------------[ cut here ]------------
WARNING: CPU: 2 PID: 15876 at drivers/block/floppy.c:999 schedule_bh drivers/block/floppy.c:999 [inline]
WARNING: CPU: 2 PID: 15876 at drivers/block/floppy.c:999 floppy_interrupt+0x415/0x480 drivers/block/floppy.c:1765
Modules linked in:
CPU: 2 PID: 15876 Comm: kworker/u16:66 Not tainted 6.5.0-syzkaller-11704-g3f86ed6ec0b3 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Workqueue: floppy floppy_work_workfn
RIP: 0010:schedule_bh drivers/block/floppy.c:999 [inline]
RIP: 0010:floppy_interrupt+0x415/0x480 drivers/block/floppy.c:1765
Code: ff 89 de e8 1d d4 4a fc 85 db 0f 85 75 ff ff ff 41 be 01 00 00 00 e9 64 fd ff ff e8 55 d8 9f fc e9 1d fd ff ff e8 8b d8 4a fc <0f> 0b e9 2d fe ff ff 48 c7 c7 00 f2 80 8c e8 f8 d7 9f fc e9 11 fc
RSP: 0018:ffffc90000a48e60 EFLAGS: 00010046
RAX: 0000000080010000 RBX: 0000000000000001 RCX: 0000000000000000
RDX: ffff888060ea0440 RSI: ffffffff853bc9f5 RDI: 0000000000000001
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: ffffc90000a48ff8 R12: ffffffff853b6240
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
FS: 0000000000000000(0000) GS:ffff88806b800000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc735798000 CR3: 0000000107a3d000 CR4: 0000000000350ee0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
floppy_hardint+0x1aa/0x200 arch/x86/include/asm/floppy.h:66
__handle_irq_event_percpu+0x22a/0x740 kernel/irq/handle.c:158
handle_irq_event_percpu kernel/irq/handle.c:193 [inline]
handle_irq_event+0xab/0x1e0 kernel/irq/handle.c:210
handle_edge_irq+0x261/0xcf0 kernel/irq/chip.c:831
generic_handle_irq_desc include/linux/irqdesc.h:161 [inline]
handle_irq arch/x86/kernel/irq.c:238 [inline]
__common_interrupt+0xdb/0x240 arch/x86/kernel/irq.c:257
common_interrupt+0xa9/0xd0 arch/x86/kernel/irq.c:247
asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:636
RIP: 0010:outb_p arch/x86/include/asm/io.h:291 [inline]
RIP: 0010:fdc_outb drivers/block/floppy.c:602 [inline]
RIP: 0010:reset_fdc+0x185/0x400 drivers/block/floppy.c:1817
Code: ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 11 00 0f 85 8a 01 00 00 48 8d 14 9b 48 8b 14 d5 f0 9c 56 92 83 c2 04 ee f6 eb ff ff 48 83 c4 08 5b 5d e9 6b 7c 4b fc e8 66 7c 4b fc 48
RSP: 0018:ffffc90004467c48 EFLAGS: 00000202
RAX: 00000000ffffff81 RBX: 0000000000000000 RCX: 1ffffffff24ad39e
RDX: 00000000000003f4 RSI: ffffffff853b257c RDI: ffffffff92569cf0
RBP: 0000000000000062 R08: 0000000000000001 R09: 0000000000000044
R10: 0000000000000062 R11: 5f746e6572727563 R12: 000000000000fffd
R13: 0000000000000000 R14: 0000ffff88800010 R15: 0000000000000000
floppy_ready+0x3f7/0x1b40 drivers/block/floppy.c:1929
redo_format+0x4c1/0x6f0 drivers/block/floppy.c:2214
process_one_work+0x887/0x15d0 kernel/workqueue.c:2630
process_scheduled_works kernel/workqueue.c:2703 [inline]
worker_thread+0x8bb/0x1290 kernel/workqueue.c:2784
kthread+0x33a/0x430 kernel/kthread.c:388
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:304
----------------
Code disassembly (best guess):
0: ba 00 00 00 00 mov $0x0,%edx
5: 00 fc add %bh,%ah
7: ff (bad)
8: df 48 89 fisttps -0x77(%rax)
b: f9 stc
c: 48 c1 e9 03 shr $0x3,%rcx
10: 80 3c 11 00 cmpb $0x0,(%rcx,%rdx,1)
14: 0f 85 8a 01 00 00 jne 0x1a4
1a: 48 8d 14 9b lea (%rbx,%rbx,4),%rdx
1e: 48 8b 14 d5 f0 9c 56 mov -0x6da96310(,%rdx,8),%rdx
25: 92
26: 83 c2 04 add $0x4,%edx
29: ee out %al,(%dx)
* 2a: e8 f6 eb ff ff call 0xffffec25 <-- trapping instruction
2f: 48 83 c4 08 add $0x8,%rsp
33: 5b pop %rbx
34: 5d pop %rbp
35: e9 6b 7c 4b fc jmp 0xfc4b7ca5
3a: e8 66 7c 4b fc call 0xfc4b7ca5
3f: 48 rex.W