T1088] ------------------- [ 2656.363109][ T1088] now=4295202776 last interrupt=4294967499 diff=235277 last called handler=main_command_interrupt [ 2656.367530][ T1088] timeout_message=lock fdc [ 2656.369366][ T1088] last output bytes: [ 2656.371230][ T1088] 0 90 4294967496 [ 2656.373016][ T1088] 1 90 4294967496 [ 2656.374655][ T1088] 2 90 4294967496 [ 2656.376264][ T1088] 12 90 4294967496 [ 2656.377699][ T1088] 1b 90 4294967496 [ 2656.379110][ T1088] ff 90 4294967496 [ 2656.380538][ T1088] 12 80 4294967499 [ 2656.382523][ T1088] 3 90 4294967499 [ 2656.384453][ T1088] 3 80 4294967499 [ 2656.386418][ T1088] a1 90 4294967499 [ 2656.388175][ T1088] 1e 90 4294967499 [ 2656.389946][ T1088] e6 80 4294967499 [ 2656.391708][ T1088] 1 90 4294967499 [ 2656.393471][ T1088] 0 90 4294967499 [ 2656.395280][ T1088] 0 90 4294967499 [ 2656.397358][ T1088] 1 90 4294967499 [ 2656.399231][ T1088] 2 90 4294967499 [ 2656.401060][ T1088] 24 90 4294967499 [ 2656.402893][ T1088] 1b 90 4294967499 [ 2656.404720][ T1088] ff 90 4294967499 [ 2656.406656][ T1088] last result at 4295201781 [ 2656.408756][ T1088] last redo_fd_request at 4295202776 [ 2656.411317][ T1088] status=80 [ 2656.412868][ T1088] fdc_busy=1 [ 2656.414427][ T1088] floppy_work.func=floppy_work_workfn [ 2656.417125][ T1088] cont=ffffffff8b1391e0 [ 2656.419123][ T1088] current_req=0000000000000000 [ 2656.421411][ T1088] command_status=-1 [ 2656.423263][ T1088] [ 2656.424460][ T1088] floppy1: floppy timeout called [ 2656.429544][ T1088] [ 2656.430733][ T1088] floppy driver state [ 2656.432647][ T1088] ------------------- [ 2656.434467][ T1088] now=4295202783 last interrupt=4294967499 diff=235284 last called handler=main_command_interrupt [ 2656.439606][ T1088] timeout_message=lock fdc [ 2656.441756][ T1088] last output bytes: [ 2656.443610][ T1088] 0 90 4294967496 [ 2656.445414][ T1088] 1 90 4294967496 [ 2656.447134][ T1088] 2 90 4294967496 [ 2656.448644][ T1088] 12 90 4294967496 [ 2656.450481][ T1088] 1b 90 4294967496 [ 2656.452288][ T1088] ff 90 4294967496 [ 2656.454026][ T1088] 12 80 4294967499 [ 2656.455808][ T1088] 3 90 4294967499 [ 2656.457742][ T1088] 3 80 4294967499 [ 2656.459556][ T1088] a1 90 4294967499 [ 2656.461324][ T1088] 1e 90 4294967499 [ 2656.463077][ T1088] e6 80 4294967499 [ 2656.464809][ T1088] 1 90 4294967499 [ 2656.466764][ T1088] 0 90 4294967499 [ 2656.468543][ T1088] 0 90 4294967499 [ 2656.470358][ T1088] 1 90 4294967499 [ 2656.472169][ T1088] 2 90 4294967499 [ 2656.473989][ T1088] 24 90 4294967499 [ 2656.475790][ T1088] 1b 90 4294967499 [ 2656.477760][ T1088] ff 90 4294967499 [ 2656.479702][ T1088] last result at 4295201781 [ 2656.481857][ T1088] last redo_fd_request at 4295202783 [ 2656.484335][ T1088] status=80 [ 2656.485683][ T1088] fdc_busy=1 [ 2656.487129][ T1088] floppy_work.func=floppy_work_workfn [ 2656.489714][ T1088] cont=ffffffff8b1391e0 [ 2656.491667][ T1088] current_req=0000000000000000 [ 2656.493651][ T1088] command_status=-1 [ 2656.495461][ T1088] [ 2656.496784][ T1088] floppy1: floppy timeout called [ 2656.500583][ T1088] [ 2656.501749][ T1088] floppy driver state [ 2656.503264][ T1088] ------------------- [ 2656.504780][ T1088] now=4295202790 last interrupt=4294967499 diff=235291 last called handler=main_command_interrupt 00:45:43 executing program 1: r0 = getpid() ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={r0, 0x1, 0x6}) (async) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x18000000}, 0x48) 00:45:43 executing program 3: syz_open_dev$floppy(&(0x7f00000000c0), 0x1fc, 0x82c00) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x101000) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000080)) syz_open_dev$floppy(&(0x7f00000000c0), 0x1fc, 0x82c00) (async) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x101000) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000080)) (async) [ 2656.512849][ T1088] timeout_message=lock fdc [ 2656.514559][ T1088] last output bytes: [ 2656.516182][ T1088] 0 90 4294967496 [ 2656.517810][ T1088] 1 90 4294967496 [ 2656.519447][ T1088] 2 90 4294967496 [ 2656.521101][ T1088] 12 90 4294967496 [ 2656.522776][ T1088] 1b 90 4294967496 [ 2656.524374][ T1088] ff 90 4294967496 [ 2656.525765][ T1088] 12 80 4294967499 [ 2656.527516][ T1088] 3 90 4294967499 [ 2656.529149][ T1088] 3 80 4294967499 [ 2656.530570][ T1088] a1 90 4294967499 [ 2656.531955][ T1088] 1e 90 4294967499 00:45:43 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDGETMAXERRS(0xffffffffffffffff, 0x8014020e, &(0x7f0000000040)) [ 2656.533340][ T1088] e6 80 4294967499 [ 2656.535027][ T1088] 1 90 4294967499 [ 2656.536604][ T1088] 0 90 4294967499 [ 2656.538435][ T1088] 0 90 4294967499 [ 2656.540163][ T1088] 1 90 4294967499 [ 2656.541812][ T1088] 2 90 4294967499 [ 2656.543275][ T1088] 24 90 4294967499 [ 2656.544679][ T1088] 1b 90 4294967499 [ 2656.546355][ T1088] ff 90 4294967499 [ 2656.547988][ T1088] last result at 4295201781 [ 2656.550001][ T1088] last redo_fd_request at 4295202790 [ 2656.552383][ T1088] status=80 [ 2656.553816][ T1088] fdc_busy=1 [ 2656.555273][ T1088] floppy_work.func=floppy_work_workfn [ 2656.558031][ T1088] cont=ffffffff8b1391e0 [ 2656.559901][ T1088] current_req=0000000000000000 [ 2656.562028][ T1088] command_status=-1 [ 2656.563753][ T1088] [ 2656.564886][ T1088] floppy1: floppy timeout called [ 2656.570976][ T1088] [ 2656.572274][ T1088] floppy driver state [ 2656.574077][ T1088] ------------------- [ 2656.575955][ T1088] now=4295202798 last interrupt=4294967499 diff=235299 last called handler=main_command_interrupt 00:45:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19000000}, 0x48) [ 2656.580555][ T1088] timeout_message=lock fdc [ 2656.582708][ T1088] last output bytes: [ 2656.584274][ T1088] 0 90 4294967496 [ 2656.585679][ T1088] 1 90 4294967496 [ 2656.587351][ T1088] 2 90 4294967496 [ 2656.588747][ T1088] 12 90 4294967496 [ 2656.590379][ T1088] 1b 90 4294967496 [ 2656.592051][ T1088] ff 90 4294967496 [ 2656.593714][ T1088] 12 80 4294967499 [ 2656.595368][ T1088] 3 90 4294967499 [ 2656.597145][ T1088] 3 80 4294967499 [ 2656.598780][ T1088] a1 90 4294967499 [ 2656.600448][ T1088] 1e 90 4294967499 [ 2656.602389][ T1088] e6 80 4294967499 [ 2656.604026][ T1088] 1 90 4294967499 [ 2656.605693][ T1088] 0 90 4294967499 [ 2656.607520][ T1088] 0 90 4294967499 [ 2656.609170][ T1088] 1 90 4294967499 [ 2656.610821][ T1088] 2 90 4294967499 [ 2656.612496][ T1088] 24 90 4294967499 [ 2656.614170][ T1088] 1b 90 4294967499 [ 2656.615933][ T1088] ff 90 4294967499 [ 2656.617573][ T1088] last result at 4295201781 [ 2656.619583][ T1088] last redo_fd_request at 4295202797 00:45:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1a000000}, 0x48) [ 2656.621952][ T1088] status=80 [ 2656.623471][ T1088] fdc_busy=1 [ 2656.624714][ T1088] floppy_work.func=floppy_work_workfn [ 2656.626748][ T1088] cont=ffffffff8b1391e0 [ 2656.628267][ T1088] current_req=0000000000000000 [ 2656.630040][ T1088] command_status=-1 [ 2656.631447][ T1088] [ 2656.632359][ T1088] floppy1: floppy timeout called [ 2656.635636][ T1088] [ 2656.636686][ T1088] floppy driver state [ 2656.638201][ T1088] ------------------- 00:45:43 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDGETMAXERRS(0xffffffffffffffff, 0x8014020e, &(0x7f0000000040)) [ 2656.639646][ T1088] now=4295202804 last interrupt=4294967499 diff=235305 last called handler=main_command_interrupt [ 2656.643625][ T1088] timeout_message=lock fdc [ 2656.645363][ T1088] last output bytes: [ 2656.646935][ T1088] 0 90 4294967496 [ 2656.648348][ T1088] 1 90 4294967496 [ 2656.649724][ T1088] 2 90 4294967496 [ 2656.651144][ T1088] 12 90 4294967496 [ 2656.652568][ T1088] 1b 90 4294967496 [ 2656.654040][ T1088] ff 90 4294967496 00:45:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1b000000}, 0x48) [ 2656.655405][ T1088] 12 80 4294967499 [ 2656.659591][ T1088] 3 90 4294967499 [ 2656.661016][ T1088] 3 80 4294967499 [ 2656.662414][ T1088] a1 90 4294967499 [ 2656.663805][ T1088] 1e 90 4294967499 [ 2656.665200][ T1088] e6 80 4294967499 [ 2656.666743][ T1088] 1 90 4294967499 [ 2656.668154][ T1088] 0 90 4294967499 [ 2656.669545][ T1088] 0 90 4294967499 [ 2656.670932][ T1088] 1 90 4294967499 [ 2656.672333][ T1088] 2 90 4294967499 [ 2656.673733][ T1088] 24 90 4294967499 [ 2656.675173][ T1088] 1b 90 4294967499 [ 2656.676790][ T1088] ff 90 4294967499 [ 2656.678211][ T1088] last result at 4295201781 [ 2656.679929][ T1088] last redo_fd_request at 4295202803 [ 2656.681880][ T1088] status=80 [ 2656.683045][ T1088] fdc_busy=1 [ 2656.684238][ T1088] floppy_work.func=floppy_work_workfn [ 2656.686271][ T1088] cont=ffffffff8b1391e0 [ 2656.687800][ T1088] current_req=0000000000000000 [ 2656.689596][ T1088] command_status=-1 [ 2656.691009][ T1088] [ 2656.691933][ T1088] floppy1: floppy timeout called [ 2656.694794][ T1088] [ 2656.695756][ T1088] floppy driver state [ 2656.697438][ T1088] ------------------- [ 2656.698902][ T1088] now=4295202810 last interrupt=4294967499 diff=235311 last called handler=main_command_interrupt [ 2656.702686][ T1088] timeout_message=lock fdc [ 2656.704563][ T1088] last output bytes: [ 2656.706144][ T1088] 0 90 4294967496 [ 2656.707624][ T1088] 1 90 4294967496 [ 2656.709121][ T1088] 2 90 4294967496 [ 2656.710592][ T1088] 12 90 4294967496 [ 2656.711971][ T1088] 1b 90 4294967496 [ 2656.713361][ T1088] ff 90 4294967496 [ 2656.714727][ T1088] 12 80 4294967499 [ 2656.716852][ T1088] 3 90 4294967499 [ 2656.718453][ T1088] 3 80 4294967499 [ 2656.719932][ T1088] a1 90 4294967499 [ 2656.721443][ T1088] 1e 90 4294967499 [ 2656.722935][ T1088] e6 80 4294967499 [ 2656.724383][ T1088] 1 90 4294967499 [ 2656.725833][ T1088] 0 90 4294967499 [ 2656.727372][ T1088] 0 90 4294967499 [ 2656.728827][ T1088] 1 90 4294967499 [ 2656.730266][ T1088] 2 90 4294967499 [ 2656.731699][ T1088] 24 90 4294967499 [ 2656.733090][ T1088] 1b 90 4294967499 [ 2656.734510][ T1088] ff 90 4294967499 [ 2656.735983][ T1088] last result at 4295201781 [ 2656.737662][ T1088] last redo_fd_request at 4295202809 [ 2656.739674][ T1088] status=80 [ 2656.740861][ T1088] fdc_busy=1 [ 2656.742099][ T1088] floppy_work.func=floppy_work_workfn [ 2656.744167][ T1088] cont=ffffffff8b1391e0 [ 2656.745604][ T1088] current_req=0000000000000000 [ 2656.747402][ T1088] command_status=-1 [ 2656.748794][ T1088] [ 2656.749704][ T1088] floppy1: floppy timeout called [ 2656.751961][ T1088] [ 2656.752937][ T1088] floppy driver state [ 2656.754447][ T1088] ------------------- [ 2656.756033][ T1088] now=4295202816 last interrupt=4294967499 diff=235317 last called handler=main_command_interrupt [ 2656.760030][ T1088] timeout_message=lock fdc [ 2656.761303][ T1349] ieee802154 phy0 wpan0: encryption failed: -22 [ 2656.761909][ T1088] last output bytes: [ 2656.764863][ T1349] ieee802154 phy1 wpan1: encryption failed: -22 [ 2656.766377][ T1088] 0 90 4294967496 [ 2656.770665][ T1088] 1 90 4294967496 [ 2656.772047][ T1088] 2 90 4294967496 [ 2656.773440][ T1088] 12 90 4294967496 [ 2656.774889][ T1088] 1b 90 4294967496 [ 2656.776381][ T1088] ff 90 4294967496 [ 2656.777768][ T1088] 12 80 4294967499 [ 2656.779151][ T1088] 3 90 4294967499 [ 2656.780542][ T1088] 3 80 4294967499 [ 2656.781978][ T1088] a1 90 4294967499 [ 2656.783429][ T1088] 1e 90 4294967499 [ 2656.784862][ T1088] e6 80 4294967499 [ 2656.788438][ T1088] 1 90 4294967499 [ 2656.790161][ T1088] 0 90 4294967499 [ 2656.791860][ T1088] 0 90 4294967499 [ 2656.793346][ T1088] 1 90 4294967499 [ 2656.794742][ T1088] 2 90 4294967499 [ 2656.796545][ T1088] 24 90 4294967499 [ 2656.798246][ T1088] 1b 90 4294967499 [ 2656.799896][ T1088] ff 90 4294967499 [ 2656.801573][ T1088] last result at 4295201781 [ 2656.803577][ T1088] last redo_fd_request at 4295202815 00:45:43 executing program 1: r0 = getpid() ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={r0, 0x1, 0x6}) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getpid() (async) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000040)={r0, 0x1, 0x6}) (async) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) (async) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 00:45:43 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDGETMAXERRS(0xffffffffffffffff, 0x8014020e, &(0x7f0000000040)) 00:45:43 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$FLOPPY_FDFMTEND(r0, 0x249) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000240), 0x400, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf493, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0x3, 0x3, 0x0, 0x100, 0x8}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xb}]}, &(0x7f0000000100)='GPL\x00', 0x401, 0xef, &(0x7f0000000140)=""/239, 0x41100, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000280)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x4, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000340)=[r3, r1], &(0x7f0000000380)=[{0x4, 0x3, 0xd, 0x1}, {0x5, 0x5}, {0x4, 0x4, 0xb, 0x2}, {0x3, 0x2, 0x3, 0x3}, {0x5, 0x5, 0x9, 0x6}, {0x3, 0x1, 0x0, 0xa}], 0x10, 0xffffffff}, 0x90) r4 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffff8, 0x10000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) 00:45:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1c000000}, 0x48) [ 2656.806531][ T1088] status=80 [ 2656.808074][ T1088] fdc_busy=1 [ 2656.809342][ T1088] floppy_work.func=floppy_work_workfn [ 2656.811318][ T1088] cont=ffffffff8b1391e0 [ 2656.812863][ T1088] current_req=0000000000000000 [ 2656.814630][ T1088] command_status=-1 [ 2656.816364][ T1088] [ 2656.817527][ T1088] floppy1: floppy timeout called [ 2656.823965][ T1088] [ 2656.824927][ T1088] floppy driver state [ 2656.826703][ T1088] ------------------- [ 2656.828171][ T1088] now=4295202823 last interrupt=4294967499 diff=235324 last called handler=main_command_interrupt [ 2656.831978][ T1088] timeout_message=lock fdc [ 2656.833628][ T1088] last output bytes: [ 2656.835088][ T1088] 0 90 4294967496 [ 2656.836789][ T1088] 1 90 4294967496 [ 2656.838181][ T1088] 2 90 4294967496 [ 2656.839545][ T1088] 12 90 4294967496 [ 2656.840924][ T1088] 1b 90 4294967496 [ 2656.842305][ T1088] ff 90 4294967496 [ 2656.843684][ T1088] 12 80 4294967499 [ 2656.845060][ T1088] 3 90 4294967499 [ 2656.847000][ T1088] 3 80 4294967499 00:45:43 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, 0x0) [ 2656.848382][ T1088] a1 90 4294967499 [ 2656.850044][ T1088] 1e 90 4294967499 [ 2656.851465][ T1088] e6 80 4294967499 [ 2656.852853][ T1088] 1 90 4294967499 [ 2656.854219][ T1088] 0 90 4294967499 [ 2656.855594][ T1088] 0 90 4294967499 00:45:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1d000000}, 0x48) [ 2656.857513][ T1088] 1 90 4294967499 [ 2656.859139][ T1088] 2 90 4294967499 [ 2656.860508][ T1088] 24 90 4294967499 [ 2656.861882][ T1088] 1b 90 4294967499 [ 2656.863266][ T1088] ff 90 4294967499 [ 2656.864640][ T1088] last result at 4295201781 [ 2656.866936][ T1088] last redo_fd_request at 4295202822 [ 2656.868928][ T1088] status=80 [ 2656.870111][ T1088] fdc_busy=1 [ 2656.871320][ T1088] floppy_work.func=floppy_work_workfn [ 2656.873278][ T1088] cont=ffffffff8b1391e0 [ 2656.874793][ T1088] current_req=0000000000000000 [ 2656.877172][ T1088] command_status=-1 [ 2656.878594][ T1088] [ 2656.879524][ T1088] floppy1: floppy timeout called [ 2656.882438][ T1088] [ 2656.883340][ T1088] floppy driver state [ 2656.884800][ T1088] ------------------- [ 2656.886804][ T1088] now=4295202829 last interrupt=4294967499 diff=235330 last called handler=main_command_interrupt 00:45:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1e000000}, 0x48) [ 2656.890659][ T1088] timeout_message=lock fdc [ 2656.892540][ T1088] last output bytes: [ 2656.893994][ T1088] 0 90 4294967496 [ 2656.895374][ T1088] 1 90 4294967496 [ 2656.897399][ T1088] 2 90 4294967496 [ 2656.898790][ T1088] 12 90 4294967496 [ 2656.900154][ T1088] 1b 90 4294967496 [ 2656.901538][ T1088] ff 90 4294967496 [ 2656.902907][ T1088] 12 80 4294967499 [ 2656.904275][ T1088] 3 90 4294967499 [ 2656.905659][ T1088] 3 80 4294967499 [ 2656.907554][ T1088] a1 90 4294967499 [ 2656.909234][ T1088] 1e 90 4294967499 [ 2656.910621][ T1088] e6 80 4294967499 [ 2656.912006][ T1088] 1 90 4294967499 [ 2656.913399][ T1088] 0 90 4294967499 [ 2656.914777][ T1088] 0 90 4294967499 [ 2656.916810][ T1088] 1 90 4294967499 [ 2656.918196][ T1088] 2 90 4294967499 [ 2656.919561][ T1088] 24 90 4294967499 [ 2656.920931][ T1088] 1b 90 4294967499 [ 2656.922294][ T1088] ff 90 4294967499 00:45:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f000000}, 0x48) [ 2656.923675][ T1088] last result at 4295201781 [ 2656.925619][ T1088] last redo_fd_request at 4295202828 [ 2656.927741][ T1088] status=80 [ 2656.928943][ T1088] fdc_busy=1 [ 2656.930148][ T1088] floppy_work.func=floppy_work_workfn [ 2656.932123][ T1088] cont=ffffffff8b1391e0 [ 2656.933648][ T1088] current_req=0000000000000000 [ 2656.935376][ T1088] command_status=-1 [ 2656.936917][ T1088] [ 2656.937841][ T1088] floppy1: floppy timeout called [ 2656.941883][ T1088] [ 2656.942954][ T1088] floppy driver state [ 2656.944569][ T1088] ------------------- [ 2656.946362][ T1088] now=4295202835 last interrupt=4294967499 diff=235336 last called handler=main_command_interrupt [ 2656.954338][ T1088] timeout_message=lock fdc [ 2656.956149][ T1088] last output bytes: [ 2656.957723][ T1088] 0 90 4294967496 [ 2656.959191][ T1088] 1 90 4294967496 [ 2656.960679][ T1088] 2 90 4294967496 [ 2656.962136][ T1088] 12 90 4294967496 [ 2656.963849][ T1088] 1b 90 4294967496 [ 2656.965402][ T1088] ff 90 4294967496 [ 2656.968634][ T1088] 12 80 4294967499 [ 2656.970113][ T1088] 3 90 4294967499 [ 2656.971628][ T1088] 3 80 4294967499 [ 2656.973142][ T1088] a1 90 4294967499 [ 2656.974651][ T1088] 1e 90 4294967499 [ 2656.976176][ T1088] e6 80 4294967499 [ 2656.977675][ T1088] 1 90 4294967499 [ 2656.979075][ T1088] 0 90 4294967499 [ 2656.980456][ T1088] 0 90 4294967499 [ 2656.981840][ T1088] 1 90 4294967499 [ 2656.983245][ T1088] 2 90 4294967499 [ 2656.984631][ T1088] 24 90 4294967499 [ 2656.986174][ T1088] 1b 90 4294967499 [ 2656.987610][ T1088] ff 90 4294967499 [ 2656.988997][ T1088] last result at 4295201781 [ 2656.990661][ T1088] last redo_fd_request at 4295202834 [ 2656.992626][ T1088] status=80 [ 2656.993798][ T1088] fdc_busy=1 [ 2656.994996][ T1088] floppy_work.func=floppy_work_workfn [ 2656.997111][ T1088] cont=ffffffff8b1391e0 [ 2656.998657][ T1088] current_req=0000000000000000 [ 2657.000415][ T1088] command_status=-1 [ 2657.001839][ T1088] [ 2657.002765][ T1088] floppy1: floppy timeout called 00:45:43 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x100, 0x100) ioctl$FLOPPY_FDGETMAXERRS(r1, 0x8014020e, &(0x7f00000000c0)) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20000000}, 0x48) 00:45:43 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$FLOPPY_FDFMTEND(r0, 0x249) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) syz_open_dev$vcsa(&(0x7f0000000240), 0x400, 0x0) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000240), 0x400, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf493, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0x3, 0x3, 0x0, 0x100, 0x8}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xb}]}, &(0x7f0000000100)='GPL\x00', 0x401, 0xef, &(0x7f0000000140)=""/239, 0x41100, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000280)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x4, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000340)=[r3, r1], &(0x7f0000000380)=[{0x4, 0x3, 0xd, 0x1}, {0x5, 0x5}, {0x4, 0x4, 0xb, 0x2}, {0x3, 0x2, 0x3, 0x3}, {0x5, 0x5, 0x9, 0x6}, {0x3, 0x1, 0x0, 0xa}], 0x10, 0xffffffff}, 0x90) r4 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffff8, 0x10000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) 00:45:43 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, 0x0) [ 2657.029401][ T1088] [ 2657.030403][ T1088] floppy driver state [ 2657.031892][ T1088] ------------------- [ 2657.033393][ T1088] now=4295202843 last interrupt=4294967499 diff=235344 last called handler=main_command_interrupt [ 2657.037548][ T1088] timeout_message=lock fdc [ 2657.039202][ T1088] last output bytes: [ 2657.040669][ T1088] 0 90 4294967496 [ 2657.042050][ T1088] 1 90 4294967496 [ 2657.043431][ T1088] 2 90 4294967496 [ 2657.044831][ T1088] 12 90 4294967496 [ 2657.046289][ T1088] 1b 90 4294967496 [ 2657.048056][ T1088] ff 90 4294967496 [ 2657.049840][ T1088] 12 80 4294967499 [ 2657.051307][ T1088] 3 90 4294967499 [ 2657.052714][ T1088] 3 80 4294967499 [ 2657.054081][ T1088] a1 90 4294967499 [ 2657.055467][ T1088] 1e 90 4294967499 [ 2657.056967][ T1088] e6 80 4294967499 [ 2657.058338][ T1088] 1 90 4294967499 [ 2657.059700][ T1088] 0 90 4294967499 [ 2657.061067][ T1088] 0 90 4294967499 [ 2657.062443][ T1088] 1 90 4294967499 [ 2657.063827][ T1088] 2 90 4294967499 [ 2657.065202][ T1088] 24 90 4294967499 00:45:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x21000000}, 0x48) [ 2657.067862][ T1088] 1b 90 4294967499 [ 2657.069693][ T1088] ff 90 4294967499 [ 2657.071093][ T1088] last result at 4295201781 [ 2657.072781][ T1088] last redo_fd_request at 4295202840 [ 2657.074756][ T1088] status=80 [ 2657.076159][ T1088] fdc_busy=1 [ 2657.077485][ T1088] floppy_work.func=floppy_work_workfn [ 2657.079474][ T1088] cont=ffffffff8b1391e0 [ 2657.081028][ T1088] current_req=0000000000000000 [ 2657.082787][ T1088] command_status=-1 [ 2657.084203][ T1088] 00:45:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x22000000}, 0x48) [ 2657.085135][ T1088] floppy1: floppy timeout called [ 2657.088220][ T1088] [ 2657.089184][ T1088] floppy driver state [ 2657.090664][ T1088] ------------------- [ 2657.092180][ T1088] now=4295202849 last interrupt=4294967499 diff=235350 last called handler=main_command_interrupt [ 2657.096194][ T1088] timeout_message=lock fdc [ 2657.097892][ T1088] last output bytes: [ 2657.099336][ T1088] 0 90 4294967496 [ 2657.100770][ T1088] 1 90 4294967496 [ 2657.102182][ T1088] 2 90 4294967496 [ 2657.103578][ T1088] 12 90 4294967496 [ 2657.104995][ T1088] 1b 90 4294967496 [ 2657.106665][ T1088] ff 90 4294967496 [ 2657.108461][ T1088] 12 80 4294967499 00:45:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x23000000}, 0x48) [ 2657.110219][ T1088] 3 90 4294967499 [ 2657.112195][ T1088] 3 80 4294967499 [ 2657.113983][ T1088] a1 90 4294967499 [ 2657.115673][ T1088] 1e 90 4294967499 [ 2657.117922][ T1088] e6 80 4294967499 [ 2657.119542][ T1088] 1 90 4294967499 [ 2657.121011][ T1088] 0 90 4294967499 [ 2657.122399][ T1088] 0 90 4294967499 [ 2657.123794][ T1088] 1 90 4294967499 [ 2657.125453][ T1088] 2 90 4294967499 [ 2657.127353][ T1088] 24 90 4294967499 [ 2657.129151][ T1088] 1b 90 4294967499 [ 2657.130913][ T1088] ff 90 4294967499 [ 2657.132699][ T1088] last result at 4295201781 [ 2657.134821][ T1088] last redo_fd_request at 4295202849 [ 2657.137428][ T1088] status=80 [ 2657.138943][ T1088] fdc_busy=1 [ 2657.140534][ T1088] floppy_work.func=floppy_work_workfn [ 2657.143147][ T1088] cont=ffffffff8b1391e0 00:45:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x48) [ 2657.145136][ T1088] current_req=0000000000000000 [ 2657.147920][ T1088] command_status=-1 [ 2657.149793][ T1088] [ 2657.151025][ T1088] floppy1: floppy timeout called [ 2657.153755][ T1088] [ 2657.154917][ T1088] floppy driver state [ 2657.156951][ T1088] ------------------- [ 2657.158921][ T1088] now=4295202856 last interrupt=4294967499 diff=235357 last called handler=main_command_interrupt [ 2657.163867][ T1088] timeout_message=lock fdc [ 2657.166120][ T1088] last output bytes: [ 2657.167961][ T1088] 0 90 4294967496 [ 2657.169735][ T1088] 1 90 4294967496 [ 2657.171535][ T1088] 2 90 4294967496 [ 2657.173327][ T1088] 12 90 4294967496 [ 2657.175091][ T1088] 1b 90 4294967496 [ 2657.177460][ T1088] ff 90 4294967496 [ 2657.179277][ T1088] 12 80 4294967499 [ 2657.181038][ T1088] 3 90 4294967499 [ 2657.182767][ T1088] 3 80 4294967499 [ 2657.184529][ T1088] a1 90 4294967499 00:45:43 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x100, 0x100) ioctl$FLOPPY_FDGETMAXERRS(r1, 0x8014020e, &(0x7f00000000c0)) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2657.187181][ T1088] 1e 90 4294967499 00:45:43 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$FLOPPY_FDFMTEND(r0, 0x249) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000240), 0x400, 0x0) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf493, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0x3, 0x3, 0x0, 0x100, 0x8}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xb}]}, &(0x7f0000000100)='GPL\x00', 0x401, 0xef, &(0x7f0000000140)=""/239, 0x41100, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000280)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x4, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000340)=[r3, r1], &(0x7f0000000380)=[{0x4, 0x3, 0xd, 0x1}, {0x5, 0x5}, {0x4, 0x4, 0xb, 0x2}, {0x3, 0x2, 0x3, 0x3}, {0x5, 0x5, 0x9, 0x6}, {0x3, 0x1, 0x0, 0xa}], 0x10, 0xffffffff}, 0x90) r4 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffff8, 0x10000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) [ 2657.189040][ T1088] e6 80 4294967499 00:45:43 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, 0x0) [ 2657.190979][ T1088] 1 90 4294967499 [ 2657.192890][ T1088] 0 90 4294967499 [ 2657.194681][ T1088] 0 90 4294967499 [ 2657.197729][ T1088] 1 90 4294967499 [ 2657.199523][ T1088] 2 90 4294967499 [ 2657.201344][ T1088] 24 90 4294967499 [ 2657.203158][ T1088] 1b 90 4294967499 [ 2657.204962][ T1088] ff 90 4294967499 [ 2657.207560][ T1088] last result at 4295201781 [ 2657.209787][ T1088] last redo_fd_request at 4295202855 [ 2657.212338][ T1088] status=80 00:45:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x48) [ 2657.213910][ T1088] fdc_busy=1 [ 2657.215646][ T1088] floppy_work.func=floppy_work_workfn [ 2657.218939][ T1088] cont=ffffffff8b1391e0 [ 2657.220974][ T1088] current_req=0000000000000000 [ 2657.223318][ T1088] command_status=-1 [ 2657.225148][ T1088] [ 2657.227239][ T1088] floppy1: floppy timeout called [ 2657.230567][ T1088] [ 2657.231748][ T1088] floppy driver state [ 2657.233632][ T1088] ------------------- [ 2657.235508][ T1088] now=4295202863 last interrupt=4294967499 diff=235364 last called handler=main_command_interrupt [ 2657.241493][ T1088] timeout_message=lock fdc [ 2657.243671][ T1088] last output bytes: [ 2657.245598][ T1088] 0 90 4294967496 [ 2657.248188][ T1088] 1 90 4294967496 [ 2657.250312][ T1088] 2 90 4294967496 [ 2657.252389][ T1088] 12 90 4294967496 [ 2657.254200][ T1088] 1b 90 4294967496 00:45:43 executing program 2: syz_open_dev$floppy(&(0x7f00000000c0), 0x1fc, 0x82c00) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x101000) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000080)) [ 2657.256806][ T1088] ff 90 4294967496 [ 2657.258802][ T1088] 12 80 4294967499 [ 2657.260687][ T1088] 3 90 4294967499 [ 2657.262896][ T1088] 3 80 4294967499 [ 2657.264981][ T1088] a1 90 4294967499 00:45:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x48) [ 2657.267658][ T1088] 1e 90 4294967499 [ 2657.269650][ T1088] e6 80 4294967499 [ 2657.271497][ T1088] 1 90 4294967499 [ 2657.273315][ T1088] 0 90 4294967499 [ 2657.275113][ T1088] 0 90 4294967499 [ 2657.277783][ T1088] 1 90 4294967499 [ 2657.279619][ T1088] 2 90 4294967499 [ 2657.281451][ T1088] 24 90 4294967499 [ 2657.283264][ T1088] 1b 90 4294967499 [ 2657.285086][ T1088] ff 90 4294967499 [ 2657.287681][ T1088] last result at 4295201781 [ 2657.289893][ T1088] last redo_fd_request at 4295202863 [ 2657.292453][ T1088] status=80 [ 2657.294007][ T1088] fdc_busy=1 [ 2657.295581][ T1088] floppy_work.func=floppy_work_workfn [ 2657.299295][ T1088] cont=ffffffff8b1391e0 [ 2657.301334][ T1088] current_req=0000000000000000 [ 2657.303615][ T1088] command_status=-1 [ 2657.305450][ T1088] 00:45:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0x48) [ 2657.307158][ T1088] floppy1: floppy timeout called [ 2657.310362][ T1088] [ 2657.311559][ T1088] floppy driver state [ 2657.313456][ T1088] ------------------- [ 2657.314988][ T1088] now=4295202871 last interrupt=4294967499 diff=235372 last called handler=main_command_interrupt [ 2657.320159][ T1088] timeout_message=lock fdc [ 2657.322111][ T1088] last output bytes: [ 2657.323807][ T1088] 0 90 4294967496 [ 2657.325447][ T1088] 1 90 4294967496 [ 2657.327602][ T1088] 2 90 4294967496 00:45:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, 0x48) [ 2657.329229][ T1088] 12 90 4294967496 [ 2657.331052][ T1088] 1b 90 4294967496 [ 2657.332709][ T1088] ff 90 4294967496 [ 2657.334352][ T1088] 12 80 4294967499 [ 2657.336889][ T1088] 3 90 4294967499 [ 2657.338570][ T1088] 3 80 4294967499 [ 2657.340075][ T1088] a1 90 4294967499 [ 2657.341734][ T1088] 1e 90 4294967499 [ 2657.343464][ T1088] e6 80 4294967499 [ 2657.344899][ T1088] 1 90 4294967499 [ 2657.347017][ T1088] 0 90 4294967499 [ 2657.348507][ T1088] 0 90 4294967499 [ 2657.349927][ T1088] 1 90 4294967499 [ 2657.351420][ T1088] 2 90 4294967499 [ 2657.352842][ T1088] 24 90 4294967499 [ 2657.354255][ T1088] 1b 90 4294967499 [ 2657.355669][ T1088] ff 90 4294967499 [ 2657.358806][ T1088] last result at 4295201781 [ 2657.360840][ T1088] last redo_fd_request at 4295202871 [ 2657.362906][ T1088] status=80 [ 2657.364156][ T1088] fdc_busy=1 [ 2657.365426][ T1088] floppy_work.func=floppy_work_workfn [ 2657.368480][ T1088] cont=ffffffff8b1391e0 [ 2657.370394][ T1088] current_req=0000000000000000 [ 2657.372287][ T1088] command_status=-1 [ 2657.373797][ T1088] [ 2657.374939][ T1088] floppy1: floppy timeout called [ 2657.378307][ T1088] [ 2657.379350][ T1088] floppy driver state [ 2657.380955][ T1088] ------------------- 00:45:43 executing program 1: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) (async) r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x100, 0x100) ioctl$FLOPPY_FDGETMAXERRS(r1, 0x8014020e, &(0x7f00000000c0)) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2657.382545][ T1088] now=4295202878 last interrupt=4294967499 diff=235379 last called handler=main_command_interrupt [ 2657.387541][ T1088] timeout_message=lock fdc [ 2657.389543][ T1088] last output bytes: [ 2657.391102][ T1088] 0 90 4294967496 [ 2657.392576][ T1088] 1 90 4294967496 [ 2657.394152][ T1088] 2 90 4294967496 [ 2657.395703][ T1088] 12 90 4294967496 [ 2657.398152][ T1088] 1b 90 4294967496 [ 2657.399811][ T1088] ff 90 4294967496 [ 2657.401491][ T1088] 12 80 4294967499 [ 2657.403120][ T1088] 3 90 4294967499 [ 2657.404812][ T1088] 3 80 4294967499 [ 2657.407033][ T1088] a1 90 4294967499 [ 2657.408837][ T1088] 1e 90 4294967499 [ 2657.410528][ T1088] e6 80 4294967499 [ 2657.412215][ T1088] 1 90 4294967499 [ 2657.414031][ T1088] 0 90 4294967499 [ 2657.415698][ T1088] 0 90 4294967499 [ 2657.418626][ T1088] 1 90 4294967499 [ 2657.420468][ T1088] 2 90 4294967499 [ 2657.422282][ T1088] 24 90 4294967499 [ 2657.424084][ T1088] 1b 90 4294967499 [ 2657.426005][ T1088] ff 90 4294967499 [ 2657.427809][ T1088] last result at 4295201781 [ 2657.430006][ T1088] last redo_fd_request at 4295202878 [ 2657.432554][ T1088] status=80 [ 2657.434098][ T1088] fdc_busy=1 [ 2657.435698][ T1088] floppy_work.func=floppy_work_workfn [ 2657.438379][ T1088] cont=ffffffff8b1391e0 [ 2657.440384][ T1088] current_req=0000000000000000 [ 2657.442710][ T1088] command_status=-1 [ 2657.444592][ T1088] [ 2657.445832][ T1088] floppy1: floppy timeout called [ 2657.448721][ T1088] [ 2657.449908][ T1088] floppy driver state [ 2657.451840][ T1088] ------------------- [ 2657.453793][ T1088] now=4295202885 last interrupt=4294967499 diff=235386 last called handler=main_command_interrupt [ 2657.458869][ T1088] timeout_message=lock fdc [ 2657.461018][ T1088] last output bytes: [ 2657.462896][ T1088] 0 90 4294967496 [ 2657.464711][ T1088] 1 90 4294967496 [ 2657.466641][ T1088] 2 90 4294967496 [ 2657.468436][ T1088] 12 90 4294967496 [ 2657.470248][ T1088] 1b 90 4294967496 [ 2657.472056][ T1088] ff 90 4294967496 [ 2657.473868][ T1088] 12 80 4294967499 [ 2657.475671][ T1088] 3 90 4294967499 [ 2657.477979][ T1088] 3 80 4294967499 [ 2657.479799][ T1088] a1 90 4294967499 [ 2657.481617][ T1088] 1e 90 4294967499 [ 2657.483422][ T1088] e6 80 4294967499 [ 2657.485240][ T1088] 1 90 4294967499 [ 2657.487172][ T1088] 0 90 4294967499 [ 2657.488982][ T1088] 0 90 4294967499 [ 2657.490802][ T1088] 1 90 4294967499 [ 2657.492651][ T1088] 2 90 4294967499 [ 2657.494457][ T1088] 24 90 4294967499 [ 2657.496382][ T1088] 1b 90 4294967499 [ 2657.498193][ T1088] ff 90 4294967499 [ 2657.500041][ T1088] last result at 4295201781 [ 2657.502246][ T1088] last redo_fd_request at 4295202885 [ 2657.504949][ T1088] status=80 [ 2657.506645][ T1088] fdc_busy=1 [ 2657.508246][ T1088] floppy_work.func=floppy_work_workfn [ 2657.510840][ T1088] cont=ffffffff8b1391e0 [ 2657.512861][ T1088] current_req=0000000000000000 [ 2657.515154][ T1088] command_status=-1 [ 2657.517135][ T1088] [ 2657.518377][ T1088] floppy1: floppy timeout called [ 2657.521005][ T1088] [ 2657.522175][ T1088] floppy driver state [ 2657.524084][ T1088] ------------------- [ 2657.526184][ T1088] now=4295202893 last interrupt=4294967499 diff=235394 last called handler=main_command_interrupt [ 2657.531181][ T1088] timeout_message=lock fdc [ 2657.533335][ T1088] last output bytes: [ 2657.535212][ T1088] 0 90 4294967496 [ 2657.537379][ T1088] 1 90 4294967496 [ 2657.539205][ T1088] 2 90 4294967496 [ 2657.541039][ T1088] 12 90 4294967496 [ 2657.542844][ T1088] 1b 90 4294967496 [ 2657.544673][ T1088] ff 90 4294967496 [ 2657.546572][ T1088] 12 80 4294967499 [ 2657.548373][ T1088] 3 90 4294967499 [ 2657.550191][ T1088] 3 80 4294967499 [ 2657.552016][ T1088] a1 90 4294967499 [ 2657.553834][ T1088] 1e 90 4294967499 [ 2657.555646][ T1088] e6 80 4294967499 [ 2657.557694][ T1088] 1 90 4294967499 [ 2657.559700][ T1088] 0 90 4294967499 [ 2657.562466][ T1088] 0 90 4294967499 [ 2657.564302][ T1088] 1 90 4294967499 [ 2657.566419][ T1088] 2 90 4294967499 [ 2657.568323][ T1088] 24 90 4294967499 [ 2657.570189][ T1088] 1b 90 4294967499 [ 2657.572053][ T1088] ff 90 4294967499 [ 2657.573891][ T1088] last result at 4295201781 [ 2657.576188][ T1088] last redo_fd_request at 4295202892 [ 2657.578728][ T1088] status=80 [ 2657.580281][ T1088] fdc_busy=1 [ 2657.581886][ T1088] floppy_work.func=floppy_work_workfn [ 2657.584462][ T1088] cont=ffffffff8b1391e0 [ 2657.586614][ T1088] current_req=0000000000000000 [ 2657.588936][ T1088] command_status=-1 [ 2657.590793][ T1088] [ 2657.592034][ T1088] floppy1: floppy timeout called [ 2657.594888][ T1088] [ 2657.596257][ T1088] floppy driver state [ 2657.598153][ T1088] ------------------- [ 2657.600156][ T1088] now=4295202900 last interrupt=4294967499 diff=235401 last called handler=main_command_interrupt 00:45:44 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x37c0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) 00:45:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, 0x48) [ 2657.605293][ T1088] timeout_message=lock fdc 00:45:44 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDEJECT(r0, 0x25a) [ 2657.610140][ T1088] last output bytes: [ 2657.612123][ T1088] 0 90 4294967496 [ 2657.613935][ T1088] 1 90 4294967496 [ 2657.615736][ T1088] 2 90 4294967496 [ 2657.617792][ T1088] 12 90 4294967496 [ 2657.619601][ T1088] 1b 90 4294967496 [ 2657.621385][ T1088] ff 90 4294967496 [ 2657.623188][ T1088] 12 80 4294967499 [ 2657.625002][ T1088] 3 90 4294967499 [ 2657.630606][ T1088] 3 80 4294967499 [ 2657.632549][ T1088] a1 90 4294967499 [ 2657.634458][ T1088] 1e 90 4294967499 00:45:44 executing program 1: syz_open_dev$floppy(&(0x7f0000000000), 0x1fed, 0x40000) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0), 0x5d0a2159, 0x60000) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x801c0204, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$capi20(0xffffff9c, &(0x7f0000000040), 0x159542, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x8, 0x2, 0x7}}, 0x14) [ 2657.640423][ T1088] e6 80 4294967499 [ 2657.646259][ T1088] 1 90 4294967499 [ 2657.647860][ T1088] 0 90 4294967499 [ 2657.649303][ T1088] 0 90 4294967499 [ 2657.650740][ T1088] 1 90 4294967499 [ 2657.652202][ T1088] 2 90 4294967499 00:45:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x48) [ 2657.653606][ T1088] 24 90 4294967499 [ 2657.655167][ T1088] 1b 90 4294967499 [ 2657.656719][ T1088] ff 90 4294967499 [ 2657.658126][ T1088] last result at 4295201781 [ 2657.659796][ T1088] last redo_fd_request at 4295202899 [ 2657.661784][ T1088] status=80 [ 2657.663046][ T1088] fdc_busy=1 [ 2657.664349][ T1088] floppy_work.func=floppy_work_workfn [ 2657.666967][ T1088] cont=ffffffff8b1391e0 [ 2657.669088][ T1088] current_req=0000000000000000 [ 2657.671016][ T1088] command_status=-1 [ 2657.672460][ T1088] [ 2657.673462][ T1088] floppy1: floppy timeout called [ 2657.679247][ T1088] [ 2657.680163][ T1088] floppy driver state [ 2657.681667][ T1088] ------------------- 00:45:44 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x37c0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) [ 2657.683189][ T1088] now=4295202908 last interrupt=4294967499 diff=235409 last called handler=main_command_interrupt [ 2657.691251][ T1088] timeout_message=lock fdc 00:45:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8048010}, 0x20000010) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x10001, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x28}}, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="a15f4f4e81f862485be376d24a7dc801008fa67438e89bd78ef1d360cc2dcef1f14a8ddb9cb9f2959a75c34251c5de7dcc8ee5d0a695d6d0bc07a17c2367e5559f938f44e730ba24afb6e58f6e6ceea80b1e0a6616706fe36a094e386f8a3483437dcca3af18a1e3a0"], 0x16) write$P9_RUNLINKAT(r2, &(0x7f0000000100)={0x7, 0x4d, 0xf7fe}, 0x7) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f00000000c0)) r5 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x200) ioctl$FLOPPY_FDGETPRM(r5, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2657.692996][ T1088] last output bytes: [ 2657.694932][ T1088] 0 90 4294967496 [ 2657.696806][ T1088] 1 90 4294967496 [ 2657.698229][ T1088] 2 90 4294967496 [ 2657.699644][ T1088] 12 90 4294967496 00:45:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, 0x48) [ 2657.701112][ T1088] 1b 90 4294967496 [ 2657.702736][ T1088] ff 90 4294967496 [ 2657.704142][ T1088] 12 80 4294967499 00:45:44 executing program 1: syz_open_dev$floppy(&(0x7f0000000000), 0x1fed, 0x40000) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0), 0x5d0a2159, 0x60000) (async) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x801c0204, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$capi20(0xffffff9c, &(0x7f0000000040), 0x159542, 0x0) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x8, 0x2, 0x7}}, 0x14) [ 2657.705677][ T1088] 3 90 4294967499 [ 2657.707361][ T1088] 3 80 4294967499 [ 2657.708820][ T1088] a1 90 4294967499 [ 2657.710250][ T1088] 1e 90 4294967499 [ 2657.711710][ T1088] e6 80 4294967499 [ 2657.713141][ T1088] 1 90 4294967499 [ 2657.714585][ T1088] 0 90 4294967499 [ 2657.716361][ T1088] 0 90 4294967499 [ 2657.717867][ T1088] 1 90 4294967499 [ 2657.719296][ T1088] 2 90 4294967499 [ 2657.720767][ T1088] 24 90 4294967499 [ 2657.722476][ T1088] 1b 90 4294967499 [ 2657.724156][ T1088] ff 90 4294967499 [ 2657.725827][ T1088] last result at 4295201781 [ 2657.728531][ T1088] last redo_fd_request at 4295202907 [ 2657.730865][ T1088] status=80 [ 2657.732266][ T1088] fdc_busy=1 [ 2657.733549][ T1088] floppy_work.func=floppy_work_workfn [ 2657.735584][ T1088] cont=ffffffff8b1391e0 [ 2657.737715][ T1088] current_req=0000000000000000 [ 2657.739571][ T1088] command_status=-1 [ 2657.741028][ T1088] [ 2657.741973][ T1088] floppy1: floppy timeout called [ 2657.750762][ T1088] [ 2657.751836][ T1088] floppy driver state [ 2657.753364][ T1088] ------------------- [ 2657.754885][ T1088] now=4295202915 last interrupt=4294967499 diff=235416 last called handler=main_command_interrupt [ 2657.759199][ T1088] timeout_message=lock fdc [ 2657.760920][ T1088] last output bytes: [ 2657.762380][ T1088] 0 90 4294967496 [ 2657.763781][ T1088] 1 90 4294967496 [ 2657.765183][ T1088] 2 90 4294967496 [ 2657.769090][ T1088] 12 90 4294967496 [ 2657.770498][ T1088] 1b 90 4294967496 [ 2657.771897][ T1088] ff 90 4294967496 00:45:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}, 0x48) [ 2657.773311][ T1088] 12 80 4294967499 [ 2657.774875][ T1088] 3 90 4294967499 [ 2657.776530][ T1088] 3 80 4294967499 [ 2657.778377][ T1088] a1 90 4294967499 [ 2657.779984][ T1088] 1e 90 4294967499 [ 2657.781394][ T1088] e6 80 4294967499 [ 2657.782891][ T1088] 1 90 4294967499 [ 2657.784329][ T1088] 0 90 4294967499 [ 2657.785735][ T1088] 0 90 4294967499 [ 2657.787465][ T1088] 1 90 4294967499 [ 2657.788872][ T1088] 2 90 4294967499 00:45:44 executing program 1: syz_open_dev$floppy(&(0x7f0000000000), 0x1fed, 0x40000) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0), 0x5d0a2159, 0x60000) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x801c0204, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$capi20(0xffffff9c, &(0x7f0000000040), 0x159542, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x8, 0x2, 0x7}}, 0x14) syz_open_dev$floppy(&(0x7f0000000000), 0x1fed, 0x40000) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000000c0), 0x5d0a2159, 0x60000) (async) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x801c0204, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$capi20(0xffffff9c, &(0x7f0000000040), 0x159542, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x8, 0x2, 0x7}}, 0x14) (async) [ 2657.790378][ T1088] 24 90 4294967499 [ 2657.792044][ T1088] 1b 90 4294967499 [ 2657.793475][ T1088] ff 90 4294967499 [ 2657.794873][ T1088] last result at 4295201781 [ 2657.801135][ T1088] last redo_fd_request at 4295202914 [ 2657.803258][ T1088] status=80 [ 2657.804527][ T1088] fdc_busy=1 [ 2657.805905][ T1088] floppy_work.func=floppy_work_workfn [ 2657.808039][ T1088] cont=ffffffff8b1391e0 [ 2657.809635][ T1088] current_req=0000000000000000 [ 2657.811462][ T1088] command_status=-1 [ 2657.812917][ T1088] [ 2657.813867][ T1088] floppy1: floppy timeout called [ 2657.818049][T19958] [ 2657.819319][T19958] floppy driver state [ 2657.820885][T19958] ------------------- [ 2657.822419][T19958] now=4295202922 last interrupt=4294967499 diff=235423 last called handler=main_command_interrupt [ 2657.835525][T19958] timeout_message=lock fdc 00:45:44 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x37c0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) 00:45:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8048010}, 0x20000010) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x10001, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x28}}, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="a15f4f4e81f862485be376d24a7dc801008fa67438e89bd78ef1d360cc2dcef1f14a8ddb9cb9f2959a75c34251c5de7dcc8ee5d0a695d6d0bc07a17c2367e5559f938f44e730ba24afb6e58f6e6ceea80b1e0a6616706fe36a094e386f8a3483437dcca3af18a1e3a0"], 0x16) write$P9_RUNLINKAT(r2, &(0x7f0000000100)={0x7, 0x4d, 0xf7fe}, 0x7) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f00000000c0)) r5 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x200) ioctl$FLOPPY_FDGETPRM(r5, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2657.837624][T19958] last output bytes: [ 2657.839096][T19958] 0 90 4294967496 [ 2657.840495][T19958] 1 90 4294967496 [ 2657.841888][T19958] 2 90 4294967496 [ 2657.843319][T19958] 12 90 4294967496 [ 2657.844720][T19958] 1b 90 4294967496 [ 2657.846601][T19958] ff 90 4294967496 [ 2657.848037][T19958] 12 80 4294967499 [ 2657.849450][T19958] 3 90 4294967499 [ 2657.850847][T19958] 3 80 4294967499 00:45:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb}, 0x48) [ 2657.852254][T19958] a1 90 4294967499 [ 2657.853852][T19958] 1e 90 4294967499 [ 2657.855253][T19958] e6 80 4294967499 [ 2657.859773][T19958] 1 90 4294967499 [ 2657.863540][T19958] 0 90 4294967499 [ 2657.864992][T19958] 0 90 4294967499 [ 2657.866760][T19958] 1 90 4294967499 [ 2657.868172][T19958] 2 90 4294967499 [ 2657.869584][T19958] 24 90 4294967499 [ 2657.870984][T19958] 1b 90 4294967499 [ 2657.872413][T19958] ff 90 4294967499 [ 2657.876145][T19958] last result at 4295201781 [ 2657.877860][T19958] last redo_fd_request at 4295202922 [ 2657.879825][T19958] status=80 [ 2657.881026][T19958] fdc_busy=1 [ 2657.882236][T19958] floppy_work.func=floppy_work_workfn [ 2657.884255][T19958] cont=ffffffff8b1391e0 [ 2657.885770][T19958] current_req=0000000000000000 [ 2657.888073][T19958] command_status=-1 [ 2657.890332][T19958] [ 2657.891385][T19958] floppy1: floppy timeout called 00:45:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}, 0x48) 00:45:44 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2657.898448][T19958] [ 2657.899600][T19958] floppy driver state [ 2657.901386][T19958] ------------------- [ 2657.903167][T19958] now=4295202930 last interrupt=4294967499 diff=235431 last called handler=main_command_interrupt [ 2657.908423][T19958] timeout_message=lock fdc [ 2657.910222][T19958] last output bytes: [ 2657.911800][T19958] 0 90 4294967496 [ 2657.913308][T19958] 1 90 4294967496 [ 2657.914780][T19958] 2 90 4294967496 [ 2657.916688][T19958] 12 90 4294967496 [ 2657.918169][T19958] 1b 90 4294967496 [ 2657.919638][T19958] ff 90 4294967496 [ 2657.921116][T19958] 12 80 4294967499 [ 2657.922643][T19958] 3 90 4294967499 [ 2657.924122][T19958] 3 80 4294967499 [ 2657.925587][T19958] a1 90 4294967499 [ 2657.927609][T19958] 1e 90 4294967499 [ 2657.929111][T19958] e6 80 4294967499 00:45:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, 0x48) [ 2657.930592][T19958] 1 90 4294967499 [ 2657.932296][T19958] 0 90 4294967499 [ 2657.933823][T19958] 0 90 4294967499 [ 2657.935297][T19958] 1 90 4294967499 [ 2657.936976][T19958] 2 90 4294967499 [ 2657.938899][T19958] 24 90 4294967499 [ 2657.940389][T19958] 1b 90 4294967499 [ 2657.941888][T19958] ff 90 4294967499 [ 2657.943411][T19958] last result at 4295201781 [ 2657.945185][T19958] last redo_fd_request at 4295202929 [ 2657.947966][T19958] status=80 [ 2657.949270][T19958] fdc_busy=1 [ 2657.950569][T19958] floppy_work.func=floppy_work_workfn [ 2657.952667][T19958] cont=ffffffff8b1391e0 [ 2657.954284][T19958] current_req=0000000000000000 00:45:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe}, 0x48) [ 2657.956771][T19958] command_status=-1 [ 2657.958286][T19958] [ 2657.959292][T19958] floppy1: floppy timeout called [ 2657.962363][T19958] [ 2657.963299][T19958] floppy driver state [ 2657.964849][T19958] ------------------- 00:45:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x4, 0x10800) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000180)) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f00000000c0)=r2) ioctl$FLOPPY_FDFMTBEG(r1, 0x247) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000100)=0x9, 0x4) [ 2657.966909][T19958] now=4295202937 last interrupt=4294967499 diff=235438 last called handler=main_command_interrupt [ 2657.971071][T19958] timeout_message=lock fdc [ 2657.972824][T19958] last output bytes: [ 2657.974339][T19958] 0 90 4294967496 [ 2657.975785][T19958] 1 90 4294967496 [ 2657.977680][T19958] 2 90 4294967496 [ 2657.979166][T19958] 12 90 4294967496 [ 2657.980680][T19958] 1b 90 4294967496 [ 2657.982153][T19958] ff 90 4294967496 [ 2657.983667][T19958] 12 80 4294967499 [ 2657.985135][T19958] 3 90 4294967499 [ 2657.987117][T19958] 3 80 4294967499 [ 2657.988648][T19958] a1 90 4294967499 [ 2657.990130][T19958] 1e 90 4294967499 [ 2657.991603][T19958] e6 80 4294967499 [ 2657.993079][T19958] 1 90 4294967499 [ 2657.994543][T19958] 0 90 4294967499 00:45:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf}, 0x48) [ 2657.996525][T19958] 0 90 4294967499 [ 2657.998254][T19958] 1 90 4294967499 [ 2657.999686][T19958] 2 90 4294967499 [ 2658.001181][T19958] 24 90 4294967499 [ 2658.002617][T19958] 1b 90 4294967499 [ 2658.004009][T19958] ff 90 4294967499 [ 2658.005440][T19958] last result at 4295201781 [ 2658.007549][T19958] last redo_fd_request at 4295202936 [ 2658.009597][T19958] status=80 [ 2658.010788][T19958] fdc_busy=1 [ 2658.012112][T19958] floppy_work.func=floppy_work_workfn [ 2658.014342][T19958] cont=ffffffff8b1391e0 [ 2658.019038][T19958] current_req=0000000000000000 [ 2658.021151][T19958] command_status=-1 [ 2658.022931][T19958] [ 2658.024156][T19958] floppy1: floppy timeout called [ 2658.032020][T19958] [ 2658.033234][T19958] floppy driver state [ 2658.035969][T19958] ------------------- [ 2658.037954][T19958] now=4295202944 last interrupt=4294967499 diff=235445 last called handler=main_command_interrupt [ 2658.045944][T19958] timeout_message=lock fdc [ 2658.047756][T19958] last output bytes: [ 2658.049515][T19958] 0 90 4294967496 [ 2658.051064][T19958] 1 90 4294967496 [ 2658.052419][T19958] 2 90 4294967496 [ 2658.053791][T19958] 12 90 4294967496 00:45:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, 0x48) 00:45:44 executing program 3: syz_open_dev$dri(&(0x7f0000000140), 0x4, 0x10800) (async) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x4, 0x10800) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000180)) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f00000000c0)=r2) ioctl$FLOPPY_FDFMTBEG(r1, 0x247) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000100)=0x9, 0x4) [ 2658.055340][T19958] 1b 90 4294967496 00:45:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8048010}, 0x20000010) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x10001, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x28}}, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="a15f4f4e81f862485be376d24a7dc801008fa67438e89bd78ef1d360cc2dcef1f14a8ddb9cb9f2959a75c34251c5de7dcc8ee5d0a695d6d0bc07a17c2367e5559f938f44e730ba24afb6e58f6e6ceea80b1e0a6616706fe36a094e386f8a3483437dcca3af18a1e3a0"], 0x16) write$P9_RUNLINKAT(r2, &(0x7f0000000100)={0x7, 0x4d, 0xf7fe}, 0x7) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f00000000c0)) r5 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x200) ioctl$FLOPPY_FDGETPRM(r5, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:44 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2658.061063][T19958] ff 90 4294967496 [ 2658.062886][T19958] 12 80 4294967499 [ 2658.064692][T19958] 3 90 4294967499 [ 2658.066874][T19958] 3 80 4294967499 [ 2658.068656][T19958] a1 90 4294967499 [ 2658.070424][T19958] 1e 90 4294967499 [ 2658.072207][T19958] e6 80 4294967499 [ 2658.073993][T19958] 1 90 4294967499 [ 2658.075766][T19958] 0 90 4294967499 [ 2658.077920][T19958] 0 90 4294967499 [ 2658.079709][T19958] 1 90 4294967499 [ 2658.081469][T19958] 2 90 4294967499 [ 2658.083229][T19958] 24 90 4294967499 [ 2658.085008][T19958] 1b 90 4294967499 [ 2658.090033][T19958] ff 90 4294967499 00:45:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11}, 0x48) [ 2658.091855][T19958] last result at 4295201781 [ 2658.094368][T19958] last redo_fd_request at 4295202943 [ 2658.097015][T19958] status=80 [ 2658.098547][T19958] fdc_busy=1 [ 2658.100078][T19958] floppy_work.func=floppy_work_workfn [ 2658.102633][T19958] cont=ffffffff8b1391e0 [ 2658.104586][T19958] current_req=0000000000000000 [ 2658.108791][T19958] command_status=-1 [ 2658.110272][T19958] [ 2658.111199][T19958] floppy1: floppy timeout called [ 2658.113539][T19958] [ 2658.114443][T19958] floppy driver state [ 2658.117541][T19958] ------------------- 00:45:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12}, 0x48) [ 2658.119430][T19958] now=4295202952 last interrupt=4294967499 diff=235453 last called handler=main_command_interrupt [ 2658.124058][T19958] timeout_message=lock fdc [ 2658.126359][T19958] last output bytes: [ 2658.128208][T19958] 0 90 4294967496 [ 2658.129963][T19958] 1 90 4294967496 [ 2658.131722][T19958] 2 90 4294967496 [ 2658.133371][T19958] 12 90 4294967496 [ 2658.134972][T19958] 1b 90 4294967496 [ 2658.139931][T19958] ff 90 4294967496 [ 2658.141704][T19958] 12 80 4294967499 [ 2658.143426][T19958] 3 90 4294967499 [ 2658.145151][T19958] 3 80 4294967499 [ 2658.146998][T19958] a1 90 4294967499 [ 2658.148822][T19958] 1e 90 4294967499 [ 2658.150595][T19958] e6 80 4294967499 [ 2658.152389][T19958] 1 90 4294967499 00:45:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x13}, 0x48) [ 2658.154187][T19958] 0 90 4294967499 [ 2658.159844][T19958] 0 90 4294967499 [ 2658.161603][T19958] 1 90 4294967499 [ 2658.163310][T19958] 2 90 4294967499 [ 2658.165014][T19958] 24 90 4294967499 [ 2658.167121][T19958] 1b 90 4294967499 [ 2658.168970][T19958] ff 90 4294967499 [ 2658.170526][T19958] last result at 4295201781 [ 2658.172574][T19958] last redo_fd_request at 4295202951 [ 2658.175064][T19958] status=80 [ 2658.180191][T19958] fdc_busy=1 [ 2658.181764][T19958] floppy_work.func=floppy_work_workfn [ 2658.184298][T19958] cont=ffffffff8b1391e0 00:45:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x14}, 0x48) [ 2658.186368][T19958] current_req=0000000000000000 [ 2658.188637][T19958] command_status=-1 [ 2658.190118][T19958] [ 2658.191081][T19958] floppy1: floppy timeout called [ 2658.193239][T19958] [ 2658.194169][T19958] floppy driver state [ 2658.195703][T19958] ------------------- [ 2658.205967][T19958] now=4295202961 last interrupt=4294967499 diff=235462 last called handler=main_command_interrupt [ 2658.210959][T19958] timeout_message=lock fdc [ 2658.213268][T19958] last output bytes: 00:45:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x15}, 0x48) [ 2658.215255][T19958] 0 90 4294967496 [ 2658.217589][T19958] 1 90 4294967496 [ 2658.219300][T19958] 2 90 4294967496 [ 2658.221111][T19958] 12 90 4294967496 [ 2658.223036][T19958] 1b 90 4294967496 [ 2658.224705][T19958] ff 90 4294967496 [ 2658.226690][T19958] 12 80 4294967499 [ 2658.228649][T19958] 3 90 4294967499 [ 2658.230140][T19958] 3 80 4294967499 [ 2658.231632][T19958] a1 90 4294967499 [ 2658.233130][T19958] 1e 90 4294967499 [ 2658.234621][T19958] e6 80 4294967499 [ 2658.236149][T19958] 1 90 4294967499 [ 2658.237656][T19958] 0 90 4294967499 [ 2658.239139][T19958] 0 90 4294967499 [ 2658.240655][T19958] 1 90 4294967499 [ 2658.242152][T19958] 2 90 4294967499 [ 2658.243633][T19958] 24 90 4294967499 [ 2658.245126][T19958] 1b 90 4294967499 [ 2658.246700][T19958] ff 90 4294967499 [ 2658.248299][T19958] last result at 4295201781 [ 2658.250084][T19958] last redo_fd_request at 4295202959 [ 2658.252138][T19958] status=80 [ 2658.253418][T19958] fdc_busy=1 [ 2658.254701][T19958] floppy_work.func=floppy_work_workfn [ 2658.256825][T19958] cont=ffffffff8b1391e0 [ 2658.258528][T19958] current_req=0000000000000000 [ 2658.260372][T19958] command_status=-1 [ 2658.261902][T19958] [ 2658.262841][T19958] floppy1: floppy timeout called [ 2658.265745][T19958] [ 2658.267202][T19958] floppy driver state [ 2658.268908][T19958] ------------------- [ 2658.270515][T19958] now=4295202967 last interrupt=4294967499 diff=235468 last called handler=main_command_interrupt [ 2658.274564][T19958] timeout_message=lock fdc [ 2658.276624][T19958] last output bytes: [ 2658.278306][T19958] 0 90 4294967496 [ 2658.279762][T19958] 1 90 4294967496 [ 2658.281510][T19958] 2 90 4294967496 [ 2658.283283][T19958] 12 90 4294967496 [ 2658.285061][T19958] 1b 90 4294967496 00:45:44 executing program 3: syz_open_dev$dri(&(0x7f0000000140), 0x4, 0x10800) (async) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x4, 0x10800) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000180)) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f00000000c0)=r2) ioctl$FLOPPY_FDFMTBEG(r1, 0x247) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000100)=0x9, 0x4) 00:45:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x16}, 0x48) 00:45:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x4, 0x10800) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000180)) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f00000000c0)=r2) ioctl$FLOPPY_FDFMTBEG(r1, 0x247) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000100)=0x9, 0x4) 00:45:44 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2658.291660][T19958] ff 90 4294967496 [ 2658.293495][T19958] 12 80 4294967499 [ 2658.295342][T19958] 3 90 4294967499 [ 2658.297049][T19958] 3 80 4294967499 [ 2658.298709][T19958] a1 90 4294967499 [ 2658.300494][T19958] 1e 90 4294967499 [ 2658.302293][T19958] e6 80 4294967499 [ 2658.304091][T19958] 1 90 4294967499 [ 2658.309006][T19958] 0 90 4294967499 [ 2658.310642][T19958] 0 90 4294967499 [ 2658.312448][T19958] 1 90 4294967499 [ 2658.314110][T19958] 2 90 4294967499 [ 2658.315826][T19958] 24 90 4294967499 [ 2658.317739][T19958] 1b 90 4294967499 [ 2658.319533][T19958] ff 90 4294967499 [ 2658.321241][T19958] last result at 4295201781 [ 2658.323298][T19958] last redo_fd_request at 4295202966 [ 2658.325662][T19958] status=80 [ 2658.327616][T19958] fdc_busy=1 [ 2658.329046][T19958] floppy_work.func=floppy_work_workfn [ 2658.331227][T19958] cont=ffffffff8b1391e0 [ 2658.333033][T19958] current_req=0000000000000000 [ 2658.335375][T19958] command_status=-1 [ 2658.337247][T19958] [ 2658.338461][T19958] floppy1: floppy timeout called [ 2658.343611][T19958] [ 2658.344677][T19958] floppy driver state 00:45:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x17}, 0x48) [ 2658.347701][T19958] ------------------- [ 2658.349445][T19958] now=4295202975 last interrupt=4294967499 diff=235476 last called handler=main_command_interrupt [ 2658.353856][T19958] timeout_message=lock fdc [ 2658.355783][T19958] last output bytes: [ 2658.358251][T19958] 0 90 4294967496 [ 2658.360067][T19958] 1 90 4294967496 [ 2658.361877][T19958] 2 90 4294967496 [ 2658.363633][T19958] 12 90 4294967496 [ 2658.365438][T19958] 1b 90 4294967496 [ 2658.367287][T19958] ff 90 4294967496 [ 2658.368815][T19958] 12 80 4294967499 [ 2658.370437][T19958] 3 90 4294967499 [ 2658.372247][T19958] 3 80 4294967499 [ 2658.374054][T19958] a1 90 4294967499 [ 2658.375963][T19958] 1e 90 4294967499 00:45:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18}, 0x48) [ 2658.377666][T19958] e6 80 4294967499 [ 2658.379478][T19958] 1 90 4294967499 [ 2658.381286][T19958] 0 90 4294967499 [ 2658.383048][T19958] 0 90 4294967499 [ 2658.384836][T19958] 1 90 4294967499 [ 2658.386759][T19958] 2 90 4294967499 [ 2658.388426][T19958] 24 90 4294967499 [ 2658.390199][T19958] 1b 90 4294967499 [ 2658.391966][T19958] ff 90 4294967499 [ 2658.393753][T19958] last result at 4295201781 [ 2658.395993][T19958] last redo_fd_request at 4295202974 [ 2658.398546][T19958] status=80 [ 2658.400066][T19958] fdc_busy=1 [ 2658.401529][T19958] floppy_work.func=floppy_work_workfn [ 2658.403653][T19958] cont=ffffffff8b1391e0 [ 2658.405262][T19958] current_req=0000000000000000 [ 2658.407355][T19958] command_status=-1 [ 2658.408889][T19958] [ 2658.409875][T19958] floppy1: floppy timeout called [ 2658.415637][T19958] 00:45:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140), 0x4, 0x10800) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000180)) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f00000000c0)=r2) ioctl$FLOPPY_FDFMTBEG(r1, 0x247) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000100)=0x9, 0x4) [ 2658.418466][T19958] floppy driver state [ 2658.420116][T19958] ------------------- [ 2658.421715][T19958] now=4295202982 last interrupt=4294967499 diff=235483 last called handler=main_command_interrupt [ 2658.425787][T19958] timeout_message=lock fdc 00:45:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x19}, 0x48) [ 2658.428497][T19958] last output bytes: [ 2658.430006][T19958] 0 90 4294967496 [ 2658.431431][T19958] 1 90 4294967496 [ 2658.432852][T19958] 2 90 4294967496 [ 2658.434256][T19958] 12 90 4294967496 [ 2658.435682][T19958] 1b 90 4294967496 [ 2658.437236][T19958] ff 90 4294967496 [ 2658.438650][T19958] 12 80 4294967499 [ 2658.440064][T19958] 3 90 4294967499 [ 2658.441562][T19958] 3 80 4294967499 [ 2658.443413][T19958] a1 90 4294967499 [ 2658.445191][T19958] 1e 90 4294967499 [ 2658.446988][T19958] e6 80 4294967499 [ 2658.448664][T19958] 1 90 4294967499 [ 2658.450366][T19958] 0 90 4294967499 [ 2658.452074][T19958] 0 90 4294967499 [ 2658.453785][T19958] 1 90 4294967499 00:45:45 executing program 3: write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x8, 0x3, 0x7}, 0x8}}, 0x18) syz_open_dev$floppy(&(0x7f0000000080), 0xff1, 0x3) 00:45:45 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1004, 0x103041) r3 = syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0x200200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x81, 0xffffffff, 0x2, 0xffff, 0x4, 0x8bba, 0x6, 0x3}) r4 = syz_open_dev$floppy(&(0x7f00000000c0), 0x76e, 0x2) ioctl$FLOPPY_FDMSGOFF(r4, 0x246) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2658.456076][T19958] 2 90 4294967499 [ 2658.457879][T19958] 24 90 4294967499 [ 2658.459574][T19958] 1b 90 4294967499 [ 2658.461281][T19958] ff 90 4294967499 [ 2658.463087][T19958] last result at 4295201781 [ 2658.465202][T19958] last redo_fd_request at 4295202981 [ 2658.467901][T19958] status=80 [ 2658.469335][T19958] fdc_busy=1 [ 2658.470810][T19958] floppy_work.func=floppy_work_workfn [ 2658.472941][T19958] cont=ffffffff8b1391e0 [ 2658.474498][T19958] current_req=0000000000000000 [ 2658.476459][T19958] command_status=-1 [ 2658.477898][T19958] [ 2658.478830][T19958] floppy1: floppy timeout called [ 2658.482408][T19958] [ 2658.483346][T19958] floppy driver state [ 2658.484849][T19958] ------------------- [ 2658.486438][T19958] now=4295202989 last interrupt=4294967499 diff=235490 last called handler=main_command_interrupt 00:45:45 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0x1fed, 0x40000) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0), 0x5d0a2159, 0x60000) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x801c0204, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$capi20(0xffffff9c, &(0x7f0000000040), 0x159542, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x8, 0x2, 0x7}}, 0x14) [ 2658.490839][T19958] timeout_message=lock fdc [ 2658.492678][T19958] last output bytes: [ 2658.494440][T19958] 0 90 4294967496 [ 2658.496267][T19958] 1 90 4294967496 [ 2658.497951][T19958] 2 90 4294967496 [ 2658.499638][T19958] 12 90 4294967496 [ 2658.501350][T19958] 1b 90 4294967496 [ 2658.503026][T19958] ff 90 4294967496 [ 2658.504699][T19958] 12 80 4294967499 00:45:45 executing program 3: write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x8, 0x3, 0x7}, 0x8}}, 0x18) (async) syz_open_dev$floppy(&(0x7f0000000080), 0xff1, 0x3) 00:45:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1a}, 0x48) [ 2658.507299][T19958] 3 90 4294967499 [ 2658.508999][T19958] 3 80 4294967499 [ 2658.510669][T19958] a1 90 4294967499 [ 2658.512371][T19958] 1e 90 4294967499 [ 2658.514049][T19958] e6 80 4294967499 [ 2658.515735][T19958] 1 90 4294967499 [ 2658.517736][T19958] 0 90 4294967499 00:45:45 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x40041271, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2658.519942][T19958] 0 90 4294967499 [ 2658.521707][T19958] 1 90 4294967499 [ 2658.523403][T19958] 2 90 4294967499 [ 2658.525106][T19958] 24 90 4294967499 [ 2658.527127][T19958] 1b 90 4294967499 [ 2658.528822][T19958] ff 90 4294967499 [ 2658.530356][T19958] last result at 4295201781 [ 2658.532046][T19958] last redo_fd_request at 4295202988 [ 2658.534043][T19958] status=80 [ 2658.535245][T19958] fdc_busy=1 [ 2658.536542][T19958] floppy_work.func=floppy_work_workfn [ 2658.538588][T19958] cont=ffffffff8b1391e0 [ 2658.540127][T19958] current_req=0000000000000000 [ 2658.541911][T19958] command_status=-1 [ 2658.543331][T19958] 00:45:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1b}, 0x48) [ 2658.544781][T19958] floppy1: floppy timeout called [ 2658.547657][ T1088] [ 2658.548649][ T1088] floppy driver state [ 2658.550138][ T1088] ------------------- [ 2658.551621][ T1088] now=4295202995 last interrupt=4294967499 diff=235496 last called handler=main_command_interrupt [ 2658.555493][ T1088] timeout_message=lock fdc [ 2658.557494][ T1088] last output bytes: [ 2658.559038][ T1088] 0 90 4294967496 [ 2658.560526][ T1088] 1 90 4294967496 [ 2658.562004][ T1088] 2 90 4294967496 [ 2658.563477][ T1088] 12 90 4294967496 [ 2658.564957][ T1088] 1b 90 4294967496 [ 2658.566926][ T1088] ff 90 4294967496 [ 2658.568414][ T1088] 12 80 4294967499 [ 2658.569892][ T1088] 3 90 4294967499 [ 2658.571370][ T1088] 3 80 4294967499 [ 2658.572838][ T1088] a1 90 4294967499 [ 2658.574328][ T1088] 1e 90 4294967499 00:45:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1c}, 0x48) [ 2658.576964][ T1088] e6 80 4294967499 [ 2658.578900][ T1088] 1 90 4294967499 [ 2658.580823][ T1088] 0 90 4294967499 [ 2658.582662][ T1088] 0 90 4294967499 [ 2658.585768][ T1088] 1 90 4294967499 [ 2658.588028][ T1088] 2 90 4294967499 [ 2658.589798][ T1088] 24 90 4294967499 [ 2658.591476][ T1088] 1b 90 4294967499 [ 2658.593172][ T1088] ff 90 4294967499 [ 2658.594861][ T1088] last result at 4295201781 [ 2658.597481][ T1088] last redo_fd_request at 4295202995 [ 2658.599892][ T1088] status=80 [ 2658.601333][ T1088] fdc_busy=1 [ 2658.602813][ T1088] floppy_work.func=floppy_work_workfn [ 2658.605249][ T1088] cont=ffffffff8b1391e0 00:45:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1d}, 0x48) [ 2658.608542][ T1088] current_req=0000000000000000 [ 2658.610722][ T1088] command_status=-1 [ 2658.612442][ T1088] [ 2658.613567][ T1088] floppy1: floppy timeout called [ 2658.617534][ T1088] [ 2658.618585][ T1088] floppy driver state [ 2658.620386][ T1088] ------------------- [ 2658.622193][ T1088] now=4295203002 last interrupt=4294967499 diff=235503 last called handler=main_command_interrupt [ 2658.626954][ T1088] timeout_message=lock fdc [ 2658.628960][ T1088] last output bytes: [ 2658.630712][ T1088] 0 90 4294967496 [ 2658.632398][ T1088] 1 90 4294967496 [ 2658.634098][ T1088] 2 90 4294967496 [ 2658.635781][ T1088] 12 90 4294967496 [ 2658.637968][ T1088] 1b 90 4294967496 [ 2658.639404][ T1088] ff 90 4294967496 [ 2658.640877][ T1088] 12 80 4294967499 [ 2658.642294][ T1088] 3 90 4294967499 [ 2658.643719][ T1088] 3 80 4294967499 [ 2658.645160][ T1088] a1 90 4294967499 [ 2658.646962][ T1088] 1e 90 4294967499 [ 2658.648414][ T1088] e6 80 4294967499 [ 2658.649866][ T1088] 1 90 4294967499 [ 2658.651327][ T1088] 0 90 4294967499 [ 2658.652806][ T1088] 0 90 4294967499 [ 2658.654225][ T1088] 1 90 4294967499 [ 2658.655650][ T1088] 2 90 4294967499 [ 2658.657790][ T1088] 24 90 4294967499 [ 2658.659237][ T1088] 1b 90 4294967499 [ 2658.660693][ T1088] ff 90 4294967499 [ 2658.662126][ T1088] last result at 4295201781 [ 2658.663975][ T1088] last redo_fd_request at 4295203002 [ 2658.666418][ T1088] status=80 [ 2658.667664][ T1088] fdc_busy=1 [ 2658.668926][ T1088] floppy_work.func=floppy_work_workfn [ 2658.670967][ T1088] cont=ffffffff8b1391e0 [ 2658.672630][ T1088] current_req=0000000000000000 [ 2658.674498][ T1088] command_status=-1 [ 2658.676137][ T1088] [ 2658.677164][ T1088] floppy1: floppy timeout called [ 2658.680146][ T1088] [ 2658.681268][ T1088] floppy driver state [ 2658.682822][ T1088] ------------------- [ 2658.684395][ T1088] now=4295203008 last interrupt=4294967499 diff=235509 last called handler=main_command_interrupt [ 2658.688714][ T1088] timeout_message=lock fdc [ 2658.690550][ T1088] last output bytes: [ 2658.692185][ T1088] 0 90 4294967496 [ 2658.693818][ T1088] 1 90 4294967496 [ 2658.695348][ T1088] 2 90 4294967496 [ 2658.697003][ T1088] 12 90 4294967496 [ 2658.698584][ T1088] 1b 90 4294967496 [ 2658.700070][ T1088] ff 90 4294967496 [ 2658.701546][ T1088] 12 80 4294967499 [ 2658.703020][ T1088] 3 90 4294967499 [ 2658.704458][ T1088] 3 80 4294967499 00:45:45 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1004, 0x103041) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0x200200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x81, 0xffffffff, 0x2, 0xffff, 0x4, 0x8bba, 0x6, 0x3}) (async) r4 = syz_open_dev$floppy(&(0x7f00000000c0), 0x76e, 0x2) ioctl$FLOPPY_FDMSGOFF(r4, 0x246) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1e}, 0x48) 00:45:45 executing program 3: write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x8, 0x3, 0x7}, 0x8}}, 0x18) syz_open_dev$floppy(&(0x7f0000000080), 0xff1, 0x3) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x8, 0x3, 0x7}, 0x8}}, 0x18) (async) syz_open_dev$floppy(&(0x7f0000000080), 0xff1, 0x3) (async) 00:45:45 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x401070c9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2658.706116][ T1088] a1 90 4294967499 [ 2658.708069][ T1088] 1e 90 4294967499 [ 2658.709731][ T1088] e6 80 4294967499 [ 2658.711207][ T1088] 1 90 4294967499 [ 2658.712711][ T1088] 0 90 4294967499 [ 2658.714156][ T1088] 0 90 4294967499 [ 2658.715611][ T1088] 1 90 4294967499 [ 2658.717291][ T1088] 2 90 4294967499 [ 2658.718965][ T1088] 24 90 4294967499 [ 2658.720509][ T1088] 1b 90 4294967499 [ 2658.721993][ T1088] ff 90 4294967499 [ 2658.723456][ T1088] last result at 4295201781 [ 2658.725330][ T1088] last redo_fd_request at 4295203008 [ 2658.727636][ T1088] status=80 [ 2658.728925][ T1088] fdc_busy=1 [ 2658.730161][ T1088] floppy_work.func=floppy_work_workfn [ 2658.732247][ T1088] cont=ffffffff8b1391e0 [ 2658.733851][ T1088] current_req=0000000000000000 [ 2658.735693][ T1088] command_status=-1 [ 2658.737459][ T1088] [ 2658.738674][ T1088] floppy1: floppy timeout called [ 2658.743160][ T1088] [ 2658.744078][ T1088] floppy driver state [ 2658.745690][ T1088] ------------------- [ 2658.752431][ T1088] now=4295203015 last interrupt=4294967499 diff=235516 last called handler=main_command_interrupt [ 2658.757055][ T1088] timeout_message=lock fdc 00:45:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x21}, 0x48) [ 2658.759304][ T1088] last output bytes: [ 2658.760883][ T1088] 0 90 4294967496 [ 2658.762328][ T1088] 1 90 4294967496 [ 2658.763727][ T1088] 2 90 4294967496 [ 2658.765132][ T1088] 12 90 4294967496 [ 2658.767116][ T1088] 1b 90 4294967496 [ 2658.768536][ T1088] ff 90 4294967496 [ 2658.769937][ T1088] 12 80 4294967499 [ 2658.771350][ T1088] 3 90 4294967499 [ 2658.772787][ T1088] 3 80 4294967499 [ 2658.774211][ T1088] a1 90 4294967499 [ 2658.775812][ T1088] 1e 90 4294967499 [ 2658.778523][ T1088] e6 80 4294967499 [ 2658.780143][ T1088] 1 90 4294967499 [ 2658.781544][ T1088] 0 90 4294967499 [ 2658.782939][ T1088] 0 90 4294967499 [ 2658.784333][ T1088] 1 90 4294967499 [ 2658.785748][ T1088] 2 90 4294967499 [ 2658.787570][ T1088] 24 90 4294967499 [ 2658.789011][ T1088] 1b 90 4294967499 [ 2658.790402][ T1088] ff 90 4294967499 [ 2658.791814][ T1088] last result at 4295201781 [ 2658.793500][ T1088] last redo_fd_request at 4295203014 [ 2658.795489][ T1088] status=80 00:45:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x22}, 0x48) [ 2658.798532][ T1088] fdc_busy=1 [ 2658.799994][ T1088] floppy_work.func=floppy_work_workfn [ 2658.802317][ T1088] cont=ffffffff8b1391e0 [ 2658.804205][ T1088] current_req=0000000000000000 [ 2658.806901][ T1088] command_status=-1 [ 2658.808529][ T1088] [ 2658.809691][ T1088] floppy1: floppy timeout called [ 2658.812107][ T1088] [ 2658.813192][ T1088] floppy driver state [ 2658.814843][ T1088] ------------------- [ 2658.816957][ T1088] now=4295203022 last interrupt=4294967499 diff=235523 last called handler=main_command_interrupt [ 2658.820912][ T1088] timeout_message=lock fdc [ 2658.822573][ T1088] last output bytes: [ 2658.824044][ T1088] 0 90 4294967496 [ 2658.825455][ T1088] 1 90 4294967496 [ 2658.828006][ T1088] 2 90 4294967496 [ 2658.829779][ T1088] 12 90 4294967496 [ 2658.831447][ T1088] 1b 90 4294967496 [ 2658.833114][ T1088] ff 90 4294967496 [ 2658.834850][ T1088] 12 80 4294967499 00:45:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x23}, 0x48) [ 2658.837141][ T1088] 3 90 4294967499 [ 2658.838742][ T1088] 3 80 4294967499 [ 2658.840227][ T1088] a1 90 4294967499 [ 2658.841748][ T1088] 1e 90 4294967499 [ 2658.843204][ T1088] e6 80 4294967499 [ 2658.844642][ T1088] 1 90 4294967499 [ 2658.846444][ T1088] 0 90 4294967499 [ 2658.848239][ T1088] 0 90 4294967499 [ 2658.850020][ T1088] 1 90 4294967499 [ 2658.851789][ T1088] 2 90 4294967499 [ 2658.853592][ T1088] 24 90 4294967499 [ 2658.855316][ T1088] 1b 90 4294967499 [ 2658.857884][ T1088] ff 90 4294967499 [ 2658.859526][ T1088] last result at 4295201781 [ 2658.861488][ T1088] last redo_fd_request at 4295203021 [ 2658.863475][ T1088] status=80 [ 2658.864669][ T1088] fdc_busy=1 [ 2658.866421][ T1088] floppy_work.func=floppy_work_workfn [ 2658.869005][ T1088] cont=ffffffff8b1391e0 [ 2658.871018][ T1088] current_req=0000000000000000 [ 2658.873285][ T1088] command_status=-1 [ 2658.874703][ T1088] [ 2658.875633][ T1088] floppy1: floppy timeout called 00:45:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x300}, 0x48) [ 2658.878306][ T1088] [ 2658.879272][ T1088] floppy driver state [ 2658.880753][ T1088] ------------------- [ 2658.882219][ T1088] now=4295203028 last interrupt=4294967499 diff=235529 last called handler=main_command_interrupt [ 2658.886324][ T1088] timeout_message=lock fdc [ 2658.888461][ T1088] last output bytes: [ 2658.890330][ T1088] 0 90 4294967496 [ 2658.891790][ T1088] 1 90 4294967496 [ 2658.893195][ T1088] 2 90 4294967496 [ 2658.894582][ T1088] 12 90 4294967496 [ 2658.896232][ T1088] 1b 90 4294967496 [ 2658.897660][ T1088] ff 90 4294967496 [ 2658.899042][ T1088] 12 80 4294967499 [ 2658.900419][ T1088] 3 90 4294967499 [ 2658.901806][ T1088] 3 80 4294967499 [ 2658.903196][ T1088] a1 90 4294967499 [ 2658.904604][ T1088] 1e 90 4294967499 [ 2658.906292][ T1088] e6 80 4294967499 [ 2658.908091][ T1088] 1 90 4294967499 [ 2658.909852][ T1088] 0 90 4294967499 [ 2658.911253][ T1088] 0 90 4294967499 [ 2658.912748][ T1088] 1 90 4294967499 [ 2658.914135][ T1088] 2 90 4294967499 [ 2658.915510][ T1088] 24 90 4294967499 [ 2658.917398][ T1088] 1b 90 4294967499 [ 2658.918803][ T1088] ff 90 4294967499 [ 2658.920186][ T1088] last result at 4295201781 [ 2658.921863][ T1088] last redo_fd_request at 4295203028 [ 2658.923909][ T1088] status=80 [ 2658.925168][ T1088] fdc_busy=1 [ 2658.926568][ T1088] floppy_work.func=floppy_work_workfn [ 2658.929172][ T1088] cont=ffffffff8b1391e0 [ 2658.930705][ T1088] current_req=0000000000000000 [ 2658.932544][ T1088] command_status=-1 [ 2658.934088][ T1088] [ 2658.935003][ T1088] floppy1: floppy timeout called [ 2658.944165][ T969] [ 2658.945143][ T969] floppy driver state [ 2658.946711][ T969] ------------------- 00:45:45 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1004, 0x103041) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0x200200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x81, 0xffffffff, 0x2, 0xffff, 0x4, 0x8bba, 0x6, 0x3}) r4 = syz_open_dev$floppy(&(0x7f00000000c0), 0x76e, 0x2) ioctl$FLOPPY_FDMSGOFF(r4, 0x246) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x500}, 0x48) [ 2658.948576][ T969] now=4295203035 last interrupt=4294967499 diff=235536 last called handler=main_command_interrupt [ 2658.953694][ T969] timeout_message=lock fdc 00:45:45 executing program 3: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x200) r1 = syz_open_dev$floppy(&(0x7f0000000080), 0x8000, 0x80000) ioctl$FLOPPY_FDMSGOFF(r0, 0x246) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x400, 0x101) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$FLOPPY_FDMSGOFF(r2, 0x246) ioctl$FLOPPY_FDEJECT(r1, 0x25a) syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x200) [ 2658.955775][ T969] last output bytes: 00:45:45 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1004, 0x103041) r3 = syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0x200200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x81, 0xffffffff, 0x2, 0xffff, 0x4, 0x8bba, 0x6, 0x3}) r4 = syz_open_dev$floppy(&(0x7f00000000c0), 0x76e, 0x2) ioctl$FLOPPY_FDMSGOFF(r4, 0x246) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2658.973789][ T969] 0 90 4294967496 [ 2658.975290][ T969] 1 90 4294967496 [ 2658.977111][ T969] 2 90 4294967496 [ 2658.978873][ T969] 12 90 4294967496 [ 2658.980651][ T969] 1b 90 4294967496 [ 2658.982427][ T969] ff 90 4294967496 [ 2658.984205][ T969] 12 80 4294967499 [ 2658.987092][ T969] 3 90 4294967499 [ 2658.988907][ T969] 3 80 4294967499 [ 2658.990637][ T969] a1 90 4294967499 [ 2658.992436][ T969] 1e 90 4294967499 [ 2658.994198][ T969] e6 80 4294967499 [ 2658.997026][ T969] 1 90 4294967499 [ 2658.998816][ T969] 0 90 4294967499 [ 2659.000485][ T969] 0 90 4294967499 [ 2659.002265][ T969] 1 90 4294967499 [ 2659.004025][ T969] 2 90 4294967499 [ 2659.005800][ T969] 24 90 4294967499 00:45:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x600}, 0x48) [ 2659.008232][ T969] 1b 90 4294967499 [ 2659.010048][ T969] ff 90 4294967499 [ 2659.011742][ T969] last result at 4295201781 [ 2659.013739][ T969] last redo_fd_request at 4295203034 [ 2659.017351][ T969] status=80 [ 2659.018892][ T969] fdc_busy=1 [ 2659.020447][ T969] floppy_work.func=floppy_work_workfn [ 2659.023014][ T969] cont=ffffffff8b1391e0 [ 2659.024982][ T969] current_req=0000000000000000 [ 2659.028454][ T969] command_status=-1 [ 2659.029927][ T969] 00:45:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x700}, 0x48) [ 2659.030855][ T969] floppy1: floppy timeout called [ 2659.033102][ T969] [ 2659.034019][ T969] floppy driver state [ 2659.035492][ T969] ------------------- [ 2659.038490][ T969] now=4295203044 last interrupt=4294967499 diff=235545 last called handler=main_command_interrupt [ 2659.043496][ T969] timeout_message=lock fdc [ 2659.045379][ T969] last output bytes: [ 2659.047947][ T969] 0 90 4294967496 [ 2659.049746][ T969] 1 90 4294967496 [ 2659.051527][ T969] 2 90 4294967496 [ 2659.053288][ T969] 12 90 4294967496 [ 2659.054990][ T969] 1b 90 4294967496 [ 2659.057510][ T969] ff 90 4294967496 [ 2659.059659][ T969] 12 80 4294967499 [ 2659.061368][ T969] 3 90 4294967499 [ 2659.062992][ T969] 3 80 4294967499 00:45:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x900}, 0x48) [ 2659.064696][ T969] a1 90 4294967499 [ 2659.067182][ T969] 1e 90 4294967499 [ 2659.068869][ T969] e6 80 4294967499 [ 2659.070554][ T969] 1 90 4294967499 [ 2659.072285][ T969] 0 90 4294967499 [ 2659.074025][ T969] 0 90 4294967499 [ 2659.075580][ T969] 1 90 4294967499 [ 2659.078148][ T969] 2 90 4294967499 [ 2659.079988][ T969] 24 90 4294967499 [ 2659.081739][ T969] 1b 90 4294967499 [ 2659.083466][ T969] ff 90 4294967499 [ 2659.085225][ T969] last result at 4295201781 [ 2659.088250][ T969] last redo_fd_request at 4295203043 [ 2659.090718][ T969] status=80 [ 2659.092224][ T969] fdc_busy=1 00:45:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa00}, 0x48) [ 2659.093769][ T969] floppy_work.func=floppy_work_workfn [ 2659.097330][ T969] cont=ffffffff8b1391e0 [ 2659.099003][ T969] current_req=0000000000000000 [ 2659.101029][ T969] command_status=-1 [ 2659.102787][ T969] [ 2659.103965][ T969] floppy1: floppy timeout called [ 2659.109605][ T1088] [ 2659.111719][ T1088] floppy driver state [ 2659.113776][ T1088] ------------------- [ 2659.115662][ T1088] now=4295203051 last interrupt=4294967499 diff=235552 last called handler=main_command_interrupt [ 2659.120046][ T1088] timeout_message=lock fdc [ 2659.122009][ T1088] last output bytes: [ 2659.123982][ T1088] 0 90 4294967496 [ 2659.126101][ T1088] 1 90 4294967496 [ 2659.127707][ T1088] 2 90 4294967496 [ 2659.129522][ T1088] 12 90 4294967496 [ 2659.131303][ T1088] 1b 90 4294967496 [ 2659.133050][ T1088] ff 90 4294967496 [ 2659.134520][ T1088] 12 80 4294967499 [ 2659.136417][ T1088] 3 90 4294967499 [ 2659.138209][ T1088] 3 80 4294967499 [ 2659.139950][ T1088] a1 90 4294967499 [ 2659.141499][ T1088] 1e 90 4294967499 [ 2659.142871][ T1088] e6 80 4294967499 [ 2659.144242][ T1088] 1 90 4294967499 [ 2659.145658][ T1088] 0 90 4294967499 [ 2659.147125][ T1088] 0 90 4294967499 [ 2659.148896][ T1088] 1 90 4294967499 [ 2659.150697][ T1088] 2 90 4294967499 [ 2659.152089][ T1088] 24 90 4294967499 [ 2659.153496][ T1088] 1b 90 4294967499 [ 2659.154949][ T1088] ff 90 4294967499 [ 2659.156466][ T1088] last result at 4295201781 [ 2659.158377][ T1088] last redo_fd_request at 4295203051 [ 2659.160784][ T1088] status=80 [ 2659.162468][ T1088] fdc_busy=1 [ 2659.164046][ T1088] floppy_work.func=floppy_work_workfn [ 2659.166903][ T1088] cont=ffffffff8b1391e0 [ 2659.169060][ T1088] current_req=0000000000000000 [ 2659.171341][ T1088] command_status=-1 [ 2659.173162][ T1088] [ 2659.174087][ T1088] floppy1: floppy timeout called [ 2659.176999][ T1088] [ 2659.178145][ T1088] floppy driver state [ 2659.180076][ T1088] ------------------- [ 2659.181991][ T1088] now=4295203058 last interrupt=4294967499 diff=235559 last called handler=main_command_interrupt 00:45:45 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={0x0, 0x1, r2, 0x8001}) 00:45:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb00}, 0x48) [ 2659.187052][ T1088] timeout_message=lock fdc [ 2659.189245][ T1088] last output bytes: [ 2659.191120][ T1088] 0 90 4294967496 [ 2659.192901][ T1088] 1 90 4294967496 [ 2659.194654][ T1088] 2 90 4294967496 [ 2659.196683][ T1088] 12 90 4294967496 [ 2659.198465][ T1088] 1b 90 4294967496 [ 2659.200243][ T1088] ff 90 4294967496 [ 2659.202014][ T1088] 12 80 4294967499 [ 2659.203774][ T1088] 3 90 4294967499 [ 2659.205290][ T1088] 3 80 4294967499 [ 2659.206764][ T1088] a1 90 4294967499 [ 2659.208451][ T1088] 1e 90 4294967499 [ 2659.210198][ T1088] e6 80 4294967499 [ 2659.211973][ T1088] 1 90 4294967499 [ 2659.213750][ T1088] 0 90 4294967499 [ 2659.215493][ T1088] 0 90 4294967499 [ 2659.217701][ T1088] 1 90 4294967499 [ 2659.219393][ T1088] 2 90 4294967499 [ 2659.220811][ T1088] 24 90 4294967499 [ 2659.222195][ T1088] 1b 90 4294967499 [ 2659.223641][ T1088] ff 90 4294967499 [ 2659.225053][ T1088] last result at 4295201781 [ 2659.227463][ T1088] last redo_fd_request at 4295203058 [ 2659.229988][ T1088] status=80 [ 2659.231309][ T1088] fdc_busy=1 [ 2659.232864][ T1088] floppy_work.func=floppy_work_workfn [ 2659.235381][ T1088] cont=ffffffff8b1391e0 [ 2659.243432][ T1088] current_req=0000000000000000 [ 2659.245339][ T1088] command_status=-1 [ 2659.246956][ T1088] [ 2659.248121][ T1088] floppy1: floppy timeout called [ 2659.251114][ T1088] [ 2659.252231][ T1088] floppy driver state [ 2659.253845][ T1088] ------------------- [ 2659.255704][ T1088] now=4295203065 last interrupt=4294967499 diff=235566 last called handler=main_command_interrupt [ 2659.260738][ T1088] timeout_message=lock fdc [ 2659.262732][ T1088] last output bytes: [ 2659.264551][ T1088] 0 90 4294967496 [ 2659.266317][ T1088] 1 90 4294967496 [ 2659.267975][ T1088] 2 90 4294967496 [ 2659.269643][ T1088] 12 90 4294967496 [ 2659.271337][ T1088] 1b 90 4294967496 [ 2659.273020][ T1088] ff 90 4294967496 [ 2659.274679][ T1088] 12 80 4294967499 [ 2659.276261][ T1088] 3 90 4294967499 [ 2659.277704][ T1088] 3 80 4294967499 [ 2659.279108][ T1088] a1 90 4294967499 [ 2659.280505][ T1088] 1e 90 4294967499 [ 2659.281913][ T1088] e6 80 4294967499 [ 2659.283297][ T1088] 1 90 4294967499 [ 2659.284692][ T1088] 0 90 4294967499 [ 2659.286143][ T1088] 0 90 4294967499 [ 2659.287695][ T1088] 1 90 4294967499 [ 2659.289387][ T1088] 2 90 4294967499 [ 2659.291056][ T1088] 24 90 4294967499 [ 2659.292713][ T1088] 1b 90 4294967499 [ 2659.294370][ T1088] ff 90 4294967499 [ 2659.296138][ T1088] last result at 4295201781 [ 2659.298146][ T1088] last redo_fd_request at 4295203065 [ 2659.300360][ T1088] status=80 [ 2659.301697][ T1088] fdc_busy=1 [ 2659.302953][ T1088] floppy_work.func=floppy_work_workfn [ 2659.304963][ T1088] cont=ffffffff8b1391e0 [ 2659.306657][ T1088] current_req=0000000000000000 [ 2659.308434][ T1088] command_status=-1 [ 2659.309853][ T1088] [ 2659.310780][ T1088] floppy1: floppy timeout called [ 2659.313073][ T1088] [ 2659.313974][ T1088] floppy driver state [ 2659.315449][ T1088] ------------------- [ 2659.317134][ T1088] now=4295203072 last interrupt=4294967499 diff=235573 last called handler=main_command_interrupt [ 2659.320991][ T1088] timeout_message=lock fdc [ 2659.322648][ T1088] last output bytes: [ 2659.324096][ T1088] 0 90 4294967496 [ 2659.325498][ T1088] 1 90 4294967496 [ 2659.326959][ T1088] 2 90 4294967496 [ 2659.328361][ T1088] 12 90 4294967496 [ 2659.329759][ T1088] 1b 90 4294967496 [ 2659.331165][ T1088] ff 90 4294967496 00:45:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc00}, 0x48) [ 2659.332559][ T1088] 12 80 4294967499 [ 2659.334068][ T1088] 3 90 4294967499 [ 2659.335740][ T1088] 3 80 4294967499 [ 2659.337415][ T1088] a1 90 4294967499 00:45:45 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x40101283, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2659.339082][ T1088] 1e 90 4294967499 00:45:45 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x200) (async) r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x200) r1 = syz_open_dev$floppy(&(0x7f0000000080), 0x8000, 0x80000) ioctl$FLOPPY_FDMSGOFF(r0, 0x246) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x400, 0x101) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$FLOPPY_FDMSGOFF(r2, 0x246) ioctl$FLOPPY_FDEJECT(r1, 0x25a) (async) ioctl$FLOPPY_FDEJECT(r1, 0x25a) syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x200) [ 2659.340925][ T1088] e6 80 4294967499 [ 2659.342428][ T1088] 1 90 4294967499 [ 2659.344089][ T1088] 0 90 4294967499 [ 2659.345795][ T1088] 0 90 4294967499 [ 2659.347566][ T1088] 1 90 4294967499 [ 2659.349224][ T1088] 2 90 4294967499 [ 2659.350885][ T1088] 24 90 4294967499 [ 2659.352558][ T1088] 1b 90 4294967499 [ 2659.354246][ T1088] ff 90 4294967499 00:45:45 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={0x0, 0x1, r2, 0x8001}) [ 2659.355970][ T1088] last result at 4295201781 [ 2659.358152][ T1088] last redo_fd_request at 4295203071 [ 2659.360501][ T1088] status=80 [ 2659.361924][ T1088] fdc_busy=1 [ 2659.363378][ T1088] floppy_work.func=floppy_work_workfn [ 2659.365835][ T1088] cont=ffffffff8b1391e0 [ 2659.367813][ T1088] current_req=0000000000000000 [ 2659.369653][ T1088] command_status=-1 [ 2659.371115][ T1088] [ 2659.372043][ T1088] floppy1: floppy timeout called [ 2659.377230][ T1088] [ 2659.378162][ T1088] floppy driver state [ 2659.379620][ T1088] ------------------- [ 2659.381095][ T1088] now=4295203078 last interrupt=4294967499 diff=235579 last called handler=main_command_interrupt [ 2659.384896][ T1088] timeout_message=lock fdc [ 2659.387162][ T1088] last output bytes: [ 2659.388637][ T1088] 0 90 4294967496 [ 2659.390008][ T1088] 1 90 4294967496 [ 2659.391398][ T1088] 2 90 4294967496 [ 2659.392787][ T1088] 12 90 4294967496 [ 2659.394159][ T1088] 1b 90 4294967496 [ 2659.395530][ T1088] ff 90 4294967496 [ 2659.397505][ T1088] 12 80 4294967499 [ 2659.398902][ T1088] 3 90 4294967499 [ 2659.400296][ T1088] 3 80 4294967499 [ 2659.401678][ T1088] a1 90 4294967499 00:45:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd00}, 0x48) [ 2659.403055][ T1088] 1e 90 4294967499 [ 2659.404628][ T1088] e6 80 4294967499 [ 2659.406558][ T1088] 1 90 4294967499 [ 2659.407945][ T1088] 0 90 4294967499 [ 2659.409353][ T1088] 0 90 4294967499 [ 2659.410723][ T1088] 1 90 4294967499 [ 2659.412110][ T1088] 2 90 4294967499 [ 2659.413503][ T1088] 24 90 4294967499 [ 2659.414875][ T1088] 1b 90 4294967499 [ 2659.417156][ T1088] ff 90 4294967499 [ 2659.418563][ T1088] last result at 4295201781 [ 2659.420222][ T1088] last redo_fd_request at 4295203078 [ 2659.422179][ T1088] status=80 [ 2659.423347][ T1088] fdc_busy=1 [ 2659.424554][ T1088] floppy_work.func=floppy_work_workfn [ 2659.427073][ T1088] cont=ffffffff8b1391e0 [ 2659.428630][ T1088] current_req=0000000000000000 [ 2659.430384][ T1088] command_status=-1 [ 2659.431808][ T1088] [ 2659.432739][ T1088] floppy1: floppy timeout called [ 2659.434951][ T1088] [ 2659.436489][ T1088] floppy driver state [ 2659.437996][ T1088] ------------------- [ 2659.439743][ T1088] now=4295203084 last interrupt=4294967499 diff=235585 last called handler=main_command_interrupt [ 2659.444280][ T1088] timeout_message=lock fdc [ 2659.446483][ T1088] last output bytes: [ 2659.448238][ T1088] 0 90 4294967496 [ 2659.449946][ T1088] 1 90 4294967496 [ 2659.451654][ T1088] 2 90 4294967496 [ 2659.453321][ T1088] 12 90 4294967496 [ 2659.454982][ T1088] 1b 90 4294967496 [ 2659.457299][ T1088] ff 90 4294967496 [ 2659.458967][ T1088] 12 80 4294967499 [ 2659.460634][ T1088] 3 90 4294967499 [ 2659.462297][ T1088] 3 80 4294967499 [ 2659.463947][ T1088] a1 90 4294967499 [ 2659.465629][ T1088] 1e 90 4294967499 00:45:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe00}, 0x48) [ 2659.467800][ T1088] e6 80 4294967499 [ 2659.469574][ T1088] 1 90 4294967499 [ 2659.470965][ T1088] 0 90 4294967499 [ 2659.472387][ T1088] 0 90 4294967499 [ 2659.473773][ T1088] 1 90 4294967499 [ 2659.475167][ T1088] 2 90 4294967499 [ 2659.477111][ T1088] 24 90 4294967499 [ 2659.478514][ T1088] 1b 90 4294967499 [ 2659.479885][ T1088] ff 90 4294967499 [ 2659.481279][ T1088] last result at 4295201781 [ 2659.482938][ T1088] last redo_fd_request at 4295203083 [ 2659.484975][ T1088] status=80 [ 2659.486690][ T1088] fdc_busy=1 00:45:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf00}, 0x48) [ 2659.487941][ T1088] floppy_work.func=floppy_work_workfn [ 2659.490167][ T1088] cont=ffffffff8b1391e0 [ 2659.491760][ T1088] current_req=0000000000000000 [ 2659.493553][ T1088] command_status=-1 [ 2659.494970][ T1088] [ 2659.495999][ T1088] floppy1: floppy timeout called [ 2659.498731][ T969] [ 2659.499688][ T969] floppy driver state [ 2659.501195][ T969] ------------------- [ 2659.502713][ T969] now=4295203090 last interrupt=4294967499 diff=235591 last called handler=main_command_interrupt [ 2659.508568][ T969] timeout_message=lock fdc [ 2659.510756][ T969] last output bytes: [ 2659.512621][ T969] 0 90 4294967496 00:45:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1100}, 0x48) [ 2659.514367][ T969] 1 90 4294967496 [ 2659.517088][ T969] 2 90 4294967496 [ 2659.518581][ T969] 12 90 4294967496 [ 2659.520069][ T969] 1b 90 4294967496 [ 2659.521652][ T969] ff 90 4294967496 [ 2659.523111][ T969] 12 80 4294967499 [ 2659.524557][ T969] 3 90 4294967499 [ 2659.527544][ T969] 3 80 4294967499 [ 2659.529315][ T969] a1 90 4294967499 [ 2659.531094][ T969] 1e 90 4294967499 [ 2659.532739][ T969] e6 80 4294967499 [ 2659.534182][ T969] 1 90 4294967499 [ 2659.535618][ T969] 0 90 4294967499 [ 2659.537731][ T969] 0 90 4294967499 [ 2659.539209][ T969] 1 90 4294967499 [ 2659.540763][ T969] 2 90 4294967499 [ 2659.542634][ T969] 24 90 4294967499 [ 2659.544416][ T969] 1b 90 4294967499 00:45:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1200}, 0x48) [ 2659.548983][ T969] ff 90 4294967499 [ 2659.550860][ T969] last result at 4295201781 [ 2659.553046][ T969] last redo_fd_request at 4295203090 [ 2659.555559][ T969] status=80 [ 2659.557635][ T969] fdc_busy=1 [ 2659.559216][ T969] floppy_work.func=floppy_work_workfn [ 2659.561440][ T969] cont=ffffffff8b1391e0 [ 2659.563163][ T969] current_req=0000000000000000 [ 2659.565154][ T969] command_status=-1 [ 2659.567074][ T969] [ 2659.568209][ T969] floppy1: floppy timeout called [ 2659.570448][ T969] [ 2659.571504][ T969] floppy driver state [ 2659.573164][ T969] ------------------- [ 2659.574753][ T969] now=4295203097 last interrupt=4294967499 diff=235598 last called handler=main_command_interrupt [ 2659.579641][ T969] timeout_message=lock fdc [ 2659.581821][ T969] last output bytes: [ 2659.583680][ T969] 0 90 4294967496 [ 2659.585464][ T969] 1 90 4294967496 [ 2659.587344][ T969] 2 90 4294967496 [ 2659.588851][ T969] 12 90 4294967496 [ 2659.590238][ T969] 1b 90 4294967496 [ 2659.591658][ T969] ff 90 4294967496 [ 2659.593070][ T969] 12 80 4294967499 [ 2659.594469][ T969] 3 90 4294967499 [ 2659.595985][ T969] 3 80 4294967499 [ 2659.597572][ T969] a1 90 4294967499 [ 2659.598962][ T969] 1e 90 4294967499 [ 2659.600350][ T969] e6 80 4294967499 [ 2659.602003][ T969] 1 90 4294967499 [ 2659.603682][ T969] 0 90 4294967499 [ 2659.605285][ T969] 0 90 4294967499 [ 2659.607008][ T969] 1 90 4294967499 [ 2659.608662][ T969] 2 90 4294967499 [ 2659.610155][ T969] 24 90 4294967499 [ 2659.611653][ T969] 1b 90 4294967499 [ 2659.613116][ T969] ff 90 4294967499 [ 2659.614590][ T969] last result at 4295201781 [ 2659.616437][ T969] last redo_fd_request at 4295203097 [ 2659.618671][ T969] status=80 [ 2659.619894][ T969] fdc_busy=1 [ 2659.621156][ T969] floppy_work.func=floppy_work_workfn [ 2659.623192][ T969] cont=ffffffff8b1391e0 [ 2659.624790][ T969] current_req=0000000000000000 [ 2659.626687][ T969] command_status=-1 [ 2659.628313][ T969] [ 2659.629255][ T969] floppy1: floppy timeout called [ 2659.631773][ T969] [ 2659.632767][ T969] floppy driver state [ 2659.634268][ T969] ------------------- [ 2659.635756][ T969] now=4295203103 last interrupt=4294967499 diff=235604 last called handler=main_command_interrupt [ 2659.640352][ T969] timeout_message=lock fdc [ 2659.642572][ T969] last output bytes: [ 2659.644218][ T969] 0 90 4294967496 [ 2659.645817][ T969] 1 90 4294967496 [ 2659.647748][ T969] 2 90 4294967496 [ 2659.649377][ T969] 12 90 4294967496 [ 2659.650838][ T969] 1b 90 4294967496 [ 2659.652309][ T969] ff 90 4294967496 [ 2659.653805][ T969] 12 80 4294967499 [ 2659.655250][ T969] 3 90 4294967499 [ 2659.656868][ T969] 3 80 4294967499 00:45:46 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={0x0, 0x1, r2, 0x8001}) [ 2659.658522][ T969] a1 90 4294967499 [ 2659.660407][ T969] 1e 90 4294967499 [ 2659.662049][ T969] e6 80 4294967499 [ 2659.663874][ T969] 1 90 4294967499 00:45:46 executing program 3: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x200) r1 = syz_open_dev$floppy(&(0x7f0000000080), 0x8000, 0x80000) (async) ioctl$FLOPPY_FDMSGOFF(r0, 0x246) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000100), 0x400, 0x101) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async) ioctl$FLOPPY_FDMSGOFF(r2, 0x246) ioctl$FLOPPY_FDEJECT(r1, 0x25a) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x200) 00:45:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1300}, 0x48) 00:45:46 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={0x0, 0x1, r2, 0x8001}) [ 2659.665765][ T969] 0 90 4294967499 [ 2659.667663][ T969] 0 90 4294967499 [ 2659.669580][ T969] 1 90 4294967499 [ 2659.671411][ T969] 2 90 4294967499 [ 2659.673201][ T969] 24 90 4294967499 [ 2659.674769][ T969] 1b 90 4294967499 [ 2659.676550][ T969] ff 90 4294967499 [ 2659.678240][ T969] last result at 4295201781 [ 2659.679980][ T969] last redo_fd_request at 4295203103 [ 2659.682054][ T969] status=80 [ 2659.683278][ T969] fdc_busy=1 [ 2659.684641][ T969] floppy_work.func=floppy_work_workfn [ 2659.686962][ T969] cont=ffffffff8b1391e0 [ 2659.688731][ T969] current_req=0000000000000000 [ 2659.690630][ T969] command_status=-1 [ 2659.692217][ T969] [ 2659.693208][ T969] floppy1: floppy timeout called [ 2659.695417][ T969] [ 2659.696699][ T969] floppy driver state [ 2659.698558][ T969] ------------------- [ 2659.700201][ T969] now=4295203110 last interrupt=4294967499 diff=235611 last called handler=main_command_interrupt [ 2659.704521][ T969] timeout_message=lock fdc [ 2659.707124][ T969] last output bytes: [ 2659.709218][ T969] 0 90 4294967496 [ 2659.711166][ T969] 1 90 4294967496 [ 2659.713099][ T969] 2 90 4294967496 [ 2659.715080][ T969] 12 90 4294967496 [ 2659.717124][ T969] 1b 90 4294967496 00:45:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1400}, 0x48) [ 2659.719637][ T969] ff 90 4294967496 [ 2659.721845][ T969] 12 80 4294967499 [ 2659.723612][ T969] 3 90 4294967499 [ 2659.725368][ T969] 3 80 4294967499 [ 2659.730212][ T969] a1 90 4294967499 [ 2659.732006][ T969] 1e 90 4294967499 [ 2659.733764][ T969] e6 80 4294967499 [ 2659.735504][ T969] 1 90 4294967499 [ 2659.737415][ T969] 0 90 4294967499 [ 2659.739258][ T969] 0 90 4294967499 [ 2659.740997][ T969] 1 90 4294967499 [ 2659.742757][ T969] 2 90 4294967499 [ 2659.744509][ T969] 24 90 4294967499 [ 2659.746452][ T969] 1b 90 4294967499 [ 2659.748212][ T969] ff 90 4294967499 00:45:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1500}, 0x48) [ 2659.749971][ T969] last result at 4295201781 [ 2659.752293][ T969] last redo_fd_request at 4295203109 [ 2659.754883][ T969] status=80 [ 2659.756492][ T969] fdc_busy=1 [ 2659.758028][ T969] floppy_work.func=floppy_work_workfn [ 2659.760550][ T969] cont=ffffffff8b1391e0 [ 2659.762469][ T969] current_req=0000000000000000 [ 2659.764701][ T969] command_status=-1 [ 2659.766641][ T969] [ 2659.767629][ T969] floppy1: floppy timeout called [ 2659.770458][ T969] [ 2659.771718][ T969] floppy driver state [ 2659.773654][ T969] ------------------- [ 2659.775562][ T969] now=4295203117 last interrupt=4294967499 diff=235618 last called handler=main_command_interrupt [ 2659.781314][ T969] timeout_message=lock fdc [ 2659.783488][ T969] last output bytes: [ 2659.785393][ T969] 0 90 4294967496 [ 2659.787308][ T969] 1 90 4294967496 [ 2659.789122][ T969] 2 90 4294967496 [ 2659.790953][ T969] 12 90 4294967496 [ 2659.792791][ T969] 1b 90 4294967496 [ 2659.794607][ T969] ff 90 4294967496 00:45:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1600}, 0x48) [ 2659.797024][ T969] 12 80 4294967499 [ 2659.798985][ T969] 3 90 4294967499 [ 2659.800799][ T969] 3 80 4294967499 [ 2659.802593][ T969] a1 90 4294967499 [ 2659.804384][ T969] 1e 90 4294967499 [ 2659.806314][ T969] e6 80 4294967499 [ 2659.808102][ T969] 1 90 4294967499 [ 2659.809919][ T969] 0 90 4294967499 [ 2659.811738][ T969] 0 90 4294967499 [ 2659.813549][ T969] 1 90 4294967499 [ 2659.815341][ T969] 2 90 4294967499 [ 2659.817099][ T969] 24 90 4294967499 [ 2659.818525][ T969] 1b 90 4294967499 [ 2659.819914][ T969] ff 90 4294967499 [ 2659.821335][ T969] last result at 4295201781 [ 2659.823006][ T969] last redo_fd_request at 4295203117 [ 2659.824985][ T969] status=80 [ 2659.826286][ T969] fdc_busy=1 [ 2659.827510][ T969] floppy_work.func=floppy_work_workfn [ 2659.829506][ T969] cont=ffffffff8b1391e0 [ 2659.831070][ T969] current_req=0000000000000000 [ 2659.832860][ T969] command_status=-1 00:45:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1700}, 0x48) [ 2659.834267][ T969] [ 2659.835300][ T969] floppy1: floppy timeout called [ 2659.837736][ T969] [ 2659.838659][ T969] floppy driver state [ 2659.840131][ T969] ------------------- [ 2659.841621][ T969] now=4295203124 last interrupt=4294967499 diff=235625 last called handler=main_command_interrupt [ 2659.845437][ T969] timeout_message=lock fdc [ 2659.847158][ T969] last output bytes: [ 2659.848648][ T969] 0 90 4294967496 [ 2659.850041][ T969] 1 90 4294967496 [ 2659.851434][ T969] 2 90 4294967496 [ 2659.852832][ T969] 12 90 4294967496 [ 2659.854226][ T969] 1b 90 4294967496 [ 2659.855606][ T969] ff 90 4294967496 [ 2659.857087][ T969] 12 80 4294967499 [ 2659.858471][ T969] 3 90 4294967499 [ 2659.859850][ T969] 3 80 4294967499 [ 2659.861241][ T969] a1 90 4294967499 [ 2659.862621][ T969] 1e 90 4294967499 [ 2659.864025][ T969] e6 80 4294967499 [ 2659.865417][ T969] 1 90 4294967499 [ 2659.866955][ T969] 0 90 4294967499 [ 2659.868351][ T969] 0 90 4294967499 [ 2659.869735][ T969] 1 90 4294967499 [ 2659.871131][ T969] 2 90 4294967499 [ 2659.872513][ T969] 24 90 4294967499 [ 2659.873925][ T969] 1b 90 4294967499 [ 2659.875310][ T969] ff 90 4294967499 [ 2659.876778][ T969] last result at 4295201781 [ 2659.878703][ T969] last redo_fd_request at 4295203124 [ 2659.880664][ T969] status=80 [ 2659.881836][ T969] fdc_busy=1 [ 2659.883050][ T969] floppy_work.func=floppy_work_workfn [ 2659.885021][ T969] cont=ffffffff8b1391e0 [ 2659.886619][ T969] current_req=0000000000000000 [ 2659.888380][ T969] command_status=-1 [ 2659.889792][ T969] [ 2659.890714][ T969] floppy1: floppy timeout called [ 2659.892880][ T969] [ 2659.894406][ T969] floppy driver state [ 2659.896157][ T969] ------------------- [ 2659.898022][ T969] now=4295203130 last interrupt=4294967499 diff=235631 last called handler=main_command_interrupt [ 2659.902773][ T969] timeout_message=lock fdc 00:45:46 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x6470, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2659.905074][ T969] last output bytes: [ 2659.907459][ T969] 0 90 4294967496 [ 2659.909330][ T969] 1 90 4294967496 [ 2659.911134][ T969] 2 90 4294967496 [ 2659.912952][ T969] 12 90 4294967496 [ 2659.914716][ T969] 1b 90 4294967496 00:45:46 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x400) 00:45:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1800}, 0x48) [ 2659.924835][ T969] ff 90 4294967496 [ 2659.927085][ T969] 12 80 4294967499 [ 2659.929086][ T969] 3 90 4294967499 [ 2659.931041][ T969] 3 80 4294967499 [ 2659.932990][ T969] a1 90 4294967499 [ 2659.934901][ T969] 1e 90 4294967499 [ 2659.936918][ T969] e6 80 4294967499 [ 2659.938864][ T969] 1 90 4294967499 [ 2659.940380][ T969] 0 90 4294967499 [ 2659.941931][ T969] 0 90 4294967499 [ 2659.943465][ T969] 1 90 4294967499 [ 2659.945060][ T969] 2 90 4294967499 [ 2659.948384][ T969] 24 90 4294967499 [ 2659.951194][ T969] 1b 90 4294967499 00:45:46 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x20000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x2, 0x1, 0x7}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r4}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, r2, r4], 0x5, 0x0, 0x0, 0x0, 0xe7, 0x400, 0x10001, {0xff, 0x5, 0x360, 0x5, 0x1, 0x7, 0x0, 0x4, 0x1, 0xafc4, 0x1, 0x1f8000, 0x8001, 0x22, "f74a924f3f61a1f624cd7a39c8be116fa4b18c3d6dfa09ca445660ee410133c0"}}) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2659.967026][ T969] ff 90 4294967499 [ 2659.969394][ T969] last result at 4295201781 [ 2659.971112][ T969] last redo_fd_request at 4295203129 [ 2659.973167][ T969] status=80 [ 2659.974571][ T969] fdc_busy=1 [ 2659.976271][ T969] floppy_work.func=floppy_work_workfn [ 2659.978433][ T969] cont=ffffffff8b1391e0 [ 2659.979995][ T969] current_req=0000000000000000 [ 2659.981791][ T969] command_status=-1 [ 2659.983255][ T969] [ 2659.984211][ T969] floppy1: floppy timeout called 00:45:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1900}, 0x48) [ 2659.988533][ T969] [ 2659.989526][ T969] floppy driver state [ 2659.991049][ T969] ------------------- [ 2659.992636][ T969] now=4295203139 last interrupt=4294967499 diff=235640 last called handler=main_command_interrupt [ 2659.996687][ T969] timeout_message=lock fdc [ 2659.998389][ T969] last output bytes: [ 2659.999869][ T969] 0 90 4294967496 [ 2660.001308][ T969] 1 90 4294967496 [ 2660.002751][ T969] 2 90 4294967496 [ 2660.004208][ T969] 12 90 4294967496 [ 2660.005707][ T969] 1b 90 4294967496 [ 2660.007374][ T969] ff 90 4294967496 [ 2660.009860][ T969] 12 80 4294967499 [ 2660.011947][ T969] 3 90 4294967499 [ 2660.013413][ T969] 3 80 4294967499 [ 2660.014915][ T969] a1 90 4294967499 [ 2660.016476][ T969] 1e 90 4294967499 [ 2660.017923][ T969] e6 80 4294967499 [ 2660.019348][ T969] 1 90 4294967499 [ 2660.020779][ T969] 0 90 4294967499 00:45:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1a00}, 0x48) [ 2660.022527][ T969] 0 90 4294967499 [ 2660.024263][ T969] 1 90 4294967499 [ 2660.025765][ T969] 2 90 4294967499 [ 2660.029080][ T969] 24 90 4294967499 [ 2660.030604][ T969] 1b 90 4294967499 [ 2660.032243][ T969] ff 90 4294967499 [ 2660.033776][ T969] last result at 4295201781 [ 2660.035563][ T969] last redo_fd_request at 4295203139 [ 2660.037953][ T969] status=80 [ 2660.039495][ T969] fdc_busy=1 [ 2660.041091][ T969] floppy_work.func=floppy_work_workfn [ 2660.043698][ T969] cont=ffffffff8b1391e0 [ 2660.045549][ T969] current_req=0000000000000000 [ 2660.048561][ T969] command_status=-1 [ 2660.050864][ T969] [ 2660.051830][ T969] floppy1: floppy timeout called [ 2660.054054][ T969] [ 2660.055077][ T969] floppy driver state [ 2660.057067][ T969] ------------------- [ 2660.058652][ T969] now=4295203146 last interrupt=4294967499 diff=235647 last called handler=main_command_interrupt [ 2660.062600][ T969] timeout_message=lock fdc 