080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000007000000350000f1ffffff0085000200080000060000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x5f) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x2}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r6}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r3, r5, 0x0, 0xe, &(0x7f0000000100)='wlan0,.@bdev[\x00', r6}, 0x30) r7 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$MON_IOCX_GET(r7, 0x40189206, &(0x7f0000000080)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000002c0)=""/31, 0xea}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0)={0x72a}, 0x4) [ 280.739976][T11448] XFS (loop3): log mount failed [ 280.868008][T11470] XFS (loop0): device supports 512 byte sectors (not 0) 04:28:15 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c090804", 0x7c}], 0x0, 0x0) 04:28:15 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:15 executing program 0: syz_mount_image$xfs(0x0, &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f800200"/63, 0x3f}], 0x0, 0x0) [ 281.160002][T11484] XFS (loop5): Invalid superblock magic number [ 281.316472][T11495] XFS (loop3): Mounting V4 Filesystem 04:28:15 executing program 1: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvfrom$llc(r1, &(0x7f0000000000)=""/137, 0x89, 0x10020, &(0x7f00000000c0)={0x1a, 0x3, 0x8, 0x5, 0x7, 0x0, @broadcast}, 0x10) [ 281.361319][T11495] XFS (loop3): empty log check failed [ 281.371976][T11495] XFS (loop3): log mount/recovery failed: error -5 04:28:15 executing program 0: syz_mount_image$xfs(0x0, &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f800200"/63, 0x3f}], 0x0, 0x0) [ 281.483887][T11495] XFS (loop3): log mount failed 04:28:15 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c090804", 0x7c}], 0x0, 0x0) 04:28:16 executing program 0: syz_mount_image$xfs(0x0, &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f800200"/63, 0x3f}], 0x0, 0x0) 04:28:16 executing program 3: syz_mount_image$xfs(0x0, &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 281.807127][T11522] XFS (loop5): Invalid superblock magic number 04:28:16 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', 0x0, 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f800200"/63, 0x3f}], 0x0, 0x0) 04:28:16 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', 0x0, 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f800200"/63, 0x3f}], 0x0, 0x0) 04:28:16 executing program 3: syz_mount_image$xfs(0x0, &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:16 executing program 5: getitimer(0x2, 0x0) 04:28:16 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', 0x0, 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f800200"/63, 0x3f}], 0x0, 0x0) 04:28:16 executing program 1: getitimer(0x3, 0x0) 04:28:16 executing program 5 (fault-call:0 fault-nth:0): syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:16 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f800200"/63, 0x3f}], 0x0, 0x0) 04:28:16 executing program 3: syz_mount_image$xfs(0x0, &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 282.542531][T11573] FAULT_INJECTION: forcing a failure. [ 282.542531][T11573] name failslab, interval 1, probability 0, space 0, times 1 [ 282.591876][T11573] CPU: 0 PID: 11573 Comm: syz-executor.5 Not tainted 5.6.0-rc7-syzkaller #0 [ 282.600609][T11573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.610677][T11573] Call Trace: [ 282.614151][T11573] dump_stack+0x188/0x20d [ 282.618609][T11573] should_fail.cold+0x5/0xa [ 282.623206][T11573] ? lock_downgrade+0x7f0/0x7f0 [ 282.628117][T11573] ? fault_create_debugfs_attr+0x140/0x140 [ 282.634159][T11573] should_failslab+0x5/0xf [ 282.638693][T11573] __kmalloc+0x2d9/0x7a0 [ 282.643014][T11573] ? __x64_sys_memfd_create+0x131/0x450 [ 282.648666][T11573] ? strnlen_user+0x1f5/0x2e0 [ 282.653371][T11573] __x64_sys_memfd_create+0x131/0x450 [ 282.658818][T11573] ? ksys_write+0x19f/0x250 [ 282.663431][T11573] ? memfd_fcntl+0x1720/0x1720 [ 282.668271][T11573] ? __ia32_sys_clock_settime+0x260/0x260 [ 282.674093][T11573] ? trace_hardirqs_off_caller+0x55/0x230 [ 282.679912][T11573] do_syscall_64+0xf6/0x7d0 [ 282.684521][T11573] entry_SYSCALL_64_after_hwframe+0x49/0xbe 04:28:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f00000000c0)={0xffffffffffffffff, 0x10000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000040)={0x100000, 0x1000, 0x80008, 0x401, 0x6}) getitimer(0x3, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x0) [ 282.690436][T11573] RIP: 0033:0x45c849 [ 282.694348][T11573] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 282.718300][T11573] RSP: 002b:00007f29c56c8a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 282.726732][T11573] RAX: ffffffffffffffda RBX: 00007f29c56c96d4 RCX: 000000000045c849 [ 282.734739][T11573] RDX: 0000000020000418 RSI: 0000000000000000 RDI: 00000000004c1941 [ 282.742728][T11573] RBP: 000000000076bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 282.750802][T11573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 282.758787][T11573] R13: 0000000000000bec R14: 00000000004ce0fd R15: 0000000000000000 04:28:17 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', 0x0, 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 282.934192][T11576] XFS (loop0): Invalid superblock magic number 04:28:17 executing program 5 (fault-call:0 fault-nth:1): syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:17 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', 0x0, 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:17 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f800200"/63, 0x3f}], 0x0, 0x0) [ 283.234543][T11604] FAULT_INJECTION: forcing a failure. [ 283.234543][T11604] name failslab, interval 1, probability 0, space 0, times 0 [ 283.280835][T11604] CPU: 1 PID: 11604 Comm: syz-executor.5 Not tainted 5.6.0-rc7-syzkaller #0 [ 283.289559][T11604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.299652][T11604] Call Trace: [ 283.302958][T11604] dump_stack+0x188/0x20d [ 283.307345][T11604] should_fail.cold+0x5/0xa [ 283.311866][T11604] ? lock_downgrade+0x7f0/0x7f0 [ 283.316741][T11604] ? fault_create_debugfs_attr+0x140/0x140 [ 283.322655][T11604] ? shmem_destroy_inode+0x70/0x70 [ 283.327787][T11604] should_failslab+0x5/0xf [ 283.332278][T11604] kmem_cache_alloc+0x29b/0x730 [ 283.337169][T11604] ? find_held_lock+0x2d/0x110 [ 283.342013][T11604] ? __alloc_fd+0x46d/0x600 [ 283.346540][T11604] ? shmem_destroy_inode+0x70/0x70 [ 283.351674][T11604] shmem_alloc_inode+0x18/0x40 [ 283.356751][T11604] ? shmem_destroy_inode+0x70/0x70 [ 283.361879][T11604] alloc_inode+0x61/0x1e0 [ 283.366226][T11604] new_inode_pseudo+0x14/0xe0 [ 283.370918][T11604] new_inode+0x1b/0x40 [ 283.375005][T11604] shmem_get_inode+0x84/0x7e0 [ 283.379712][T11604] __shmem_file_setup.part.0+0x7a/0x2b0 [ 283.385290][T11604] shmem_file_setup+0x61/0x90 [ 283.389984][T11604] __x64_sys_memfd_create+0x28a/0x450 [ 283.395371][T11604] ? memfd_fcntl+0x1720/0x1720 [ 283.400149][T11604] ? __ia32_sys_clock_settime+0x260/0x260 [ 283.405919][T11604] ? trace_hardirqs_off_caller+0x55/0x230 [ 283.411854][T11604] do_syscall_64+0xf6/0x7d0 [ 283.416385][T11604] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 283.422375][T11604] RIP: 0033:0x45c849 [ 283.426280][T11604] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 283.445985][T11604] RSP: 002b:00007f29c56c8a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 283.454438][T11604] RAX: ffffffffffffffda RBX: 00007f29c56c96d4 RCX: 000000000045c849 [ 283.462421][T11604] RDX: 0000000020000418 RSI: 0000000000000000 RDI: 00000000004c1941 [ 283.470667][T11604] RBP: 000000000076bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 04:28:17 executing program 1: getitimer(0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x1, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_submit(r1, 0x0, &(0x7f0000000080)) io_submit(r1, 0x2000000000000072, &(0x7f0000000080)) socket$kcm(0x29, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair(0x5, 0x800, 0x3, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_submit(r1, 0x3, &(0x7f0000000400)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f0000000000)="c80263176bd3fb7cb0563579daa4cbe9ac352f7734dbeb24596365e4387183ca403a556058f4a4f801e59e1959ff5fa4b5767816e730919908ad6d112089a1050694ec4e561da4c57e590fd6c47b33da5a09980d4d75f8a9258f9509d750e2f21289669de6a4ff57292bf196c1a2a2bf476c3ea750d8030468800b478eafffff3d2502b4d068635713d7581f861a3222e3d50f370b70e242985ccfb1caaa5c0bb1a9af205b256a4b31b4df354e545d0cb79164f96be4021aea89ece96b7cb08609d2095fcac5cb501f55f48473aa29e165", 0xd1, 0x6, 0x0, 0x2, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x321, 0xffffffffffffffff, &(0x7f0000000180)="3dc74fcc8f145793f841f18523c15749391c791b9f527680b00148f431dbcd312439c2b8665dfdd325734a61fb28060163d9a9c68096581b6519e0ddc391eb0d2d25e34e7c4e9278aa5a4f89fe63a23ce6b55776598c874186517bdd1010e2730f1b816a10dad8dd86dd50c0e40fa663c59e4b95b7046dce8d82964bde46aa78bc25b839a480651f9d6be60576b99bbb9c018ea40f05e7513486657a03019228100748411025c5369526801240e9999ef6311eb2419e15f878e0523544d9375306d8b3f0bd89ed0b97ecf2c551a5de8298e9d205cf5d8225cd250ebd1f", 0xfffffd8c, 0x40, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x1, r7, &(0x7f0000000300)="6d560801557adb34bbac0c4c4feaf6e43c1321d62a2e8f932fc08ea22b0ef650252f3125b72e62cf00bb50ec9a69f7f8cc8e6a8edbec0d454b0ebd37de26241afa14d4e9e58b41720df9efe2ba64d43e48013e94b8081aaaa5b66ec823a9f4df1afe4b78937b45f74d2cddeeacaf8a8d3c4f9d3916dd5e42ff8a8001237882693e4486", 0x83, 0xd4a, 0x0, 0x2, r7}]) syz_open_dev$vcsn(&(0x7f0000000480)='/dev/vcs#\x00', 0x80000000, 0x6900) [ 283.478733][T11604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 283.486712][T11604] R13: 0000000000000bec R14: 00000000004ce0fd R15: 0000000000000001 [ 283.598885][T11609] XFS (loop0): Invalid superblock magic number 04:28:18 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', 0x0, 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:18 executing program 5 (fault-call:0 fault-nth:2): syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 283.739681][T11626] FAULT_INJECTION: forcing a failure. [ 283.739681][T11626] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 283.757287][T11626] CPU: 1 PID: 11626 Comm: syz-executor.5 Not tainted 5.6.0-rc7-syzkaller #0 [ 283.765974][T11626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.776212][T11626] Call Trace: [ 283.779551][T11626] dump_stack+0x188/0x20d [ 283.784089][T11626] should_fail.cold+0x5/0xa [ 283.788633][T11626] ? fault_create_debugfs_attr+0x140/0x140 [ 283.794645][T11626] ? __lock_acquire+0x14bd/0x3ca0 [ 283.799884][T11626] __alloc_pages_nodemask+0x17a/0x820 [ 283.805639][T11626] ? save_stack+0x4c/0x80 [ 283.809993][T11626] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 283.815757][T11626] ? find_held_lock+0x2d/0x110 [ 283.820658][T11626] ? lock_downgrade+0x7f0/0x7f0 [ 283.825540][T11626] cache_grow_begin+0x8c/0xc30 [ 283.830321][T11626] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 283.835805][T11626] kmem_cache_alloc+0x66a/0x730 [ 283.840688][T11626] ? __alloc_fd+0x46d/0x600 [ 283.845213][T11626] ? shmem_destroy_inode+0x70/0x70 [ 283.850339][T11626] shmem_alloc_inode+0x18/0x40 [ 283.855124][T11626] ? shmem_destroy_inode+0x70/0x70 [ 283.860244][T11626] alloc_inode+0x61/0x1e0 [ 283.864845][T11626] new_inode_pseudo+0x14/0xe0 [ 283.869542][T11626] new_inode+0x1b/0x40 [ 283.873626][T11626] shmem_get_inode+0x84/0x7e0 [ 283.878335][T11626] __shmem_file_setup.part.0+0x7a/0x2b0 [ 283.883899][T11626] shmem_file_setup+0x61/0x90 [ 283.888592][T11626] __x64_sys_memfd_create+0x28a/0x450 [ 283.894153][T11626] ? memfd_fcntl+0x1720/0x1720 [ 283.898953][T11626] ? __ia32_sys_clock_settime+0x260/0x260 [ 283.904687][T11626] ? trace_hardirqs_off_caller+0x55/0x230 [ 283.910790][T11626] do_syscall_64+0xf6/0x7d0 [ 283.915313][T11626] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 283.921213][T11626] RIP: 0033:0x45c849 04:28:18 executing program 4: getitimer(0x3, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000b00)=ANY=[@ANYRES64=r0, @ANYPTR=&(0x7f0000000200)=ANY=[], @ANYBLOB="ed8f3c7afc5b60f873262a040c194101dacfc0305a4c226ce992ab113fe2e4c753dfd6e04e2818f9765e5898c8649be2dc7ba4cd109fc061e5ddb2ec26b8e578767b2693bef9afb051bae668eddee1fe88", @ANYRESHEX], 0x4) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000080)='.[&-+user\x00', &(0x7f00000000c0)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x101582, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400, 0x8}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x100000001}, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x80}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r2, &(0x7f0000000000)=r3, 0x12) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x200091}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x4, 0x8, 0xff, 0x0, 0x10001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x8000000000009, 0x5}, 0x1520, 0x40000, 0xffffff63, 0x1, 0x0, 0x80000001, 0x8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) [ 283.925127][T11626] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 283.945098][T11626] RSP: 002b:00007f29c56c8a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 283.953962][T11626] RAX: ffffffffffffffda RBX: 00007f29c56c96d4 RCX: 000000000045c849 [ 283.961955][T11626] RDX: 0000000020000418 RSI: 0000000000000000 RDI: 00000000004c1941 [ 283.969938][T11626] RBP: 000000000076bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 283.978009][T11626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 283.986110][T11626] R13: 0000000000000bec R14: 00000000004ce0fd R15: 0000000000000002 04:28:18 executing program 1: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000000)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)=@assoc_value={r3}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x76, &(0x7f0000000400)=@assoc_value={r8}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f00000010c0)={r8, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x7, 0x8, 0x200, 0x6, 0xffffffff}, &(0x7f0000001180)=0x98) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f00000000c0)=@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000100)="087e97bbd5aca0a244a1f6406554d9d4e0d00423385f441023b6f904e1423c6b6a00095e67deb534a84dd9f6f64f435892a7f5c6c83f7ef5bcff52fe000b41227ac45811549347ffba23656067571147cc70c1c4ed89", 0x56}, {&(0x7f0000000180)="4615036bf4353df641127c54212f889c00ccbbb23a2c0e5f7cea3833022b51f454a7dc46e6574ebcccc6034b329f0c3b33f3b4cf2450cd0d1ef9459cc21c321b17903b5444c4a1f84d296244dac38d977817a772ead1ecbf34542fcea18654d03bdd58adb9ed083ac9f1330358d604a939627b2eda194247ca293830e1be832e711d87786078c1", 0x87}, {&(0x7f0000000240)="fccd5321d801cf7969ea6294d9b0ff01e513f66c3d2f1db5b50ac35d055d220468ef8a1c2492ccb9680d0e09d7ed2e15bc156b549be37fa9ff6c7b8d5bfe9d7a626bde2c179e8de9f643e92f051a117d6f787b75626536c0c11a86", 0x5b}, {&(0x7f00000002c0)="abb8942396452e453608ed908762d82edec5529f0fc5fb4fa79e2e416a7a408d62671276682d8d73eafa8806bde5d6759b67e18b0b33a4a30a26510987826854f391d199c84b49234c1c4f866d70f7c52637fff16c0904861a35622df1ba0e6e78b11bfd32f9a6c32cf6074238d14249dfa9862053baf8437603a0e83db0f14de4336c3b2f4b5f7a9a212a4d6da724c1c1ddb4ffad43e3fbdc04a22fdc597f6bb38d78e75bf3b4e80693391e778fb06166eebe2e0ab0034879f907f0a877ce1035974d651f0a88020446432289cdbbb3e1ca0c4fb0f0c3b0f204bbd4ee0c10dcf6b34c57", 0xe4}], 0x4, &(0x7f0000000400)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18, 0x24044840}, {&(0x7f0000000440)=@in6={0xa, 0x4e21, 0x6, @local, 0x3}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000480)="73ad60c590800d6edd6b57c59a9bff3fb1099c46e803821a3f5a109185a072ba7951446defdbcb42294fd77efacec04040dcf27c001ca04ce014104aba5a1017bd0749764a1c5ac890eabb1e388b92386cc328eb7b9dba3e39877f2f3c9fa4bf0781edd93061fb7876c7845c5cfea84fdb57f81031b5db154c106e381c676f67813fb322776811a5bb63f088c528e69fb97e17ee90d3c67fa9679e64f92a3a048d0fcc7941e77ee21988fd8bc93398f198477b5f206cf1c2953703646566efeb73dac3df5cf3fc0f920884a414ce6425b499fc126d3295ed", 0xd8}], 0x1, &(0x7f00000005c0)=[@init={0x18, 0x84, 0x0, {0x0, 0x81, 0x401, 0x3}}], 0x18, 0x80}, {&(0x7f0000000600)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000640)="260889", 0x3}, {&(0x7f0000000680)="791a2e9d8f", 0x5}, {&(0x7f00000006c0)="996d82b00653db94884645557e10763df78bf3f17e9fd218de2e6332c5fa48436154ee724935a2a613b33d1ba2b59bc4c0c8deddf05545033d5264dba3bda0bec98171d79b5834bc6bc61abc08347ec6eae742b207d24d7a6be761361fe14feb63eb3de70adcf37e611f613b3d5e7da104ff09b52fbab1a48bcf72fdd6819c818a2887b695f0a440994c50bdc4818e18df4f7ff65c34aa513cc381841f50256367a711e98653e9dcbe7f0009aaa2b4e21b36d1a1963a4aee75e50aaa61a43453c96258147ba709af7601b4", 0xcb}, {&(0x7f00000007c0)="6d9c07687d163e21cbaa9a0c638c23d0f47e846fd914ce572316ba11f3bdb068ea6c14ac16dd8d2ec3b5264c874f4e6709a308df1076b8796badf87ed5028c9b2722c14cb9daee6c5be77abc2611b020443526edddf2e8bde8447cfcbcebb4f4100fd6bb82bce83b1d301dcd8a2e066ca79a82d9c868b56303a6c9cdd371498128f884631c70174c61d10253ca9dd6478f8e576f87b56d812492e85ac32c794830266a5dbafd284ab8e6fb613b02881d738debbe5a1acdedc1fa1ad6eccdc6666c589fc2b41aef02b4cd2b14ea0bfcfd090e471cef23b664b5972a6c257dfc9517a9bfc3a5ba3961aae2ecf035dc1e", 0xef}, {&(0x7f00000008c0)="1a389d40091779fd10ec4e1b4f1d0825db8e8b3fb33526209e07d47b1cb8560c0100", 0x22}, {&(0x7f0000000900)="cc309823dcf4e26f3d58f20a4ea27206679e9f76db7ee57f459f", 0x1a}, {&(0x7f0000000940)="1306c801098794833f845ee06f8e471dad749b6c1268bf66b06bf0beef0228f02fe6f0b000d411e8686655cd3dc5500db18412b6fe00314904ad0710d325d84e2aa6f79a5d23754991237cf694bc9da8e1510fb2697dc0f76b62888f4cc165061422c4f3e0ea1747a849ad4c8486194b6105543f9903c04b8c88", 0x7a}, {&(0x7f00000009c0)="927a59d00333caf0cb9a387ddeb723e23356c99b4a6f12f1fe4c7eb1908a672535d9119a4f7223be1f9445d0f23f7ac4f3f58acef6f603df217f8ca3445e4c817b95fdabaf962de00c014e2b733a9b97b72223edcdfbbabc05cd83ea249dec9e924d6345202f5775bf6deec499fcaad0365c80f7efedc51e6c5ba461143294a0bf991c3828c5ef435d1e76e4", 0x8c}, {&(0x7f0000000a80)="28ba24a31caa4013f07e6c9f2da128933438f0a031291ba51c89697403bf5b5e5bf76ba5066e07bc5a9be075748c364a4bc23529", 0x34}, {&(0x7f0000000ac0)="35cdb8112506b515f27de8d2ef2cb8d5bb50836ffc98e08a869a9c9cad1e99ca7a5f62fb96f9f7feafb10d0d1ee0028f1fdb5ba63e58596af282ab73f73e49c33c8415ff7c36417c37d1624dfc16b83f51fb0d982467834b5fbd640c1e3151ad73b8bacc20f0fb12b25fa999f581b19bd4f4c0735ee2a73ace091c637c3f3c781a95c77c42b91c8d8f72ecd84ffad3fa4e13db6e3d51b490ad2882767c3ebbbabcb4d7dbba50b08a09443e55027e3523e324a0d357fac19705b818524ba4ad54a35d48d880215ea94a3e60833fd6718a70d1304d5452021e3b5642", 0xdb}], 0xa, &(0x7f0000000d80)=[@sndrcv={0x30, 0x84, 0x1, {0x81, 0x2, 0x200, 0xaf, 0x1, 0x8, 0xd3b, 0x40}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @authinfo={0x18, 0x84, 0x6, {0x202}}, @authinfo={0x18, 0x84, 0x6, {0x200}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x11}}, @sndrcv={0x30, 0x84, 0x1, {0xb3c5, 0xffff, 0x0, 0x6, 0x7, 0x4, 0xff, 0x394c}}, @sndinfo={0x20, 0x84, 0x2, {0xf546, 0x8003, 0x7, 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x400, 0xdd65a13ec7956036, 0x0, 0xd61, 0x0, 0x8000, 0xfffffc01}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x6, 0x8204, 0x9, 0x3, 0x1000, 0x3, 0x6, r3}}, @init={0x18, 0x84, 0x0, {0x33, 0x2, 0x9, 0x6bec}}], 0x158, 0x4105}, {&(0x7f0000000f00)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000f40)="62e32d57c13c182288961b071dd6a5a422b8bf6f1895", 0x16}, {&(0x7f0000000f80)="9732886f9446f1adddfc8d962f76b05abfe32dcb4ba766f6dc0b4d9f904077f2437d3526803fc414d002c0baa191879602f9bccf96ba293ea1ff8239c595852b420d76fb540b3680b26fba292a1c1ac228bde5ebac011670abeb270fd7e2f9b7bf115ea1e4406063c5cf2cbc01bb8d211728baf21d62f9600343115c65cb7d7002855146cc9e6f85d74c5059f09cb8ec202d8a21ae5118bc20f5364be9d4ed400c52f7fdb42828ac9fabca692fe4b54712f88a81fb8cd93690fab798818918e5298045a3585b8c", 0xc7}], 0x2, &(0x7f00000011c0)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}, @init={0x18, 0x84, 0x0, {0xfbff, 0x800, 0x36, 0xffff}}, @sndinfo={0x20, 0x84, 0x2, {0x7ff, 0x4, 0x6, 0x5, r9}}], 0x50, 0x24004001}], 0x4, 0x48000) r10 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$sock_inet_sctp_SIOCINQ(r10, 0x541b, &(0x7f0000000040)) 04:28:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000040)={0x0, 0x5e6, 0x7f, &(0x7f0000000000)=0x1}) getitimer(0x0, 0x0) 04:28:18 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:18 executing program 1: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=[&(0x7f0000000040)='\xce\x00'], &(0x7f0000000140)=[&(0x7f00000000c0)='[cgroup@posix_acl_access\x00', &(0x7f0000000100)='GPL\x00']) 04:28:18 executing program 4: keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x3}) [ 284.161345][T11626] attempt to access beyond end of device [ 284.177509][T11626] loop5: rw=4096, want=32768, limit=29542 04:28:18 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f800200"/63, 0x3f}], 0x0, 0x0) 04:28:18 executing program 4: getitimer(0x0, 0x0) [ 284.239620][T11626] XFS (loop5): last sector read failed [ 284.363358][T11648] attempt to access beyond end of device [ 284.380498][T11648] loop3: rw=4096, want=32768, limit=29542 04:28:18 executing program 1: getitimer(0x3, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x801) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x212000, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000106010200000000deff000002000004050001000700000005000100070000000500010007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r0, r0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000240)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000808", @ANYRES16=r6, @ANYBLOB="010000000000000000000e00000008000e80"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012bbd7000fcdbdf256b0000000a001a00e43f0af8186d00000a001a00000000000000000008000100020000000c0099001f0000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000100030000000a001a00aaaaaaaaaaaa0000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) [ 284.416782][T11648] XFS (loop3): last sector read failed [ 284.448823][T11664] XFS (loop0): Invalid superblock magic number 04:28:18 executing program 4: getitimer(0x3, 0x0) mq_open(&(0x7f0000000000)='ppp1%-%!