00:45:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1b00}, 0x48) [ 2660.064556][ T969] last output bytes: [ 2660.067975][ T969] 0 90 4294967496 [ 2660.069479][ T969] 1 90 4294967496 [ 2660.071057][ T969] 2 90 4294967496 [ 2660.072657][ T969] 12 90 4294967496 [ 2660.074142][ T969] 1b 90 4294967496 [ 2660.075687][ T969] ff 90 4294967496 [ 2660.077299][ T969] 12 80 4294967499 [ 2660.078849][ T969] 3 90 4294967499 [ 2660.080344][ T969] 3 80 4294967499 [ 2660.081857][ T969] a1 90 4294967499 [ 2660.083396][ T969] 1e 90 4294967499 [ 2660.084877][ T969] e6 80 4294967499 [ 2660.087584][ T969] 1 90 4294967499 [ 2660.089609][ T969] 0 90 4294967499 [ 2660.091113][ T969] 0 90 4294967499 [ 2660.092619][ T969] 1 90 4294967499 [ 2660.094195][ T969] 2 90 4294967499 [ 2660.095763][ T969] 24 90 4294967499 [ 2660.097349][ T969] 1b 90 4294967499 00:45:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1c00}, 0x48) [ 2660.099182][ T969] ff 90 4294967499 [ 2660.100858][ T969] last result at 4295201781 [ 2660.102638][ T969] last redo_fd_request at 4295203145 [ 2660.104727][ T969] status=80 [ 2660.107792][ T969] fdc_busy=1 [ 2660.109117][ T969] floppy_work.func=floppy_work_workfn [ 2660.111203][ T969] cont=ffffffff8b1391e0 [ 2660.112842][ T969] current_req=0000000000000000 [ 2660.114717][ T969] command_status=-1 [ 2660.116304][ T969] [ 2660.117264][ T969] floppy1: floppy timeout called [ 2660.120651][ T969] [ 2660.121650][ T969] floppy driver state [ 2660.123173][ T969] ------------------- [ 2660.124668][ T969] now=4295203152 last interrupt=4294967499 diff=235653 last called handler=main_command_interrupt [ 2660.130275][ T969] timeout_message=lock fdc [ 2660.132073][ T969] last output bytes: [ 2660.133584][ T969] 0 90 4294967496 [ 2660.134981][ T969] 1 90 4294967496 [ 2660.136468][ T969] 2 90 4294967496 [ 2660.137891][ T969] 12 90 4294967496 [ 2660.139310][ T969] 1b 90 4294967496 [ 2660.140750][ T969] ff 90 4294967496 [ 2660.142202][ T969] 12 80 4294967499 [ 2660.143807][ T969] 3 90 4294967499 [ 2660.145300][ T969] 3 80 4294967499 [ 2660.147114][ T969] a1 90 4294967499 [ 2660.148629][ T969] 1e 90 4294967499 [ 2660.150088][ T969] e6 80 4294967499 [ 2660.151506][ T969] 1 90 4294967499 [ 2660.152931][ T969] 0 90 4294967499 [ 2660.154329][ T969] 0 90 4294967499 [ 2660.155728][ T969] 1 90 4294967499 [ 2660.158755][ T969] 2 90 4294967499 [ 2660.160178][ T969] 24 90 4294967499 [ 2660.161575][ T969] 1b 90 4294967499 [ 2660.162981][ T969] ff 90 4294967499 [ 2660.164360][ T969] last result at 4295201781 [ 2660.166613][ T969] last redo_fd_request at 4295203152 [ 2660.168665][ T969] status=80 [ 2660.169883][ T969] fdc_busy=1 [ 2660.171155][ T969] floppy_work.func=floppy_work_workfn [ 2660.173265][ T969] cont=ffffffff8b1391e0 [ 2660.174819][ T969] current_req=0000000000000000 [ 2660.176753][ T969] command_status=-1 [ 2660.178180][ T969] [ 2660.179108][ T969] floppy1: floppy timeout called [ 2660.182217][ T969] [ 2660.183187][ T969] floppy driver state [ 2660.185795][ T969] ------------------- [ 2660.187469][ T969] now=4295203159 last interrupt=4294967499 diff=235660 last called handler=main_command_interrupt [ 2660.191609][ T969] timeout_message=lock fdc [ 2660.195933][ T969] last output bytes: [ 2660.197462][ T969] 0 90 4294967496 [ 2660.198843][ T969] 1 90 4294967496 [ 2660.200225][ T969] 2 90 4294967496 00:45:46 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x5452, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:46 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x400) 00:45:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1d00}, 0x48) 00:45:46 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x20000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x2, 0x1, 0x7}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r4}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, r2, r4], 0x5, 0x0, 0x0, 0x0, 0xe7, 0x400, 0x10001, {0xff, 0x5, 0x360, 0x5, 0x1, 0x7, 0x0, 0x4, 0x1, 0xafc4, 0x1, 0x1f8000, 0x8001, 0x22, "f74a924f3f61a1f624cd7a39c8be116fa4b18c3d6dfa09ca445660ee410133c0"}}) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x20000) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x2, 0x1, 0x7}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r4}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, r2, r4], 0x5, 0x0, 0x0, 0x0, 0xe7, 0x400, 0x10001, {0xff, 0x5, 0x360, 0x5, 0x1, 0x7, 0x0, 0x4, 0x1, 0xafc4, 0x1, 0x1f8000, 0x8001, 0x22, "f74a924f3f61a1f624cd7a39c8be116fa4b18c3d6dfa09ca445660ee410133c0"}}) (async) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) [ 2660.201687][ T969] 12 90 4294967496 [ 2660.203493][ T969] 1b 90 4294967496 [ 2660.204883][ T969] ff 90 4294967496 [ 2660.207583][ T969] 12 80 4294967499 [ 2660.209020][ T969] 3 90 4294967499 [ 2660.210422][ T969] 3 80 4294967499 [ 2660.211886][ T969] a1 90 4294967499 [ 2660.213296][ T969] 1e 90 4294967499 [ 2660.214773][ T969] e6 80 4294967499 [ 2660.223894][ T969] 1 90 4294967499 [ 2660.225393][ T969] 0 90 4294967499 [ 2660.226871][ T969] 0 90 4294967499 [ 2660.228565][ T969] 1 90 4294967499 [ 2660.230099][ T969] 2 90 4294967499 [ 2660.231643][ T969] 24 90 4294967499 [ 2660.233121][ T969] 1b 90 4294967499 [ 2660.234588][ T969] ff 90 4294967499 [ 2660.236304][ T969] last result at 4295201781 [ 2660.238141][ T969] last redo_fd_request at 4295203158 [ 2660.240332][ T969] status=80 [ 2660.241630][ T969] fdc_busy=1 00:45:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1e00}, 0x48) [ 2660.242926][ T969] floppy_work.func=floppy_work_workfn [ 2660.245162][ T969] cont=ffffffff8b1391e0 [ 2660.247342][ T969] current_req=0000000000000000 [ 2660.249338][ T969] command_status=-1 [ 2660.250866][ T969] [ 2660.251821][ T969] floppy1: floppy timeout called [ 2660.254135][ T969] [ 2660.255168][ T969] floppy driver state [ 2660.256872][ T969] ------------------- [ 2660.258406][ T969] now=4295203166 last interrupt=4294967499 diff=235667 last called handler=main_command_interrupt [ 2660.262282][ T969] timeout_message=lock fdc 00:45:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f00}, 0x48) [ 2660.264381][ T969] last output bytes: [ 2660.266553][ T969] 0 90 4294967496 [ 2660.268330][ T969] 1 90 4294967496 [ 2660.270125][ T969] 2 90 4294967496 [ 2660.271898][ T969] 12 90 4294967496 [ 2660.273689][ T969] 1b 90 4294967496 [ 2660.275465][ T969] ff 90 4294967496 [ 2660.277423][ T969] 12 80 4294967499 [ 2660.279238][ T969] 3 90 4294967499 [ 2660.281060][ T969] 3 80 4294967499 [ 2660.282833][ T969] a1 90 4294967499 [ 2660.284366][ T969] 1e 90 4294967499 [ 2660.285891][ T969] e6 80 4294967499 [ 2660.287414][ T969] 1 90 4294967499 [ 2660.289333][ T969] 0 90 4294967499 [ 2660.291149][ T969] 0 90 4294967499 [ 2660.292985][ T969] 1 90 4294967499 [ 2660.294805][ T969] 2 90 4294967499 [ 2660.296704][ T969] 24 90 4294967499 [ 2660.298488][ T969] 1b 90 4294967499 [ 2660.300278][ T969] ff 90 4294967499 00:45:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000}, 0x48) [ 2660.302072][ T969] last result at 4295201781 [ 2660.304454][ T969] last redo_fd_request at 4295203165 [ 2660.307146][ T969] status=80 [ 2660.308682][ T969] fdc_busy=1 [ 2660.310245][ T969] floppy_work.func=floppy_work_workfn [ 2660.312390][ T969] cont=ffffffff8b1391e0 [ 2660.314121][ T969] current_req=0000000000000000 [ 2660.316514][ T969] command_status=-1 [ 2660.318328][ T969] [ 2660.319519][ T969] floppy1: floppy timeout called [ 2660.322147][ T969] [ 2660.323467][ T969] floppy driver state [ 2660.327491][ T969] ------------------- [ 2660.329080][ T969] now=4295203173 last interrupt=4294967499 diff=235674 last called handler=main_command_interrupt [ 2660.333783][ T969] timeout_message=lock fdc [ 2660.336061][ T969] last output bytes: [ 2660.337918][ T969] 0 90 4294967496 [ 2660.339727][ T969] 1 90 4294967496 00:45:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2100}, 0x48) [ 2660.343983][ T969] 2 90 4294967496 [ 2660.346241][ T969] 12 90 4294967496 [ 2660.348053][ T969] 1b 90 4294967496 [ 2660.349850][ T969] ff 90 4294967496 [ 2660.351635][ T969] 12 80 4294967499 [ 2660.353424][ T969] 3 90 4294967499 [ 2660.355180][ T969] 3 80 4294967499 [ 2660.356871][ T969] a1 90 4294967499 [ 2660.358354][ T969] 1e 90 4294967499 [ 2660.359749][ T969] e6 80 4294967499 [ 2660.361749][ T969] 1 90 4294967499 [ 2660.363703][ T969] 0 90 4294967499 [ 2660.365501][ T969] 0 90 4294967499 [ 2660.367362][ T969] 1 90 4294967499 [ 2660.369142][ T969] 2 90 4294967499 [ 2660.370883][ T969] 24 90 4294967499 [ 2660.372634][ T969] 1b 90 4294967499 [ 2660.374351][ T969] ff 90 4294967499 [ 2660.376203][ T969] last result at 4295201781 [ 2660.378128][ T969] last redo_fd_request at 4295203172 [ 2660.380143][ T969] status=80 [ 2660.381361][ T969] fdc_busy=1 [ 2660.382583][ T969] floppy_work.func=floppy_work_workfn [ 2660.384941][ T969] cont=ffffffff8b1391e0 [ 2660.386874][ T969] current_req=0000000000000000 [ 2660.388712][ T969] command_status=-1 [ 2660.390150][ T969] [ 2660.391389][ T969] floppy1: floppy timeout called [ 2660.393562][ T969] [ 2660.394498][ T969] floppy driver state [ 2660.396120][ T969] ------------------- [ 2660.397647][ T969] now=4295203180 last interrupt=4294967499 diff=235681 last called handler=main_command_interrupt [ 2660.401575][ T969] timeout_message=lock fdc [ 2660.403271][ T969] last output bytes: [ 2660.405132][ T969] 0 90 4294967496 [ 2660.406925][ T969] 1 90 4294967496 [ 2660.408313][ T969] 2 90 4294967496 [ 2660.409751][ T969] 12 90 4294967496 [ 2660.411159][ T969] 1b 90 4294967496 [ 2660.412549][ T969] ff 90 4294967496 [ 2660.414112][ T969] 12 80 4294967499 [ 2660.415622][ T969] 3 90 4294967499 [ 2660.417120][ T969] 3 80 4294967499 [ 2660.418511][ T969] a1 90 4294967499 [ 2660.419908][ T969] 1e 90 4294967499 [ 2660.421329][ T969] e6 80 4294967499 [ 2660.422763][ T969] 1 90 4294967499 [ 2660.424283][ T969] 0 90 4294967499 [ 2660.425735][ T969] 0 90 4294967499 [ 2660.427380][ T969] 1 90 4294967499 [ 2660.428821][ T969] 2 90 4294967499 [ 2660.430225][ T969] 24 90 4294967499 [ 2660.431772][ T969] 1b 90 4294967499 [ 2660.433219][ T969] ff 90 4294967499 [ 2660.434572][ T969] last result at 4295201781 [ 2660.436382][ T969] last redo_fd_request at 4295203179 [ 2660.438452][ T969] status=80 [ 2660.439651][ T969] fdc_busy=1 [ 2660.440892][ T969] floppy_work.func=floppy_work_workfn [ 2660.442869][ T969] cont=ffffffff8b1391e0 [ 2660.444420][ T969] current_req=0000000000000000 [ 2660.446279][ T969] command_status=-1 [ 2660.447692][ T969] [ 2660.448633][ T969] floppy1: floppy timeout called [ 2660.451023][ T969] [ 2660.451979][ T969] floppy driver state [ 2660.453449][ T969] ------------------- [ 2660.454897][ T969] now=4295203185 last interrupt=4294967499 diff=235686 last called handler=main_command_interrupt [ 2660.458891][ T969] timeout_message=lock fdc [ 2660.460589][ T969] last output bytes: [ 2660.462023][ T969] 0 90 4294967496 [ 2660.463401][ T969] 1 90 4294967496 [ 2660.464858][ T969] 2 90 4294967496 [ 2660.466364][ T969] 12 90 4294967496 [ 2660.467727][ T969] 1b 90 4294967496 [ 2660.469139][ T969] ff 90 4294967496 [ 2660.470413][ T969] 12 80 4294967499 [ 2660.471802][ T969] 3 90 4294967499 [ 2660.473189][ T969] 3 80 4294967499 [ 2660.474584][ T969] a1 90 4294967499 [ 2660.476036][ T969] 1e 90 4294967499 [ 2660.477434][ T969] e6 80 4294967499 [ 2660.478819][ T969] 1 90 4294967499 [ 2660.480216][ T969] 0 90 4294967499 [ 2660.481617][ T969] 0 90 4294967499 [ 2660.483001][ T969] 1 90 4294967499 [ 2660.484402][ T969] 2 90 4294967499 [ 2660.485783][ T969] 24 90 4294967499 [ 2660.487247][ T969] 1b 90 4294967499 [ 2660.488692][ T969] ff 90 4294967499 [ 2660.490072][ T969] last result at 4295201781 [ 2660.491754][ T969] last redo_fd_request at 4295203185 [ 2660.494047][ T969] status=80 [ 2660.495301][ T969] fdc_busy=1 [ 2660.496668][ T969] floppy_work.func=floppy_work_workfn [ 2660.498645][ T969] cont=ffffffff8b1391e0 [ 2660.500180][ T969] current_req=0000000000000000 [ 2660.502026][ T969] command_status=-1 [ 2660.503486][ T969] [ 2660.504444][ T969] floppy1: floppy timeout called [ 2660.513954][T19958] [ 2660.515162][T19958] floppy driver state 00:45:47 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x20000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x2, 0x1, 0x7}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r4}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, r2, r4], 0x5, 0x0, 0x0, 0x0, 0xe7, 0x400, 0x10001, {0xff, 0x5, 0x360, 0x5, 0x1, 0x7, 0x0, 0x4, 0x1, 0xafc4, 0x1, 0x1f8000, 0x8001, 0x22, "f74a924f3f61a1f624cd7a39c8be116fa4b18c3d6dfa09ca445660ee410133c0"}}) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:47 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x400) 00:45:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2200}, 0x48) [ 2660.524424][T19958] ------------------- [ 2660.527001][T19958] now=4295203193 last interrupt=4294967499 diff=235694 last called handler=main_command_interrupt [ 2660.531932][T19958] timeout_message=lock fdc [ 2660.534089][T19958] last output bytes: [ 2660.536328][T19958] 0 90 4294967496 [ 2660.538154][T19958] 1 90 4294967496 [ 2660.539781][T19958] 2 90 4294967496 00:45:47 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x20000) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x2, 0x1, 0x7}) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000000)=[0x0], 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000280), 0x0, 0x1, 0x1, 0x0, r4}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, r2, r4], 0x5, 0x0, 0x0, 0x0, 0xe7, 0x400, 0x10001, {0xff, 0x5, 0x360, 0x5, 0x1, 0x7, 0x0, 0x4, 0x1, 0xafc4, 0x1, 0x1f8000, 0x8001, 0x22, "f74a924f3f61a1f624cd7a39c8be116fa4b18c3d6dfa09ca445660ee410133c0"}}) (async) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2660.541473][T19958] 12 90 4294967496 [ 2660.543185][T19958] 1b 90 4294967496 [ 2660.544752][T19958] ff 90 4294967496 [ 2660.546742][T19958] 12 80 4294967499 [ 2660.548537][T19958] 3 90 4294967499 [ 2660.550308][T19958] 3 80 4294967499 [ 2660.552086][T19958] a1 90 4294967499 [ 2660.553849][T19958] 1e 90 4294967499 [ 2660.555602][T19958] e6 80 4294967499 [ 2660.560379][T19958] 1 90 4294967499 [ 2660.562204][T19958] 0 90 4294967499 [ 2660.565736][T19958] 0 90 4294967499 [ 2660.567861][T19958] 1 90 4294967499 [ 2660.569667][T19958] 2 90 4294967499 [ 2660.571451][T19958] 24 90 4294967499 [ 2660.573260][T19958] 1b 90 4294967499 [ 2660.575019][T19958] ff 90 4294967499 [ 2660.577367][T19958] last result at 4295201781 [ 2660.579560][T19958] last redo_fd_request at 4295203191 [ 2660.582121][T19958] status=80 [ 2660.583645][T19958] fdc_busy=1 00:45:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2300}, 0x48) [ 2660.585226][T19958] floppy_work.func=floppy_work_workfn [ 2660.588212][T19958] cont=ffffffff8b1391e0 [ 2660.589832][T19958] current_req=0000000000000000 [ 2660.591805][T19958] command_status=-1 [ 2660.593611][T19958] [ 2660.594808][T19958] floppy1: floppy timeout called [ 2660.598436][T19958] [ 2660.599609][T19958] floppy driver state [ 2660.601505][T19958] ------------------- [ 2660.603388][T19958] now=4295203200 last interrupt=4294967499 diff=235701 last called handler=main_command_interrupt [ 2660.608814][T19958] timeout_message=lock fdc [ 2660.610946][T19958] last output bytes: [ 2660.612836][T19958] 0 90 4294967496 [ 2660.614630][T19958] 1 90 4294967496 [ 2660.618020][T19958] 2 90 4294967496 00:45:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000}, 0x48) [ 2660.621226][T19958] 12 90 4294967496 [ 2660.623224][T19958] 1b 90 4294967496 [ 2660.625026][T19958] ff 90 4294967496 [ 2660.627780][T19958] 12 80 4294967499 [ 2660.629616][T19958] 3 90 4294967499 [ 2660.631414][T19958] 3 80 4294967499 [ 2660.633196][T19958] a1 90 4294967499 [ 2660.634968][T19958] 1e 90 4294967499 [ 2660.637645][T19958] e6 80 4294967499 [ 2660.639444][T19958] 1 90 4294967499 [ 2660.641251][T19958] 0 90 4294967499 [ 2660.643009][T19958] 0 90 4294967499 [ 2660.644815][T19958] 1 90 4294967499 [ 2660.647200][T19958] 2 90 4294967499 [ 2660.648741][T19958] 24 90 4294967499 [ 2660.650193][T19958] 1b 90 4294967499 00:45:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000}, 0x48) [ 2660.651638][T19958] ff 90 4294967499 [ 2660.653267][T19958] last result at 4295201781 [ 2660.655019][T19958] last redo_fd_request at 4295203200 [ 2660.658235][T19958] status=80 [ 2660.659499][T19958] fdc_busy=1 [ 2660.660792][T19958] floppy_work.func=floppy_work_workfn [ 2660.662898][T19958] cont=ffffffff8b1391e0 [ 2660.664602][T19958] current_req=0000000000000000 [ 2660.667337][T19958] command_status=-1 [ 2660.669023][T19958] [ 2660.670024][T19958] floppy1: floppy timeout called [ 2660.672219][T19958] [ 2660.673196][T19958] floppy driver state [ 2660.674723][T19958] ------------------- [ 2660.676449][T19958] now=4295203208 last interrupt=4294967499 diff=235709 last called handler=main_command_interrupt [ 2660.680591][T19958] timeout_message=lock fdc [ 2660.682395][T19958] last output bytes: [ 2660.683944][T19958] 0 90 4294967496 [ 2660.685509][T19958] 1 90 4294967496 [ 2660.687993][T19958] 2 90 4294967496 00:45:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3000000}, 0x48) [ 2660.689541][T19958] 12 90 4294967496 [ 2660.691302][T19958] 1b 90 4294967496 [ 2660.692867][T19958] ff 90 4294967496 [ 2660.694382][T19958] 12 80 4294967499 [ 2660.696916][T19958] 3 90 4294967499 [ 2660.698475][T19958] 3 80 4294967499 [ 2660.699906][T19958] a1 90 4294967499 [ 2660.701564][T19958] 1e 90 4294967499 [ 2660.703316][T19958] e6 80 4294967499 [ 2660.705088][T19958] 1 90 4294967499 [ 2660.706945][T19958] 0 90 4294967499 [ 2660.708716][T19958] 0 90 4294967499 [ 2660.710470][T19958] 1 90 4294967499 [ 2660.712229][T19958] 2 90 4294967499 [ 2660.713989][T19958] 24 90 4294967499 [ 2660.715745][T19958] 1b 90 4294967499 [ 2660.717591][T19958] ff 90 4294967499 [ 2660.719348][T19958] last result at 4295201781 [ 2660.721465][T19958] last redo_fd_request at 4295203207 [ 2660.723880][T19958] status=80 [ 2660.725397][T19958] fdc_busy=1 [ 2660.726724][T19958] floppy_work.func=floppy_work_workfn [ 2660.728984][T19958] cont=ffffffff8b1391e0 [ 2660.730895][T19958] current_req=0000000000000000 [ 2660.733139][T19958] command_status=-1 [ 2660.734895][T19958] [ 2660.736190][T19958] floppy1: floppy timeout called [ 2660.739239][T19958] [ 2660.740391][T19958] floppy driver state [ 2660.742230][T19958] ------------------- [ 2660.744058][T19958] now=4295203214 last interrupt=4294967499 diff=235715 last called handler=main_command_interrupt [ 2660.748789][T19958] timeout_message=lock fdc [ 2660.750658][T19958] last output bytes: [ 2660.752524][T19958] 0 90 4294967496 [ 2660.754303][T19958] 1 90 4294967496 [ 2660.756180][T19958] 2 90 4294967496 [ 2660.757930][T19958] 12 90 4294967496 [ 2660.759661][T19958] 1b 90 4294967496 [ 2660.761404][T19958] ff 90 4294967496 [ 2660.763137][T19958] 12 80 4294967499 [ 2660.764881][T19958] 3 90 4294967499 [ 2660.766734][T19958] 3 80 4294967499 [ 2660.768510][T19958] a1 90 4294967499 [ 2660.770250][T19958] 1e 90 4294967499 [ 2660.772020][T19958] e6 80 4294967499 [ 2660.773772][T19958] 1 90 4294967499 [ 2660.775505][T19958] 0 90 4294967499 [ 2660.777367][T19958] 0 90 4294967499 [ 2660.779143][T19958] 1 90 4294967499 [ 2660.780937][T19958] 2 90 4294967499 [ 2660.782658][T19958] 24 90 4294967499 [ 2660.784397][T19958] 1b 90 4294967499 [ 2660.786265][T19958] ff 90 4294967499 [ 2660.787969][T19958] last result at 4295201781 [ 2660.790091][T19958] last redo_fd_request at 4295203214 [ 2660.792584][T19958] status=80 [ 2660.794064][T19958] fdc_busy=1 [ 2660.795600][T19958] floppy_work.func=floppy_work_workfn [ 2660.798170][T19958] cont=ffffffff8b1391e0 [ 2660.799769][T19958] current_req=0000000000000000 [ 2660.801589][T19958] command_status=-1 [ 2660.803029][T19958] [ 2660.803983][T19958] floppy1: floppy timeout called [ 2660.808523][T19958] [ 2660.809495][T19958] floppy driver state [ 2660.811011][T19958] ------------------- 00:45:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, 0x48) [ 2660.812641][T19958] now=4295203221 last interrupt=4294967499 diff=235722 last called handler=main_command_interrupt [ 2660.817647][T19958] timeout_message=lock fdc [ 2660.819675][T19958] last output bytes: [ 2660.821429][T19958] 0 90 4294967496 [ 2660.823133][T19958] 1 90 4294967496 [ 2660.824872][T19958] 2 90 4294967496 00:45:47 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x541b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2660.826805][T19958] 12 90 4294967496 [ 2660.828731][T19958] 1b 90 4294967496 [ 2660.830474][T19958] ff 90 4294967496 00:45:47 executing program 3: syz_open_dev$floppy(&(0x7f0000000040), 0x2, 0x4000) r0 = syz_open_dev$floppy(&(0x7f0000000100), 0x3, 0x400) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000240)) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x3}) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)={0x0}) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r5, 0x0, 0x0, 0x0) connect$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x2, 0x1}}, 0x10) accept4$tipc(r4, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000001c0)={r3, 0x1, r4, 0x0, 0x80000}) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) [ 2660.832224][T19958] 12 80 4294967499 [ 2660.834094][T19958] 3 90 4294967499 [ 2660.835818][T19958] 3 80 4294967499 [ 2660.837746][T19958] a1 90 4294967499 [ 2660.839497][T19958] 1e 90 4294967499 [ 2660.841368][T19958] e6 80 4294967499 [ 2660.842762][T19958] 1 90 4294967499 [ 2660.844142][T19958] 0 90 4294967499 [ 2660.845531][T19958] 0 90 4294967499 [ 2660.847101][T19958] 1 90 4294967499 [ 2660.848485][T19958] 2 90 4294967499 [ 2660.849874][T19958] 24 90 4294967499 [ 2660.851266][T19958] 1b 90 4294967499 [ 2660.852664][T19958] ff 90 4294967499 [ 2660.854069][T19958] last result at 4295201781 [ 2660.855739][T19958] last redo_fd_request at 4295203221 [ 2660.858394][T19958] status=80 [ 2660.859599][T19958] fdc_busy=1 [ 2660.860824][T19958] floppy_work.func=floppy_work_workfn 00:45:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x80, 0x600a00) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x4340) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06464ce, &(0x7f0000000200)={r2, 0x7, 0x20, 0x0, 0x3, [], [0x2c, 0x2, 0x1, 0x1], [0x6, 0x9, 0x7, 0x6], [0x1, 0x4, 0xa2, 0xd19]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r3 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x7, 0x1, 0x8}) ioctl$FLOPPY_FDGETPRM(r3, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2660.862790][T19958] cont=ffffffff8b1391e0 [ 2660.864674][T19958] current_req=0000000000000000 [ 2660.867441][T19958] command_status=-1 [ 2660.869147][T19958] [ 2660.870063][T19958] floppy1: floppy timeout called [ 2660.872099][T19958] [ 2660.873102][T19958] floppy driver state [ 2660.874571][T19958] ------------------- [ 2660.877861][T19958] now=4295203228 last interrupt=4294967499 diff=235729 last called handler=main_command_interrupt [ 2660.881845][T19958] timeout_message=lock fdc [ 2660.883669][T19958] last output bytes: [ 2660.885176][T19958] 0 90 4294967496 [ 2660.886756][T19958] 1 90 4294967496 [ 2660.888234][T19958] 2 90 4294967496 [ 2660.889700][T19958] 12 90 4294967496 [ 2660.891893][T19958] 1b 90 4294967496 [ 2660.893409][T19958] ff 90 4294967496 [ 2660.894858][T19958] 12 80 4294967499 [ 2660.898206][T19958] 3 90 4294967499 [ 2660.900206][T19958] 3 80 4294967499 [ 2660.901698][T19958] a1 90 4294967499 [ 2660.903485][T19958] 1e 90 4294967499 [ 2660.904850][T19958] e6 80 4294967499 [ 2660.906308][T19958] 1 90 4294967499 [ 2660.907828][T19958] 0 90 4294967499 [ 2660.909305][T19958] 0 90 4294967499 [ 2660.910754][T19958] 1 90 4294967499 [ 2660.912236][T19958] 2 90 4294967499 [ 2660.913710][T19958] 24 90 4294967499 [ 2660.915171][T19958] 1b 90 4294967499 [ 2660.918357][T19958] ff 90 4294967499 [ 2660.919839][T19958] last result at 4295201781 [ 2660.921585][T19958] last redo_fd_request at 4295203227 [ 2660.923645][T19958] status=80 [ 2660.924901][T19958] fdc_busy=1 00:45:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5000000}, 0x48) [ 2660.926241][T19958] floppy_work.func=floppy_work_workfn [ 2660.928626][T19958] cont=ffffffff8b1391e0 [ 2660.930260][T19958] current_req=0000000000000000 [ 2660.932130][T19958] command_status=-1 [ 2660.933681][T19958] [ 2660.934648][T19958] floppy1: floppy timeout called [ 2660.938454][T19958] [ 2660.939471][T19958] floppy driver state [ 2660.941136][T19958] ------------------- [ 2660.942721][T19958] now=4295203234 last interrupt=4294967499 diff=235735 last called handler=main_command_interrupt [ 2660.946708][T19958] timeout_message=lock fdc [ 2660.948483][T19958] last output bytes: [ 2660.950037][T19958] 0 90 4294967496 00:45:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6000000}, 0x48) [ 2660.951535][T19958] 1 90 4294967496 [ 2660.953295][T19958] 2 90 4294967496 [ 2660.954893][T19958] 12 90 4294967496 [ 2660.958308][T19958] 1b 90 4294967496 [ 2660.960427][T19958] ff 90 4294967496 [ 2660.962005][T19958] 12 80 4294967499 [ 2660.963513][T19958] 3 90 4294967499 [ 2660.965034][T19958] 3 80 4294967499 [ 2660.966632][T19958] a1 90 4294967499 [ 2660.968316][T19958] 1e 90 4294967499 [ 2660.969852][T19958] e6 80 4294967499 [ 2660.971415][T19958] 1 90 4294967499 [ 2660.972938][T19958] 0 90 4294967499 [ 2660.974416][T19958] 0 90 4294967499 [ 2660.975969][T19958] 1 90 4294967499 [ 2660.977994][T19958] 2 90 4294967499 [ 2660.979902][T19958] 24 90 4294967499 [ 2660.981890][T19958] 1b 90 4294967499 [ 2660.983871][T19958] ff 90 4294967499 [ 2660.985703][T19958] last result at 4295201781 [ 2660.988075][T19958] last redo_fd_request at 4295203234 00:45:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7000000}, 0x48) [ 2660.990803][T19958] status=80 [ 2660.992693][T19958] fdc_busy=1 [ 2660.994458][T19958] floppy_work.func=floppy_work_workfn [ 2660.997278][T19958] cont=ffffffff8b1391e0 [ 2660.999352][T19958] current_req=0000000000000000 [ 2661.001768][T19958] command_status=-1 [ 2661.003454][T19958] [ 2661.004694][T19958] floppy1: floppy timeout called [ 2661.010433][T19958] [ 2661.011649][T19958] floppy driver state [ 2661.015611][T19958] ------------------- [ 2661.017460][T19958] now=4295203242 last interrupt=4294967499 diff=235743 last called handler=main_command_interrupt [ 2661.022516][T19958] timeout_message=lock fdc 00:45:47 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x541b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:47 executing program 3: syz_open_dev$floppy(&(0x7f0000000040), 0x2, 0x4000) r0 = syz_open_dev$floppy(&(0x7f0000000100), 0x3, 0x400) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000240)) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x3}) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)={0x0}) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r5, 0x0, 0x0, 0x0) connect$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x2, 0x1}}, 0x10) accept4$tipc(r4, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000001c0)={r3, 0x1, r4, 0x0, 0x80000}) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) syz_open_dev$floppy(&(0x7f0000000040), 0x2, 0x4000) (async) syz_open_dev$floppy(&(0x7f0000000100), 0x3, 0x400) (async) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000240)) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x3}) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) (async) socket$tipc(0x1e, 0x5, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) accept4$tipc(r5, 0x0, 0x0, 0x0) (async) connect$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x2, 0x1}}, 0x10) (async) accept4$tipc(r4, 0x0, 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000001c0)={r3, 0x1, r4, 0x0, 0x80000}) (async) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) [ 2661.024812][T19958] last output bytes: [ 2661.027117][T19958] 0 90 4294967496 [ 2661.028791][T19958] 1 90 4294967496 [ 2661.030351][T19958] 2 90 4294967496 [ 2661.031945][T19958] 12 90 4294967496 [ 2661.033830][T19958] 1b 90 4294967496 [ 2661.035661][T19958] ff 90 4294967496 [ 2661.037934][T19958] 12 80 4294967499 00:45:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000}, 0x48) [ 2661.040781][T19958] 3 90 4294967499 [ 2661.042584][T19958] 3 80 4294967499 [ 2661.044287][T19958] a1 90 4294967499 [ 2661.046216][T19958] 1e 90 4294967499 [ 2661.047840][T19958] e6 80 4294967499 00:45:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x80, 0x600a00) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x4340) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06464ce, &(0x7f0000000200)={r2, 0x7, 0x20, 0x0, 0x3, [], [0x2c, 0x2, 0x1, 0x1], [0x6, 0x9, 0x7, 0x6], [0x1, 0x4, 0xa2, 0xd19]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r3 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x7, 0x1, 0x8}) ioctl$FLOPPY_FDGETPRM(r3, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000040), 0x80, 0x600a00) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x4340) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06464ce, &(0x7f0000000200)={r2, 0x7, 0x20, 0x0, 0x3, [], [0x2c, 0x2, 0x1, 0x1], [0x6, 0x9, 0x7, 0x6], [0x1, 0x4, 0xa2, 0xd19]}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x7, 0x1, 0x8}) (async) ioctl$FLOPPY_FDGETPRM(r3, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) [ 2661.055498][T19958] 1 90 4294967499 [ 2661.057032][T19958] 0 90 4294967499 [ 2661.058448][T19958] 0 90 4294967499 [ 2661.059900][T19958] 1 90 4294967499 [ 2661.061360][T19958] 2 90 4294967499 [ 2661.062805][T19958] 24 90 4294967499 [ 2661.064302][T19958] 1b 90 4294967499 [ 2661.065727][T19958] ff 90 4294967499 [ 2661.075796][T19958] last result at 4295201781 [ 2661.077843][T19958] last redo_fd_request at 4295203241 [ 2661.082472][T19958] status=80 [ 2661.084237][T19958] fdc_busy=1 [ 2661.085599][T19958] floppy_work.func=floppy_work_workfn 00:45:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9000000}, 0x48) [ 2661.088614][T19958] cont=ffffffff8b1391e0 [ 2661.090646][T19958] current_req=0000000000000000 [ 2661.092716][T19958] command_status=-1 [ 2661.094282][T19958] [ 2661.095301][T19958] floppy1: floppy timeout called [ 2661.098220][T19958] [ 2661.099134][T19958] floppy driver state [ 2661.100833][T19958] ------------------- [ 2661.102402][T19958] now=4295203250 last interrupt=4294967499 diff=235751 last called handler=main_command_interrupt [ 2661.106852][T19958] timeout_message=lock fdc [ 2661.108592][T19958] last output bytes: [ 2661.110078][T19958] 0 90 4294967496 [ 2661.111519][T19958] 1 90 4294967496 00:45:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa000000}, 0x48) [ 2661.112965][T19958] 2 90 4294967496 [ 2661.114549][T19958] 12 90 4294967496 [ 2661.116057][T19958] 1b 90 4294967496 [ 2661.117510][T19958] ff 90 4294967496 [ 2661.118975][T19958] 12 80 4294967499 [ 2661.120444][T19958] 3 90 4294967499 [ 2661.121871][T19958] 3 80 4294967499 [ 2661.123341][T19958] a1 90 4294967499 [ 2661.124759][T19958] 1e 90 4294967499 [ 2661.126414][T19958] e6 80 4294967499 [ 2661.127891][T19958] 1 90 4294967499 [ 2661.129325][T19958] 0 90 4294967499 [ 2661.130748][T19958] 0 90 4294967499 [ 2661.132198][T19958] 1 90 4294967499 [ 2661.133686][T19958] 2 90 4294967499 [ 2661.135137][T19958] 24 90 4294967499 [ 2661.136668][T19958] 1b 90 4294967499 [ 2661.138094][T19958] ff 90 4294967499 [ 2661.139533][T19958] last result at 4295201781 [ 2661.141310][T19958] last redo_fd_request at 4295203250 [ 2661.143434][T19958] status=80 [ 2661.144661][T19958] fdc_busy=1 [ 2661.146007][T19958] floppy_work.func=floppy_work_workfn 00:45:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb000000}, 0x48) [ 2661.149035][T19958] cont=ffffffff8b1391e0 [ 2661.151383][T19958] current_req=0000000000000000 [ 2661.153809][T19958] command_status=-1 [ 2661.156094][T19958] [ 2661.158542][T19958] floppy1: floppy timeout called [ 2661.161941][T19958] [ 2661.162875][T19958] floppy driver state [ 2661.164658][T19958] ------------------- [ 2661.166518][T19958] now=4295203257 last interrupt=4294967499 diff=235758 last called handler=main_command_interrupt [ 2661.171309][T19958] timeout_message=lock fdc [ 2661.173355][T19958] last output bytes: [ 2661.175040][T19958] 0 90 4294967496 [ 2661.176613][T19958] 1 90 4294967496 [ 2661.178050][T19958] 2 90 4294967496 [ 2661.179473][T19958] 12 90 4294967496 [ 2661.180955][T19958] 1b 90 4294967496 [ 2661.182379][T19958] ff 90 4294967496 [ 2661.183777][T19958] 12 80 4294967499 [ 2661.185253][T19958] 3 90 4294967499 [ 2661.186796][T19958] 3 80 4294967499 [ 2661.188237][T19958] a1 90 4294967499 [ 2661.189678][T19958] 1e 90 4294967499 00:45:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc000000}, 0x48) [ 2661.191111][T19958] e6 80 4294967499 [ 2661.192755][T19958] 1 90 4294967499 [ 2661.194191][T19958] 0 90 4294967499 [ 2661.195636][T19958] 0 90 4294967499 [ 2661.197282][T19958] 1 90 4294967499 [ 2661.198741][T19958] 2 90 4294967499 [ 2661.200236][T19958] 24 90 4294967499 [ 2661.201660][T19958] 1b 90 4294967499 [ 2661.203072][T19958] ff 90 4294967499 [ 2661.204495][T19958] last result at 4295201781 [ 2661.206373][T19958] last redo_fd_request at 4295203256 [ 2661.208426][T19958] status=80 [ 2661.209658][T19958] fdc_busy=1 [ 2661.210899][T19958] floppy_work.func=floppy_work_workfn [ 2661.212950][T19958] cont=ffffffff8b1391e0 [ 2661.214521][T19958] current_req=0000000000000000 [ 2661.216440][T19958] command_status=-1 [ 2661.217930][T19958] [ 2661.218870][T19958] floppy1: floppy timeout called [ 2661.221439][T19958] [ 2661.222459][T19958] floppy driver state [ 2661.223992][T19958] ------------------- [ 2661.225637][T19958] now=4295203262 last interrupt=4294967499 diff=235763 last called handler=main_command_interrupt [ 2661.229893][T19958] timeout_message=lock fdc [ 2661.231665][T19958] last output bytes: [ 2661.233169][T19958] 0 90 4294967496 [ 2661.234651][T19958] 1 90 4294967496 [ 2661.237611][T19958] 2 90 4294967496 [ 2661.251561][T19958] 12 90 4294967496 [ 2661.253182][T19958] 1b 90 4294967496 [ 2661.254617][T19958] ff 90 4294967496 00:45:47 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x127f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:47 executing program 3: syz_open_dev$floppy(&(0x7f0000000040), 0x2, 0x4000) r0 = syz_open_dev$floppy(&(0x7f0000000100), 0x3, 0x400) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000240)) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x3}) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)={0x0}) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r5, 0x0, 0x0, 0x0) connect$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x2, 0x1}}, 0x10) accept4$tipc(r4, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000001c0)={r3, 0x1, r4, 0x0, 0x80000}) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) syz_open_dev$floppy(&(0x7f0000000040), 0x2, 0x4000) (async) syz_open_dev$floppy(&(0x7f0000000100), 0x3, 0x400) (async) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000240)) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x3}) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) (async) socket$tipc(0x1e, 0x5, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) accept4$tipc(r5, 0x0, 0x0, 0x0) (async) connect$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x2, 0x1}}, 0x10) (async) accept4$tipc(r4, 0x0, 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000001c0)={r3, 0x1, r4, 0x0, 0x80000}) (async) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) 00:45:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd000000}, 0x48) 00:45:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x80, 0x600a00) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x6, 0x4340) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06464ce, &(0x7f0000000200)={r2, 0x7, 0x20, 0x0, 0x3, [], [0x2c, 0x2, 0x1, 0x1], [0x6, 0x9, 0x7, 0x6], [0x1, 0x4, 0xa2, 0xd19]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r3 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x7, 0x1, 0x8}) (async) ioctl$FLOPPY_FDGETPRM(r3, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2661.256407][T19958] 12 80 4294967499 [ 2661.258077][T19958] 3 90 4294967499 [ 2661.259485][T19958] 3 80 4294967499 [ 2661.260937][T19958] a1 90 4294967499 [ 2661.262376][T19958] 1e 90 4294967499 [ 2661.263908][T19958] e6 80 4294967499 [ 2661.265686][T19958] 1 90 4294967499 [ 2661.267825][T19958] 0 90 4294967499 [ 2661.269223][T19958] 0 90 4294967499 [ 2661.270598][T19958] 1 90 4294967499 [ 2661.271983][T19958] 2 90 4294967499 [ 2661.273376][T19958] 24 90 4294967499 [ 2661.274778][T19958] 1b 90 4294967499 00:45:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe000000}, 0x48) [ 2661.278893][T19958] ff 90 4294967499 [ 2661.280306][T19958] last result at 4295201781 [ 2661.282048][T19958] last redo_fd_request at 4295203262 [ 2661.284281][T19958] status=80 [ 2661.298945][T19958] fdc_busy=1 [ 2661.301598][T19958] floppy_work.func=floppy_work_workfn 00:45:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf000000}, 0x48) [ 2661.305123][T19958] cont=ffffffff8b1391e0 [ 2661.308297][T19958] current_req=0000000000000000 [ 2661.310449][T19958] command_status=-1 [ 2661.312183][T19958] [ 2661.313603][T19958] floppy1: floppy timeout called [ 2661.319149][T19958] [ 2661.320236][T19958] floppy driver state [ 2661.322032][T19958] ------------------- [ 2661.323765][T19958] now=4295203272 last interrupt=4294967499 diff=235773 last called handler=main_command_interrupt [ 2661.328778][T19958] timeout_message=lock fdc [ 2661.330764][T19958] last output bytes: [ 2661.332534][T19958] 0 90 4294967496 [ 2661.334235][T19958] 1 90 4294967496 [ 2661.336332][T19958] 2 90 4294967496 00:45:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000000}, 0x48) [ 2661.338210][T19958] 12 90 4294967496 [ 2661.340132][T19958] 1b 90 4294967496 [ 2661.341862][T19958] ff 90 4294967496 [ 2661.343575][T19958] 12 80 4294967499 [ 2661.345363][T19958] 3 90 4294967499 [ 2661.347418][T19958] 3 80 4294967499 [ 2661.349195][T19958] a1 90 4294967499 [ 2661.350993][T19958] 1e 90 4294967499 [ 2661.352773][T19958] e6 80 4294967499 [ 2661.354562][T19958] 1 90 4294967499 [ 2661.356647][T19958] 0 90 4294967499 [ 2661.358511][T19958] 0 90 4294967499 [ 2661.360991][T19958] 1 90 4294967499 [ 2661.362958][T19958] 2 90 4294967499 00:45:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x11000000}, 0x48) [ 2661.364736][T19958] 24 90 4294967499 [ 2661.366874][T19958] 1b 90 4294967499 [ 2661.368698][T19958] ff 90 4294967499 [ 2661.370437][T19958] last result at 4295201781 [ 2661.372602][T19958] last redo_fd_request at 4295203272 [ 2661.375262][T19958] status=80 [ 2661.376765][T19958] fdc_busy=1 [ 2661.378196][T19958] floppy_work.func=floppy_work_workfn [ 2661.380589][T19958] cont=ffffffff8b1391e0 [ 2661.382438][T19958] current_req=0000000000000000 [ 2661.384532][T19958] command_status=-1 [ 2661.386704][T19958] [ 2661.387950][T19958] floppy1: floppy timeout called [ 2661.390538][T19958] [ 2661.392405][T19958] floppy driver state [ 2661.394337][T19958] ------------------- [ 2661.396503][T19958] now=4295203280 last interrupt=4294967499 diff=235781 last called handler=main_command_interrupt [ 2661.401189][T19958] timeout_message=lock fdc [ 2661.403243][T19958] last output bytes: [ 2661.405086][T19958] 0 90 4294967496 [ 2661.407245][T19958] 1 90 4294967496 [ 2661.409168][T19958] 2 90 4294967496 [ 2661.410957][T19958] 12 90 4294967496 [ 2661.412759][T19958] 1b 90 4294967496 [ 2661.414518][T19958] ff 90 4294967496 [ 2661.416593][T19958] 12 80 4294967499 [ 2661.418286][T19958] 3 90 4294967499 [ 2661.419984][T19958] 3 80 4294967499 [ 2661.421684][T19958] a1 90 4294967499 [ 2661.423382][T19958] 1e 90 4294967499 [ 2661.425088][T19958] e6 80 4294967499 [ 2661.427116][T19958] 1 90 4294967499 [ 2661.428805][T19958] 0 90 4294967499 [ 2661.430501][T19958] 0 90 4294967499 [ 2661.432198][T19958] 1 90 4294967499 [ 2661.433914][T19958] 2 90 4294967499 [ 2661.435624][T19958] 24 90 4294967499 [ 2661.437651][T19958] 1b 90 4294967499 [ 2661.439325][T19958] ff 90 4294967499 [ 2661.441028][T19958] last result at 4295201781 [ 2661.442789][T19958] last redo_fd_request at 4295203279 [ 2661.445028][T19958] status=80 [ 2661.446674][T19958] fdc_busy=1 [ 2661.448175][T19958] floppy_work.func=floppy_work_workfn [ 2661.450678][T19958] cont=ffffffff8b1391e0 [ 2661.452706][T19958] current_req=0000000000000000 [ 2661.454973][T19958] command_status=-1 [ 2661.456744][T19958] [ 2661.457859][T19958] floppy1: floppy timeout called [ 2661.466172][T19958] [ 2661.467214][T19958] floppy driver state 00:45:48 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x1263, 0x0) 00:45:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12000000}, 0x48) 00:45:48 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x46485d36}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x40014) [ 2661.475398][T19958] ------------------- [ 2661.496006][T19958] now=4295203290 last interrupt=4294967499 diff=235791 last called handler=main_command_interrupt [ 2661.500501][T19958] timeout_message=lock fdc [ 2661.502133][T19958] last output bytes: [ 2661.503557][T19958] 0 90 4294967496 00:45:48 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$FLOPPY_FDFMTEND(r1, 0x249) [ 2661.509049][T19958] 1 90 4294967496 [ 2661.510925][T19958] 2 90 4294967496 [ 2661.513271][T19958] 12 90 4294967496 [ 2661.514824][T19958] 1b 90 4294967496 [ 2661.517993][T19958] ff 90 4294967496 [ 2661.521100][T19958] 12 80 4294967499 [ 2661.523064][T19958] 3 90 4294967499 00:45:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x13000000}, 0x48) [ 2661.528990][T19958] 3 80 4294967499 [ 2661.530776][T19958] a1 90 4294967499 [ 2661.532533][T19958] 1e 90 4294967499 [ 2661.534247][T19958] e6 80 4294967499 [ 2661.538758][T19958] 1 90 4294967499 [ 2661.542133][T19958] 0 90 4294967499 [ 2661.543583][T19958] 0 90 4294967499 [ 2661.545725][T19958] 1 90 4294967499 [ 2661.547873][T19958] 2 90 4294967499 [ 2661.549324][T19958] 24 90 4294967499 [ 2661.550726][T19958] 1b 90 4294967499 [ 2661.552122][T19958] ff 90 4294967499 [ 2661.553526][T19958] last result at 4295201781 [ 2661.555221][T19958] last redo_fd_request at 4295203287 [ 2661.558984][T19958] status=80 [ 2661.560477][T19958] fdc_busy=1 [ 2661.561951][T19958] floppy_work.func=floppy_work_workfn [ 2661.564324][T19958] cont=ffffffff8b1391e0 [ 2661.566604][T19958] current_req=0000000000000000 [ 2661.568462][T19958] command_status=-1 [ 2661.570148][T19958] [ 2661.573458][T19958] floppy1: floppy timeout called 00:45:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x14000000}, 0x48) [ 2661.577242][T19958] [ 2661.578839][T19958] floppy driver state [ 2661.581175][T19958] ------------------- [ 2661.583933][T19958] now=4295203298 last interrupt=4294967499 diff=235799 last called handler=main_command_interrupt [ 2661.588730][T19958] timeout_message=lock fdc [ 2661.590554][T19958] last output bytes: [ 2661.592132][T19958] 0 90 4294967496 [ 2661.593680][T19958] 1 90 4294967496 [ 2661.595170][T19958] 2 90 4294967496 [ 2661.596994][T19958] 12 90 4294967496 [ 2661.598984][T19958] 1b 90 4294967496 [ 2661.600689][T19958] ff 90 4294967496 [ 2661.602235][T19958] 12 80 4294967499 [ 2661.603749][T19958] 3 90 4294967499 [ 2661.605301][T19958] 3 80 4294967499 [ 2661.607497][T19958] a1 90 4294967499 [ 2661.609059][T19958] 1e 90 4294967499 00:45:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x15000000}, 0x48) [ 2661.610592][T19958] e6 80 4294967499 [ 2661.612577][T19958] 1 90 4294967499 [ 2661.614185][T19958] 0 90 4294967499 [ 2661.615683][T19958] 0 90 4294967499 [ 2661.618780][T19958] 1 90 4294967499 [ 2661.621505][T19958] 2 90 4294967499 [ 2661.623046][T19958] 24 90 4294967499 [ 2661.624595][T19958] 1b 90 4294967499 [ 2661.627664][T19958] ff 90 4294967499 [ 2661.629239][T19958] last result at 4295201781 [ 2661.631058][T19958] last redo_fd_request at 4295203298 [ 2661.633164][T19958] status=80 [ 2661.634459][T19958] fdc_busy=1 [ 2661.635763][T19958] floppy_work.func=floppy_work_workfn [ 2661.638012][T19958] cont=ffffffff8b1391e0 [ 2661.640210][T19958] current_req=0000000000000000 [ 2661.642179][T19958] command_status=-1 [ 2661.643749][T19958] [ 2661.644841][T19958] floppy1: floppy timeout called [ 2661.649520][ T969] [ 2661.650655][ T969] floppy driver state [ 2661.652517][ T969] ------------------- [ 2661.654384][ T969] now=4295203305 last interrupt=4294967499 diff=235806 last called handler=main_command_interrupt 00:45:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x16000000}, 0x48) [ 2661.661294][ T969] timeout_message=lock fdc [ 2661.663616][ T969] last output bytes: [ 2661.665338][ T969] 0 90 4294967496 [ 2661.667205][ T969] 1 90 4294967496 [ 2661.668713][ T969] 2 90 4294967496 [ 2661.670140][ T969] 12 90 4294967496 [ 2661.671585][ T969] 1b 90 4294967496 [ 2661.673089][ T969] ff 90 4294967496 [ 2661.674576][ T969] 12 80 4294967499 [ 2661.677879][ T969] 3 90 4294967499 [ 2661.679813][ T969] 3 80 4294967499 [ 2661.681771][ T969] a1 90 4294967499 [ 2661.683697][ T969] 1e 90 4294967499 [ 2661.685620][ T969] e6 80 4294967499 [ 2661.688144][ T969] 1 90 4294967499 [ 2661.689699][ T969] 0 90 4294967499 [ 2661.691277][ T969] 0 90 4294967499 [ 2661.692794][ T969] 1 90 4294967499 [ 2661.694677][ T969] 2 90 4294967499 [ 2661.697033][ T969] 24 90 4294967499 [ 2661.698969][ T969] 1b 90 4294967499 [ 2661.701135][ T969] ff 90 4294967499 [ 2661.703065][ T969] last result at 4295201781 [ 2661.705397][ T969] last redo_fd_request at 4295203305 [ 2661.708084][ T969] status=80 [ 2661.709854][ T969] fdc_busy=1 [ 2661.711413][ T969] floppy_work.func=floppy_work_workfn [ 2661.713579][ T969] cont=ffffffff8b1391e0 [ 2661.715485][ T969] current_req=0000000000000000 [ 2661.717585][ T969] command_status=-1 [ 2661.719413][ T969] [ 2661.720700][ T969] floppy1: floppy timeout called [ 2661.723759][ T969] [ 2661.724972][ T969] floppy driver state [ 2661.730516][ T969] ------------------- [ 2661.733874][ T969] now=4295203313 last interrupt=4294967499 diff=235814 last called handler=main_command_interrupt [ 2661.739951][ T969] timeout_message=lock fdc 00:45:48 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x46485d36}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x40014) 00:45:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x17000000}, 0x48) 00:45:48 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x46485d36}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x40014) [ 2661.745980][ T969] last output bytes: 00:45:48 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$FLOPPY_FDFMTEND(r1, 0x249) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) (async) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) ioctl$FLOPPY_FDFMTEND(r1, 0x249) (async) 00:45:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x48) [ 2661.756051][ T969] 0 90 4294967496 [ 2661.757990][ T969] 1 90 4294967496 [ 2661.759658][ T969] 2 90 4294967496 [ 2661.761279][ T969] 12 90 4294967496 [ 2661.762762][ T969] 1b 90 4294967496 [ 2661.764437][ T969] ff 90 4294967496 [ 2661.774024][ T969] 12 80 4294967499 [ 2661.775721][ T969] 3 90 4294967499 [ 2661.789243][ T969] 3 80 4294967499 [ 2661.791571][ T969] a1 90 4294967499 00:45:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x19000000}, 0x48) [ 2661.794954][ T969] 1e 90 4294967499 [ 2661.797153][ T969] e6 80 4294967499 [ 2661.800125][ T969] 1 90 4294967499 [ 2661.802047][ T969] 0 90 4294967499 [ 2661.804395][ T969] 0 90 4294967499 [ 2661.806415][ T969] 1 90 4294967499 [ 2661.808946][ T969] 2 90 4294967499 00:45:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1a000000}, 0x48) [ 2661.814489][ T969] 24 90 4294967499 [ 2661.816935][ T969] 1b 90 4294967499 [ 2661.819008][ T969] ff 90 4294967499 [ 2661.820688][ T969] last result at 4295201781 [ 2661.822540][ T969] last redo_fd_request at 4295203312 [ 2661.825490][ T969] status=80 [ 2661.828093][ T969] fdc_busy=1 [ 2661.829816][ T969] floppy_work.func=floppy_work_workfn [ 2661.832498][ T969] cont=ffffffff8b1391e0 [ 2661.834515][ T969] current_req=0000000000000000 [ 2661.837567][ T969] command_status=-1 [ 2661.839508][ T969] 00:45:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1b000000}, 0x48) [ 2661.841486][ T969] floppy1: floppy timeout called [ 2661.847995][ T1088] [ 2661.848930][ T1088] floppy driver state [ 2661.852877][ T1088] ------------------- [ 2661.854591][ T1088] now=4295203325 last interrupt=4294967499 diff=235826 last called handler=main_command_interrupt [ 2661.863132][ T1088] timeout_message=lock fdc [ 2661.864882][ T1088] last output bytes: [ 2661.866692][ T1088] 0 90 4294967496 [ 2661.869797][ T1088] 1 90 4294967496 [ 2661.872750][ T1088] 2 90 4294967496 [ 2661.874869][ T1088] 12 90 4294967496 [ 2661.876842][ T1088] 1b 90 4294967496 [ 2661.878513][ T1088] ff 90 4294967496 [ 2661.880692][ T1088] 12 80 4294967499 [ 2661.883056][ T1088] 3 90 4294967499 [ 2661.886373][ T1088] 3 80 4294967499 [ 2661.890294][ T1088] a1 90 4294967499 [ 2661.894949][ T1088] 1e 90 4294967499 [ 2661.906233][ T1088] e6 80 4294967499 [ 2661.907719][ T1088] 1 90 4294967499 [ 2661.913795][ T1088] 0 90 4294967499 [ 2661.915277][ T1088] 0 90 4294967499 [ 2661.917217][ T1088] 1 90 4294967499 [ 2661.918799][ T1088] 2 90 4294967499 [ 2661.921797][ T1088] 24 90 4294967499 [ 2661.925221][ T1088] 1b 90 4294967499 [ 2661.929170][ T1088] ff 90 4294967499 [ 2661.931443][ T1088] last result at 4295201781 [ 2661.934962][ T1088] last redo_fd_request at 4295203325 [ 2661.937268][ T1088] status=80 [ 2661.939001][ T1088] fdc_busy=1 [ 2661.940782][ T1088] floppy_work.func=floppy_work_workfn [ 2661.943572][ T1088] cont=ffffffff8b1391e0 [ 2661.945736][ T1088] current_req=0000000000000000 [ 2661.948331][ T1088] command_status=-1 [ 2661.950348][ T1088] [ 2661.951750][ T1088] floppy1: floppy timeout called [ 2661.955507][ T1088] [ 2661.957470][ T1088] floppy driver state [ 2661.959609][ T1088] ------------------- [ 2661.962503][ T1088] now=4295203336 last interrupt=4294967499 diff=235837 last called handler=main_command_interrupt [ 2661.967742][ T1088] timeout_message=lock fdc [ 2661.971717][ T1088] last output bytes: [ 2661.974926][ T1088] 0 90 4294967496 [ 2661.979149][ T1088] 1 90 4294967496 [ 2661.980795][ T1088] 2 90 4294967496 [ 2661.983456][ T1088] 12 90 4294967496 [ 2661.986157][ T1088] 1b 90 4294967496 [ 2661.989225][ T1088] ff 90 4294967496 [ 2661.991873][ T1088] 12 80 4294967499 [ 2661.994578][ T1088] 3 90 4294967499 [ 2661.996251][ T1088] 3 80 4294967499 [ 2661.997803][ T1088] a1 90 4294967499 [ 2661.999293][ T1088] 1e 90 4294967499 [ 2662.001931][ T1088] e6 80 4294967499 [ 2662.004602][ T1088] 1 90 4294967499 [ 2662.007379][ T1088] 0 90 4294967499 [ 2662.011318][ T1088] 0 90 4294967499 [ 2662.012817][ T1088] 1 90 4294967499 [ 2662.014359][ T1088] 2 90 4294967499 [ 2662.015823][ T1088] 24 90 4294967499 [ 2662.017396][ T1088] 1b 90 4294967499 [ 2662.018876][ T1088] ff 90 4294967499 [ 2662.020396][ T1088] last result at 4295201781 [ 2662.022223][ T1088] last redo_fd_request at 4295203335 [ 2662.024300][ T1088] status=80 [ 2662.025580][ T1088] fdc_busy=1 [ 2662.027692][ T1088] floppy_work.func=floppy_work_workfn [ 2662.030247][ T1088] cont=ffffffff8b1391e0 [ 2662.031889][ T1088] current_req=0000000000000000 [ 2662.033764][ T1088] command_status=-1 [ 2662.035286][ T1088] [ 2662.036537][ T1088] floppy1: floppy timeout called [ 2662.042507][ T1088] [ 2662.043635][ T1088] floppy driver state [ 2662.045448][ T1088] ------------------- 00:45:48 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x127e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1c000000}, 0x48) [ 2662.047255][ T1088] now=4295203345 last interrupt=4294967499 diff=235846 last called handler=main_command_interrupt [ 2662.051720][ T1088] timeout_message=lock fdc [ 2662.053470][ T1088] last output bytes: [ 2662.054933][ T1088] 0 90 4294967496 00:45:48 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) ioctl$FLOPPY_FDFMTEND(r1, 0x249) 00:45:48 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x46485d36}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x40014) [ 2662.056526][ T1088] 1 90 4294967496 [ 2662.063330][ T1088] 2 90 4294967496 [ 2662.065187][ T1088] 12 90 4294967496 [ 2662.066841][ T1088] 1b 90 4294967496 [ 2662.068256][ T1088] ff 90 4294967496 [ 2662.069658][ T1088] 12 80 4294967499 [ 2662.071365][ T1088] 3 90 4294967499 [ 2662.072944][ T1088] 3 80 4294967499 [ 2662.074725][ T1088] a1 90 4294967499 [ 2662.080480][ T1088] 1e 90 4294967499 [ 2662.082362][ T1088] e6 80 4294967499 [ 2662.084677][ T1088] 1 90 4294967499 [ 2662.087483][ T1088] 0 90 4294967499 [ 2662.090483][ T1088] 0 90 4294967499 [ 2662.092303][ T1088] 1 90 4294967499 [ 2662.094084][ T1088] 2 90 4294967499 00:45:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1d000000}, 0x48) [ 2662.101537][ T1088] 24 90 4294967499 [ 2662.106899][ T1088] 1b 90 4294967499 [ 2662.108885][ T1088] ff 90 4294967499 [ 2662.110775][ T1088] last result at 4295201781 [ 2662.113234][ T1088] last redo_fd_request at 4295203344 00:45:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1e000000}, 0x48) [ 2662.119154][ T1088] status=80 [ 2662.121109][ T1088] fdc_busy=1 [ 2662.122520][ T1088] floppy_work.func=floppy_work_workfn [ 2662.125160][ T1088] cont=ffffffff8b1391e0 [ 2662.127408][ T1088] current_req=0000000000000000 [ 2662.130116][ T1088] command_status=-1 [ 2662.133085][ T1088] [ 2662.134829][ T1088] floppy1: floppy timeout called [ 2662.138803][ T1088] [ 2662.139878][ T1088] floppy driver state [ 2662.141496][ T1088] ------------------- 00:45:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f000000}, 0x48) [ 2662.143451][ T1088] now=4295203354 last interrupt=4294967499 diff=235855 last called handler=main_command_interrupt [ 2662.148964][ T1088] timeout_message=lock fdc [ 2662.150869][ T1088] last output bytes: [ 2662.152868][ T1088] 0 90 4294967496 [ 2662.154793][ T1088] 1 90 4294967496 [ 2662.158382][ T1088] 2 90 4294967496 [ 2662.160390][ T1088] 12 90 4294967496 [ 2662.161910][ T1088] 1b 90 4294967496 [ 2662.163457][ T1088] ff 90 4294967496 [ 2662.164952][ T1088] 12 80 4294967499 [ 2662.167059][ T1088] 3 90 4294967499 [ 2662.168626][ T1088] 3 80 4294967499 [ 2662.170097][ T1088] a1 90 4294967499 00:45:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, 0x48) [ 2662.171586][ T1088] 1e 90 4294967499 [ 2662.173412][ T1088] e6 80 4294967499 [ 2662.174948][ T1088] 1 90 4294967499 [ 2662.178004][ T1088] 0 90 4294967499 [ 2662.179669][ T1088] 0 90 4294967499 [ 2662.181221][ T1088] 1 90 4294967499 [ 2662.182779][ T1088] 2 90 4294967499 [ 2662.184298][ T1088] 24 90 4294967499 [ 2662.185820][ T1088] 1b 90 4294967499 [ 2662.187523][ T1088] ff 90 4294967499 [ 2662.189714][ T1088] last result at 4295201781 [ 2662.191503][ T1088] last redo_fd_request at 4295203354 [ 2662.193643][ T1088] status=80 [ 2662.194941][ T1088] fdc_busy=1 [ 2662.198168][ T1088] floppy_work.func=floppy_work_workfn [ 2662.200333][ T1088] cont=ffffffff8b1391e0 [ 2662.202064][ T1088] current_req=0000000000000000 [ 2662.203943][ T1088] command_status=-1 [ 2662.205514][ T1088] [ 2662.206822][ T1088] floppy1: floppy timeout called [ 2662.209574][ T969] [ 2662.210835][ T969] floppy driver state [ 2662.212438][ T969] ------------------- [ 2662.213925][ T969] now=4295203361 last interrupt=4294967499 diff=235862 last called handler=main_command_interrupt [ 2662.219433][ T969] timeout_message=lock fdc [ 2662.221217][ T969] last output bytes: [ 2662.222758][ T969] 0 90 4294967496 [ 2662.224263][ T969] 1 90 4294967496 [ 2662.225746][ T969] 2 90 4294967496 [ 2662.228112][ T969] 12 90 4294967496 [ 2662.229632][ T969] 1b 90 4294967496 [ 2662.231141][ T969] ff 90 4294967496 [ 2662.232622][ T969] 12 80 4294967499 [ 2662.234362][ T969] 3 90 4294967499 [ 2662.236027][ T969] 3 80 4294967499 [ 2662.237613][ T969] a1 90 4294967499 [ 2662.238980][ T969] 1e 90 4294967499 [ 2662.240465][ T969] e6 80 4294967499 [ 2662.241981][ T969] 1 90 4294967499 [ 2662.243468][ T969] 0 90 4294967499 [ 2662.244992][ T969] 0 90 4294967499 [ 2662.246753][ T969] 1 90 4294967499 [ 2662.248366][ T969] 2 90 4294967499 [ 2662.249809][ T969] 24 90 4294967499 [ 2662.251264][ T969] 1b 90 4294967499 [ 2662.252750][ T969] ff 90 4294967499 [ 2662.254204][ T969] last result at 4295201781 [ 2662.256069][ T969] last redo_fd_request at 4295203361 [ 2662.258277][ T969] status=80 [ 2662.259510][ T969] fdc_busy=1 [ 2662.260782][ T969] floppy_work.func=floppy_work_workfn [ 2662.262840][ T969] cont=ffffffff8b1391e0 [ 2662.264438][ T969] current_req=0000000000000000 [ 2662.266396][ T969] command_status=-1 [ 2662.267999][ T969] [ 2662.268952][ T969] floppy1: floppy timeout called [ 2662.271307][ T969] [ 2662.272219][ T969] floppy driver state [ 2662.273684][ T969] ------------------- [ 2662.275137][ T969] now=4295203367 last interrupt=4294967499 diff=235868 last called handler=main_command_interrupt [ 2662.280345][ T969] timeout_message=lock fdc [ 2662.282638][ T969] last output bytes: [ 2662.284214][ T969] 0 90 4294967496 [ 2662.285736][ T969] 1 90 4294967496 [ 2662.287301][ T969] 2 90 4294967496 [ 2662.288831][ T969] 12 90 4294967496 [ 2662.290336][ T969] 1b 90 4294967496 [ 2662.291866][ T969] ff 90 4294967496 [ 2662.293392][ T969] 12 80 4294967499 [ 2662.294898][ T969] 3 90 4294967499 [ 2662.296434][ T969] 3 80 4294967499 [ 2662.297969][ T969] a1 90 4294967499 [ 2662.299549][ T969] 1e 90 4294967499 [ 2662.301067][ T969] e6 80 4294967499 [ 2662.302578][ T969] 1 90 4294967499 [ 2662.304230][ T969] 0 90 4294967499 [ 2662.305754][ T969] 0 90 4294967499 [ 2662.307299][ T969] 1 90 4294967499 [ 2662.309247][ T969] 2 90 4294967499 00:45:48 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x127e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:48 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) syz_open_dev$floppy(&(0x7f0000000040), 0x7, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f00000000c0)) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RREAD(r1, &(0x7f0000000100)={0xfd, 0x75, 0x1, {0xf2, "73cf61f3f7515611199addec9d9d65e9b5f2cb6c93f0b2b9cd822c243e7a9cb43a10b5542310326ded14048648402271c959133cd660edd9290a0619e762ea52fafc0f16edba60f4eba4a8aa9f1583fbb7c33d88ecf3715c5cd078139e5ed1f9a98d81f0ccbc8fa94bba0687b0f367975705df8e0bc82de23a1b37a7a14c0064da9012210f009fa5de620e12cd59a0bbf795c3bba9100645d01cbab51c22c2ad618a17c865fe0c6b856419b3b85438ccd28aafaf0feb2d69c9ba33500e5c327221d712a91f3312793efdba31a990c078b7615a53b055b1e6d3ff81f15ac8d04d6d4224b3d4cd139e075984d5800d2f95f5b0"}}, 0xfd) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000200)={0xd, 0x7, 0x1, {{}, 0xf646}}, 0xd) [ 2662.312360][ T969] 24 90 4294967499 [ 2662.315027][ T969] 1b 90 4294967499 00:45:48 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_discard_preallocations\x00', r0}, 0x10) 00:45:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x21000000}, 0x48) [ 2662.322216][ T969] ff 90 4294967499 [ 2662.323661][ T969] last result at 4295201781 [ 2662.325322][ T969] last redo_fd_request at 4295203367 [ 2662.327786][ T969] status=80 [ 2662.329382][ T969] fdc_busy=1 [ 2662.330987][ T969] floppy_work.func=floppy_work_workfn [ 2662.333519][ T969] cont=ffffffff8b1391e0 [ 2662.335480][ T969] current_req=0000000000000000 [ 2662.338267][ T969] command_status=-1 [ 2662.339675][ T969] [ 2662.340617][ T969] floppy1: floppy timeout called 00:45:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x22000000}, 0x48) [ 2662.350140][ T969] [ 2662.351085][ T969] floppy driver state [ 2662.352576][ T969] ------------------- [ 2662.354049][ T969] now=4295203375 last interrupt=4294967499 diff=235876 last called handler=main_command_interrupt [ 2662.361790][ T969] timeout_message=lock fdc [ 2662.363915][ T969] last output bytes: [ 2662.365471][ T969] 0 90 4294967496 [ 2662.367526][ T969] 1 90 4294967496 [ 2662.369182][ T969] 2 90 4294967496 [ 2662.370750][ T969] 12 90 4294967496 [ 2662.373093][ T969] 1b 90 4294967496 [ 2662.375750][ T969] ff 90 4294967496 [ 2662.377470][ T969] 12 80 4294967499 [ 2662.379185][ T969] 3 90 4294967499 [ 2662.380747][ T969] 3 80 4294967499 [ 2662.382227][ T969] a1 90 4294967499 [ 2662.383701][ T969] 1e 90 4294967499 [ 2662.385224][ T969] e6 80 4294967499 [ 2662.386796][ T969] 1 90 4294967499 [ 2662.388409][ T969] 0 90 4294967499 00:45:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x23000000}, 0x48) [ 2662.389911][ T969] 0 90 4294967499 [ 2662.391613][ T969] 1 90 4294967499 [ 2662.393090][ T969] 2 90 4294967499 [ 2662.394550][ T969] 24 90 4294967499 [ 2662.396213][ T969] 1b 90 4294967499 [ 2662.397885][ T969] ff 90 4294967499 [ 2662.399322][ T969] last result at 4295201781 [ 2662.401846][ T969] last redo_fd_request at 4295203375 [ 2662.404189][ T969] status=80 [ 2662.405751][ T969] fdc_busy=1 [ 2662.407322][ T969] floppy_work.func=floppy_work_workfn [ 2662.409844][ T969] cont=ffffffff8b1391e0 [ 2662.411805][ T969] current_req=0000000000000000 [ 2662.414051][ T969] command_status=-1 [ 2662.415821][ T969] [ 2662.417127][ T969] floppy1: floppy timeout called [ 2662.419567][ T969] [ 2662.420743][ T969] floppy driver state [ 2662.422531][ T969] ------------------- 00:45:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100000000000000}, 0x48) [ 2662.424315][ T969] now=4295203382 last interrupt=4294967499 diff=235883 last called handler=main_command_interrupt [ 2662.429250][ T969] timeout_message=lock fdc [ 2662.432175][ T969] last output bytes: [ 2662.434345][ T969] 0 90 4294967496 [ 2662.436609][ T969] 1 90 4294967496 [ 2662.438638][ T969] 2 90 4294967496 [ 2662.440433][ T969] 12 90 4294967496 [ 2662.442376][ T969] 1b 90 4294967496 [ 2662.444181][ T969] ff 90 4294967496 [ 2662.446289][ T969] 12 80 4294967499 [ 2662.448281][ T969] 3 90 4294967499 [ 2662.450265][ T969] 3 80 4294967499 [ 2662.452066][ T969] a1 90 4294967499 [ 2662.453870][ T969] 1e 90 4294967499 [ 2662.455739][ T969] e6 80 4294967499 [ 2662.457601][ T969] 1 90 4294967499 [ 2662.459835][ T969] 0 90 4294967499 [ 2662.461649][ T969] 0 90 4294967499 [ 2662.463430][ T969] 1 90 4294967499 00:45:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000000000000}, 0x48) [ 2662.464931][ T969] 2 90 4294967499 [ 2662.467193][ T969] 24 90 4294967499 [ 2662.468953][ T969] 1b 90 4294967499 [ 2662.470456][ T969] ff 90 4294967499 [ 2662.471877][ T969] last result at 4295201781 [ 2662.473588][ T969] last redo_fd_request at 4295203382 [ 2662.475573][ T969] status=80 [ 2662.477108][ T969] fdc_busy=1 [ 2662.478366][ T969] floppy_work.func=floppy_work_workfn [ 2662.480398][ T969] cont=ffffffff8b1391e0 [ 2662.481951][ T969] current_req=0000000000000000 [ 2662.483724][ T969] command_status=-1 [ 2662.485160][ T969] [ 2662.486209][ T969] floppy1: floppy timeout called [ 2662.488725][ T969] [ 2662.489649][ T969] floppy driver state [ 2662.491136][ T969] ------------------- [ 2662.492751][ T969] now=4295203389 last interrupt=4294967499 diff=235890 last called handler=main_command_interrupt [ 2662.497755][ T969] timeout_message=lock fdc [ 2662.499767][ T969] last output bytes: [ 2662.501633][ T969] 0 90 4294967496 [ 2662.503332][ T969] 1 90 4294967496 [ 2662.504882][ T969] 2 90 4294967496 [ 2662.506553][ T969] 12 90 4294967496 [ 2662.507954][ T969] 1b 90 4294967496 [ 2662.509358][ T969] ff 90 4294967496 [ 2662.510741][ T969] 12 80 4294967499 [ 2662.512161][ T969] 3 90 4294967499 [ 2662.513563][ T969] 3 80 4294967499 [ 2662.515072][ T969] a1 90 4294967499 [ 2662.517081][ T969] 1e 90 4294967499 [ 2662.518588][ T969] e6 80 4294967499 [ 2662.520093][ T969] 1 90 4294967499 [ 2662.521616][ T969] 0 90 4294967499 [ 2662.523126][ T969] 0 90 4294967499 [ 2662.524641][ T969] 1 90 4294967499 [ 2662.526379][ T969] 2 90 4294967499 [ 2662.527827][ T969] 24 90 4294967499 [ 2662.529247][ T969] 1b 90 4294967499 [ 2662.530617][ T969] ff 90 4294967499 [ 2662.532004][ T969] last result at 4295201781 [ 2662.533697][ T969] last redo_fd_request at 4295203389 [ 2662.535759][ T969] status=80 [ 2662.537491][ T969] fdc_busy=1 [ 2662.538726][ T969] floppy_work.func=floppy_work_workfn [ 2662.541007][ T969] cont=ffffffff8b1391e0 [ 2662.542541][ T969] current_req=0000000000000000 [ 2662.544295][ T969] command_status=-1 [ 2662.545716][ T969] [ 2662.546938][ T969] floppy1: floppy timeout called [ 2662.549709][ T969] [ 2662.550623][ T969] floppy driver state [ 2662.556247][ T969] ------------------- [ 2662.557851][ T969] now=4295203396 last interrupt=4294967499 diff=235897 last called handler=main_command_interrupt [ 2662.562233][ T969] timeout_message=lock fdc [ 2662.563935][ T969] last output bytes: [ 2662.565442][ T969] 0 90 4294967496 00:45:49 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x127e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x300000000000000}, 0x48) [ 2662.567197][ T969] 1 90 4294967496 [ 2662.568826][ T969] 2 90 4294967496 [ 2662.570324][ T969] 12 90 4294967496 00:45:49 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) syz_open_dev$floppy(&(0x7f0000000040), 0x7, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f00000000c0)) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RREAD(r1, &(0x7f0000000100)={0xfd, 0x75, 0x1, {0xf2, "73cf61f3f7515611199addec9d9d65e9b5f2cb6c93f0b2b9cd822c243e7a9cb43a10b5542310326ded14048648402271c959133cd660edd9290a0619e762ea52fafc0f16edba60f4eba4a8aa9f1583fbb7c33d88ecf3715c5cd078139e5ed1f9a98d81f0ccbc8fa94bba0687b0f367975705df8e0bc82de23a1b37a7a14c0064da9012210f009fa5de620e12cd59a0bbf795c3bba9100645d01cbab51c22c2ad618a17c865fe0c6b856419b3b85438ccd28aafaf0feb2d69c9ba33500e5c327221d712a91f3312793efdba31a990c078b7615a53b055b1e6d3ff81f15ac8d04d6d4224b3d4cd139e075984d5800d2f95f5b0"}}, 0xfd) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000200)={0xd, 0x7, 0x1, {{}, 0xf646}}, 0xd) (async) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000200)={0xd, 0x7, 0x1, {{}, 0xf646}}, 0xd) [ 2662.571859][ T969] 1b 90 4294967496 00:45:49 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_discard_preallocations\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_discard_preallocations\x00', r0}, 0x10) [ 2662.573784][ T969] ff 90 4294967496 [ 2662.575636][ T969] 12 80 4294967499 [ 2662.577737][ T969] 3 90 4294967499 [ 2662.579134][ T969] 3 80 4294967499 [ 2662.580506][ T969] a1 90 4294967499 [ 2662.581774][ T969] 1e 90 4294967499 [ 2662.583154][ T969] e6 80 4294967499 [ 2662.584831][ T969] 1 90 4294967499 [ 2662.586810][ T969] 0 90 4294967499 [ 2662.588362][ T969] 0 90 4294967499 [ 2662.589794][ T969] 1 90 4294967499 [ 2662.591235][ T969] 2 90 4294967499 [ 2662.592650][ T969] 24 90 4294967499 [ 2662.594106][ T969] 1b 90 4294967499 [ 2662.595474][ T969] ff 90 4294967499 [ 2662.597323][ T969] last result at 4295201781 [ 2662.599026][ T969] last redo_fd_request at 4295203395 [ 2662.601038][ T969] status=80 [ 2662.602215][ T969] fdc_busy=1 [ 2662.603647][ T969] floppy_work.func=floppy_work_workfn [ 2662.605651][ T969] cont=ffffffff8b1391e0 [ 2662.607848][ T969] current_req=0000000000000000 [ 2662.609830][ T969] command_status=-1 [ 2662.611291][ T969] [ 2662.612228][ T969] floppy1: floppy timeout called [ 2662.614271][ T969] [ 2662.615183][ T969] floppy driver state [ 2662.617203][ T969] ------------------- 00:45:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400000000000000}, 0x48) [ 2662.618675][ T969] now=4295203402 last interrupt=4294967499 diff=235903 last called handler=main_command_interrupt [ 2662.622808][ T969] timeout_message=lock fdc [ 2662.624471][ T969] last output bytes: [ 2662.626185][ T969] 0 90 4294967496 [ 2662.627600][ T969] 1 90 4294967496 [ 2662.629027][ T969] 2 90 4294967496 [ 2662.630434][ T969] 12 90 4294967496 [ 2662.631863][ T969] 1b 90 4294967496 [ 2662.633276][ T969] ff 90 4294967496 [ 2662.634664][ T969] 12 80 4294967499 [ 2662.636743][ T969] 3 90 4294967499 [ 2662.638158][ T969] 3 80 4294967499 [ 2662.639538][ T969] a1 90 4294967499 [ 2662.640969][ T969] 1e 90 4294967499 [ 2662.642368][ T969] e6 80 4294967499 [ 2662.644063][ T969] 1 90 4294967499 [ 2662.645512][ T969] 0 90 4294967499 [ 2662.647407][ T969] 0 90 4294967499 [ 2662.648829][ T969] 1 90 4294967499 [ 2662.650235][ T969] 2 90 4294967499 [ 2662.651645][ T969] 24 90 4294967499 00:45:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x500000000000000}, 0x48) [ 2662.653039][ T969] 1b 90 4294967499 [ 2662.654682][ T969] ff 90 4294967499 [ 2662.656592][ T969] last result at 4295201781 [ 2662.658278][ T969] last redo_fd_request at 4295203401 [ 2662.660243][ T969] status=80 [ 2662.661479][ T969] fdc_busy=1 [ 2662.662704][ T969] floppy_work.func=floppy_work_workfn [ 2662.664891][ T969] cont=ffffffff8b1391e0 [ 2662.666978][ T969] current_req=0000000000000000 [ 2662.668839][ T969] command_status=-1 [ 2662.670253][ T969] [ 2662.671189][ T969] floppy1: floppy timeout called [ 2662.673454][ T969] [ 2662.674426][ T969] floppy driver state [ 2662.677230][ T969] ------------------- [ 2662.678760][ T969] now=4295203408 last interrupt=4294967499 diff=235909 last called handler=main_command_interrupt [ 2662.682602][ T969] timeout_message=lock fdc [ 2662.684265][ T969] last output bytes: [ 2662.685708][ T969] 0 90 4294967496 00:45:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x600000000000000}, 0x48) [ 2662.687669][ T969] 1 90 4294967496 [ 2662.689430][ T969] 2 90 4294967496 [ 2662.690853][ T969] 12 90 4294967496 [ 2662.692280][ T969] 1b 90 4294967496 [ 2662.693941][ T969] ff 90 4294967496 [ 2662.695709][ T969] 12 80 4294967499 [ 2662.698496][ T969] 3 90 4294967499 [ 2662.700308][ T969] 3 80 4294967499 [ 2662.702072][ T969] a1 90 4294967499 [ 2662.703832][ T969] 1e 90 4294967499 [ 2662.705577][ T969] e6 80 4294967499 [ 2662.708146][ T969] 1 90 4294967499 [ 2662.709938][ T969] 0 90 4294967499 [ 2662.711703][ T969] 0 90 4294967499 [ 2662.713396][ T969] 1 90 4294967499 [ 2662.715010][ T969] 2 90 4294967499 00:45:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x700000000000000}, 0x48) [ 2662.717497][ T969] 24 90 4294967499 [ 2662.719445][ T969] 1b 90 4294967499 [ 2662.721222][ T969] ff 90 4294967499 [ 2662.722743][ T969] last result at 4295201781 [ 2662.724837][ T969] last redo_fd_request at 4295203407 [ 2662.728109][ T969] status=80 [ 2662.729581][ T969] fdc_busy=1 [ 2662.731087][ T969] floppy_work.func=floppy_work_workfn [ 2662.733539][ T969] cont=ffffffff8b1391e0 [ 2662.735481][ T969] current_req=0000000000000000 [ 2662.738560][ T969] command_status=-1 [ 2662.740644][ T969] [ 2662.741816][ T969] floppy1: floppy timeout called [ 2662.744488][ T969] [ 2662.746426][ T969] floppy driver state [ 2662.748198][ T969] ------------------- [ 2662.751743][ T969] now=4295203415 last interrupt=4294967499 diff=235916 last called handler=main_command_interrupt [ 2662.761681][ T969] timeout_message=lock fdc [ 2662.775195][ T969] last output bytes: [ 2662.777095][ T969] 0 90 4294967496 [ 2662.778772][ T969] 1 90 4294967496 [ 2662.780578][ T969] 2 90 4294967496 [ 2662.782267][ T969] 12 90 4294967496 [ 2662.784008][ T969] 1b 90 4294967496 00:45:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800000000000000}, 0x48) 00:45:49 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x127d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:49 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_discard_preallocations\x00', r0}, 0x10) 00:45:49 executing program 1: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) (async) r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) syz_open_dev$floppy(&(0x7f0000000040), 0x7, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f00000000c0)) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RREAD(r1, &(0x7f0000000100)={0xfd, 0x75, 0x1, {0xf2, "73cf61f3f7515611199addec9d9d65e9b5f2cb6c93f0b2b9cd822c243e7a9cb43a10b5542310326ded14048648402271c959133cd660edd9290a0619e762ea52fafc0f16edba60f4eba4a8aa9f1583fbb7c33d88ecf3715c5cd078139e5ed1f9a98d81f0ccbc8fa94bba0687b0f367975705df8e0bc82de23a1b37a7a14c0064da9012210f009fa5de620e12cd59a0bbf795c3bba9100645d01cbab51c22c2ad618a17c865fe0c6b856419b3b85438ccd28aafaf0feb2d69c9ba33500e5c327221d712a91f3312793efdba31a990c078b7615a53b055b1e6d3ff81f15ac8d04d6d4224b3d4cd139e075984d5800d2f95f5b0"}}, 0xfd) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000200)={0xd, 0x7, 0x1, {{}, 0xf646}}, 0xd) (async) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000200)={0xd, 0x7, 0x1, {{}, 0xf646}}, 0xd) [ 2662.785793][ T969] ff 90 4294967496 [ 2662.788888][ T969] 12 80 4294967499 [ 2662.790777][ T969] 3 90 4294967499 [ 2662.792576][ T969] 3 80 4294967499 [ 2662.794201][ T969] a1 90 4294967499 [ 2662.796686][ T969] 1e 90 4294967499 [ 2662.804149][ T969] e6 80 4294967499 [ 2662.808104][ T969] 1 90 4294967499 [ 2662.809823][ T969] 0 90 4294967499 [ 2662.811603][ T969] 0 90 4294967499 00:45:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x900000000000000}, 0x48) [ 2662.813371][ T969] 1 90 4294967499 [ 2662.828232][ T969] 2 90 4294967499 [ 2662.830116][ T969] 24 90 4294967499 [ 2662.832221][ T969] 1b 90 4294967499 [ 2662.834058][ T969] ff 90 4294967499 [ 2662.835951][ T969] last result at 4295201781 [ 2662.838099][ T969] last redo_fd_request at 4295203414 [ 2662.840617][ T969] status=80 [ 2662.842144][ T969] fdc_busy=1 [ 2662.843711][ T969] floppy_work.func=floppy_work_workfn [ 2662.846490][ T969] cont=ffffffff8b1391e0 00:45:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa00000000000000}, 0x48) [ 2662.848926][ T969] current_req=0000000000000000 [ 2662.851385][ T969] command_status=-1 [ 2662.853224][ T969] [ 2662.854320][ T969] floppy1: floppy timeout called [ 2662.859437][ T1088] [ 2662.860753][ T1088] floppy driver state [ 2662.862645][ T1088] ------------------- [ 2662.864528][ T1088] now=4295203426 last interrupt=4294967499 diff=235927 last called handler=main_command_interrupt [ 2662.879388][ T1088] timeout_message=lock fdc [ 2662.881834][ T1088] last output bytes: [ 2662.884415][ T1088] 0 90 4294967496 [ 2662.886433][ T1088] 1 90 4294967496 [ 2662.890657][ T1088] 2 90 4294967496 [ 2662.893154][ T1088] 12 90 4294967496 [ 2662.896072][ T1088] 1b 90 4294967496 [ 2662.898664][ T1088] ff 90 4294967496 [ 2662.901878][ T1088] 12 80 4294967499 [ 2662.903993][ T1088] 3 90 4294967499 [ 2662.906305][ T1088] 3 80 4294967499 [ 2662.909351][ T1088] a1 90 4294967499 [ 2662.911148][ T1088] 1e 90 4294967499 [ 2662.912852][ T1088] e6 80 4294967499 [ 2662.914217][ T1088] 1 90 4294967499 [ 2662.915590][ T1088] 0 90 4294967499 [ 2662.917227][ T1088] 0 90 4294967499 [ 2662.920784][ T1088] 1 90 4294967499 00:45:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb00000000000000}, 0x48) [ 2662.923083][ T1088] 2 90 4294967499 [ 2662.925557][ T1088] 24 90 4294967499 [ 2662.934612][ T1088] 1b 90 4294967499 [ 2662.936146][ T1088] ff 90 4294967499 [ 2662.937545][ T1088] last result at 4295201781 [ 2662.939216][ T1088] last redo_fd_request at 4295203426 [ 2662.941171][ T1088] status=80 [ 2662.942356][ T1088] fdc_busy=1 [ 2662.943571][ T1088] floppy_work.func=floppy_work_workfn [ 2662.945534][ T1088] cont=ffffffff8b1391e0 [ 2662.947227][ T1088] current_req=0000000000000000 [ 2662.949091][ T1088] command_status=-1 [ 2662.951346][ T1088] [ 2662.952287][ T1088] floppy1: floppy timeout called [ 2662.955462][ T1088] [ 2662.956576][ T1088] floppy driver state [ 2662.958184][ T1088] ------------------- [ 2662.959815][ T1088] now=4295203436 last interrupt=4294967499 diff=235937 last called handler=main_command_interrupt [ 2662.964869][ T1088] timeout_message=lock fdc [ 2662.968019][ T1088] last output bytes: 00:45:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc00000000000000}, 0x48) [ 2662.970778][ T1088] 0 90 4294967496 [ 2662.974075][ T1088] 1 90 4294967496 [ 2662.976517][ T1088] 2 90 4294967496 [ 2662.977991][ T1088] 12 90 4294967496 [ 2662.980166][ T1088] 1b 90 4294967496 [ 2662.982514][ T1088] ff 90 4294967496 [ 2662.984738][ T1088] 12 80 4294967499 [ 2662.986317][ T1088] 3 90 4294967499 [ 2662.988231][ T1088] 3 80 4294967499 [ 2662.990466][ T1088] a1 90 4294967499 [ 2662.991889][ T1088] 1e 90 4294967499 [ 2662.993342][ T1088] e6 80 4294967499 [ 2662.994723][ T1088] 1 90 4294967499 [ 2662.996722][ T1088] 0 90 4294967499 [ 2663.000139][ T1088] 0 90 4294967499 [ 2663.001699][ T1088] 1 90 4294967499 [ 2663.003089][ T1088] 2 90 4294967499 [ 2663.004466][ T1088] 24 90 4294967499 [ 2663.006075][ T1088] 1b 90 4294967499 [ 2663.007551][ T1088] ff 90 4294967499 [ 2663.008997][ T1088] last result at 4295201781 [ 2663.010680][ T1088] last redo_fd_request at 4295203435 [ 2663.012675][ T1088] status=80 [ 2663.013881][ T1088] fdc_busy=1 [ 2663.015081][ T1088] floppy_work.func=floppy_work_workfn [ 2663.018693][ T1088] cont=ffffffff8b1391e0 [ 2663.020427][ T1088] current_req=0000000000000000 [ 2663.022294][ T1088] command_status=-1 [ 2663.023820][ T1088] [ 2663.024777][ T1088] floppy1: floppy timeout called [ 2663.028991][ T1088] [ 2663.029916][ T1088] floppy driver state [ 2663.031501][ T1088] ------------------- [ 2663.033133][ T1088] now=4295203443 last interrupt=4294967499 diff=235944 last called handler=main_command_interrupt [ 2663.040561][ T1088] timeout_message=lock fdc [ 2663.044588][ T1088] last output bytes: [ 2663.046212][ T1088] 0 90 4294967496 [ 2663.047700][ T1088] 1 90 4294967496 [ 2663.049237][ T1088] 2 90 4294967496 [ 2663.050801][ T1088] 12 90 4294967496 [ 2663.052318][ T1088] 1b 90 4294967496 00:45:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd00000000000000}, 0x48) [ 2663.056179][ T1088] ff 90 4294967496 [ 2663.065257][ T1088] 12 80 4294967499 [ 2663.067002][ T1088] 3 90 4294967499 [ 2663.068408][ T1088] 3 80 4294967499 [ 2663.069821][ T1088] a1 90 4294967499 [ 2663.071343][ T1088] 1e 90 4294967499 [ 2663.072811][ T1088] e6 80 4294967499 [ 2663.074476][ T1088] 1 90 4294967499 [ 2663.075936][ T1088] 0 90 4294967499 [ 2663.077343][ T1088] 0 90 4294967499 [ 2663.078702][ T1088] 1 90 4294967499 [ 2663.080101][ T1088] 2 90 4294967499 [ 2663.081489][ T1088] 24 90 4294967499 [ 2663.082912][ T1088] 1b 90 4294967499 [ 2663.084278][ T1088] ff 90 4294967499 [ 2663.085684][ T1088] last result at 4295201781 [ 2663.088723][ T1088] last redo_fd_request at 4295203443 [ 2663.091376][ T1088] status=80 [ 2663.092878][ T1088] fdc_busy=1 [ 2663.094691][ T1088] floppy_work.func=floppy_work_workfn [ 2663.098989][ T1088] cont=ffffffff8b1391e0 [ 2663.100790][ T1088] current_req=0000000000000000 [ 2663.102968][ T1088] command_status=-1 [ 2663.104733][ T1088] [ 2663.105680][ T1088] floppy1: floppy timeout called [ 2663.112252][ T1088] [ 2663.113226][ T1088] floppy driver state [ 2663.114728][ T1088] ------------------- [ 2663.120191][ T1088] now=4295203452 last interrupt=4294967499 diff=235953 last called handler=main_command_interrupt [ 2663.124150][ T1088] timeout_message=lock fdc [ 2663.126162][ T1088] last output bytes: [ 2663.127640][ T1088] 0 90 4294967496 [ 2663.129112][ T1088] 1 90 4294967496 [ 2663.130549][ T1088] 2 90 4294967496 [ 2663.131961][ T1088] 12 90 4294967496 [ 2663.133527][ T1088] 1b 90 4294967496 00:45:49 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x127d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe00000000000000}, 0x48) [ 2663.135315][ T1088] ff 90 4294967496 00:45:49 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000080)=0x3, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2663.137531][ T1088] 12 80 4294967499 00:45:49 executing program 3: syz_open_dev$floppy(&(0x7f0000000040), 0x0, 0x3) [ 2663.140138][ T1088] 3 90 4294967499 [ 2663.143777][ T1088] 3 80 4294967499 [ 2663.146306][ T1088] a1 90 4294967499 [ 2663.147711][ T1088] 1e 90 4294967499 [ 2663.149327][ T1088] e6 80 4294967499 [ 2663.152688][ T1088] 1 90 4294967499 [ 2663.154823][ T1088] 0 90 4294967499 00:45:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf00000000000000}, 0x48) [ 2663.157729][ T1088] 0 90 4294967499 [ 2663.159179][ T1088] 1 90 4294967499 [ 2663.166196][ T1088] 2 90 4294967499 [ 2663.167649][ T1088] 24 90 4294967499 [ 2663.171375][ T1088] 1b 90 4294967499 [ 2663.172827][ T1088] ff 90 4294967499 [ 2663.174213][ T1088] last result at 4295201781 [ 2663.176041][ T1088] last redo_fd_request at 4295203451 [ 2663.178062][ T1088] status=80 [ 2663.179246][ T1088] fdc_busy=1 [ 2663.180611][ T1088] floppy_work.func=floppy_work_workfn [ 2663.183072][ T1088] cont=ffffffff8b1391e0 00:45:49 executing program 3: syz_open_dev$floppy(&(0x7f0000000040), 0x0, 0x3) [ 2663.185041][ T1088] current_req=0000000000000000 [ 2663.189216][ T1088] command_status=-1 [ 2663.191178][ T1088] [ 2663.192456][ T1088] floppy1: floppy timeout called [ 2663.195245][ T1088] [ 2663.197156][ T1088] floppy driver state [ 2663.199192][ T1088] ------------------- [ 2663.201299][ T1088] now=4295203460 last interrupt=4294967499 diff=235961 last called handler=main_command_interrupt [ 2663.209200][ T1088] timeout_message=lock fdc 00:45:49 executing program 3: syz_open_dev$floppy(&(0x7f0000000040), 0x0, 0x3) [ 2663.211514][ T1088] last output bytes: 00:45:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x48) [ 2663.226146][ T1088] 0 90 4294967496 [ 2663.227989][ T1088] 1 90 4294967496 [ 2663.229791][ T1088] 2 90 4294967496 [ 2663.231594][ T1088] 12 90 4294967496 [ 2663.233391][ T1088] 1b 90 4294967496 [ 2663.235172][ T1088] ff 90 4294967496 [ 2663.241807][ T1088] 12 80 4294967499 [ 2663.243723][ T1088] 3 90 4294967499 [ 2663.245604][ T1088] 3 80 4294967499 [ 2663.247941][ T1088] a1 90 4294967499 [ 2663.249822][ T1088] 1e 90 4294967499 [ 2663.251655][ T1088] e6 80 4294967499 [ 2663.253632][ T1088] 1 90 4294967499 [ 2663.255451][ T1088] 0 90 4294967499 [ 2663.258840][ T1088] 0 90 4294967499 [ 2663.260661][ T1088] 1 90 4294967499 [ 2663.262444][ T1088] 2 90 4294967499 [ 2663.264258][ T1088] 24 90 4294967499 [ 2663.266713][ T1088] 1b 90 4294967499 [ 2663.268498][ T1088] ff 90 4294967499 [ 2663.270331][ T1088] last result at 4295201781 [ 2663.272509][ T1088] last redo_fd_request at 4295203459 [ 2663.275051][ T1088] status=80 [ 2663.276781][ T1088] fdc_busy=1 [ 2663.278334][ T1088] floppy_work.func=floppy_work_workfn [ 2663.280669][ T1088] cont=ffffffff8b1391e0 [ 2663.282229][ T1088] current_req=0000000000000000 [ 2663.283955][ T1088] command_status=-1 [ 2663.285343][ T1088] [ 2663.293164][ T1088] floppy1: floppy timeout called [ 2663.295720][ T969] [ 2663.296841][ T969] floppy driver state [ 2663.298330][ T969] ------------------- [ 2663.299787][ T969] now=4295203470 last interrupt=4294967499 diff=235971 last called handler=main_command_interrupt [ 2663.303511][ T969] timeout_message=lock fdc [ 2663.304985][ T969] last output bytes: [ 2663.306581][ T969] 0 90 4294967496 [ 2663.307942][ T969] 1 90 4294967496 [ 2663.309324][ T969] 2 90 4294967496 [ 2663.310696][ T969] 12 90 4294967496 [ 2663.312088][ T969] 1b 90 4294967496 [ 2663.313469][ T969] ff 90 4294967496 [ 2663.314840][ T969] 12 80 4294967499 [ 2663.316309][ T969] 3 90 4294967499 [ 2663.317712][ T969] 3 80 4294967499 [ 2663.319070][ T969] a1 90 4294967499 [ 2663.320454][ T969] 1e 90 4294967499 [ 2663.321842][ T969] e6 80 4294967499 [ 2663.323212][ T969] 1 90 4294967499 [ 2663.324611][ T969] 0 90 4294967499 [ 2663.326078][ T969] 0 90 4294967499 [ 2663.327603][ T969] 1 90 4294967499 [ 2663.329028][ T969] 2 90 4294967499 [ 2663.330422][ T969] 24 90 4294967499 [ 2663.331827][ T969] 1b 90 4294967499 [ 2663.333205][ T969] ff 90 4294967499 [ 2663.334564][ T969] last result at 4295201781 [ 2663.336344][ T969] last redo_fd_request at 4295203469 [ 2663.338318][ T969] status=80 [ 2663.339505][ T969] fdc_busy=1 [ 2663.340739][ T969] floppy_work.func=floppy_work_workfn [ 2663.342706][ T969] cont=ffffffff8b1391e0 [ 2663.344239][ T969] current_req=0000000000000000 [ 2663.346097][ T969] command_status=-1 [ 2663.347519][ T969] [ 2663.348439][ T969] floppy1: floppy timeout called [ 2663.351068][ T969] [ 2663.353421][ T969] floppy driver state [ 2663.358791][ T969] ------------------- [ 2663.361092][ T969] now=4295203476 last interrupt=4294967499 diff=235977 last called handler=main_command_interrupt [ 2663.365095][ T969] timeout_message=lock fdc 00:45:49 executing program 2: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(0xffffffffffffffff, 0x1263, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:49 executing program 3: ioctl$FLOPPY_FDGETMAXERRS(0xffffffffffffffff, 0x8014020e, &(0x7f0000000040)) userfaultfd(0x801) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) 00:45:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1100000000000000}, 0x48) [ 2663.370812][ T969] last output bytes: 00:45:49 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000080)=0x3, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000080)=0x3, 0x8) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) [ 2663.375967][ T969] 0 90 4294967496 [ 2663.377960][ T969] 1 90 4294967496 [ 2663.379224][ T969] 2 90 4294967496 [ 2663.380531][ T969] 12 90 4294967496 [ 2663.381991][ T969] 1b 90 4294967496 [ 2663.383405][ T969] ff 90 4294967496 [ 2663.384870][ T969] 12 80 4294967499 [ 2663.395979][ T969] 3 90 4294967499 [ 2663.397598][ T969] 3 80 4294967499 [ 2663.399583][ T969] a1 90 4294967499 [ 2663.401276][ T969] 1e 90 4294967499 [ 2663.403033][ T969] e6 80 4294967499 [ 2663.405023][ T969] 1 90 4294967499 [ 2663.409563][ T969] 0 90 4294967499 [ 2663.411507][ T969] 0 90 4294967499 [ 2663.413136][ T969] 1 90 4294967499 [ 2663.415792][ T969] 2 90 4294967499 [ 2663.418594][ T969] 24 90 4294967499 [ 2663.421274][ T969] 1b 90 4294967499 [ 2663.423535][ T969] ff 90 4294967499 [ 2663.426002][ T969] last result at 4295201781 00:45:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1200000000000000}, 0x48) [ 2663.427806][ T969] last redo_fd_request at 4295203475 [ 2663.431334][ T969] status=80 [ 2663.433592][ T969] fdc_busy=1 [ 2663.435951][ T969] floppy_work.func=floppy_work_workfn [ 2663.438857][ T969] cont=ffffffff8b1391e0 [ 2663.441080][ T969] current_req=0000000000000000 [ 2663.443907][ T969] command_status=-1 [ 2663.445754][ T969] [ 2663.447833][ T969] floppy1: floppy timeout called [ 2663.451514][ T969] [ 2663.452699][ T969] floppy driver state [ 2663.454647][ T969] ------------------- [ 2663.457314][ T969] now=4295203486 last interrupt=4294967499 diff=235987 last called handler=main_command_interrupt [ 2663.463401][ T969] timeout_message=lock fdc [ 2663.466054][ T969] last output bytes: [ 2663.469482][ T969] 0 90 4294967496 [ 2663.471332][ T969] 1 90 4294967496 [ 2663.473202][ T969] 2 90 4294967496 [ 2663.474988][ T969] 12 90 4294967496 [ 2663.478090][ T969] 1b 90 4294967496 [ 2663.480464][ T969] ff 90 4294967496 00:45:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1300000000000000}, 0x48) [ 2663.487100][ T969] 12 80 4294967499 [ 2663.490464][ T969] 3 90 4294967499 [ 2663.492734][ T969] 3 80 4294967499 [ 2663.495059][ T969] a1 90 4294967499 [ 2663.497240][ T969] 1e 90 4294967499 [ 2663.500133][ T969] e6 80 4294967499 [ 2663.501877][ T969] 1 90 4294967499 [ 2663.503635][ T969] 0 90 4294967499 [ 2663.505433][ T969] 0 90 4294967499 [ 2663.507660][ T969] 1 90 4294967499 [ 2663.509181][ T969] 2 90 4294967499 00:45:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1400000000000000}, 0x48) [ 2663.511777][ T969] 24 90 4294967499 [ 2663.513523][ T969] 1b 90 4294967499 [ 2663.515176][ T969] ff 90 4294967499 [ 2663.517052][ T969] last result at 4295201781 [ 2663.519079][ T969] last redo_fd_request at 4295203485 [ 2663.521458][ T969] status=80 [ 2663.522879][ T969] fdc_busy=1 [ 2663.524342][ T969] floppy_work.func=floppy_work_workfn [ 2663.526717][ T969] cont=ffffffff8b1391e0 [ 2663.528244][ T969] current_req=0000000000000000 [ 2663.530005][ T969] command_status=-1 [ 2663.531415][ T969] [ 2663.532328][ T969] floppy1: floppy timeout called [ 2663.535002][ T969] [ 2663.535958][ T969] floppy driver state [ 2663.537439][ T969] ------------------- [ 2663.538897][ T969] now=4295203494 last interrupt=4294967499 diff=235995 last called handler=main_command_interrupt [ 2663.542696][ T969] timeout_message=lock fdc [ 2663.544303][ T969] last output bytes: [ 2663.545743][ T969] 0 90 4294967496 [ 2663.547697][ T969] 1 90 4294967496 [ 2663.549111][ T969] 2 90 4294967496 [ 2663.550506][ T969] 12 90 4294967496 [ 2663.551891][ T969] 1b 90 4294967496 [ 2663.553281][ T969] ff 90 4294967496 [ 2663.554667][ T969] 12 80 4294967499 [ 2663.556161][ T969] 3 90 4294967499 [ 2663.557763][ T969] 3 80 4294967499 [ 2663.559175][ T969] a1 90 4294967499 [ 2663.560562][ T969] 1e 90 4294967499 [ 2663.561941][ T969] e6 80 4294967499 [ 2663.563321][ T969] 1 90 4294967499 00:45:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1500000000000000}, 0x48) [ 2663.566540][ T969] 0 90 4294967499 [ 2663.567976][ T969] 0 90 4294967499 [ 2663.569448][ T969] 1 90 4294967499 [ 2663.570826][ T969] 2 90 4294967499 [ 2663.572219][ T969] 24 90 4294967499 [ 2663.573608][ T969] 1b 90 4294967499 [ 2663.574968][ T969] ff 90 4294967499 [ 2663.577463][ T969] last result at 4295201781 [ 2663.579166][ T969] last redo_fd_request at 4295203493 [ 2663.581117][ T969] status=80 [ 2663.582295][ T969] fdc_busy=1 [ 2663.583504][ T969] floppy_work.func=floppy_work_workfn [ 2663.585680][ T969] cont=ffffffff8b1391e0 [ 2663.587502][ T969] current_req=0000000000000000 [ 2663.589428][ T969] command_status=-1 [ 2663.591175][ T969] [ 2663.592354][ T969] floppy1: floppy timeout called [ 2663.597621][ T969] [ 2663.598586][ T969] floppy driver state [ 2663.600144][ T969] ------------------- [ 2663.601621][ T969] now=4295203500 last interrupt=4294967499 diff=236001 last called handler=main_command_interrupt [ 2663.605664][ T969] timeout_message=lock fdc [ 2663.607638][ T969] last output bytes: [ 2663.609462][ T969] 0 90 4294967496 [ 2663.611048][ T969] 1 90 4294967496 [ 2663.612567][ T969] 2 90 4294967496 [ 2663.614085][ T969] 12 90 4294967496 [ 2663.615836][ T969] 1b 90 4294967496 [ 2663.617410][ T969] ff 90 4294967496 [ 2663.618805][ T969] 12 80 4294967499 [ 2663.620214][ T969] 3 90 4294967499 [ 2663.621635][ T969] 3 80 4294967499 [ 2663.623050][ T969] a1 90 4294967499 [ 2663.624462][ T969] 1e 90 4294967499 [ 2663.625986][ T969] e6 80 4294967499 [ 2663.627608][ T969] 1 90 4294967499 [ 2663.629022][ T969] 0 90 4294967499 [ 2663.630494][ T969] 0 90 4294967499 [ 2663.631898][ T969] 1 90 4294967499 [ 2663.633302][ T969] 2 90 4294967499 [ 2663.634697][ T969] 24 90 4294967499 [ 2663.636250][ T969] 1b 90 4294967499 [ 2663.637816][ T969] ff 90 4294967499 [ 2663.639370][ T969] last result at 4295201781 [ 2663.641376][ T969] last redo_fd_request at 4295203499 [ 2663.643381][ T969] status=80 [ 2663.644590][ T969] fdc_busy=1 [ 2663.645812][ T969] floppy_work.func=floppy_work_workfn [ 2663.647929][ T969] cont=ffffffff8b1391e0 [ 2663.649571][ T969] current_req=0000000000000000 [ 2663.651407][ T969] command_status=-1 [ 2663.652816][ T969] [ 2663.653735][ T969] floppy1: floppy timeout called [ 2663.656421][ T1088] [ 2663.657610][ T1088] floppy driver state [ 2663.659173][ T1088] ------------------- [ 2663.660678][ T1088] now=4295203506 last interrupt=4294967499 diff=236007 last called handler=main_command_interrupt [ 2663.665242][ T1088] timeout_message=lock fdc [ 2663.668366][ T1088] last output bytes: [ 2663.670226][ T1088] 0 90 4294967496 [ 2663.671953][ T1088] 1 90 4294967496 [ 2663.673713][ T1088] 2 90 4294967496 [ 2663.675435][ T1088] 12 90 4294967496 [ 2663.677890][ T1088] 1b 90 4294967496 [ 2663.679673][ T1088] ff 90 4294967496 [ 2663.681442][ T1088] 12 80 4294967499 [ 2663.683207][ T1088] 3 90 4294967499 [ 2663.684960][ T1088] 3 80 4294967499 [ 2663.687067][ T1088] a1 90 4294967499 00:45:50 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x127c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1600000000000000}, 0x48) 00:45:50 executing program 3: ioctl$FLOPPY_FDGETMAXERRS(0xffffffffffffffff, 0x8014020e, &(0x7f0000000040)) userfaultfd(0x801) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) 00:45:50 executing program 1: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000080)=0x3, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) (async) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2663.689657][ T1088] 1e 90 4294967499 [ 2663.691688][ T1088] e6 80 4294967499 [ 2663.693436][ T1088] 1 90 4294967499 [ 2663.695200][ T1088] 0 90 4294967499 [ 2663.697516][ T1088] 0 90 4294967499 [ 2663.699401][ T1088] 1 90 4294967499 [ 2663.701142][ T1088] 2 90 4294967499 [ 2663.702868][ T1088] 24 90 4294967499 [ 2663.704600][ T1088] 1b 90 4294967499 [ 2663.706818][ T1088] ff 90 4294967499 [ 2663.708273][ T1088] last result at 4295201781 [ 2663.709937][ T1088] last redo_fd_request at 4295203505 [ 2663.711866][ T1088] status=80 [ 2663.713241][ T1088] fdc_busy=1 [ 2663.714764][ T1088] floppy_work.func=floppy_work_workfn [ 2663.717794][ T1088] cont=ffffffff8b1391e0 [ 2663.719425][ T1088] current_req=0000000000000000 [ 2663.721438][ T1088] command_status=-1 [ 2663.723218][ T1088] [ 2663.724383][ T1088] floppy1: floppy timeout called [ 2663.728140][ T1088] [ 2663.729148][ T1088] floppy driver state [ 2663.730594][ T1088] ------------------- [ 2663.732054][ T1088] now=4295203513 last interrupt=4294967499 diff=236014 last called handler=main_command_interrupt [ 2663.737308][ T1088] timeout_message=lock fdc [ 2663.739395][ T1088] last output bytes: [ 2663.741225][ T1088] 0 90 4294967496 [ 2663.742940][ T1088] 1 90 4294967496 [ 2663.744755][ T1088] 2 90 4294967496 [ 2663.747176][ T1088] 12 90 4294967496 [ 2663.748960][ T1088] 1b 90 4294967496 [ 2663.750738][ T1088] ff 90 4294967496 [ 2663.752281][ T1088] 12 80 4294967499 00:45:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1700000000000000}, 0x48) [ 2663.754679][ T1088] 3 90 4294967499 [ 2663.757320][ T1088] 3 80 4294967499 [ 2663.759137][ T1088] a1 90 4294967499 [ 2663.760939][ T1088] 1e 90 4294967499 [ 2663.762712][ T1088] e6 80 4294967499 [ 2663.764528][ T1088] 1 90 4294967499 [ 2663.766642][ T1088] 0 90 4294967499 [ 2663.768511][ T1088] 0 90 4294967499 [ 2663.774653][ T1088] 1 90 4294967499 [ 2663.776599][ T1088] 2 90 4294967499 [ 2663.778440][ T1088] 24 90 4294967499 [ 2663.780214][ T1088] 1b 90 4294967499 [ 2663.781808][ T1088] ff 90 4294967499 00:45:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1800000000000000}, 0x48) [ 2663.783198][ T1088] last result at 4295201781 [ 2663.785682][ T1088] last redo_fd_request at 4295203513 [ 2663.789530][ T1088] status=80 [ 2663.790715][ T1088] fdc_busy=1 [ 2663.791927][ T1088] floppy_work.func=floppy_work_workfn [ 2663.793956][ T1088] cont=ffffffff8b1391e0 [ 2663.795467][ T1088] current_req=0000000000000000 [ 2663.798861][ T1088] command_status=-1 [ 2663.800301][ T1088] [ 2663.801239][ T1088] floppy1: floppy timeout called [ 2663.803176][ T1088] [ 2663.804075][ T1088] floppy driver state [ 2663.805575][ T1088] ------------------- 00:45:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1900000000000000}, 0x48) [ 2663.807258][ T1088] now=4295203521 last interrupt=4294967499 diff=236022 last called handler=main_command_interrupt [ 2663.811714][ T1088] timeout_message=lock fdc [ 2663.813360][ T1088] last output bytes: [ 2663.814787][ T1088] 0 90 4294967496 [ 2663.817767][ T1088] 1 90 4294967496 [ 2663.819146][ T1088] 2 90 4294967496 [ 2663.820515][ T1088] 12 90 4294967496 [ 2663.821912][ T1088] 1b 90 4294967496 [ 2663.823346][ T1088] ff 90 4294967496 [ 2663.824722][ T1088] 12 80 4294967499 [ 2663.826222][ T1088] 3 90 4294967499 [ 2663.827616][ T1088] 3 80 4294967499 [ 2663.829007][ T1088] a1 90 4294967499 [ 2663.830381][ T1088] 1e 90 4294967499 [ 2663.831819][ T1088] e6 80 4294967499 [ 2663.833209][ T1088] 1 90 4294967499 [ 2663.834576][ T1088] 0 90 4294967499 [ 2663.837603][ T1088] 0 90 4294967499 [ 2663.839027][ T1088] 1 90 4294967499 [ 2663.840422][ T1088] 2 90 4294967499 [ 2663.841813][ T1088] 24 90 4294967499 00:45:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1a00000000000000}, 0x48) [ 2663.843536][ T1088] 1b 90 4294967499 [ 2663.846226][ T1088] ff 90 4294967499 [ 2663.847861][ T1088] last result at 4295201781 [ 2663.849881][ T1088] last redo_fd_request at 4295203520 [ 2663.852248][ T1088] status=80 [ 2663.853674][ T1088] fdc_busy=1 [ 2663.855133][ T1088] floppy_work.func=floppy_work_workfn [ 2663.859266][ T1088] cont=ffffffff8b1391e0 [ 2663.861094][ T1088] current_req=0000000000000000 [ 2663.863195][ T1088] command_status=-1 [ 2663.864902][ T1088] [ 2663.866565][ T1088] floppy1: floppy timeout called [ 2663.869036][ T1088] [ 2663.870042][ T1088] floppy driver state [ 2663.872632][ T1088] ------------------- [ 2663.874379][ T1088] now=4295203527 last interrupt=4294967499 diff=236028 last called handler=main_command_interrupt [ 2663.879451][ T1088] timeout_message=lock fdc [ 2663.881434][ T1088] last output bytes: [ 2663.883192][ T1088] 0 90 4294967496 [ 2663.884875][ T1088] 1 90 4294967496 [ 2663.886639][ T1088] 2 90 4294967496 [ 2663.888293][ T1088] 12 90 4294967496 [ 2663.889964][ T1088] 1b 90 4294967496 [ 2663.891641][ T1088] ff 90 4294967496 [ 2663.893328][ T1088] 12 80 4294967499 [ 2663.894988][ T1088] 3 90 4294967499 [ 2663.896854][ T1088] 3 80 4294967499 [ 2663.898578][ T1088] a1 90 4294967499 [ 2663.900265][ T1088] 1e 90 4294967499 [ 2663.901987][ T1088] e6 80 4294967499 [ 2663.903665][ T1088] 1 90 4294967499 [ 2663.905373][ T1088] 0 90 4294967499 [ 2663.908135][ T1088] 0 90 4294967499 [ 2663.909812][ T1088] 1 90 4294967499 [ 2663.911510][ T1088] 2 90 4294967499 [ 2663.913239][ T1088] 24 90 4294967499 [ 2663.914913][ T1088] 1b 90 4294967499 [ 2663.916726][ T1088] ff 90 4294967499 [ 2663.918459][ T1088] last result at 4295201781 [ 2663.920502][ T1088] last redo_fd_request at 4295203527 [ 2663.922940][ T1088] status=80 [ 2663.924373][ T1088] fdc_busy=1 [ 2663.925940][ T1088] floppy_work.func=floppy_work_workfn [ 2663.928304][ T1088] cont=ffffffff8b1391e0 [ 2663.930180][ T1088] current_req=0000000000000000 [ 2663.932336][ T1088] command_status=-1 [ 2663.934071][ T1088] [ 2663.935016][ T1088] floppy1: floppy timeout called [ 2663.937263][ T1088] [ 2663.938173][ T1088] floppy driver state [ 2663.943532][ T1088] ------------------- [ 2663.945104][ T1088] now=4295203534 last interrupt=4294967499 diff=236035 last called handler=main_command_interrupt 00:45:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1b00000000000000}, 0x48) 00:45:50 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x127c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2663.955928][ T1088] timeout_message=lock fdc [ 2663.957637][ T1088] last output bytes: [ 2663.959086][ T1088] 0 90 4294967496 [ 2663.960480][ T1088] 1 90 4294967496 [ 2663.961889][ T1088] 2 90 4294967496 [ 2663.963286][ T1088] 12 90 4294967496 [ 2663.964673][ T1088] 1b 90 4294967496 [ 2663.966231][ T1088] ff 90 4294967496 [ 2663.967642][ T1088] 12 80 4294967499 [ 2663.969042][ T1088] 3 90 4294967499 [ 2663.970438][ T1088] 3 80 4294967499 [ 2663.971874][ T1088] a1 90 4294967499 [ 2663.973284][ T1088] 1e 90 4294967499 00:45:50 executing program 3: ioctl$FLOPPY_FDGETMAXERRS(0xffffffffffffffff, 0x8014020e, &(0x7f0000000040)) userfaultfd(0x801) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) ioctl$FLOPPY_FDGETMAXERRS(0xffffffffffffffff, 0x8014020e, &(0x7f0000000040)) (async) userfaultfd(0x801) (async) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) 00:45:50 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0x7, 0x4d, 0x2}, 0x7) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x1, 0xff, 0x48, 0x81}, {0x9, 0x81, 0x10, 0x6}, {0xfffb, 0x80, 0x40, 0x3ff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x5, &(0x7f0000000240)=[{0xff01, 0x4, 0x4, 0x1}, {0x0, 0x5, 0x0, 0x7}, {0x4, 0x4, 0x8a, 0x8660}, {0x7ff, 0x6, 0x73, 0x8}, {0x100, 0x1f, 0x6, 0x101}]}) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x20, 0x24440) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x6, 0x5, 0x2, 0x3}, {0x1, 0x7, 0x7, 0x2433ab34}, {0x8f, 0x4, 0x0, 0x781c}, {0x2, 0x1, 0x7f, 0x3}, {0x2, 0x6, 0xff, 0x4}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000140)) [ 2663.975439][ T1088] e6 80 4294967499 [ 2663.977787][ T1088] 1 90 4294967499 [ 2663.979271][ T1088] 0 90 4294967499 [ 2663.983140][ T1088] 0 90 4294967499 [ 2663.984559][ T1088] 1 90 4294967499 [ 2663.986017][ T1088] 2 90 4294967499 [ 2663.987460][ T1088] 24 90 4294967499 [ 2663.988872][ T1088] 1b 90 4294967499 [ 2663.990271][ T1088] ff 90 4294967499 [ 2663.991679][ T1088] last result at 4295201781 [ 2663.993397][ T1088] last redo_fd_request at 4295203534 [ 2663.995639][ T1088] status=80 [ 2663.998080][ T1088] fdc_busy=1 [ 2663.999528][ T1088] floppy_work.func=floppy_work_workfn [ 2664.001959][ T1088] cont=ffffffff8b1391e0 [ 2664.003837][ T1088] current_req=0000000000000000 [ 2664.005944][ T1088] command_status=-1 [ 2664.007677][ T1088] [ 2664.008823][ T1088] floppy1: floppy timeout called [ 2664.011253][ T1088] [ 2664.012250][ T1088] floppy driver state [ 2664.013822][ T1088] ------------------- 00:45:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1c00000000000000}, 0x48) [ 2664.015290][ T1088] now=4295203541 last interrupt=4294967499 diff=236042 last called handler=main_command_interrupt [ 2664.020928][ T1088] timeout_message=lock fdc [ 2664.022586][ T1088] last output bytes: [ 2664.024056][ T1088] 0 90 4294967496 [ 2664.025451][ T1088] 1 90 4294967496 [ 2664.026963][ T1088] 2 90 4294967496 [ 2664.028367][ T1088] 12 90 4294967496 [ 2664.029766][ T1088] 1b 90 4294967496 [ 2664.031198][ T1088] ff 90 4294967496 [ 2664.032594][ T1088] 12 80 4294967499 [ 2664.034622][ T1088] 3 90 4294967499 [ 2664.036387][ T1088] 3 80 4294967499 [ 2664.037870][ T1088] a1 90 4294967499 [ 2664.039370][ T1088] 1e 90 4294967499 [ 2664.040879][ T1088] e6 80 4294967499 [ 2664.042343][ T1088] 1 90 4294967499 [ 2664.043822][ T1088] 0 90 4294967499 [ 2664.045294][ T1088] 0 90 4294967499 [ 2664.046786][ T1088] 1 90 4294967499 [ 2664.048215][ T1088] 2 90 4294967499 [ 2664.049617][ T1088] 24 90 4294967499 [ 2664.051023][ T1088] 1b 90 4294967499 [ 2664.052411][ T1088] ff 90 4294967499 [ 2664.053815][ T1088] last result at 4295201781 [ 2664.055507][ T1088] last redo_fd_request at 4295203541 00:45:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1d00000000000000}, 0x48) [ 2664.057613][ T1088] status=80 [ 2664.058718][ T1088] fdc_busy=1 [ 2664.060380][ T1088] floppy_work.func=floppy_work_workfn [ 2664.062498][ T1088] cont=ffffffff8b1391e0 [ 2664.064090][ T1088] current_req=0000000000000000 [ 2664.066008][ T1088] command_status=-1 [ 2664.067447][ T1088] [ 2664.068380][ T1088] floppy1: floppy timeout called [ 2664.076349][ T1088] 00:45:50 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x127c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:45:50 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r0 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x806, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1) [ 2664.085916][ T1088] floppy driver state [ 2664.088097][ T1088] ------------------- [ 2664.089598][ T1088] now=4295203549 last interrupt=4294967499 diff=236050 last called handler=main_command_interrupt [ 2664.093502][ T1088] timeout_message=lock fdc [ 2664.095135][ T1088] last output bytes: [ 2664.102071][ T1088] 0 90 4294967496 [ 2664.103961][ T1088] 1 90 4294967496 [ 2664.105792][ T1088] 2 90 4294967496 [ 2664.107641][ T1088] 12 90 4294967496 [ 2664.109888][ T1088] 1b 90 4294967496 [ 2664.111498][ T1088] ff 90 4294967496 [ 2664.113040][ T1088] 12 80 4294967499 [ 2664.114603][ T1088] 3 90 4294967499 [ 2664.116560][ T1088] 3 80 4294967499 [ 2664.118091][ T1088] a1 90 4294967499 [ 2664.119595][ T1088] 1e 90 4294967499 [ 2664.121146][ T1088] e6 80 4294967499 [ 2664.122658][ T1088] 1 90 4294967499 [ 2664.124150][ T1088] 0 90 4294967499 [ 2664.125678][ T1088] 0 90 4294967499 [ 2664.128896][ T1088] 1 90 4294967499 [ 2664.130444][ T1088] 2 90 4294967499 [ 2664.131956][ T1088] 24 90 4294967499 [ 2664.133518][ T1088] 1b 90 4294967499 [ 2664.135071][ T1088] ff 90 4294967499 