\x00', 0x40, 0x0, &(0x7f0000000040)={0x0, 0x7ff, 0x2}) 04:28:18 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x130) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4880}, 0x10) getitimer(0x1, 0x0) fstat(r0, &(0x7f0000000140)) 04:28:18 executing program 5 (fault-call:0 fault-nth:3): syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:19 executing program 4: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xb21) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x100) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0], 0x2, 0x9}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x400}, {r3, 0x9004}, {r4, 0x50}, {r6, 0x1000}, {r7, 0x8000}, {r8, 0x400}, {r10, 0x22}], 0x7, &(0x7f00000000c0)={r11, r12+30000000}, &(0x7f0000000100)={[0x100000001]}, 0x8) 04:28:19 executing program 1: delete_module(&(0x7f0000000000)='\'eth0\x00', 0x800) getitimer(0x3, 0x0) [ 284.742075][T11687] FAULT_INJECTION: forcing a failure. [ 284.742075][T11687] name failslab, interval 1, probability 0, space 0, times 0 [ 284.808349][T11687] CPU: 1 PID: 11687 Comm: syz-executor.5 Not tainted 5.6.0-rc7-syzkaller #0 [ 284.817159][T11687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.827398][T11687] Call Trace: [ 284.830710][T11687] dump_stack+0x188/0x20d [ 284.836020][T11687] should_fail.cold+0x5/0xa [ 284.840547][T11687] ? lock_downgrade+0x7f0/0x7f0 [ 284.845421][T11687] ? fault_create_debugfs_attr+0x140/0x140 [ 284.851262][T11687] should_failslab+0x5/0xf [ 284.855703][T11687] kmem_cache_alloc+0x29b/0x730 [ 284.860580][T11687] ? lock_downgrade+0x7f0/0x7f0 [ 284.865457][T11687] __alloc_file+0x21/0x340 [ 284.869897][T11687] alloc_empty_file+0x6d/0x170 [ 284.874679][T11687] alloc_file+0x5e/0x4d0 [ 284.878943][T11687] alloc_file_pseudo+0x165/0x250 [ 284.883909][T11687] ? alloc_file+0x4d0/0x4d0 [ 284.888442][T11687] ? shmem_get_inode+0x47a/0x7e0 [ 284.893411][T11687] __shmem_file_setup.part.0+0x102/0x2b0 [ 284.899432][T11687] shmem_file_setup+0x61/0x90 [ 284.904130][T11687] __x64_sys_memfd_create+0x28a/0x450 [ 284.909524][T11687] ? memfd_fcntl+0x1720/0x1720 [ 284.914308][T11687] ? __ia32_sys_clock_settime+0x260/0x260 [ 284.921352][T11687] ? trace_hardirqs_off_caller+0x55/0x230 [ 284.927112][T11687] do_syscall_64+0xf6/0x7d0 [ 284.931645][T11687] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 284.937546][T11687] RIP: 0033:0x45c849 [ 284.941446][T11687] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 284.961155][T11687] RSP: 002b:00007f29c56c8a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 284.969589][T11687] RAX: ffffffffffffffda RBX: 00007f29c56c96d4 RCX: 000000000045c849 [ 284.977582][T11687] RDX: 0000000020000418 RSI: 0000000000000000 RDI: 00000000004c1941 [ 284.985650][T11687] RBP: 000000000076bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 284.993633][T11687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 285.001616][T11687] R13: 0000000000000bec R14: 00000000004ce0fd R15: 0000000000000003 04:28:19 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0) 04:28:19 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:19 executing program 1: getitimer(0x1, 0x0) 04:28:19 executing program 4: getitimer(0xd4b6c919a2d7a273, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000000)=0xe0) [ 285.178293][T11702] XFS (loop0): Invalid superblock magic number 04:28:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) sendmsg$unix(r0, &(0x7f0000001340)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000080)="a4760794de88e13c8fa43a5bd711af84c0a5eca773f6d47de181520598ec03d006526d37fb5b8211bd78c12722d1d30def53917ca8074c2621d9afd4c9615a03dc2035589178b8df325907a5c4b20fb93183d51ee625f7", 0x57}, {&(0x7f0000000100)="539e5268761fb5a43b1c8dee10d64627de4b17ed6c8f15d8eb2b187a5c368c7b2ce893172dbaa9a795e025fb0ed7486d689fc61ec2539809f50319e1ffdaf6de06a5495b31b0697b40c4ffc33919590f283ea67a4fbb6c34fbb2ad3a43db1ec849de8ea5e93aa2e43e74f1ab64daec", 0x6f}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="aa6b9b14082ef3db1e77fc9c72f3ad66ba2f2a9eb9b7baeeaec55de80f54534593386f071f0566989cdd7a320ef424dadd844e77731d50ae2e24c21ee911280cd9c57f2f60fd2737329941234730b15d98fa6bf0482c03cea2dff68b5a2f456211903b9b723cee3a16277f60612238e9b31973a48390c5f3725a67636094c73d7731be5dd6bdcfee7d4932f2f895b57ec387f77a263b899cf829d050f8012868860f0e5c77ebb4092ef54338e725aa586a36f407c6ee4d065ad710d96cc15f85dca0642165611745006c6241516b1e93425dada28cdee841", 0xd8}, {&(0x7f0000001280)="f19eb59467a92c809d40d328c80d2a94d5b03bc15778d09b78", 0x19}], 0x5, 0x0, 0x0, 0x4000004}, 0x4008050) getitimer(0x3, 0x0) [ 285.232847][T11708] attempt to access beyond end of device [ 285.238794][T11708] loop3: rw=4096, want=32768, limit=29542 [ 285.298681][T11708] XFS (loop3): last sector read failed 04:28:19 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) getitimer(0x3, 0x0) 04:28:19 executing program 1: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1404, 0x300, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000) 04:28:19 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0) 04:28:20 executing program 1: getitimer(0x2, 0x0) [ 285.677156][T11734] XFS (loop0): Invalid superblock magic number 04:28:20 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:20 executing program 4: getitimer(0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x80000385) inotify_rm_watch(r1, r6) 04:28:20 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:20 executing program 1: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f00000000c0)) 04:28:20 executing program 1: getitimer(0x0, 0x0) clock_gettime(0x7, &(0x7f0000000000)) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@x25, &(0x7f0000000140)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setitimer(0x1, &(0x7f0000000200)={{}, {0x0, 0x7530}}, &(0x7f0000000080)) [ 285.991946][T11751] attempt to access beyond end of device [ 285.998873][T11751] loop3: rw=4096, want=32768, limit=29542 04:28:20 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0) [ 286.041178][T11751] XFS (loop3): last sector read failed 04:28:20 executing program 1: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) 04:28:20 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_DEV_DESTROY(r1, 0x5502) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000240)={{&(0x7f0000000180)=""/104, 0x68}, &(0x7f0000000200), 0x50}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x2, 0x8, 0x401, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x80000001}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x4ea}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x8000}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20048015}, 0x20000080) [ 286.130686][T11765] attempt to access beyond end of device [ 286.136458][T11765] loop5: rw=4096, want=32768, limit=29542 [ 286.169466][T11765] XFS (loop5): last sector read failed 04:28:20 executing program 4: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000000400200) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000000)=""/68) [ 286.463326][T11785] XFS (loop0): Invalid superblock magic number 04:28:20 executing program 1: rt_sigreturn() getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000100)={0x597, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) 04:28:20 executing program 4: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000080)={0x20, 0x3, 0x1, 0x0, 0xf3f}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{}, {0x0, 0x2710}}) 04:28:20 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0) 04:28:20 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x2, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x100) getitimer(0x3, 0x0) 04:28:21 executing program 1: getitimer(0x0, 0x0) 04:28:21 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x0, &(0x7f0000000100), 0x0, 0x0) 04:28:21 executing program 2: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={r4, r7, 0x8000}) [ 286.803963][T11806] XFS (loop3): Invalid superblock magic number 04:28:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) getitimer(0x0, 0x0) [ 286.866052][T11812] attempt to access beyond end of device [ 286.879460][T11812] loop5: rw=4096, want=32768, limit=29542 [ 286.907894][T11812] XFS (loop5): last sector read failed 04:28:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f00000000c0)={0x1, 0x0, {0x200, 0x8, 0x1, 0x7fff}}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_generic(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x37, 0x611, 0x70bd26, 0x25dfdbfd, {0x18}, [@typed={0x14, 0x35, 0x0, 0x0, @ipv6=@mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x80) linkat(r1, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000040)='./file0\x00', 0x0) [ 287.006504][T11834] XFS (loop0): Invalid superblock magic number 04:28:21 executing program 4: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070e0000000000000080000000", @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff010000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008640)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000002e000102000000000000000700000000", @ANYRES32=r7, @ANYBLOB="d7c5d2150000000000000000"], 0x24}}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', r7}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r8, 0x3, {0x0, 0x0, 0x2}, 0x7e}, 0x18) 04:28:21 executing program 2: getitimer(0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x76, &(0x7f0000000400)=@assoc_value={r3}, 0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={r3, 0x6}, &(0x7f0000000040)=0x8) 04:28:21 executing program 1 (fault-call:0 fault-nth:0): syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:28:21 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0) [ 287.259742][T11868] FAULT_INJECTION: forcing a failure. [ 287.259742][T11868] name failslab, interval 1, probability 0, space 0, times 0 [ 287.273171][T11868] CPU: 0 PID: 11868 Comm: syz-executor.1 Not tainted 5.6.0-rc7-syzkaller #0 [ 287.281989][T11868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.292061][T11868] Call Trace: [ 287.295388][T11868] dump_stack+0x188/0x20d [ 287.299843][T11868] should_fail.cold+0x5/0xa [ 287.304372][T11868] ? lock_downgrade+0x7f0/0x7f0 [ 287.309943][T11868] ? fault_create_debugfs_attr+0x140/0x140 [ 287.315796][T11868] should_failslab+0x5/0xf [ 287.320256][T11868] __kmalloc+0x2d9/0x7a0 [ 287.324523][T11868] ? __x64_sys_memfd_create+0x131/0x450 [ 287.330083][T11868] ? strnlen_user+0x1f5/0x2e0 [ 287.334779][T11868] __x64_sys_memfd_create+0x131/0x450 [ 287.340161][T11868] ? ksys_write+0x19f/0x250 [ 287.344766][T11868] ? memfd_fcntl+0x1720/0x1720 [ 287.349550][T11868] ? __ia32_sys_clock_settime+0x260/0x260 [ 287.355720][T11868] ? trace_hardirqs_off_caller+0x55/0x230 [ 287.364428][T11868] do_syscall_64+0xf6/0x7d0 [ 287.368951][T11868] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 287.374851][T11868] RIP: 0033:0x45c849 [ 287.379273][T11868] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 287.398924][T11868] RSP: 002b:00007f106fd83a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 287.407366][T11868] RAX: ffffffffffffffda RBX: 00007f106fd846d4 RCX: 000000000045c849 [ 287.415443][T11868] RDX: 0000000020000118 RSI: 0000000000000000 RDI: 00000000004c1941 [ 287.423426][T11868] RBP: 000000000076bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 287.431407][T11868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 287.439389][T11868] R13: 0000000000000bec R14: 00000000004ce0fd R15: 0000000000000000 04:28:21 executing program 4: getitimer(0x0, 0x0) [ 287.476955][T11812] attempt to access beyond end of device [ 287.494248][T11812] loop5: rw=4096, want=32768, limit=29542 [ 287.527760][T11812] XFS (loop5): last sector read failed [ 287.580717][T11867] XFS (loop3): Invalid superblock magic number 04:28:22 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x3, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:22 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x0, &(0x7f0000000100), 0x0, 0x0) 04:28:22 executing program 1 (fault-call:0 fault-nth:1): syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:28:22 executing program 2: getitimer(0x3, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x35}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r3}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r1, 0x0, 0x1, &(0x7f0000000000)='\x00', r3}, 0x30) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r9) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r7, &(0x7f0000000080)={r9, r10, 0x2749c734}) 04:28:22 executing program 4: getitimer(0xb1ce922a94f7714, 0x0) [ 287.876673][T11888] FAULT_INJECTION: forcing a failure. [ 287.876673][T11888] name failslab, interval 1, probability 0, space 0, times 0 [ 287.903997][T11888] CPU: 0 PID: 11888 Comm: syz-executor.1 Not tainted 5.6.0-rc7-syzkaller #0 [ 287.912975][T11888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.923036][T11888] Call Trace: [ 287.927419][T11888] dump_stack+0x188/0x20d [ 287.931783][T11888] should_fail.cold+0x5/0xa [ 287.936823][T11888] ? lock_downgrade+0x7f0/0x7f0 [ 287.941731][T11888] ? fault_create_debugfs_attr+0x140/0x140 [ 287.947667][T11888] ? shmem_destroy_inode+0x70/0x70 [ 287.952836][T11888] should_failslab+0x5/0xf [ 287.957269][T11888] kmem_cache_alloc+0x29b/0x730 [ 287.962277][T11888] ? find_held_lock+0x2d/0x110 [ 287.967218][T11888] ? __alloc_fd+0x46d/0x600 [ 287.971761][T11888] ? shmem_destroy_inode+0x70/0x70 [ 287.976864][T11888] shmem_alloc_inode+0x18/0x40 [ 287.981644][T11888] ? shmem_destroy_inode+0x70/0x70 [ 287.986765][T11888] alloc_inode+0x61/0x1e0 [ 287.991095][T11888] new_inode_pseudo+0x14/0xe0 [ 287.995766][T11888] new_inode+0x1b/0x40 [ 287.999830][T11888] shmem_get_inode+0x84/0x7e0 [ 288.004526][T11888] __shmem_file_setup.part.0+0x7a/0x2b0 [ 288.010088][T11888] shmem_file_setup+0x61/0x90 [ 288.014871][T11888] __x64_sys_memfd_create+0x28a/0x450 [ 288.020236][T11888] ? memfd_fcntl+0x1720/0x1720 [ 288.024995][T11888] ? __ia32_sys_clock_settime+0x260/0x260 [ 288.030706][T11888] ? trace_hardirqs_off_caller+0x55/0x230 [ 288.036440][T11888] do_syscall_64+0xf6/0x7d0 [ 288.040939][T11888] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.046905][T11888] RIP: 0033:0x45c849 [ 288.050834][T11888] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:28:22 executing program 4: getitimer(0x3, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x38080, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x1, 0x4) [ 288.071579][T11888] RSP: 002b:00007f106fd83a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 288.080070][T11888] RAX: ffffffffffffffda RBX: 00007f106fd846d4 RCX: 000000000045c849 [ 288.088045][T11888] RDX: 0000000020000118 RSI: 0000000000000000 RDI: 00000000004c1941 [ 288.096010][T11888] RBP: 000000000076bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 288.103963][T11888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 288.112972][T11888] R13: 0000000000000bec R14: 00000000004ce0fd R15: 0000000000000001 04:28:22 executing program 1 (fault-call:0 fault-nth:2): syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:28:22 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0) [ 288.217517][T11907] FAULT_INJECTION: forcing a failure. [ 288.217517][T11907] name failslab, interval 1, probability 0, space 0, times 0 [ 288.231390][T11907] CPU: 0 PID: 11907 Comm: syz-executor.1 Not tainted 5.6.0-rc7-syzkaller #0 [ 288.240209][T11907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.250361][T11907] Call Trace: [ 288.253673][T11907] dump_stack+0x188/0x20d [ 288.258034][T11907] should_fail.cold+0x5/0xa [ 288.262650][T11907] ? lock_downgrade+0x7f0/0x7f0 [ 288.267527][T11907] ? fault_create_debugfs_attr+0x140/0x140 [ 288.273806][T11907] should_failslab+0x5/0xf [ 288.278239][T11907] kmem_cache_alloc+0x29b/0x730 [ 288.283093][T11907] ? timestamp_truncate+0x20f/0x2f0 [ 288.288282][T11907] ? inode_init_owner+0x330/0x330 [ 288.293352][T11907] ? ktime_get_coarse_real_ts64+0xe5/0x280 [ 288.299152][T11907] __d_alloc+0x2b/0x8d0 [ 288.303323][T11907] d_alloc_pseudo+0x19/0x70 [ 288.307934][T11907] alloc_file_pseudo+0xc6/0x250 [ 288.312788][T11907] ? alloc_file+0x4d0/0x4d0 [ 288.317292][T11907] ? lockdep_annotate_inode_mutex_key+0x3c/0x70 [ 288.325804][T11907] ? shmem_get_inode+0x47a/0x7e0 [ 288.330940][T11907] __shmem_file_setup.part.0+0x102/0x2b0 [ 288.336567][T11907] shmem_file_setup+0x61/0x90 [ 288.341245][T11907] __x64_sys_memfd_create+0x28a/0x450 [ 288.346623][T11907] ? memfd_fcntl+0x1720/0x1720 [ 288.351369][T11907] ? __ia32_sys_clock_settime+0x260/0x260 [ 288.357075][T11907] ? trace_hardirqs_off_caller+0x55/0x230 [ 288.362894][T11907] do_syscall_64+0xf6/0x7d0 [ 288.367387][T11907] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.373271][T11907] RIP: 0033:0x45c849 [ 288.377165][T11907] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 288.396926][T11907] RSP: 002b:00007f106fd83a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 288.405334][T11907] RAX: ffffffffffffffda RBX: 00007f106fd846d4 RCX: 000000000045c849 [ 288.413299][T11907] RDX: 0000000020000118 RSI: 0000000000000000 RDI: 00000000004c1941 [ 288.421262][T11907] RBP: 000000000076bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 288.429218][T11907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 288.437171][T11907] R13: 0000000000000bec R14: 00000000004ce0fd R15: 0000000000000002 [ 288.470996][T11891] XFS (loop0): Invalid superblock magic number [ 288.484448][T11898] attempt to access beyond end of device 04:28:22 executing program 1 (fault-call:0 fault-nth:3): syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 288.529278][T11898] loop5: rw=4096, want=32768, limit=29542 [ 288.535157][T11898] XFS (loop5): last sector read failed [ 288.536313][T11912] XFS (loop3): Invalid superblock magic number 04:28:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x1, 0x6, 0x801, 0x0, 0x0, {0xe, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40008000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x2fa8516b9698afab}, 0x8000) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x710, 0x1, 0x5, 0x201, 0x0, 0x0, {0x5}, [{{0x254, 0x1, {{0x0, 0x9}, 0x3b, 0xad, 0x281, 0x8, 0x28, 'syz1\x00', "93890aaaf6dd335033d8a228e66b3db7fddbc16837769cee0ade006f78b0ce30", "49c8c7ec555fd70e09dae7374e63962ab652e5d95f50d09d35b386ebdeb5dab8", [{0x3, 0xfed, {0x0, 0x5}}, {0x7, 0x7ff, {0x2, 0x4}}, {0x17, 0xff80, {0x0, 0x90f}}, {0x8, 0x1, {0x1, 0x9}}, {0x7, 0x38, {0x2, 0x1}}, {0x5, 0x80, {0x2, 0x400}}, {0x8005, 0x9, {0x2, 0x11}}, {0x1, 0x3, {0x1, 0x3}}, {0x3f, 0xa3, {0x2, 0xf}}, {0x8000, 0xd7}, {0xff, 0x1f, {0x1, 0x1}}, {0x3, 0x4, {0x1, 0x6}}, {0x7, 0x2, {0x3, 0xf4df}}, {0x20, 0x3, {0x1, 0x7fffffff}}, {0x3, 0x3, {0x3, 0x101}}, {0x3, 0x8, {0x2, 0x9b}}, {0x7, 0x7, {0x1, 0x7}}, {0x5, 0x304, {0x3, 0x3}}, {0x7, 0x4, {0x2, 0x81}}, {0x5, 0x7, {0x0, 0x3}}, {0x3, 0x8, {0x3}}, {0xfffc, 0x4, {0x3, 0x5}}, {0x4, 0xd2e0, {0x1, 0x6}}, {0xce, 0x3, {0x2, 0x1000000}}, {0x40, 0x8000, {0x1, 0xffff}}, {0x5, 0x92a, {0x1, 0x800002}}, {0x27, 0x2392, {0x2, 0x5}}, {0x4, 0x1f, {0x2, 0x40}}, {0x7, 0x7, {0x2, 0x4}}, {0x7ff, 0x401, {0x2, 0x2}}, {0x4, 0x100, {0x0, 0xffff}}, {0x1, 0x4, {0x2, 0x6}}, {0x3, 0x1, {0x3, 0x100}}, {0x7, 0x8, {0x1, 0x3}}, {0xffff, 0x2, {0x3, 0x5}}, {0x4, 0x5, {0x1, 0x81}}, {0x1f, 0x8000, {0x3, 0x4}}, {0x3, 0x401, {0x0, 0x401}}, {0x8000, 0x7f, {0x0, 0x8001}}, {0x4, 0x4, {0x1, 0xfffffffd}}]}}}, {{0x254, 0x1, {{0x3, 0x307}, 0x40, 0x0, 0x1a9, 0x8, 0x1a, 'syz0\x00', "22d97caf3acdf33fc51ce00559d08fbc56d258f3d4fc54ba24fe8fb749553ab5", "afacb5869a940d615498da02a95eed39edfaa519c8e69511010b81290c221bce", [{0x7fff, 0x50a, {0x2, 0x31}}, {0x7, 0x2, {0x1, 0x400}}, {0x6, 0x1, {0x0, 0x7fff}}, {0x7ff, 0x1, {0x3, 0xf9ec0}}, {0x401, 0xfff, {0x1, 0x3}}, {0x1d07, 0x20, {0x3, 0x6}}, {0x4, 0x8, {0x1, 0x7fff}}, {0x1c0, 0x3f, {0x1, 0x4}}, {0x101, 0xd153, {0x3, 0x9}}, {0x5c9, 0x8, {0x1, 0x200}}, {0x3, 0x80, {0x0, 0x7}}, {0x8, 0xf1fe, {0x0, 0x3}}, {0x2, 0x7f, {0x2, 0x401}}, {0xa1, 0x1, {0x2, 0x6}}, {0x6, 0x80, {0x3, 0x80000001}}, {0xff7b, 0x9, {0x1, 0x8000}}, {0xc8a, 0x3, {0x0, 0x2}}, {0x7f, 0x3f, {0x2}}, {0x4, 0x50, {0x2, 0xb9}}, {0x40, 0x8, {0x1, 0x32f}}, {0x6, 0x3, {0x2, 0x7}}, {0x6, 0x4f14, {0x0, 0x5}}, {0x8000, 0x7f, {0x1, 0x81}}, {0x6, 0x3f, {0x0, 0xf04}}, {0x8, 0x4, {0x2, 0x1}}, {0x3, 0x5, {0x0, 0xe00d}}, {0x1, 0x2, {0x0, 0x3f}}, {0x8, 0x3, {0x2, 0xffff4581}}, {0x5, 0x0, {0x3, 0xffffffff}}, {0xb32b, 0x2, {0x1, 0x6}}, {0x7, 0x0, {0x1, 0x4}}, {0x5, 0x1, {0x0, 0x7fff}}, {0xa1, 0x1ff, {0x3, 0x1}}, {0x6, 0x1992, {0x2, 0x1}}, {0x44c0, 0x3, {0x2, 0xfffffffc}}, {0x8, 0x9b0f, {0x1, 0x200}}, {0x8, 0x5, {0x2, 0x1000}}, {0x4, 0x8, {0x2, 0x7}}, {0x8, 0x7, {0x2, 0xffffffff}}, {0xe39, 0x0, {0x2, 0x888}}]}}}, {{0x254, 0x1, {{0x2, 0x1}, 0x4, 0x7, 0x6eb, 0x0, 0x33, 'syz1\x00', "df1eb2860140d77dd6f5f5d252c1dc7aa51f3821d8e5334023d12701be3e392c", "5d7293293944a9647180321821a535ecba2980b8ef1e83007dba8d14bee2db5b", [{0x2, 0x4, {0x3, 0x100}}, {0x6, 0x768, {0x1, 0x1}}, {0x0, 0xff, {0x1, 0x6}}, {0x1f, 0x8, {0x3, 0x7}}, {0x2, 0x81a}, {0x4c, 0x5, {0x3, 0x1}}, {0x9, 0x9b, {0x2, 0x6}}, {0x40, 0x40, {0x1, 0xff}}, {0x0, 0x1, {0x3, 0x6}}, {0x3, 0x1ff, {0x3, 0x7}}, {0x0, 0x20, {0x0, 0xfffffffa}}, {0x1, 0xcb2b, {0x0, 0x4}}, {0x76d3, 0x7ff, {0x0, 0x37e}}, {0x7, 0x8, {0x1, 0xffffffff}}, {0x5, 0x278c, {0x1, 0xe8}}, {0x6, 0xc60, {0x0, 