00:45:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1e00000000000000}, 0x48) [ 2664.137829][ T1088] last result at 4295201781 [ 2664.139583][ T1088] last redo_fd_request at 4295203547 [ 2664.141646][ T1088] status=80 [ 2664.142860][ T1088] fdc_busy=1 [ 2664.144098][ T1088] floppy_work.func=floppy_work_workfn [ 2664.146843][ T1088] cont=ffffffff8b1391e0 [ 2664.148423][ T1088] current_req=0000000000000000 [ 2664.150248][ T1088] command_status=-1 [ 2664.151698][ T1088] [ 2664.152654][ T1088] floppy1: floppy timeout called [ 2664.154820][ T1088] [ 2664.155778][ T1088] floppy driver state [ 2664.157869][ T1088] ------------------- [ 2664.159707][ T1088] now=4295203556 last interrupt=4294967499 diff=236057 last called handler=main_command_interrupt [ 2664.163650][ T1088] timeout_message=lock fdc [ 2664.165445][ T1088] last output bytes: [ 2664.167257][ T1088] 0 90 4294967496 [ 2664.168758][ T1088] 1 90 4294967496 [ 2664.170241][ T1088] 2 90 4294967496 00:45:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f00000000000000}, 0x48) [ 2664.171652][ T1088] 12 90 4294967496 [ 2664.174222][ T1088] 1b 90 4294967496 [ 2664.176349][ T1088] ff 90 4294967496 [ 2664.178140][ T1088] 12 80 4294967499 [ 2664.181104][ T1088] 3 90 4294967499 [ 2664.182900][ T1088] 3 80 4294967499 [ 2664.184627][ T1088] a1 90 4294967499 [ 2664.186892][ T1088] 1e 90 4294967499 [ 2664.188676][ T1088] e6 80 4294967499 [ 2664.190423][ T1088] 1 90 4294967499 [ 2664.192181][ T1088] 0 90 4294967499 [ 2664.193932][ T1088] 0 90 4294967499 [ 2664.195660][ T1088] 1 90 4294967499 [ 2664.198022][ T1088] 2 90 4294967499 [ 2664.199834][ T1088] 24 90 4294967499 [ 2664.201652][ T1088] 1b 90 4294967499 [ 2664.203402][ T1088] ff 90 4294967499 [ 2664.205151][ T1088] last result at 4295201781 00:45:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x48) [ 2664.207639][ T1088] last redo_fd_request at 4295203555 [ 2664.210708][ T1088] status=80 [ 2664.212204][ T1088] fdc_busy=1 [ 2664.213755][ T1088] floppy_work.func=floppy_work_workfn [ 2664.215960][ T1088] cont=ffffffff8b1391e0 [ 2664.217531][ T1088] current_req=0000000000000000 [ 2664.219291][ T1088] command_status=-1 [ 2664.220710][ T1088] [ 2664.221634][ T1088] floppy1: floppy timeout called [ 2664.224381][ T1088] [ 2664.226641][ T1088] floppy driver state [ 2664.230527][ T1088] ------------------- 00:45:50 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r0 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x806, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1) 00:45:50 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0x7, 0x4d, 0x2}, 0x7) (async) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x1, 0xff, 0x48, 0x81}, {0x9, 0x81, 0x10, 0x6}, {0xfffb, 0x80, 0x40, 0x3ff}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x5, &(0x7f0000000240)=[{0xff01, 0x4, 0x4, 0x1}, {0x0, 0x5, 0x0, 0x7}, {0x4, 0x4, 0x8a, 0x8660}, {0x7ff, 0x6, 0x73, 0x8}, {0x100, 0x1f, 0x6, 0x101}]}) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async) r4 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x20, 0x24440) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x4) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x6, 0x5, 0x2, 0x3}, {0x1, 0x7, 0x7, 0x2433ab34}, {0x8f, 0x4, 0x0, 0x781c}, {0x2, 0x1, 0x7f, 0x3}, {0x2, 0x6, 0xff, 0x4}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000140)) [ 2664.240559][ T1088] now=4295203564 last interrupt=4294967499 diff=236065 last called handler=main_command_interrupt [ 2664.245485][ T1088] timeout_message=lock fdc [ 2664.254455][ T1088] last output bytes: 00:45:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2100000000000000}, 0x48) 00:45:50 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x127b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2664.263023][ T1088] 0 90 4294967496 [ 2664.265344][ T1088] 1 90 4294967496 [ 2664.267097][ T1088] 2 90 4294967496 [ 2664.268910][ T1088] 12 90 4294967496 [ 2664.270834][ T1088] 1b 90 4294967496 [ 2664.272674][ T1088] ff 90 4294967496 [ 2664.275474][ T1088] 12 80 4294967499 [ 2664.277794][ T1088] 3 90 4294967499 [ 2664.279805][ T1088] 3 80 4294967499 [ 2664.282882][ T1088] a1 90 4294967499 [ 2664.284600][ T1088] 1e 90 4294967499 [ 2664.286171][ T1088] e6 80 4294967499 [ 2664.287765][ T1088] 1 90 4294967499 [ 2664.289349][ T1088] 0 90 4294967499 00:45:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2200000000000000}, 0x48) [ 2664.290876][ T1088] 0 90 4294967499 [ 2664.293480][ T1088] 1 90 4294967499 [ 2664.295328][ T1088] 2 90 4294967499 [ 2664.297521][ T1088] 24 90 4294967499 [ 2664.299413][ T1088] 1b 90 4294967499 [ 2664.301233][ T1088] ff 90 4294967499 [ 2664.303037][ T1088] last result at 4295201781 [ 2664.305215][ T1088] last redo_fd_request at 4295203562 [ 2664.307610][ T1088] status=80 [ 2664.308880][ T1088] fdc_busy=1 [ 2664.310114][ T1088] floppy_work.func=floppy_work_workfn [ 2664.312107][ T1088] cont=ffffffff8b1391e0 [ 2664.314051][ T1088] current_req=0000000000000000 [ 2664.316314][ T1088] command_status=-1 [ 2664.318111][ T1088] [ 2664.319314][ T1088] floppy1: floppy timeout called [ 2664.322057][ T1088] [ 2664.323201][ T1088] floppy driver state [ 2664.325096][ T1088] ------------------- [ 2664.327108][ T1088] now=4295203573 last interrupt=4294967499 diff=236074 last called handler=main_command_interrupt 00:45:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2300000000000000}, 0x48) [ 2664.331596][ T1088] timeout_message=lock fdc [ 2664.335074][ T1088] last output bytes: [ 2664.337496][ T1088] 0 90 4294967496 [ 2664.340285][ T1088] 1 90 4294967496 [ 2664.342237][ T1088] 2 90 4294967496 [ 2664.344164][ T1088] 12 90 4294967496 [ 2664.347304][ T1088] 1b 90 4294967496 [ 2664.348863][ T1088] ff 90 4294967496 [ 2664.350753][ T1088] 12 80 4294967499 [ 2664.352887][ T1088] 3 90 4294967499 [ 2664.354547][ T1088] 3 80 4294967499 [ 2664.356332][ T1088] a1 90 4294967499 [ 2664.357877][ T1088] 1e 90 4294967499 [ 2664.359434][ T1088] e6 80 4294967499 [ 2664.360870][ T1088] 1 90 4294967499 [ 2664.362292][ T1088] 0 90 4294967499 [ 2664.363795][ T1088] 0 90 4294967499 00:45:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0}, 0x90) [ 2664.365330][ T1088] 1 90 4294967499 [ 2664.367550][ T1088] 2 90 4294967499 [ 2664.368984][ T1088] 24 90 4294967499 [ 2664.370685][ T1088] 1b 90 4294967499 [ 2664.372567][ T1088] ff 90 4294967499 [ 2664.374360][ T1088] last result at 4295201781 [ 2664.377316][ T1088] last redo_fd_request at 4295203572 [ 2664.379857][ T1088] status=80 [ 2664.381440][ T1088] fdc_busy=1 [ 2664.383015][ T1088] floppy_work.func=floppy_work_workfn [ 2664.386689][ T1088] cont=ffffffff8b1391e0 [ 2664.388419][ T1088] current_req=0000000000000000 [ 2664.390696][ T1088] command_status=-1 [ 2664.392566][ T1088] [ 2664.393728][ T1088] floppy1: floppy timeout called [ 2664.396595][ T1088] [ 2664.397545][ T1088] floppy driver state [ 2664.402277][ T1088] ------------------- [ 2664.404707][ T1088] now=4295203580 last interrupt=4294967499 diff=236081 last called handler=main_command_interrupt [ 2664.411017][ T1088] timeout_message=lock fdc [ 2664.413015][ T1088] last output bytes: [ 2664.414469][ T1088] 0 90 4294967496 [ 2664.416044][ T1088] 1 90 4294967496 00:45:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xc, 0x6, 0x200}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x2, 0x4, 0x9, 0x6}], 0x10, 0xffff}, 0x90) [ 2664.417812][ T1088] 2 90 4294967496 [ 2664.420218][ T1088] 12 90 4294967496 [ 2664.421736][ T1088] 1b 90 4294967496 [ 2664.423161][ T1088] ff 90 4294967496 [ 2664.424618][ T1088] 12 80 4294967499 [ 2664.426215][ T1088] 3 90 4294967499 [ 2664.427649][ T1088] 3 80 4294967499 [ 2664.429072][ T1088] a1 90 4294967499 [ 2664.430545][ T1088] 1e 90 4294967499 [ 2664.431969][ T1088] e6 80 4294967499 [ 2664.433386][ T1088] 1 90 4294967499 [ 2664.434864][ T1088] 0 90 4294967499 [ 2664.437028][ T1088] 0 90 4294967499 [ 2664.438438][ T1088] 1 90 4294967499 [ 2664.440011][ T1088] 2 90 4294967499 [ 2664.441480][ T1088] 24 90 4294967499 [ 2664.443075][ T1088] 1b 90 4294967499 [ 2664.444863][ T1088] ff 90 4294967499 [ 2664.446646][ T1088] last result at 4295201781 [ 2664.448798][ T1088] last redo_fd_request at 4295203580 [ 2664.451355][ T1088] status=80 [ 2664.452898][ T1088] fdc_busy=1 [ 2664.454159][ T1088] floppy_work.func=floppy_work_workfn [ 2664.457432][ T1088] cont=ffffffff8b1391e0 [ 2664.459029][ T1088] current_req=0000000000000000 [ 2664.460877][ T1088] command_status=-1 [ 2664.462346][ T1088] [ 2664.463368][ T1088] floppy1: floppy timeout called [ 2664.465429][ T1088] [ 2664.466713][ T1088] floppy driver state [ 2664.476163][ T1088] ------------------- [ 2664.477701][ T1088] now=4295203588 last interrupt=4294967499 diff=236089 last called handler=main_command_interrupt 00:45:51 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r0 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x806, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1) syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x806, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1) (async) 00:45:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xc, 0x6, 0x200}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x2, 0x4, 0x9, 0x6}], 0x10, 0xffff}, 0x90) 00:45:51 executing program 1: syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0x7, 0x4d, 0x2}, 0x7) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x1, 0xff, 0x48, 0x81}, {0x9, 0x81, 0x10, 0x6}, {0xfffb, 0x80, 0x40, 0x3ff}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x1, 0xff, 0x48, 0x81}, {0x9, 0x81, 0x10, 0x6}, {0xfffb, 0x80, 0x40, 0x3ff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x5, &(0x7f0000000240)=[{0xff01, 0x4, 0x4, 0x1}, {0x0, 0x5, 0x0, 0x7}, {0x4, 0x4, 0x8a, 0x8660}, {0x7ff, 0x6, 0x73, 0x8}, {0x100, 0x1f, 0x6, 0x101}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x5, &(0x7f0000000240)=[{0xff01, 0x4, 0x4, 0x1}, {0x0, 0x5, 0x0, 0x7}, {0x4, 0x4, 0x8a, 0x8660}, {0x7ff, 0x6, 0x73, 0x8}, {0x100, 0x1f, 0x6, 0x101}]}) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x20, 0x24440) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x6, 0x5, 0x2, 0x3}, {0x1, 0x7, 0x7, 0x2433ab34}, {0x8f, 0x4, 0x0, 0x781c}, {0x2, 0x1, 0x7f, 0x3}, {0x2, 0x6, 0xff, 0x4}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000140)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000140)) [ 2664.481558][ T1088] timeout_message=lock fdc [ 2664.483912][ T1088] last output bytes: 00:45:51 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x127b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2664.485388][ T1088] 0 90 4294967496 [ 2664.489622][ T1088] 1 90 4294967496 [ 2664.491386][ T1088] 2 90 4294967496 [ 2664.501523][ T1088] 12 90 4294967496 [ 2664.505102][ T1088] 1b 90 4294967496 [ 2664.507621][ T1088] ff 90 4294967496 00:45:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xc, 0x6, 0x200}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x2, 0x4, 0x9, 0x6}], 0x10, 0xffff}, 0x90) [ 2664.509331][ T1088] 12 80 4294967499 [ 2664.516455][ T1088] 3 90 4294967499 [ 2664.518299][ T1088] 3 80 4294967499 [ 2664.520080][ T1088] a1 90 4294967499 [ 2664.521843][ T1088] 1e 90 4294967499 [ 2664.523808][ T1088] e6 80 4294967499 [ 2664.525494][ T1088] 1 90 4294967499 [ 2664.528316][ T1088] 0 90 4294967499 [ 2664.530145][ T1088] 0 90 4294967499 [ 2664.532053][ T1088] 1 90 4294967499 [ 2664.533892][ T1088] 2 90 4294967499 [ 2664.535688][ T1088] 24 90 4294967499 [ 2664.537893][ T1088] 1b 90 4294967499 [ 2664.539697][ T1088] ff 90 4294967499 [ 2664.541480][ T1088] last result at 4295201781 [ 2664.543574][ T1088] last redo_fd_request at 4295203586 [ 2664.545582][ T1088] status=80 00:45:51 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) write$P9_RLINK(r0, &(0x7f00000000c0)={0x7, 0x47, 0x2}, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0}, 0x48) [ 2664.547866][ T1088] fdc_busy=1 [ 2664.549454][ T1088] floppy_work.func=floppy_work_workfn [ 2664.551984][ T1088] cont=ffffffff8b1391e0 [ 2664.553698][ T1088] current_req=0000000000000000 [ 2664.555697][ T1088] command_status=-1 [ 2664.561601][ T1088] [ 2664.562822][ T1088] floppy1: floppy timeout called [ 2664.565497][ T1088] [ 2664.569140][ T1088] floppy driver state [ 2664.571450][ T1088] ------------------- 00:45:51 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) write$P9_RLINK(r0, &(0x7f00000000c0)={0x7, 0x47, 0x2}, 0x7) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0}, 0x48) [ 2664.573085][ T1088] now=4295203597 last interrupt=4294967499 diff=236098 last called handler=main_command_interrupt [ 2664.579683][ T1088] timeout_message=lock fdc [ 2664.581702][ T1088] last output bytes: [ 2664.583620][ T1088] 0 90 4294967496 [ 2664.585584][ T1088] 1 90 4294967496 [ 2664.587879][ T1088] 2 90 4294967496 [ 2664.591083][ T1088] 12 90 4294967496 [ 2664.593046][ T1088] 1b 90 4294967496 [ 2664.594982][ T1088] ff 90 4294967496 [ 2664.597763][ T1088] 12 80 4294967499 [ 2664.599696][ T1088] 3 90 4294967499 [ 2664.601536][ T1088] 3 80 4294967499 [ 2664.603434][ T1088] a1 90 4294967499 [ 2664.605309][ T1088] 1e 90 4294967499 [ 2664.607667][ T1088] e6 80 4294967499 00:45:51 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) write$P9_RLINK(r0, &(0x7f00000000c0)={0x7, 0x47, 0x2}, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0}, 0x48) pipe2$9p(&(0x7f0000000080), 0x84880) (async) write$P9_RLINK(r0, &(0x7f00000000c0)={0x7, 0x47, 0x2}, 0x7) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0}, 0x48) (async) [ 2664.610495][ T1088] 1 90 4294967499 [ 2664.613124][ T1088] 0 90 4294967499 [ 2664.615070][ T1088] 0 90 4294967499 [ 2664.617566][ T1088] 1 90 4294967499 [ 2664.619519][ T1088] 2 90 4294967499 [ 2664.621572][ T1088] 24 90 4294967499 [ 2664.623518][ T1088] 1b 90 4294967499 [ 2664.625454][ T1088] ff 90 4294967499 [ 2664.628311][ T1088] last result at 4295201781 [ 2664.630626][ T1088] last redo_fd_request at 4295203596 [ 2664.633500][ T1088] status=80 [ 2664.635242][ T1088] fdc_busy=1 [ 2664.637202][ T1088] floppy_work.func=floppy_work_workfn [ 2664.640622][ T1088] cont=ffffffff8b1391e0 [ 2664.642728][ T1088] current_req=0000000000000000 [ 2664.645164][ T1088] command_status=-1 [ 2664.647464][ T1088] [ 2664.648836][ T1088] floppy1: floppy timeout called [ 2664.651476][ T1088] [ 2664.652893][ T1088] floppy driver state [ 2664.654856][ T1088] ------------------- [ 2664.657017][ T1088] now=4295203606 last interrupt=4294967499 diff=236107 last called handler=main_command_interrupt [ 2664.661734][ T1088] timeout_message=lock fdc [ 2664.663804][ T1088] last output bytes: [ 2664.665359][ T1088] 0 90 4294967496 [ 2664.667124][ T1088] 1 90 4294967496 [ 2664.669051][ T1088] 2 90 4294967496 [ 2664.670953][ T1088] 12 90 4294967496 [ 2664.672776][ T1088] 1b 90 4294967496 [ 2664.674566][ T1088] ff 90 4294967496 [ 2664.678875][ T1088] 12 80 4294967499 [ 2664.680773][ T1088] 3 90 4294967499 [ 2664.682626][ T1088] 3 80 4294967499 [ 2664.684417][ T1088] a1 90 4294967499 [ 2664.685958][ T1088] 1e 90 4294967499 [ 2664.687574][ T1088] e6 80 4294967499 [ 2664.688998][ T1088] 1 90 4294967499 [ 2664.690394][ T1088] 0 90 4294967499 [ 2664.693224][ T1088] 0 90 4294967499 [ 2664.695038][ T1088] 1 90 4294967499 [ 2664.697022][ T1088] 2 90 4294967499 [ 2664.698784][ T1088] 24 90 4294967499 [ 2664.700631][ T1088] 1b 90 4294967499 [ 2664.702413][ T1088] ff 90 4294967499 [ 2664.704209][ T1088] last result at 4295201781 [ 2664.706162][ T1088] last redo_fd_request at 4295203605 [ 2664.708122][ T1088] status=80 [ 2664.709336][ T1088] fdc_busy=1 [ 2664.710553][ T1088] floppy_work.func=floppy_work_workfn [ 2664.712579][ T1088] cont=ffffffff8b1391e0 [ 2664.714498][ T1088] current_req=0000000000000000 [ 2664.716850][ T1088] command_status=-1 [ 2664.718683][ T1088] [ 2664.719899][ T1088] floppy1: floppy timeout called [ 2664.723189][ T1088] [ 2664.724392][ T1088] floppy driver state [ 2664.726414][ T1088] ------------------- [ 2664.728296][ T1088] now=4295203613 last interrupt=4294967499 diff=236114 last called handler=main_command_interrupt [ 2664.733258][ T1088] timeout_message=lock fdc [ 2664.735340][ T1088] last output bytes: [ 2664.737275][ T1088] 0 90 4294967496 [ 2664.739060][ T1088] 1 90 4294967496 [ 2664.740856][ T1088] 2 90 4294967496 [ 2664.742525][ T1088] 12 90 4294967496 [ 2664.744317][ T1088] 1b 90 4294967496 [ 2664.745798][ T1088] ff 90 4294967496 [ 2664.747283][ T1088] 12 80 4294967499 [ 2664.748689][ T1088] 3 90 4294967499 [ 2664.750079][ T1088] 3 80 4294967499 [ 2664.751489][ T1088] a1 90 4294967499 [ 2664.752905][ T1088] 1e 90 4294967499 [ 2664.754340][ T1088] e6 80 4294967499 [ 2664.755723][ T1088] 1 90 4294967499 00:45:51 executing program 3: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x10001, 0x222080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={0x2}) syz_open_dev$floppy(&(0x7f0000000040), 0x8001, 0x101000) syz_open_dev$floppy(&(0x7f00000000c0), 0x8, 0x3) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000100)) 00:45:51 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x7, 0x80000000, 0x2, 0x98, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0xd5f, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, r0}, 0x48) [ 2664.757372][ T1088] 0 90 4294967499 [ 2664.759858][ T1088] 0 90 4294967499 [ 2664.761622][ T1088] 1 90 4294967499 [ 2664.763392][ T1088] 2 90 4294967499 [ 2664.765174][ T1088] 24 90 4294967499 [ 2664.767061][ T1088] 1b 90 4294967499 [ 2664.768802][ T1088] ff 90 4294967499 [ 2664.770190][ T1088] last result at 4295201781 [ 2664.771867][ T1088] last redo_fd_request at 4295203612 [ 2664.773912][ T1088] status=80 [ 2664.775166][ T1088] fdc_busy=1 00:45:51 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x127b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2664.776882][ T1088] floppy_work.func=floppy_work_workfn [ 2664.780224][ T1088] cont=ffffffff8b1391e0 [ 2664.782202][ T1088] current_req=0000000000000000 [ 2664.784427][ T1088] command_status=-1 [ 2664.787673][ T1088] [ 2664.788797][ T1088] floppy1: floppy timeout called [ 2664.797513][ T969] [ 2664.798712][ T969] floppy driver state [ 2664.800631][ T969] ------------------- [ 2664.802529][ T969] now=4295203620 last interrupt=4294967499 diff=236121 last called handler=main_command_interrupt 00:45:51 executing program 1: r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000340)=@name, &(0x7f0000000440)=0x10, 0x80000) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000480)=0x401, 0x4) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) ioctl$FLOPPY_FDFMTEND(r2, 0x249) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000500), 0xc898, 0x3278257e681077c5) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x0, 0x2, 0x6, 0xfffffbff}, {0x6, 0x4, 0x5, 0xfffffffa}, {0x4, 0x3, 0x1f, 0x6b152406}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x400, 0x1, 0x1, 0x1}]}) syz_open_dev$vcsa(&(0x7f0000000380), 0x9, 0x600000) r6 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0) syz_open_dev$vcsa(&(0x7f0000000300), 0xffffff32, 0xc2000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000003c0)={0x0}) r8 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r8, 0x40082102, &(0x7f00000000c0)=r7) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd7000fbdbdf2503000000050006003400000005000500020000000c0004000700000009000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x80) write$P9_RATTACH(r3, &(0x7f0000000040)={0x14, 0x69, 0x2, {0x80, 0x1, 0x6}}, 0x14) [ 2664.808755][ T969] timeout_message=lock fdc [ 2664.811076][ T969] last output bytes: [ 2664.812967][ T969] 0 90 4294967496 [ 2664.814796][ T969] 1 90 4294967496 [ 2664.817232][ T969] 2 90 4294967496 [ 2664.819189][ T969] 12 90 4294967496 [ 2664.820981][ T969] 1b 90 4294967496 [ 2664.822785][ T969] ff 90 4294967496 [ 2664.824592][ T969] 12 80 4294967499 [ 2664.827071][ T969] 3 90 4294967499 [ 2664.828918][ T969] 3 80 4294967499 [ 2664.830713][ T969] a1 90 4294967499 [ 2664.832500][ T969] 1e 90 4294967499 [ 2664.834313][ T969] e6 80 4294967499 [ 2664.836310][ T969] 1 90 4294967499 [ 2664.838267][ T969] 0 90 4294967499 [ 2664.840063][ T969] 0 90 4294967499 [ 2664.841871][ T969] 1 90 4294967499 [ 2664.843655][ T969] 2 90 4294967499 00:45:51 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x7, 0x80000000, 0x2, 0x98, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0xd5f, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, r0}, 0x48) [ 2664.845454][ T969] 24 90 4294967499 [ 2664.847625][ T969] 1b 90 4294967499 [ 2664.849482][ T969] ff 90 4294967499 [ 2664.851407][ T969] last result at 4295201781 [ 2664.853603][ T969] last redo_fd_request at 4295203619 [ 2664.858218][ T969] status=80 [ 2664.859772][ T969] fdc_busy=1 [ 2664.861369][ T969] floppy_work.func=floppy_work_workfn [ 2664.863917][ T969] cont=ffffffff8b1391e0 [ 2664.865994][ T969] current_req=0000000000000000 [ 2664.868273][ T969] command_status=-1 [ 2664.870105][ T969] [ 2664.871306][ T969] floppy1: floppy timeout called 00:45:51 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x7, 0x80000000, 0x2, 0x98, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0xd5f, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, r0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x7, 0x80000000, 0x2, 0x98, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0xd5f, 0x7}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0, r0}, 0x48) (async) [ 2664.873845][ T969] [ 2664.875172][ T969] floppy driver state [ 2664.877192][ T969] ------------------- [ 2664.879074][ T969] now=4295203628 last interrupt=4294967499 diff=236129 last called handler=main_command_interrupt [ 2664.883991][ T969] timeout_message=lock fdc [ 2664.886252][ T969] last output bytes: [ 2664.888081][ T969] 0 90 4294967496 [ 2664.889873][ T969] 1 90 4294967496 [ 2664.891695][ T969] 2 90 4294967496 [ 2664.893377][ T969] 12 90 4294967496 [ 2664.895191][ T969] 1b 90 4294967496 [ 2664.898012][ T969] ff 90 4294967496 [ 2664.899817][ T969] 12 80 4294967499 [ 2664.901617][ T969] 3 90 4294967499 [ 2664.903393][ T969] 3 80 4294967499 [ 2664.905163][ T969] a1 90 4294967499 [ 2664.907016][ T969] 1e 90 4294967499 [ 2664.908788][ T969] e6 80 4294967499 [ 2664.910582][ T969] 1 90 4294967499 [ 2664.912384][ T969] 0 90 4294967499 [ 2664.914175][ T969] 0 90 4294967499 00:45:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x0, 0x0, 0x18c8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100}, 0x48) [ 2664.916065][ T969] 1 90 4294967499 [ 2664.918046][ T969] 2 90 4294967499 [ 2664.919834][ T969] 24 90 4294967499 [ 2664.921647][ T969] 1b 90 4294967499 [ 2664.923414][ T969] ff 90 4294967499 [ 2664.925223][ T969] last result at 4295201781 [ 2664.927533][ T969] last redo_fd_request at 4295203627 [ 2664.930083][ T969] status=80 [ 2664.931630][ T969] fdc_busy=1 [ 2664.933180][ T969] floppy_work.func=floppy_work_workfn [ 2664.935692][ T969] cont=ffffffff8b1391e0 [ 2664.937826][ T969] current_req=0000000000000000 [ 2664.940119][ T969] command_status=-1 [ 2664.941929][ T969] [ 2664.943088][ T969] floppy1: floppy timeout called 00:45:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x0, 0x0, 0x18c8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100}, 0x48) [ 2664.946291][ T969] [ 2664.947220][ T969] floppy driver state [ 2664.948700][ T969] ------------------- [ 2664.950189][ T969] now=4295203635 last interrupt=4294967499 diff=236136 last called handler=main_command_interrupt [ 2664.954083][ T969] timeout_message=lock fdc [ 2664.955764][ T969] last output bytes: [ 2664.957586][ T969] 0 90 4294967496 [ 2664.959015][ T969] 1 90 4294967496 [ 2664.960402][ T969] 2 90 4294967496 [ 2664.961805][ T969] 12 90 4294967496 [ 2664.963224][ T969] 1b 90 4294967496 [ 2664.964622][ T969] ff 90 4294967496 [ 2664.968153][ T969] 12 80 4294967499 [ 2664.969594][ T969] 3 90 4294967499 [ 2664.971077][ T969] 3 80 4294967499 [ 2664.972582][ T969] a1 90 4294967499 [ 2664.974045][ T969] 1e 90 4294967499 [ 2664.975480][ T969] e6 80 4294967499 [ 2664.977003][ T969] 1 90 4294967499 [ 2664.978419][ T969] 0 90 4294967499 [ 2664.979850][ T969] 0 90 4294967499 [ 2664.981281][ T969] 1 90 4294967499 [ 2664.982756][ T969] 2 90 4294967499 [ 2664.984239][ T969] 24 90 4294967499 [ 2664.985682][ T969] 1b 90 4294967499 [ 2664.990061][ T969] ff 90 4294967499 [ 2664.991517][ T969] last result at 4295201781 [ 2664.993208][ T969] last redo_fd_request at 4295203635 [ 2664.995153][ T969] status=80 [ 2664.999305][ T969] fdc_busy=1 [ 2665.000551][ T969] floppy_work.func=floppy_work_workfn [ 2665.002567][ T969] cont=ffffffff8b1391e0 [ 2665.004100][ T969] current_req=0000000000000000 [ 2665.007052][ T969] command_status=-1 [ 2665.008598][ T969] [ 2665.009564][ T969] floppy1: floppy timeout called [ 2665.012086][ T969] [ 2665.013044][ T969] floppy driver state [ 2665.014813][ T969] ------------------- [ 2665.016729][ T969] now=4295203642 last interrupt=4294967499 diff=236143 last called handler=main_command_interrupt [ 2665.020577][ T969] timeout_message=lock fdc [ 2665.022228][ T969] last output bytes: [ 2665.023731][ T969] 0 90 4294967496 [ 2665.025150][ T969] 1 90 4294967496 [ 2665.026642][ T969] 2 90 4294967496 [ 2665.028059][ T969] 12 90 4294967496 [ 2665.029473][ T969] 1b 90 4294967496 [ 2665.030864][ T969] ff 90 4294967496 [ 2665.032606][ T969] 12 80 4294967499 [ 2665.033967][ T969] 3 90 4294967499 [ 2665.035223][ T969] 3 80 4294967499 00:45:51 executing program 3: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x10001, 0x222080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={0x2}) (async) syz_open_dev$floppy(&(0x7f0000000040), 0x8001, 0x101000) (async) syz_open_dev$floppy(&(0x7f00000000c0), 0x8, 0x3) (async) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000100)) 00:45:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x0, 0x0, 0x18c8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100}, 0x48) [ 2665.036619][ T969] a1 90 4294967499 [ 2665.038693][ T969] 1e 90 4294967499 [ 2665.040205][ T969] e6 80 4294967499 [ 2665.041626][ T969] 1 90 4294967499 [ 2665.043093][ T969] 0 90 4294967499 [ 2665.044510][ T969] 0 90 4294967499 [ 2665.045992][ T969] 1 90 4294967499 [ 2665.047404][ T969] 2 90 4294967499 00:45:51 executing program 1: r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000340)=@name, &(0x7f0000000440)=0x10, 0x80000) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000480)=0x401, 0x4) (async) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) (async, rerun: 64) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async) ioctl$FLOPPY_FDFMTEND(r2, 0x249) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async, rerun: 64) r4 = syz_open_dev$vcsa(&(0x7f0000000500), 0xc898, 0x3278257e681077c5) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x0, 0x2, 0x6, 0xfffffbff}, {0x6, 0x4, 0x5, 0xfffffffa}, {0x4, 0x3, 0x1f, 0x6b152406}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x400, 0x1, 0x1, 0x1}]}) syz_open_dev$vcsa(&(0x7f0000000380), 0x9, 0x600000) (async, rerun: 64) r6 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000300), 0xffffff32, 0xc2000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000003c0)={0x0}) r8 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r8, 0x40082102, &(0x7f00000000c0)=r7) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd7000fbdbdf2503000000050006003400000005000500020000000c0004000700000009000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x80) write$P9_RATTACH(r3, &(0x7f0000000040)={0x14, 0x69, 0x2, {0x80, 0x1, 0x6}}, 0x14) [ 2665.048810][ T969] 24 90 4294967499 00:45:51 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x127a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2665.051387][ T969] 1b 90 4294967499 [ 2665.052813][ T969] ff 90 4294967499 [ 2665.054218][ T969] last result at 4295201781 [ 2665.056370][ T969] last redo_fd_request at 4295203641 [ 2665.058382][ T969] status=80 [ 2665.059571][ T969] fdc_busy=1 [ 2665.061100][ T969] floppy_work.func=floppy_work_workfn [ 2665.063216][ T969] cont=ffffffff8b1391e0 [ 2665.064772][ T969] current_req=0000000000000000 [ 2665.067081][ T969] command_status=-1 [ 2665.068535][ T969] [ 2665.069460][ T969] floppy1: floppy timeout called [ 2665.089561][ T1088] 00:45:51 executing program 0: r0 = openat$khugepaged_scan(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xbc) r1 = gettid() tkill(r1, 0x11) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000180)={r1}) write$P9_RREMOVE(r0, &(0x7f00000001c0)={0x7, 0x7b, 0x1}, 0x7) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x2b28, 0x7fff, 0xfffffffe, 0x1608, 0x1, 0x0, '\x00', 0x0, r2, 0x2, 0x2, 0x5, 0x1}, 0x48) [ 2665.102344][ T1088] floppy driver state [ 2665.116189][ T1088] ------------------- [ 2665.118209][ T1088] now=4295203652 last interrupt=4294967499 diff=236153 last called handler=main_command_interrupt [ 2665.123309][ T1088] timeout_message=lock fdc [ 2665.125628][ T1088] last output bytes: [ 2665.127915][ T1088] 0 90 4294967496 [ 2665.129491][ T1088] 1 90 4294967496 [ 2665.131050][ T1088] 2 90 4294967496 [ 2665.132652][ T1088] 12 90 4294967496 [ 2665.134225][ T1088] 1b 90 4294967496 [ 2665.135762][ T1088] ff 90 4294967496 [ 2665.138894][ T1088] 12 80 4294967499 [ 2665.141124][ T1088] 3 90 4294967499 [ 2665.143462][ T1088] 3 80 4294967499 [ 2665.145272][ T1088] a1 90 4294967499 [ 2665.146918][ T1088] 1e 90 4294967499 [ 2665.148911][ T1088] e6 80 4294967499 [ 2665.150446][ T1088] 1 90 4294967499 [ 2665.151980][ T1088] 0 90 4294967499 [ 2665.153543][ T1088] 0 90 4294967499 [ 2665.155390][ T1088] 1 90 4294967499 [ 2665.158271][ T1088] 2 90 4294967499 [ 2665.160082][ T1088] 24 90 4294967499 [ 2665.161608][ T1088] 1b 90 4294967499 [ 2665.163100][ T1088] ff 90 4294967499 [ 2665.164620][ T1088] last result at 4295201781 [ 2665.167210][ T1088] last redo_fd_request at 4295203649 [ 2665.169368][ T1088] status=80 [ 2665.170678][ T1088] fdc_busy=1 [ 2665.172049][ T1088] floppy_work.func=floppy_work_workfn [ 2665.174196][ T1088] cont=ffffffff8b1391e0 [ 2665.175798][ T1088] current_req=0000000000000000 [ 2665.179023][ T1088] command_status=-1 [ 2665.180616][ T1088] [ 2665.181533][ T1088] floppy1: floppy timeout called [ 2665.185403][ T1088] [ 2665.186621][ T1088] floppy driver state [ 2665.188425][ T1088] ------------------- [ 2665.189946][ T1088] now=4295203659 last interrupt=4294967499 diff=236160 last called handler=main_command_interrupt [ 2665.193937][ T1088] timeout_message=lock fdc 00:45:51 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x127a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2665.195603][ T1088] last output bytes: [ 2665.197616][ T1088] 0 90 4294967496 [ 2665.199331][ T1088] 1 90 4294967496 [ 2665.201077][ T1088] 2 90 4294967496 [ 2665.202756][ T1088] 12 90 4294967496 [ 2665.204425][ T1088] 1b 90 4294967496 [ 2665.206293][ T1088] ff 90 4294967496 [ 2665.207970][ T1088] 12 80 4294967499 [ 2665.209737][ T1088] 3 90 4294967499 [ 2665.211538][ T1088] 3 80 4294967499 [ 2665.213302][ T1088] a1 90 4294967499 [ 2665.214935][ T1088] 1e 90 4294967499 [ 2665.216563][ T1088] e6 80 4294967499 [ 2665.218335][ T1088] 1 90 4294967499 [ 2665.220061][ T1088] 0 90 4294967499 [ 2665.221814][ T1088] 0 90 4294967499 00:45:51 executing program 0: r0 = openat$khugepaged_scan(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="bc000000750200b1000000767196e7ef98dd7cdc09f3e149e2741395412723e692e1018f3c8d07ce0700000000000000e341dea4077a73c8dd74189ba79ed012b9d8d1754f9dba781a533429b1d961b0dea207218c49be6dc53defbaca9600c3b6aa56eb4f8f5ba65fb1d1c7717a9269bb18914a5fec02db70ae2cffbdc3cd551b3c3d6b6b0000001a40d56e836776798277640a225f029988b97f6b95f32a4b918c6a897c4cca1e9a1940b43dc21af50cbc5a04cbe36a1a06af4b8ebc5dde9f3360694fae1f4399b7284fb394c19af527b2a38aaf71697999174d99e0f525002665f3ff7c4bd61aadba76dc1d0ee96c78ba91e6eac7dbdc3a787685e90dc06804f50000000000000000"], 0xbc) r1 = gettid() tkill(r1, 0x11) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000180)={r1}) write$P9_RREMOVE(r0, &(0x7f00000001c0)={0x7, 0x7b, 0x1}, 0x7) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x2b28, 0x7fff, 0xfffffffe, 0x1608, 0x1, 0x0, '\x00', 0x0, r2, 0x2, 0x2, 0x5, 0x1}, 0x48) openat$khugepaged_scan(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xbc) (async) gettid() (async) tkill(r1, 0x11) (async) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000180)={r1}) (async) write$P9_RREMOVE(r0, &(0x7f00000001c0)={0x7, 0x7b, 0x1}, 0x7) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x2b28, 0x7fff, 0xfffffffe, 0x1608, 0x1, 0x0, '\x00', 0x0, r2, 0x2, 0x2, 0x5, 0x1}, 0x48) (async) [ 2665.223534][ T1088] 1 90 4294967499 [ 2665.225498][ T1088] 2 90 4294967499 [ 2665.227321][ T1088] 24 90 4294967499 [ 2665.229121][ T1088] 1b 90 4294967499 [ 2665.230836][ T1088] ff 90 4294967499 [ 2665.232618][ T1088] last result at 4295201781 [ 2665.234692][ T1088] last redo_fd_request at 4295203658 [ 2665.237245][ T1088] status=80 [ 2665.238913][ T1088] fdc_busy=1 [ 2665.240428][ T1088] floppy_work.func=floppy_work_workfn [ 2665.243456][ T1088] cont=ffffffff8b1391e0 [ 2665.245382][ T1088] current_req=0000000000000000 [ 2665.247640][ T1088] command_status=-1 [ 2665.249383][ T1088] [ 2665.250589][ T1088] floppy1: floppy timeout called [ 2665.256683][ T969] [ 2665.260164][ T969] floppy driver state [ 2665.265954][ T969] ------------------- [ 2665.267872][ T969] now=4295203667 last interrupt=4294967499 diff=236168 last called handler=main_command_interrupt [ 2665.272683][ T969] timeout_message=lock fdc [ 2665.274705][ T969] last output bytes: [ 2665.281596][ T969] 0 90 4294967496 [ 2665.286196][ T969] 1 90 4294967496 [ 2665.287718][ T969] 2 90 4294967496 [ 2665.290577][ T969] 12 90 4294967496 [ 2665.292872][ T969] 1b 90 4294967496 00:45:51 executing program 0: r0 = openat$khugepaged_scan(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xbc) r1 = gettid() tkill(r1, 0x11) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000180)={r1}) write$P9_RREMOVE(r0, &(0x7f00000001c0)={0x7, 0x7b, 0x1}, 0x7) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x2b28, 0x7fff, 0xfffffffe, 0x1608, 0x1, 0x0, '\x00', 0x0, r2, 0x2, 0x2, 0x5, 0x1}, 0x48) [ 2665.295095][ T969] ff 90 4294967496 [ 2665.296954][ T969] 12 80 4294967499 [ 2665.298592][ T969] 3 90 4294967499 [ 2665.300107][ T969] 3 80 4294967499 [ 2665.301630][ T969] a1 90 4294967499 [ 2665.303234][ T969] 1e 90 4294967499 [ 2665.304772][ T969] e6 80 4294967499 [ 2665.306550][ T969] 1 90 4294967499 [ 2665.308356][ T969] 0 90 4294967499 [ 2665.310188][ T969] 0 90 4294967499 [ 2665.312279][ T969] 1 90 4294967499 [ 2665.314131][ T969] 2 90 4294967499 [ 2665.315755][ T969] 24 90 4294967499 [ 2665.317628][ T969] 1b 90 4294967499 [ 2665.319421][ T969] ff 90 4294967499 [ 2665.321213][ T969] last result at 4295201781 [ 2665.323352][ T969] last redo_fd_request at 4295203666 [ 2665.325816][ T969] status=80 [ 2665.328774][ T969] fdc_busy=1 [ 2665.330283][ T969] floppy_work.func=floppy_work_workfn [ 2665.332433][ T969] cont=ffffffff8b1391e0 [ 2665.334189][ T969] current_req=0000000000000000 [ 2665.336211][ T969] command_status=-1 [ 2665.338251][ T969] [ 2665.339639][ T969] floppy1: floppy timeout called [ 2665.342629][ T969] [ 2665.343872][ T969] floppy driver state [ 2665.345817][ T969] ------------------- 00:45:51 executing program 3: syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) (async) r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x800) syz_open_dev$vcsa(&(0x7f0000000080), 0x10001, 0x222080) (async) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x10001, 0x222080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={0x2}) syz_open_dev$floppy(&(0x7f0000000040), 0x8001, 0x101000) syz_open_dev$floppy(&(0x7f00000000c0), 0x8, 0x3) ioctl$FLOPPY_FDGETMAXERRS(r0, 0x8014020e, &(0x7f0000000100)) 00:45:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000140)=[{0x3, 0x5, 0x7, 0x7}, {0x0, 0x4, 0x9, 0xb}, {0x0, 0x5, 0x6, 0x7}], 0x10, 0x1}, 0x90) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x78, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x9458]}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x32}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}]}, 0x78}}, 0x4000084) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000000, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@blksize}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xffff}}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x6}}], [{@permit_directio}, {@fowner_lt={'fowner<', 0xee00}}, {@measure}, {@appraise_type}, {@audit}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa#\x00'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}}) r4 = syz_open_dev$vcsa(&(0x7f0000000240), 0x9, 0x200100) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r5}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x9, 0x7, 0x7}) 00:45:51 executing program 1: r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000340)=@name, &(0x7f0000000440)=0x10, 0x80000) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000480)=0x401, 0x4) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async) ioctl$FLOPPY_FDFMTEND(r2, 0x249) (async) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000500), 0xc898, 0x3278257e681077c5) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, 0x0) (async) r5 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x0, 0x2, 0x6, 0xfffffbff}, {0x6, 0x4, 0x5, 0xfffffffa}, {0x4, 0x3, 0x1f, 0x6b152406}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x400, 0x1, 0x1, 0x1}]}) (async) syz_open_dev$vcsa(&(0x7f0000000380), 0x9, 0x600000) (async) r6 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000300), 0xffffff32, 0xc2000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000003c0)={0x0}) (async) r8 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r8, 0x40082102, &(0x7f00000000c0)=r7) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) (async, rerun: 32) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100028bd7000fbdbdf2503000000050006003400000005000500020000000c0004000700000009000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async, rerun: 32) write$P9_RATTACH(r3, &(0x7f0000000040)={0x14, 0x69, 0x2, {0x80, 0x1, 0x6}}, 0x14) [ 2665.359548][ T969] now=4295203676 last interrupt=4294967499 diff=236177 last called handler=main_command_interrupt [ 2665.363637][ T969] timeout_message=lock fdc [ 2665.365346][ T969] last output bytes: [ 2665.376088][ T969] 0 90 4294967496 [ 2665.377616][ T969] 1 90 4294967496 00:45:51 executing program 2: r0 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r0, 0x127a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2665.379038][ T969] 2 90 4294967496 [ 2665.380573][ T969] 12 90 4294967496 [ 2665.382049][ T969] 1b 90 4294967496 [ 2665.383486][ T969] ff 90 4294967496 [ 2665.384930][ T969] 12 80 4294967499 [ 2665.386677][ T969] 3 90 4294967499 [ 2665.394345][ T969] 3 80 4294967499 [ 2665.395909][ T969] a1 90 4294967499 [ 2665.397591][ T969] 1e 90 4294967499 [ 2665.399380][ T969] e6 80 4294967499 [ 2665.400834][ T969] 1 90 4294967499 [ 2665.402283][ T969] 0 90 4294967499 [ 2665.403749][ T969] 0 90 4294967499 [ 2665.405193][ T969] 1 90 4294967499 [ 2665.408623][ T969] 2 90 4294967499 [ 2665.410077][ T969] 24 90 4294967499 [ 2665.411513][ T969] 1b 90 4294967499 [ 2665.412977][ T969] ff 90 4294967499 [ 2665.414401][ T969] last result at 4295201781 [ 2665.416990][ T969] last redo_fd_request at 4295203674 [ 2665.419046][ T969] status=80 [ 2665.420286][ T969] fdc_busy=1 [ 2665.421542][ T969] floppy_work.func=floppy_work_workfn 00:45:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000140)=[{0x3, 0x5, 0x7, 0x7}, {0x0, 0x4, 0x9, 0xb}, {0x0, 0x5, 0x6, 0x7}], 0x10, 0x1}, 0x90) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x78, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x9458]}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x32}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}]}, 0x78}}, 0x4000084) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000000, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@blksize}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xffff}}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x6}}], [{@permit_directio}, {@fowner_lt={'fowner<', 0xee00}}, {@measure}, {@appraise_type}, {@audit}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa#\x00'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}}) r4 = syz_open_dev$vcsa(&(0x7f0000000240), 0x9, 0x200100) (async) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r5}, 0x10) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x9, 0x7, 0x7}) [ 2665.424453][ T969] cont=ffffffff8b1391e0 [ 2665.426854][ T969] current_req=0000000000000000 [ 2665.428694][ T969] command_status=-1 [ 2665.430179][ T969] [ 2665.431237][ T969] floppy1: floppy timeout called [ 2665.433311][ T969] [ 2665.434228][ T969] floppy driver state [ 2665.435788][ T969] ------------------- [ 2665.438256][ T969] now=4295203684 last interrupt=4294967499 diff=236185 last called handler=main_command_interrupt [ 2665.442375][ T969] timeout_message=lock fdc [ 2665.444100][ T969] last output bytes: [ 2665.445626][ T969] 0 90 4294967496 [ 2665.447558][ T969] 1 90 4294967496 [ 2665.449098][ T969] 2 90 4294967496 [ 2665.450540][ T969] 12 90 4294967496 [ 2665.452033][ T969] 1b 90 4294967496 [ 2665.453484][ T969] ff 90 4294967496 [ 2665.454895][ T969] 12 80 4294967499 [ 2665.456445][ T969] 3 90 4294967499 [ 2665.457888][ T969] 3 80 4294967499 [ 2665.459289][ T969] a1 90 4294967499 00:45:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000140)=[{0x3, 0x5, 0x7, 0x7}, {0x0, 0x4, 0x9, 0xb}, {0x0, 0x5, 0x6, 0x7}], 0x10, 0x1}, 0x90) (async) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), 0xffffffffffffffff) (rerun: 32) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x78, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x9458]}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x32}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}]}, 0x78}}, 0x4000084) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async, rerun: 64) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) (rerun: 64) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000000, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@blksize}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xffff}}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x6}}], [{@permit_directio}, {@fowner_lt={'fowner<', 0xee00}}, {@measure}, {@appraise_type}, {@audit}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa#\x00'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}}) (async, rerun: 64) r4 = syz_open_dev$vcsa(&(0x7f0000000240), 0x9, 0x200100) (rerun: 64) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r5}, 0x10) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x9, 0x7, 0x7}) (rerun: 64) [ 2665.460708][ T969] 1e 90 4294967499 [ 2665.462338][ T969] e6 80 4294967499 [ 2665.463725][ T969] 1 90 4294967499 [ 2665.465154][ T969] 0 90 4294967499 [ 2665.467081][ T969] 0 90 4294967499 [ 2665.468547][ T969] 1 90 4294967499 [ 2665.469993][ T969] 2 90 4294967499 [ 2665.471453][ T969] 24 90 4294967499 [ 2665.472875][ T969] 1b 90 4294967499 [ 2665.474293][ T969] ff 90 4294967499 [ 2665.475718][ T969] last result at 4295201781 [ 2665.477845][ T969] last redo_fd_request at 4295203683 [ 2665.479660][ T969] status=80 [ 2665.480996][ T969] fdc_busy=1 [ 2665.482321][ T969] floppy_work.func=floppy_work_workfn [ 2665.484362][ T969] cont=ffffffff8b1391e0 [ 2665.486287][ T969] current_req=0000000000000000 [ 2665.488119][ T969] command_status=-1 [ 2665.489589][ T969] [ 2665.490534][ T969] floppy1: floppy timeout called [ 2665.492633][ T969] [ 2665.493586][ T969] floppy driver state [ 2665.495098][ T969] ------------------- [ 2665.497052][ T969] now=4295203690 last interrupt=4294967499 diff=236191 last called handler=main_command_interrupt [ 2665.501034][ T969] timeout_message=lock fdc [ 2665.502837][ T969] last output bytes: [ 2665.504365][ T969] 0 90 4294967496 [ 2665.505824][ T969] 1 90 4294967496 [ 2665.507594][ T969] 2 90 4294967496 [ 2665.509052][ T969] 12 90 4294967496 [ 2665.510471][ T969] 1b 90 4294967496 [ 2665.511938][ T969] ff 90 4294967496 [ 2665.513356][ T969] 12 80 4294967499 [ 2665.514734][ T969] 3 90 4294967499 [ 2665.516573][ T969] 3 80 4294967499 [ 2665.517977][ T969] a1 90 4294967499 [ 2665.519218][ T969] 1e 90 4294967499 [ 2665.520461][ T969] e6 80 4294967499 [ 2665.521898][ T969] 1 90 4294967499 [ 2665.523312][ T969] 0 90 4294967499 [ 2665.524738][ T969] 0 90 4294967499 [ 2665.526543][ T969] 1 90 4294967499 [ 2665.527972][ T969] 2 90 4294967499 [ 2665.529402][ T969] 24 90 4294967499 [ 2665.530812][ T969] 1b 90 4294967499 [ 2665.532280][ T969] ff 90 4294967499 [ 2665.533837][ T969] last result at 4295201781 [ 2665.535553][ T969] last redo_fd_request at 4295203689 [ 2665.538038][ T969] status=80 [ 2665.539301][ T969] fdc_busy=1 [ 2665.540830][ T969] floppy_work.func=floppy_work_workfn 00:45:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0}, 0x48) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0xc7c5, 0x100) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xa7}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0xa4, &(0x7f0000000100)=""/164, 0x1e00, 0x4e, '\x00', 0x0, 0x16, r1, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xf, 0x8000, 0xca67}, 0x10, 0xffffffffffffffff, r2, 0x3, &(0x7f0000000280)=[r0], &(0x7f00000002c0)=[{0x3, 0x3, 0x4, 0x5}, {0x2, 0x3, 0x8, 0x2}, {0x1, 0x5, 0xd, 0x5}], 0x10, 0x8}, 0x90) [ 2665.543341][ T969] cont=ffffffff8b1391e0 [ 2665.545406][ T969] current_req=0000000000000000 [ 2665.547972][ T969] command_status=-1 [ 2665.549700][ T969] [ 2665.550629][ T969] floppy1: floppy timeout called 00:45:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000140)=[{0x3, 0x5, 0x7, 0x7}, {0x0, 0x4, 0x9, 0xb}, {0x0, 0x5, 0x6, 0x7}], 0x10, 0x1}, 0x90) r0 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x78, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x9458]}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x32}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}]}, 0x78}}, 0x4000084) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000000, &(0x7f00000005c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@blksize}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xffff}}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x6}}], [{@permit_directio}, {@fowner_lt={'fowner<', 0xee00}}, {@measure}, {@appraise_type}, {@audit}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa#\x00'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}}) r4 = syz_open_dev$vcsa(&(0x7f0000000240), 0x9, 0x200100) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r5}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x9, 0x7, 0x7}) [ 2665.566231][ T969] [ 2665.567997][ T969] floppy driver state 00:45:52 executing program 3: ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f0000000000)) r0 = syz_open_dev$floppy(&(0x7f0000000040), 0xff1, 0x200) ioctl$FLOPPY_FDGETPRM(r0, 0x801c0204, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='$,\x00'}) ioctl$FLOPPY_FDPOLLDRVSTAT(r0, 0x80340213, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1}) 00:45:52 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x400) write$P9_RSTATFS(r0, &(0x7f00000000c0)={0x43, 0x9, 0x1, {0x80000000, 0x9a, 0x7fffffff, 0x351a, 0x2, 0x4, 0x401, 0x4, 0x3}}, 0x43) write$P9_RLINK(r0, &(0x7f0000000140)={0x7, 0x47, 0x2}, 0x7) r1 = syz_open_dev$floppy(&(0x7f0000000000), 0xff1, 0x0) ioctl$FLOPPY_FDGETPRM(r1, 0x801c0204, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2665.572460][ T969] ------------------- [ 2665.574719][ T969] now=4295203697 last interrupt=4294967499 diff=236198 last called handler=main_command_interrupt [ 2665.579838][ T969] timeout_message=lock fdc [ 2665.581965][ T969] last output bytes: [ 2665.585993][ T969] 0 90 4294967496 [ 2665.587823][ T969] 1 90 4294967496 [ 2665.589606][ T969] 2 90 4294967496 [ 2665.591426][ T969] 12 90 4294967496 [ 2665.591438][ T969] 1b 90 4294967496 [ 2665.591453][ T969] ff 90 4294967496 [ 2665.591461][ T969] 12 80 4294967499 [ 2665.591469][ T969] 3 90 4294967499 [ 2665.602766][ T969] 3 80 4294967499 00:45:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0}, 0x48) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0xc7c5, 0x100) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xa7}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0xa4, &(0x7f0000000100)=""/164, 0x1e00, 0x4e, '\x00', 0x0, 0x16, r1, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xf, 0x8000, 0xca67}, 0x10, 0xffffffffffffffff, r2, 0x3, &(0x7f0000000280)=[r0], &(0x7f00000002c0)=[{0x3, 0x3, 0x4, 0x5}, {0x2, 0x3, 0x8, 0x2}, {0x1, 0x5, 0xd, 0x5}], 0x10, 0x8}, 0x90) [ 2665.612257][ T969] a1 90 4294967499 [ 2665.614086][ T969] 1e 90 4294967499 [ 2665.616487][ T969] e6 80 4294967499 [ 2665.618524][ T969] 1 90 4294967499 [ 2665.620496][ T969] 0 90 4294967499 [ 2665.622480][ T969] 0 90 4294967499 [ 2665.624427][ T969] 1 90 4294967499 [ 2665.626500][ T969] 2 90 4294967499 00:45:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0}, 0x48) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0xc7c5, 0x100) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xa7}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0xa4, &(0x7f0000000100)=""/164, 0x1e00, 0x4e, '\x00', 0x0, 0x16, r1, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xf, 0x8000, 0xca67}, 0x10, 0xffffffffffffffff, r2, 0x3, &(0x7f0000000280)=[r0], &(0x7f00000002c0)=[{0x3, 0x3, 0x4, 0x5}, {0x2, 0x3, 0x8, 0x2}, {0x1, 0x5, 0xd, 0x5}], 0x10, 0x8}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x0, 0x10d0}, 0x48) (async) syz_open_dev$vcsa(&(0x7f00000001c0), 0xc7c5, 0x100) (async) syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xa7}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0xa4, &(0x7f0000000100)=""/164, 0x1e00, 0x4e, '\x00', 0x0, 0x16, r1, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xf, 0x8000, 0xca67}, 0x10, 0xffffffffffffffff, r2, 0x3, &(0x7f0000000280)=[r0], &(0x7f00000002c0)=[{0x3, 0x3, 0x4, 0x5}, {0x2, 0x3, 0x8, 0x2}, {0x1, 0x5, 0xd, 0x5}], 0x10, 0x8}, 0x90) (async) [ 2665.629054][ T969] 24 90 4294967499 [ 2665.631177][ T969] 1b 90 4294967499 [ 2665.633109][ T969] ff 90 4294967499 [ 2665.635047][ T969] last result at 4295201781 [ 2665.637715][ T969] last redo_fd_request at 4295203695 [ 2665.640413][ T969] status=80 [ 2665.642083][ T969] fdc_busy=1 [ 2665.643784][ T969] floppy_work.func=floppy_work_workfn [ 2665.647717][ T969] cont=ffffffff8b1391e0 [ 2665.649704][ T969] current_req=0000000000000000 [ 2665.651966][ T969] command_status=-1 [ 2665.653884][ T969] [ 2665.655216][ T969] floppy1: floppy timeout called [ 2665.658408][ T969] [ 2665.659742][ T969] floppy driver state [ 2665.661814][ T969] ------------------- [ 2665.663887][ T969] now=4295203706 last interrupt=4294967499 diff=236207 last called handler=main_command_interrupt 00:45:52 executing program 2: r0 = openat$khugepaged_scan(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xbc) r1 = gettid() tkill(r1, 0x11) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000180)={r1}) write$P9_RREMOVE(r0, &(0x7f00000001c0)={0x7, 0x7b, 0x1}, 0x7) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x2b28, 0x7fff, 0xfffffffe, 0x1608, 0x1, 0x0, '\x00', 0x0, r2, 0x2, 0x2, 0x5, 0x1}, 0x48) [ 2665.669672][ T969] timeout_message=lock fdc [ 2665.672536][ T969] last output bytes: [ 2665.674600][ T969] 0 90 4294967496 [ 2665.676605][ T969] 1 90 4294967496 [ 2665.678555][ T969] 2 90 4294967496 [ 2665.680542][ T969] 12 90 4294967496 [ 2665.680555][ T969] 1b 90 4294967496 [ 2665.680564][ T969] ff 90 4294967496 [ 2665.680572][ T969] 12 80 4294967499 [ 2665.680580][ T969] 3 90 4294967499 [ 2665.680588][ T969] 3 80 4294967499 [ 2665.680596][ T969] a1 90 4294967499 [ 2665.680604][ T969] 1e 90 4294967499 [ 2665.680613][ T969] e6 80 4294967499 00:45:52 executing program 0: r0 = openat$capi20(0xffffff9c, &(0x7f0000000000), 0x70b900, 0x0) write$capi20_data(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x108) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0xf7ff4f11710513f5, r0}, 0x14) openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) [ 2665.680621][ T969] 1 90 4294967499 [ 2665.680630][ T969] 0 90 4294967499 [ 2665.680638][ T969] 0 90 4294967499 [ 2665.680647][ T969] 1 90 4294967499 [ 2665.680655][ T969] 2 90 4294967499 [ 2665.680663][ T969] 24 90 4294967499 [ 2665.680671][ T969] 1b 90 4294967499 [ 2665.680679][ T969] ff 90 4294967499 [ 2665.680687][ T969] last result at 4295201781 [ 2665.680693][ T969] last redo_fd_request at 4295203706 [ 2665.680737][ T969] status=80 [ 2665.680745][ T969] fdc_busy=1 00:45:52 executing program 2: r0 = openat$khugepaged_scan(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xbc) r1 = gettid() tkill(r1, 0x11) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000180)={r1}) write$P9_RREMOVE(r0, &(0x7f00000001c0)={0x7, 0x7b, 0x1}, 0x7) r2 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x2b28, 0x7fff, 0xfffffffe, 0x1608, 0x1, 0x0, '\x00', 0x0, r2, 0x2, 0x2, 0x5, 0x1}, 0x48) [ 2665.680751][ T969] floppy_work.func=floppy_work_workfn [ 2665.680774][ T969] cont=ffffffff8b1391e0 [ 2665.680781][ T969] current_req=0000000000000000 [ 2665.680788][ T969] command_status=-1 [ 2665.680794][ T969] [ 2665.680844][ T969] floppy1: floppy timeout called [ 2665.684902][ T969] [ 2665.684910][ T969] floppy driver state [ 2665.684915][ T969] ------------------- [ 2665.684919][ T969] now=4295203708 last interrupt=4294967499 diff=236209 last called handler=main_command_interrupt [ 2665.684991][ T969] timeout_message=lock fdc [ 2665.684998][ T969] last output bytes: [ 2665.685002][ T969] 0 90 4294967496 00:45:52 executing program 0: r0 = openat$capi20(0xffffff9c, &(0x7f0000000000), 0x70b900, 0x0) write$capi20_data(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x108) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0xf7ff4f11710513f5, r0}, 0x14) (async) openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) [ 2665.685011][ T969] 1 90 4294967496 [ 2665.685019][ T969] 2 90 4294967496 [ 2665.685159][ T969] 12 90 4294967496 [ 2665.685168][ T969] 1b 90 4294967496 [ 2665.685177][ T969] ff 90 4294967496 [ 2665.685185][ T969] 12 80 4294967499 [ 2665.685193][ T969] 3 90 4294967499 [ 2665.685201][ T969] 3 80 4294967499 [ 2665.685210][ T969] a1 90 4294967499 [ 2665.685218][ T969] 1e 90 4294967499 [ 2665.685226][ T969] e6 80 4294967499 [ 2665.685235][ T969] 1 90 4294967499 [ 2665.685243][ T969] 0 90 4294967499 [ 2665.685252][ T969] 0 90 4294967499 [ 2665.685260][ T969] 1 90 4294967499 [ 2665.685268][ T969] 2 90 4294967499 [ 2665.685276][ T969] 24 90 4294967499 [ 2665.685284][ T969] 1b 90 4294967499 [ 2665.685292][ T969] ff 90 4294967499 [ 2665.685300][ T969] last result at 4295201781 [ 2665.685306][ T969] last redo_fd_request at 4295203708 [ 2665.685353][ T969] status=80 [ 2665.686319][ T969] fdc_busy=1 [ 2665.686327][ T969] floppy_work.func=floppy_work_workfn [ 2665.686348][ T969] cont=ffffffff8b1391e0 [ 2665.686355][ T969] current_req=0000000000000000 [ 2665.686361][ T969] command_status=-1 [ 2665.686367][ T969] [ 2665.686421][ T969] floppy1: floppy timeout called [ 2665.688985][ T969] [ 2665.688991][ T969] floppy driver state [ 2665.688997][ T969] ------------------- [ 2665.689001][ T969] now=4295203709 last interrupt=4294967499 diff=236210 last called handler=main_command_interrupt [ 2665.689020][ T969] timeout_message=lock fdc [ 2665.689026][ T969] last output bytes: [ 2665.689031][ T969] 0 90 4294967496 [ 2665.689039][ T969] 1 90 4294967496 [ 2665.689047][ T969] 2 90 4294967496 [ 2665.689055][ T969] 12 90 4294967496 [ 2665.689063][ T969] 1b 90 4294967496 [ 2665.689071][ T969] ff 90 4294967496 [ 2665.689080][ T969] 12 80 4294967499 [ 2665.689087][ T969] 3 90 4294967499 [ 2665.689096][ T969] 3 80 4294967499 [ 2665.689104][ T969] a1 90 4294967499 [ 2665.689112][ T969] 1e 90 4294967499 [ 2665.689120][ T969] e6 80 4294967499 [ 2665.689129][ T969] 1 90 4294967499 [ 2665.689137][ T969] 0 90 4294967499 [ 2665.689145][ T969] 0 90 4294967499 [ 2665.689153][ T969] 1 90 4294967499 [ 2665.689161][ T969] 2 90 4294967499 [ 2665.689169][ T969] 24 90 4294967499 [ 2665.689177][ T969] 1b 90 4294967499 [ 2665.689185][ T969] ff 90 4294967499 [ 2665.689193][ T969] last result at 4295201781 [ 2665.689200][ T969] last redo_fd_request at 4295203709 [ 2665.689249][ T969] status=80 [ 2665.689257][ T969] fdc_busy=1 [ 2665.689262][ T969] cont=0000000000000000 [ 2665.689269][ T969] current_req=0000000000000000 [ 2665.689275][ T969] command_status=-1 [ 2665.689281][ T969] [ 2665.689325][ T969] floppy1: floppy timeout called [ 2665.689333][ T969] no cont in shutdown! [ 2665.689342][ T969] floppy1: floppy_shutdown: timeout handler died. [ 2665.689488][ T969] [ 2665.689493][ T969] floppy driver state [ 2665.689498][ T969] ------------------- [ 2665.689502][ T969] now=4295203709 last interrupt=4294967499 diff=236210 last called handler=main_command_interrupt [ 2665.689519][ T969] timeout_message=lock fdc [ 2665.689524][ T969] last output bytes: [ 2665.689529][ T969] 0 90 4294967496 [ 2665.689537][ T969] 1 90 4294967496 [ 2665.689545][ T969] 2 90 4294967496 [ 2665.689553][ T969] 12 90 4294967496 [ 2665.689561][ T969] 1b 90 4294967496 [ 2665.689569][ T969] ff 90 4294967496 [ 2665.689577][ T969] 12 80 4294967499 [ 2665.689585][ T969] 3 90 4294967499 [ 2665.689593][ T969] 3 80 4294967499 [ 2665.689601][ T969] a1 90 4294967499 [ 2665.689609][ T969] 1e 90 4294967499 [ 2665.689617][ T969] e6 80 4294967499 [ 2665.689625][ T969] 1 90 4294967499 [ 2665.689633][ T969] 0 90 4294967499 [ 2665.689641][ T969] 0 90 4294967499 [ 2665.689649][ T969] 1 90 4294967499 [ 2665.689657][ T969] 2 90 4294967499 [ 2665.689818][ T969] 24 90 4294967499 [ 2665.689828][ T969] 1b 90 4294967499 [ 2665.689836][ T969] ff 90 4294967499 [ 2665.689844][ T969] last result at 4295201781 [ 2665.689850][ T969] last redo_fd_request at 4295203709 [ 2665.689894][ T969] status=80 [ 2665.689901][ T969] fdc_busy=1 [ 2665.689906][ T969] floppy_work.func=floppy_work_workfn [ 2665.689926][ T969] cont=ffffffff8b1391e0 [ 2665.689932][ T969] current_req=0000000000000000 [ 2665.689938][ T969] command_status=-1 [ 2665.689944][ T969] [ 2665.689992][ T969] floppy1: floppy timeout called [ 2665.690154][ T8047] ------------[ cut here ]------------ [ 2665.939151][ T8047] WARNING: CPU: 1 PID: 8047 at drivers/block/floppy.c:999 wait_til_done+0x3b1/0x420 [ 2665.942599][ T8047] Modules linked in: [ 2665.944375][ T8047] CPU: 1 PID: 8047 Comm: syz-executor.3 Not tainted 6.6.0-rc6-syzkaller-00029-g213f891525c2 #0 [ 2665.949066][ T8047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2665.954898][ T8047] RIP: 0010:wait_til_done+0x3b1/0x420 [ 2665.957367][ T8047] Code: fc 41 83 fd 01 7e ac e8 9d b0 49 fc 4c 89 e6 48 c7 c7 c0 dd 8f 8d e8 4e 99 26 fc e8 89 b0 49 fc e9 68 fd ff ff e8 7f b0 49 fc <0f> 0b e9 ef fc ff ff e8 63 68 9f fc e9 b4 fd ff ff e8 69 b0 49 fc [ 2665.966057][ T8047] RSP: 0018:ffffc90002f1fa38 EFLAGS: 00010283 [ 2665.968799][ T8047] RAX: 0000000000002d8c RBX: 1ffff920005e3f47 RCX: ffffc90007011000 [ 2665.972351][ T8047] RDX: 0000000000040000 RSI: ffffffff853e19c1 RDI: 0000000000000001 [ 2665.975967][ T8047] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 2665.979004][ T8047] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff853de1f0 [ 2665.981943][ T8047] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 2665.984868][ T8047] FS: 0000000000000000(0000) GS:ffff88802c700000(0063) knlGS:00000000f7fbeb40 [ 2665.988476][ T8047] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2665.991517][ T8047] CR2: 000000002f021000 CR3: 0000000022923000 CR4: 0000000000350ee0 [ 2665.995025][ T8047] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2665.998345][ T8047] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2666.001255][ T8047] Call Trace: [ 2666.002498][ T8047] [ 2666.003604][ T8047] ? show_regs+0x8f/0xa0 [ 2666.005214][ T8047] ? __warn+0xe6/0x380 [ 2666.006792][ T8047] ? wait_til_done+0x3b1/0x420 [ 2666.008591][ T8047] ? report_bug+0x3bc/0x580 [ 2666.010279][ T8047] ? handle_bug+0x3c/0x70 [ 2666.011892][ T8047] ? exc_invalid_op+0x17/0x40 [ 2666.013647][ T8047] ? asm_exc_invalid_op+0x1a/0x20 [ 2666.015509][ T8047] ? fdc_specify+0x870/0x870 [ 2666.017335][ T8047] ? wait_til_done+0x3b1/0x420 [ 2666.019106][ T8047] ? wait_til_done+0x3b1/0x420 [ 2666.020878][ T8047] ? wait_til_done+0x3b1/0x420 [ 2666.022792][ T8047] ? process_fd_request+0x70/0x70 [ 2666.024667][ T8047] ? floppy_probe+0x240/0x240 [ 2666.026485][ T8047] get_floppy_geometry+0x94/0x1e0 [ 2666.028355][ T8047] fd_compat_ioctl+0x17c3/0x1d00 [ 2666.030198][ T8047] ? fd_ioctl+0x50/0x50 [ 2666.031754][ T8047] ? reacquire_held_locks+0x4b0/0x4b0 [ 2666.033765][ T8047] ? tomoyo_path_number_perm+0x190/0x580 [ 2666.035914][ T8047] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2666.038150][ T8047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2666.040341][ T8047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2666.042530][ T8047] ? blkdev_common_ioctl+0x1e0/0x1ce0 [ 2666.044527][ T8047] ? blkdev_pr_preempt+0x2f0/0x2f0 [ 2666.046503][ T8047] ? reacquire_held_locks+0x4b0/0x4b0 [ 2666.048525][ T8047] ? rcu_is_watching+0x12/0xb0 [ 2666.050302][ T8047] ? fd_ioctl+0x50/0x50 [ 2666.051860][ T8047] compat_blkdev_ioctl+0x2fe/0x7c0 [ 2666.053835][ T8047] ? blkdev_ioctl+0x770/0x770 [ 2666.055581][ T8047] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2666.057525][ T8047] ? blkdev_ioctl+0x770/0x770 [ 2666.059297][ T8047] __do_compat_sys_ioctl+0x2bf/0x330 [ 2666.061252][ T8047] __do_fast_syscall_32+0x61/0xe0 [ 2666.063109][ T8047] do_fast_syscall_32+0x33/0x70 [ 2666.064911][ T8047] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2666.067272][ T8047] RIP: 0023:0xf7fc3579 [ 2666.068798][ T8047] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2666.075991][ T8047] RSP: 002b:00000000f7fbe5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2666.079105][ T8047] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000801c0204 [ 2666.082023][ T8047] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2666.084941][ T8047] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2666.087879][ T8047] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2666.090800][ T8047] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2666.093767][ T8047] [ 2666.094940][ T8047] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2666.097689][ T8047] CPU: 1 PID: 8047 Comm: syz-executor.3 Not tainted 6.6.0-rc6-syzkaller-00029-g213f891525c2 #0 [ 2666.101441][ T8047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 2666.105141][ T8047] Call Trace: [ 2666.106413][ T8047] [ 2666.107548][ T8047] dump_stack_lvl+0xd9/0x1b0 [ 2666.109271][ T8047] panic+0x6a6/0x750 [ 2666.110776][ T8047] ? panic_smp_self_stop+0xa0/0xa0 [ 2666.112710][ T8047] ? wait_til_done+0x3b1/0x420 [ 2666.114496][ T8047] check_panic_on_warn+0xab/0xb0 [ 2666.116329][ T8047] __warn+0xf2/0x380 [ 2666.118086][ T8047] ? wait_til_done+0x3b1/0x420 [ 2666.119897][ T8047] report_bug+0x3bc/0x580 [ 2666.121524][ T8047] handle_bug+0x3c/0x70 [ 2666.123032][ T8047] exc_invalid_op+0x17/0x40 [ 2666.124725][ T8047] asm_exc_invalid_op+0x1a/0x20 [ 2666.126566][ T8047] RIP: 0010:wait_til_done+0x3b1/0x420 [ 2666.128565][ T8047] Code: fc 41 83 fd 01 7e ac e8 9d b0 49 fc 4c 89 e6 48 c7 c7 c0 dd 8f 8d e8 4e 99 26 fc e8 89 b0 49 fc e9 68 fd ff ff e8 7f b0 49 fc <0f> 0b e9 ef fc ff ff e8 63 68 9f fc e9 b4 fd ff ff e8 69 b0 49 fc [ 2666.135624][ T8047] RSP: 0018:ffffc90002f1fa38 EFLAGS: 00010283 [ 2666.138057][ T8047] RAX: 0000000000002d8c RBX: 1ffff920005e3f47 RCX: ffffc90007011000 [ 2666.140999][ T8047] RDX: 0000000000040000 RSI: ffffffff853e19c1 RDI: 0000000000000001 [ 2666.143933][ T8047] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 2666.146968][ T8047] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff853de1f0 [ 2666.150576][ T8047] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 2666.153523][ T8047] ? fdc_specify+0x870/0x870 [ 2666.155537][ T8047] ? wait_til_done+0x3b1/0x420 [ 2666.157674][ T8047] ? wait_til_done+0x3b1/0x420 [ 2666.159861][ T8047] ? process_fd_request+0x70/0x70 [ 2666.162154][ T8047] ? floppy_probe+0x240/0x240 [ 2666.164180][ T8047] get_floppy_geometry+0x94/0x1e0 [ 2666.166110][ T8047] fd_compat_ioctl+0x17c3/0x1d00 [ 2666.168009][ T8047] ? fd_ioctl+0x50/0x50 [ 2666.169564][ T8047] ? reacquire_held_locks+0x4b0/0x4b0 [ 2666.171588][ T8047] ? tomoyo_path_number_perm+0x190/0x580 [ 2666.173775][ T8047] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2666.176375][ T8047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2666.179045][ T8047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2666.181740][ T8047] ? blkdev_common_ioctl+0x1e0/0x1ce0 [ 2666.184155][ T8047] ? blkdev_pr_preempt+0x2f0/0x2f0 [ 2666.186454][ T8047] ? reacquire_held_locks+0x4b0/0x4b0 [ 2666.188476][ T8047] ? rcu_is_watching+0x12/0xb0 [ 2666.190266][ T8047] ? fd_ioctl+0x50/0x50 [ 2666.191948][ T8047] compat_blkdev_ioctl+0x2fe/0x7c0 [ 2666.194209][ T8047] ? blkdev_ioctl+0x770/0x770 [ 2666.196109][ T8047] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2666.198230][ T8047] ? blkdev_ioctl+0x770/0x770 [ 2666.200232][ T8047] __do_compat_sys_ioctl+0x2bf/0x330 [ 2666.202332][ T8047] __do_fast_syscall_32+0x61/0xe0 [ 2666.204681][ T8047] do_fast_syscall_32+0x33/0x70 [ 2666.206999][ T8047] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2666.209983][ T8047] RIP: 0023:0xf7fc3579 [ 2666.211937][ T8047] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2666.221073][ T8047] RSP: 002b:00000000f7fbe5ac EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2666.224984][ T8047] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000801c0204 [ 2666.228690][ T8047] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2666.231742][ T8047] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2666.235376][ T8047] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2666.239078][ T8047] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2666.242776][ T8047] [ 2666.245091][ T8047] Kernel Offset: disabled [ 2666.247330][ T8047] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:45:52 Registers: info registers vcpu 0 CPU#0 RAX=0000000000fe6f89 RBX=0000000000000000 RCX=ffffffff8a4009ae RDX=0000000000000000 RSI=ffffffff8a8cac20 RDI=ffffffff8ae92ca0 RBP=fffffbfff1912b08 RSP=ffffffff8c807e18 R8 =0000000000000001 R9 =ffffed10058c6dbd R10=ffff88802c636deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8c895840 R14=ffffffff8ece2950 R15=0000000000000000 RIP=ffffffff8a401bff RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000005776204c CR3=0000000021a87000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa1 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 652e29646e616d6d 6f632a282e637069 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 efe7967176000000 b1000275000000bc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b98899025f220a64 7782797667836ed5 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 199a1eca4c7c896a 8c914b2af3956b7f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 af061a6ae3cb045a bc0cf51ac23db440 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 28b799431fae4f69 60339fde5dbc8e4b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1799796971af8aa3 b227f59ac194b34f ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 baad1ad64b7cfff3 65260025f5e0994d ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 783adcdbc7eae691 ba786ce90e1ddc76 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f50468c00de98576 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 202c666666666666 6666666666666666 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030323030303030 3030663778302826 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff849c0805 RDI=ffffffff9255edc0 RBP=ffffffff9255ed80 RSP=ffffc90002f1f428 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6572617764726148 R12=0000000000000000 R13=0000000000000061 R14=ffffffff849c07a0 R15=0000000000000000 RIP=ffffffff849c082f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002f021000 CR3=0000000022923000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000010f6e9d RBX=0000000000000002 RCX=ffffffff8a4009ae RDX=0000000000000000 RSI=ffffffff8a8cac20 RDI=ffffffff8ae92ca0 RBP=ffffed100285f480 RSP=ffffc90000467e08 R8 =0000000000000001 R9 =ffffed1005906dbd R10=ffff88802c836deb R11=0000000000000000 R12=0000000000000002 R13=ffff8880142fa400 R14=ffffffff8ece2950 R15=0000000000000000 RIP=ffffffff8a401bff RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f72b5f6e CR3=000000005b039000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000010ae1b3 RBX=0000000000000003 RCX=ffffffff8a4009ae RDX=0000000000000000 RSI=ffffffff8a8cac20 RDI=ffffffff8ae92ca0 RBP=ffffed100285f900 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed1005926dbd R10=ffff88802c936deb R11=0000000000000000 R12=0000000000000003 R13=ffff8880142fc800 R14=ffffffff8ece2950 R15=0000000000000000 RIP=ffffffff8a401bff RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7354170 CR3=000000005b119000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000