0x3}}, {0x0, 0x0, {0x3, 0x35f}}, {0xd6f, 0x81, {0x2, 0x2}}, {0xfff8, 0x6, {0x1, 0x9}}, {0x0, 0x40, {0x2, 0x8}}, {0x8, 0x800, {0x3, 0x8}}, {0x6, 0x0, {0x3, 0x1000}}, {0x8, 0x40, {0x3, 0x1}}, {0x8001, 0x47db, {0x0, 0xa756}}, {0xbe, 0x9, {0x1, 0x200}}, {0x22, 0x5f, {0x0, 0x6c4d}}, {0x2, 0x7855, {0x2, 0x1ff}}, {0x0, 0x180, {0x3, 0x8001}}, {0x6, 0xb856, {0x0, 0xffffffff}}, {0xbbc, 0x1}, {0x8001, 0x40, {0x2, 0x6}}, {0x9, 0x31c6, {0x1, 0xcbd}}, {0x5, 0x540, {0x3, 0x40000}}, {0x72, 0x4, {0x3, 0x8}}, {0x7, 0x5, {0x1}}, {0x1, 0x9, {0x3, 0x7}}, {0xf76a, 0x6, {0x1, 0x10001}}, {0x401, 0x1, {0x1, 0x2}}, {0x1, 0x4, {0x3, 0x3340}}, {0x401, 0x8001, {0x2, 0x400}}]}}}]}, 0x710}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getpeername$l2tp(r6, &(0x7f0000000400)={0x2, 0x0, @remote}, &(0x7f0000000440)=0x10) r7 = dup(r4) dup(0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x3, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40800) getrlimit(0xe, &(0x7f0000000000)) getitimer(0x3, 0x0) [ 288.586789][T11927] FAULT_INJECTION: forcing a failure. [ 288.586789][T11927] name failslab, interval 1, probability 0, space 0, times 0 [ 288.601607][T11927] CPU: 1 PID: 11927 Comm: syz-executor.1 Not tainted 5.6.0-rc7-syzkaller #0 [ 288.610298][T11927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.620468][T11927] Call Trace: [ 288.623873][T11927] dump_stack+0x188/0x20d [ 288.628237][T11927] should_fail.cold+0x5/0xa [ 288.632764][T11927] ? lock_downgrade+0x7f0/0x7f0 [ 288.637810][T11927] ? fault_create_debugfs_attr+0x140/0x140 [ 288.643651][T11927] should_failslab+0x5/0xf [ 288.648084][T11927] kmem_cache_alloc+0x29b/0x730 [ 288.652956][T11927] ? lock_downgrade+0x7f0/0x7f0 [ 288.657824][T11927] __alloc_file+0x21/0x340 [ 288.662277][T11927] alloc_empty_file+0x6d/0x170 [ 288.667067][T11927] alloc_file+0x5e/0x4d0 [ 288.671329][T11927] alloc_file_pseudo+0x165/0x250 [ 288.676286][T11927] ? alloc_file+0x4d0/0x4d0 [ 288.680809][T11927] ? shmem_get_inode+0x47a/0x7e0 [ 288.685858][T11927] __shmem_file_setup.part.0+0x102/0x2b0 [ 288.691529][T11927] shmem_file_setup+0x61/0x90 [ 288.696318][T11927] __x64_sys_memfd_create+0x28a/0x450 [ 288.701729][T11927] ? memfd_fcntl+0x1720/0x1720 [ 288.706620][T11927] ? __ia32_sys_clock_settime+0x260/0x260 [ 288.712363][T11927] ? trace_hardirqs_off_caller+0x55/0x230 [ 288.718117][T11927] do_syscall_64+0xf6/0x7d0 [ 288.722656][T11927] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.728828][T11927] RIP: 0033:0x45c849 04:28:23 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ftruncate(r2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) getitimer(0x0, 0x0) [ 288.732757][T11927] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 288.752371][T11927] RSP: 002b:00007f106fd83a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 288.760796][T11927] RAX: ffffffffffffffda RBX: 00007f106fd846d4 RCX: 000000000045c849 [ 288.768785][T11927] RDX: 0000000020000118 RSI: 0000000000000000 RDI: 00000000004c1941 [ 288.776768][T11927] RBP: 000000000076bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 288.784761][T11927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 288.792746][T11927] R13: 0000000000000bec R14: 00000000004ce0fd R15: 0000000000000003 04:28:23 executing program 1 (fault-call:0 fault-nth:4): syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 288.907936][T11937] FAULT_INJECTION: forcing a failure. [ 288.907936][T11937] name failslab, interval 1, probability 0, space 0, times 0 [ 288.922887][T11937] CPU: 1 PID: 11937 Comm: syz-executor.1 Not tainted 5.6.0-rc7-syzkaller #0 [ 288.931670][T11937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.941738][T11937] Call Trace: [ 288.945050][T11937] dump_stack+0x188/0x20d [ 288.949497][T11937] should_fail.cold+0x5/0xa [ 288.954016][T11937] ? lock_downgrade+0x7f0/0x7f0 [ 288.958885][T11937] ? fault_create_debugfs_attr+0x140/0x140 [ 288.964739][T11937] should_failslab+0x5/0xf [ 288.969209][T11937] kmem_cache_alloc+0x29b/0x730 [ 288.974076][T11937] ? kmem_cache_alloc+0x358/0x730 [ 288.979210][T11937] security_file_alloc+0x34/0x160 [ 288.984694][T11937] __alloc_file+0xd8/0x340 [ 288.991913][T11937] alloc_empty_file+0x6d/0x170 [ 288.999184][T11937] alloc_file+0x5e/0x4d0 [ 289.003456][T11937] alloc_file_pseudo+0x165/0x250 [ 289.008505][T11937] ? alloc_file+0x4d0/0x4d0 [ 289.013048][T11937] ? shmem_get_inode+0x47a/0x7e0 [ 289.018019][T11937] __shmem_file_setup.part.0+0x102/0x2b0 [ 289.024112][T11937] shmem_file_setup+0x61/0x90 [ 289.028815][T11937] __x64_sys_memfd_create+0x28a/0x450 [ 289.034217][T11937] ? memfd_fcntl+0x1720/0x1720 [ 289.039184][T11937] ? __ia32_sys_clock_settime+0x260/0x260 [ 289.044925][T11937] ? trace_hardirqs_off_caller+0x55/0x230 [ 289.050674][T11937] do_syscall_64+0xf6/0x7d0 [ 289.055192][T11937] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.061085][T11937] RIP: 0033:0x45c849 [ 289.064998][T11937] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 289.084732][T11937] RSP: 002b:00007f106fd83a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 289.093543][T11937] RAX: ffffffffffffffda RBX: 00007f106fd846d4 RCX: 000000000045c849 [ 289.101528][T11937] RDX: 0000000020000118 RSI: 0000000000000000 RDI: 00000000004c1941 [ 289.109513][T11937] RBP: 000000000076bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 289.117496][T11937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 289.125611][T11937] R13: 0000000000000bec R14: 00000000004ce0fd R15: 0000000000000004 04:28:23 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x4, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:23 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x0, &(0x7f0000000100), 0x0, 0x0) 04:28:23 executing program 1 (fault-call:0 fault-nth:5): syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 289.434423][T11948] FAULT_INJECTION: forcing a failure. [ 289.434423][T11948] name failslab, interval 1, probability 0, space 0, times 0 [ 289.447676][T11948] CPU: 0 PID: 11948 Comm: syz-executor.1 Not tainted 5.6.0-rc7-syzkaller #0 [ 289.456362][T11948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.466596][T11948] Call Trace: [ 289.469930][T11948] dump_stack+0x188/0x20d [ 289.474274][T11948] should_fail.cold+0x5/0xa [ 289.478776][T11948] ? fault_create_debugfs_attr+0x140/0x140 [ 289.484585][T11948] should_failslab+0x5/0xf [ 289.488994][T11948] __kmalloc+0x2d9/0x7a0 [ 289.493334][T11948] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 289.499391][T11948] ? tomoyo_realpath_from_path+0xc2/0x620 [ 289.505111][T11948] ? stack_trace_save+0x8c/0xc0 [ 289.509951][T11948] ? stack_trace_consume_entry+0x160/0x160 [ 289.515797][T11948] tomoyo_realpath_from_path+0xc2/0x620 [ 289.521340][T11948] ? tomoyo_path_perm+0x1ba/0x400 [ 289.526360][T11948] tomoyo_path_perm+0x214/0x400 [ 289.531317][T11948] ? tomoyo_path_perm+0x1ba/0x400 [ 289.536357][T11948] ? tomoyo_check_open_permission+0x370/0x370 [ 289.542439][T11948] ? find_held_lock+0x2d/0x110 [ 289.547769][T11948] ? rcu_read_lock_any_held+0xcd/0xf0 [ 289.553154][T11948] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 289.558453][T11948] security_path_truncate+0xeb/0x150 [ 289.563753][T11948] do_sys_ftruncate+0x3f0/0x560 [ 289.568607][T11948] do_syscall_64+0xf6/0x7d0 [ 289.573113][T11948] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.578993][T11948] RIP: 0033:0x45c817 [ 289.582882][T11948] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 289.602487][T11948] RSP: 002b:00007f106fd83a68 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 289.610882][T11948] RAX: ffffffffffffffda RBX: 00007f106fd846d4 RCX: 000000000045c817 [ 289.618940][T11948] RDX: 0000000020000118 RSI: 0000000008100000 RDI: 0000000000000004 [ 289.626898][T11948] RBP: 000000000076bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 289.635904][T11948] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000000003 [ 289.643872][T11948] R13: 0000000000000bec R14: 00000000004ce0fd R15: 0000000000000005 [ 289.668059][T11948] ERROR: Out of memory at tomoyo_realpath_from_path. [ 289.705949][T11950] attempt to access beyond end of device [ 289.712361][T11950] loop5: rw=4096, want=32768, limit=29542 [ 289.718268][T11950] XFS (loop5): last sector read failed 04:28:24 executing program 2: getitimer(0x3, 0x0) 04:28:24 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x0, &(0x7f0000000100), 0x0, 0x0) 04:28:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000004fc8)={0x0, 0xfffffffffffffed4, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x8, 0x12, 0xa}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r3, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x15, 0x1, '/proc/partitions\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040050}, 0x4081) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x16}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x100}, 0x0) getitimer(0x3, 0x0) [ 289.746787][T11951] XFS (loop0): Invalid superblock magic number [ 289.766628][ T2721] XFS (loop1): SB sanity check failed [ 289.772408][ T2721] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 289.797520][ T2721] XFS (loop1): Unmount and run xfs_repair [ 289.808363][ T2721] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 289.826420][ T2721] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 289.849828][ T2721] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 289.865608][ T2721] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 289.877687][ T2721] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 04:28:24 executing program 4: getitimer(0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0xfffffffd, 0x1, 0x4, 0x4, 0x81, {0x0, 0x7530}, {0x3, 0x1, 0x2, 0xfd, 0x1f, 0x81, "3ebe2816"}, 0x3, 0x2, @userptr=0x4, 0x5, 0x0, r1}) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000080)=0x5) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x76, &(0x7f0000000400)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000100)={r6, 0x9}, &(0x7f0000000140)=0x8) [ 289.892922][ T2721] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 289.913213][ T2721] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 289.926305][ T2721] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 04:28:24 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x321002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_FTM_RESPONDER={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8a4}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x40}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8004) getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{@fixed}, {@none}]}) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) get_robust_list(r5, 0x0, &(0x7f0000000180)) getgid() 04:28:24 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) accept4$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10, 0x80400) getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x0, 0x7530}}, 0x0) [ 289.954780][ T2721] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 289.964786][T11948] XFS (loop1): SB validate failed with error -117. [ 290.005411][T11980] XFS (loop3): Invalid superblock magic number 04:28:24 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{0x0}], 0x0, 0x0) [ 290.121014][T11950] attempt to access beyond end of device [ 290.126694][T11950] loop5: rw=4096, want=32768, limit=29542 [ 290.134142][T12004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 290.167803][T11950] XFS (loop5): last sector read failed 04:28:24 executing program 4: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)={0x1, 0x8, 0x4, 0x100, 0x1, {r2, r3/1000+10000}, {0x2, 0xc, 0x6, 0x1, 0x80, 0x20, 'v=o,'}, 0xffffff7f, 0x2, @offset=0x7, 0x6, 0x0, r5}) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f00000000c0)=r7) 04:28:24 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 290.266130][T12004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 290.397263][T12012] XFS (loop0): Invalid superblock magic number [ 290.456180][ T2719] XFS (loop1): SB sanity check failed [ 290.479186][ T2719] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 290.491706][ T2719] XFS (loop1): Unmount and run xfs_repair [ 290.497503][ T2719] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 290.519174][ T2719] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 290.528057][ T2719] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 290.539130][ T2719] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 290.548027][ T2719] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 290.557211][ T2719] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 04:28:24 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x5, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:24 executing program 2: getitimer(0x1, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/188, 0x100000, 0x1000, 0xfff, 0x2}, 0x20) 04:28:24 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x0, &(0x7f0000000100), 0x0, 0x0) 04:28:24 executing program 4: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x705a00, 0x20) mmap$usbfs(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r2, 0x10000) [ 290.566377][ T2719] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 290.575364][ T2719] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 290.584318][ T2719] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 290.600584][T12022] XFS (loop1): SB validate failed with error -117. 04:28:25 executing program 2: getitimer(0x0, 0x0) [ 290.743411][T12039] XFS (loop3): Invalid superblock magic number 04:28:25 executing program 4: getitimer(0x3, 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000000)={r5}) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f0000000180)={0x1, 0x3, 0x1000, 0xb4, &(0x7f00000000c0)="b89ce9381b3d3a121cc25671fb10e8d45468d6b99da9d5f2efec9231685ed129106c0185f13f8b7a1d97495805dc0d769fd435dc5e3f68f49608a9ecf617521ff5b39773a5382d734cd0e30a88f04254c2258ad26c30bbc2a90141c6bdbb2561db63b436406a8303fedd85d77fb597b8620901ea388084cb4a7547cf656864e322bc98a5b62de08f85a16bfea89c78c291fff9cf474c836e7f122ce4c997d1ffe40cc3aa5a1a1c5d42f1ee75438acc044049b908", 0x1a, 0x0, &(0x7f0000000040)="d972e7912d2ed3905b0eed0ff46556c2ae3bba6cfe2876122c5c"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000001b40)={0x0, @empty, @local}, &(0x7f0000001b80)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001bc0)={'vcan0\x00', r9}) 04:28:25 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{0x0}], 0x0, 0x0) 04:28:25 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x6, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5, 0x1, 0xc6, 0x8}, {0x400, 0xc, 0x28, 0x8}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f0000001240)={0x5a, 0x7fff, 0x2, 0xd6f, 0x5, 0x1, 0xe1be}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000100)={0x0, 0x6, 0x8000, &(0x7f00000000c0)=0x100}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x96988d00d5489e98, 0x0) getsockopt$netrom_NETROM_N2(r5, 0x103, 0x3, &(0x7f0000000180)=0xffffff81, &(0x7f00000001c0)=0x4) getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000001200)=@usbdevfs_driver={0xfffff000, 0xbda, &(0x7f0000000200)="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"}) 04:28:25 executing program 4: getitimer(0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000000)={0x58}) 04:28:25 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x2, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:28:25 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)) [ 291.098575][T12062] XFS (loop0): Invalid superblock magic number [ 291.115290][T12072] attempt to access beyond end of device [ 291.127000][T12072] loop5: rw=4096, want=32768, limit=29542 04:28:25 executing program 2: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000000)={0x6, 0x1000}) setuid(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {0x1, 0x6}, [], {}, [{}, {0x8, 0x0, r5}]}, 0x34, 0x0) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {0x1, 0x6}, [], {}, [{}, {0x8, 0x0, r8}]}, 0x34, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="020000000100060000000000040000000008800000000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r10, @ANYBLOB="10000000000000002000000000000000"], 0x34, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x4}, [{0x2, 0x4}, {0x2, 0x2}, {0x2, 0x3}, {0x2, 0x5}, {0x2, 0x385f2ea598804178, r3}], {0x4, 0x4}, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x5, r8}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, r10}], {0x10, 0xc}, {0x20, 0x2}}, 0x74, 0x2) [ 291.154514][T12072] XFS (loop5): last sector read failed 04:28:25 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x0, &(0x7f0000000100), 0x0, 0x0) 04:28:25 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000000)=""/26) getitimer(0x3, 0x0) [ 291.253490][T12090] XFS (loop1): Invalid superblock magic number 04:28:25 executing program 2: r0 = socket$inet6(0xa, 0xa, 0x86) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/180}) getsockopt$bt_hci(r0, 0x84, 0x75, &(0x7f0000002140)=""/4126, &(0x7f0000000040)=0x101e) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xa, 0x10010, 0xffffffffffffffff, 0x0) getitimer(0x3, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x0, 0x20001) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x3f7, 0x100, 0xffff, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) 04:28:25 executing program 4: getitimer(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000000)) 04:28:25 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{0x0}], 0x0, 0x0) [ 291.475821][T12105] XFS (loop3): Invalid superblock magic number 04:28:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) fadvise64(r4, 0x3b800000000000, 0x401, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xff) setns(r1, 0x40000000) [ 291.574662][T12072] attempt to access beyond end of device [ 291.583881][T12072] loop5: rw=4096, want=32768, limit=29542 [ 291.601739][T12072] XFS (loop5): last sector read failed [ 291.647780][T12090] XFS (loop1): Invalid superblock magic number [ 291.685914][T12134] XFS (loop0): Invalid superblock magic number 04:28:26 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x7, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:26 executing program 4: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000000)=0x1) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$AUDIT_DEL_RULE(r6, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x434}, 0x1, 0x0, 0x0, 0x4000}, 0x4048000) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f00000000c0)) 04:28:26 executing program 2: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000040)=0x8001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)) 04:28:26 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x3, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:28:26 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{0x0}], 0x0, 0x0) 04:28:26 executing program 2: getitimer(0x1, 0x0) 04:28:26 executing program 4: getitimer(0x1, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) 04:28:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r1, r3) getpeername$llc(r4, &(0x7f0000000400), &(0x7f0000000440)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/99, 0x63}, {&(0x7f0000000080)=""/249, 0xf9}, {&(0x7f0000000180)=""/190, 0xbe}, {&(0x7f0000000240)=""/45, 0x2d}], 0x4, &(0x7f00000002c0)=""/220, 0xdc}, 0x2) getitimer(0x2, 0x0) [ 292.095079][T12165] XFS (loop3): Invalid superblock magic number 04:28:26 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x0, 0x0) [ 292.178564][T12176] attempt to access beyond end of device [ 292.190253][T12176] loop5: rw=4096, want=32768, limit=29542 04:28:26 executing program 4: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) getitimer(0x3, 0x0) [ 292.239060][T12176] XFS (loop5): last sector read failed [ 292.320235][T12194] XFS (loop1): Invalid superblock magic number 04:28:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x76, &(0x7f0000000400)=@assoc_value={r4}, 0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r4}, 0x8) getitimer(0x3, 0x0) 04:28:26 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{0x0}], 0x0, 0x0) [ 292.436026][T12205] XFS (loop0): Invalid superblock magic number [ 292.596502][T12221] XFS (loop3): Invalid superblock magic number [ 292.659239][T12176] attempt to access beyond end of device [ 292.665035][T12176] loop5: rw=4096, want=32768, limit=29542 [ 292.696018][T12176] XFS (loop5): last sector read failed 04:28:27 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x8, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:27 executing program 4: getitimer(0x2, 0x0) 04:28:27 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x5, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:28:27 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x0, 0x0) 04:28:27 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{0x0}], 0x0, 0x0) 04:28:27 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ftruncate(r0, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0x89b, @rand_addr="662b8c27fd50cb7818519732ec8d4e85", 0x8001}, {0xa, 0x4e22, 0x3, @rand_addr="99a9e830826ef758bf365f1cf037de71", 0x80}, 0x7, [0x6f9, 0x3f, 0xe7ea, 0x100, 0xfffffff7, 0x2, 0x3, 0x8000]}, 0x5c) getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$P9_RSETATTR(r6, &(0x7f0000000100)={0x7, 0x1b, 0x2}, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000005000000", @ANYRES32, @ANYBLOB="00000000ffffffff010000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008640)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000002e000102000000000000000700000000", @ANYRES32, @ANYBLOB="d7c5d2150000000000000000"], 0x24}}, 0x4) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0x3d}}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x2, 0x6, 0x1}}, 0x28) [ 293.164457][T12250] XFS (loop1): Invalid superblock magic number [ 293.214004][T12251] XFS (loop3): Invalid superblock magic number [ 293.244215][T12252] XFS (loop0): Invalid superblock magic number [ 293.288733][T12270] attempt to access beyond end of device [ 293.300352][T12270] loop5: rw=4096, want=32768, limit=29542 [ 293.317606][T12270] XFS (loop5): last sector read failed 04:28:27 executing program 4: getitimer(0x1, 0x0) 04:28:27 executing program 4: getitimer(0x2, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) 04:28:27 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x0, 0x0) [ 293.528561][T12250] XFS (loop1): Invalid superblock magic number 04:28:28 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x0, 0x0) 04:28:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x1000, 0x4) getitimer(0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_tcp_buf(r3, 0x6, 0x12, &(0x7f00000000c0)=""/97, &(0x7f0000000040)=0x61) [ 293.712352][T12303] XFS (loop0): Invalid superblock magic number [ 293.719922][T12270] attempt to access beyond end of device [ 293.726870][T12270] loop5: rw=4096, want=32768, limit=29542 [ 293.748617][T12270] XFS (loop5): last sector read failed 04:28:28 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xa, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 293.904247][T12325] XFS (loop3): Invalid superblock magic number 04:28:28 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x9, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:28 executing program 4: getitimer(0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x1407, 0x8, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x64}}, 0x4044040) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0xc08482, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r6, &(0x7f0000000140)={r9, r0, 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$tipc(r2, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f00000000c0)) 04:28:28 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="58465342000010000000000000001000"/32, 0x20}], 0x0, 0x0) 04:28:28 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x0, 0x0) [ 294.237945][T12336] XFS (loop1): Invalid superblock magic number [ 294.293265][T12352] attempt to access beyond end of device [ 294.302992][T12352] loop5: rw=4096, want=32768, limit=29542 [ 294.310538][T12342] XFS (loop0): device supports 512 byte sectors (not 0) [ 294.335118][T12352] XFS (loop5): last sector read failed [ 294.487393][T12369] XFS (loop3): Invalid superblock magic number 04:28:28 executing program 4: getitimer(0x1, 0x0) [ 294.536130][T12336] XFS (loop1): Invalid superblock magic number [ 294.668053][T12352] attempt to access beyond end of device [ 294.707308][T12352] loop5: rw=4096, want=32768, limit=29542 04:28:29 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x4, 0x0, [{0x80000007, 0x7ff, 0x2, 0xffffff7f, 0x2, 0x1, 0x7}, {0x40000001, 0x7, 0x0, 0x5, 0x99f, 0x1, 0xfffffffa}, {0x2, 0x9, 0x3, 0x5, 0x7, 0x3, 0x8}, {0x80000007, 0x3, 0x5, 0x2, 0x4233486e, 0x7, 0x98}]}) 04:28:29 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='X', 0x1}], 0x0, 0x0) [ 294.715625][T12352] XFS (loop5): last sector read failed 04:28:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) getitimer(0x3, 0x0) 04:28:29 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x0, 0x0) 04:28:29 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xd, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 294.948976][T12401] XFS (loop0): Invalid superblock magic number 04:28:29 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xa, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:29 executing program 4: getitimer(0x1, 0x0) [ 295.094090][T12417] XFS (loop1): Invalid superblock magic number [ 295.100679][T12409] XFS (loop3): Invalid superblock magic number 04:28:29 executing program 4: getitimer(0x3, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000080)={0x2, 0x7}) 04:28:29 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='X', 0x1}], 0x0, 0x0) [ 295.214765][T12436] attempt to access beyond end of device [ 295.221984][T12436] loop5: rw=4096, want=32768, limit=29542 [ 295.243270][T12436] XFS (loop5): last sector read failed 04:28:29 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f800200"/63, 0x3f}], 0x0, 0x0) [ 295.480777][T12450] XFS (loop0): Invalid superblock magic number [ 295.602660][T12436] attempt to access beyond end of device [ 295.609951][T12436] loop5: rw=4096, want=32768, limit=29542 [ 295.623576][T12436] XFS (loop5): last sector read failed 04:28:30 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 295.720014][T12476] XFS (loop3): device supports 512 byte sectors (not 0) 04:28:30 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='X', 0x1}], 0x0, 0x0) 04:28:30 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xc, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 295.940015][T12488] XFS (loop1): Invalid superblock magic number [ 296.012448][T12496] XFS (loop0): Invalid superblock magic number 04:28:30 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f800200"/63, 0x3f}], 0x0, 0x0) [ 296.205977][T12509] attempt to access beyond end of device [ 296.216302][T12509] loop5: rw=4096, want=32768, limit=29542 [ 296.230617][T12509] XFS (loop5): last sector read failed [ 296.377043][T12518] XFS (loop3): device supports 512 byte sectors (not 0) 04:28:30 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000", 0x11}], 0x0, 0x0) 04:28:30 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xf, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:28:30 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xd, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:31 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f800200"/63, 0x3f}], 0x0, 0x0) [ 296.776014][T12537] XFS (loop1): Invalid superblock magic number [ 296.783785][T12534] XFS (loop0): device supports 512 byte sectors (not 0) [ 296.918246][T12547] attempt to access beyond end of device [ 296.926297][T12547] loop5: rw=4096, want=32768, limit=29542 [ 296.933637][T12547] XFS (loop5): last sector read failed [ 296.991776][T12563] XFS (loop3): device supports 512 byte sectors (not 0) 04:28:31 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XF', 0x2}], 0x0, 0x0) 04:28:31 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c00000100001000000000010000", 0x5e}], 0x0, 0x0) [ 297.350876][T12547] attempt to access beyond end of device [ 297.359014][T12547] loop5: rw=4096, want=32768, limit=29542 04:28:31 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x11, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 297.396126][T12547] XFS (loop5): last sector read failed [ 297.459554][T12589] XFS (loop0): Invalid superblock magic number [ 297.610506][T12602] XFS (loop3): device supports 512 byte sectors (not 0) [ 297.643677][T12608] XFS (loop1): Invalid superblock magic number 04:28:32 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xe, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:32 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XF', 0x2}], 0x0, 0x0) 04:28:32 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c00000100001000000000010000", 0x5e}], 0x0, 0x0) [ 298.036610][T12629] XFS (loop0): Invalid superblock magic number [ 298.067069][T12630] attempt to access beyond end of device [ 298.070106][T12608] XFS (loop1): Invalid superblock magic number [ 298.073350][T12630] loop5: rw=4096, want=32768, limit=29542 [ 298.087923][T12630] XFS (loop5): last sector read failed [ 298.163351][T12649] XFS (loop3): device supports 512 byte sectors (not 0) 04:28:32 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XF', 0x2}], 0x0, 0x0) 04:28:32 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x13, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:28:32 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c00000100001000000000010000", 0x5e}], 0x0, 0x0) 04:28:33 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x10, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 298.715600][T12671] XFS (loop0): Invalid superblock magic number [ 298.715605][T12677] XFS (loop1): Invalid superblock magic number [ 298.784368][T12684] XFS (loop3): device supports 512 byte sectors (not 0) 04:28:33 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x23, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 299.015187][T12677] XFS (loop1): Invalid superblock magic number 04:28:33 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="58465342000010000000", 0xa}], 0x0, 0x0) [ 299.068446][T12709] attempt to access beyond end of device [ 299.075238][T12709] loop5: rw=4096, want=32768, limit=29542 [ 299.145842][T12709] XFS (loop5): last sector read failed 04:28:33 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700", 0x6e}], 0x0, 0x0) 04:28:33 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x3c, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 299.334858][T12723] XFS (loop0): device supports 512 byte sectors (not 0) [ 299.357117][ T2721] XFS (loop3): SB sanity check failed [ 299.364377][ T2721] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 299.391292][ T2721] XFS (loop3): Unmount and run xfs_repair [ 299.404877][ T2721] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 299.424872][ T2721] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 299.445365][ T2721] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 299.455270][ T2721] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 299.470583][ T2721] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 299.481674][ T2721] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 299.491475][ T2721] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 299.501593][ T2721] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 299.516952][ T2721] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 299.532333][T12729] XFS (loop3): SB validate failed with error -117. [ 299.561889][T12743] XFS (loop1): Invalid superblock magic number [ 299.570636][T12709] attempt to access beyond end of device [ 299.579994][T12709] loop5: rw=4096, want=32768, limit=29542 [ 299.613432][T12709] XFS (loop5): last sector read failed 04:28:34 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFS', 0x3}], 0x0, 0x0) 04:28:34 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700", 0x6e}], 0x0, 0x0) [ 299.878408][T12762] XFS (loop0): Invalid superblock magic number 04:28:34 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x46, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 300.139474][ T2721] XFS (loop3): SB sanity check failed [ 300.145556][ T2721] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 300.157544][ T2721] XFS (loop3): Unmount and run xfs_repair [ 300.178487][ T2721] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 300.186089][ T2721] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 300.208330][ T2721] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 300.217227][ T2721] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 04:28:34 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFS', 0x3}], 0x0, 0x0) [ 300.237023][ T2721] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 300.257150][ T2721] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 300.276762][ T2721] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 04:28:34 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x402, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 300.298937][ T2721] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 300.316696][ T2721] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 300.326579][T12783] XFS (loop3): SB validate failed with error -117. [ 300.334234][T12794] attempt to access beyond end of device [ 300.350767][T12794] loop5: rw=4096, want=32768, limit=29542 [ 300.374373][T12794] XFS (loop5): last sector read failed [ 300.434838][T12805] XFS (loop0): Invalid superblock magic number [ 300.494076][ T2721] XFS (loop1): SB sanity check failed [ 300.515009][ T2721] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 300.554607][ T2721] XFS (loop1): Unmount and run xfs_repair [ 300.575573][ T2721] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 300.607876][ T2721] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 300.634260][ T2721] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 300.646999][ T2721] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 04:28:35 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700", 0x6e}], 0x0, 0x0) [ 300.663794][ T2721] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 300.674202][ T2721] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 04:28:35 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x48, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:35 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFS', 0x3}], 0x0, 0x0) [ 300.722884][ T2721] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 300.742452][ T2721] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 300.758817][ T2721] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 300.778057][T12811] XFS (loop1): SB validate failed with error -117. [ 300.961993][T12827] XFS (loop0): Invalid superblock magic number [ 300.974010][ T2721] XFS (loop3): SB sanity check failed [ 300.987975][ T2721] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 301.015035][ T2721] XFS (loop3): Unmount and run xfs_repair [ 301.027750][ T2721] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 301.045085][ T2721] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 301.064364][ T2721] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 301.085604][ T2721] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 301.104296][ T2721] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 301.113970][ T2721] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 301.123584][ T2721] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 301.133304][ T2721] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 301.142919][ T2721] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 301.152872][T12828] XFS (loop3): SB validate failed with error -117. [ 301.172778][T12831] attempt to access beyond end of device [ 301.181971][T12831] loop5: rw=4096, want=32768, limit=29542 [ 301.214169][ T2721] XFS (loop1): SB sanity check failed [ 301.221048][ T2721] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 301.221974][T12831] XFS (loop5): last sector read failed [ 301.247165][ T2721] XFS (loop1): Unmount and run xfs_repair [ 301.253608][ T2721] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 301.261954][ T2721] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 301.271492][ T2721] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 301.281160][ T2721] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 301.290704][ T2721] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 301.300823][ T2721] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 301.310464][ T2721] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 301.320442][ T2721] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 301.331148][ T2721] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 301.340808][T12811] XFS (loop1): SB validate failed with error -117. 04:28:35 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="58465342000010", 0x7}], 0x0, 0x0) [ 301.520255][T12867] XFS (loop0): device supports 512 byte sectors (not 0) 04:28:35 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402000100001007000000000000000000", 0x76}], 0x0, 0x0) [ 301.710183][T12831] attempt to access beyond end of device [ 301.716421][T12831] loop5: rw=4096, want=32768, limit=29542 [ 301.735085][T12831] XFS (loop5): last sector read failed 04:28:36 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 301.762854][ T2721] XFS (loop3): SB sanity check failed [ 301.778261][ T2721] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 301.798362][ T2721] XFS (loop3): Unmount and run xfs_repair [ 301.814561][ T2721] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 301.828235][ T2721] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 301.847330][ T2721] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 301.867551][ T2721] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 301.879521][ T2721] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 301.889458][ T2721] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 301.900337][ T2721] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 301.910532][ T2721] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 301.920667][ T2721] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 301.932705][T12880] XFS (loop3): SB validate failed with error -117. [ 301.953051][ T2721] XFS (loop1): SB sanity check failed 04:28:36 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 301.958718][ T2721] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 301.988176][ T2721] XFS (loop1): Unmount and run xfs_repair [ 301.999317][ T2721] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 302.016899][ T2721] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 302.037222][ T2721] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 302.047443][ T2721] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 302.057203][ T2721] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 302.067049][ T2721] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 302.076821][ T2721] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 302.093312][ T2721] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 302.103590][ T2721] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 04:28:36 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x4c, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 302.113393][T12898] XFS (loop1): SB validate failed with error -117. [ 302.171606][T12908] XFS (loop0): device supports 512 byte sectors (not 0) 04:28:36 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402000100001007000000000000000000", 0x76}], 0x0, 0x0) 04:28:36 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x2000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 302.402228][T12920] attempt to access beyond end of device [ 302.412495][T12920] loop5: rw=4096, want=32768, limit=29542 [ 302.440887][T12920] XFS (loop5): last sector read failed [ 302.501102][T12929] XFS (loop3): SB sanity check failed [ 302.506744][T12929] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 302.520205][T12929] XFS (loop3): Unmount and run xfs_repair [ 302.540097][T12929] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 302.557196][T12929] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 302.571774][T12929] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 302.591690][T12929] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 04:28:36 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='X', 0x1}], 0x0, 0x0) [ 302.608399][T12929] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 302.617601][T12929] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 302.629098][T12929] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 302.639075][T12929] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 302.648698][T12929] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 302.659603][T12929] XFS (loop3): SB validate failed with error -117. [ 302.659674][ T5] XFS (loop1): SB sanity check failed [ 302.704799][ T5] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 302.739058][T12950] XFS (loop0): Invalid superblock magic number [ 302.741933][ T5] XFS (loop1): Unmount and run xfs_repair [ 302.780662][ T5] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 302.816810][ T5] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 302.848137][ T5] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 302.874475][ T5] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 302.886279][T12920] attempt to access beyond end of device [ 302.903658][T12920] loop5: rw=4096, want=32768, limit=29542 04:28:37 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402000100001007000000000000000000", 0x76}], 0x0, 0x0) [ 302.944052][T12920] XFS (loop5): last sector read failed [ 302.956782][ T5] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 303.003571][ T5] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 303.036736][ T5] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 04:28:37 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='X', 0x1}], 0x0, 0x0) [ 303.062075][ T5] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 303.093277][ T5] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 303.145162][T12939] XFS (loop1): SB validate failed with error -117. [ 303.182292][T12971] XFS (loop3): SB sanity check failed [ 303.193805][T12971] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 303.237025][T12971] XFS (loop3): Unmount and run xfs_repair [ 303.267165][T12971] XFS (loop3): First 128 bytes of corrupted metadata buffer: 04:28:37 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x5c, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 303.288683][T12971] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 303.314348][T12971] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 303.327467][T12978] XFS (loop0): Invalid superblock magic number [ 303.356272][T12971] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 04:28:37 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 303.410297][T12971] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 303.442694][T12992] attempt to access beyond end of device [ 303.453230][T12992] loop5: rw=4096, want=32768, limit=29542 [ 303.482472][T12971] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 303.509017][T12992] XFS (loop5): last sector read failed [ 303.548111][T12971] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 303.557370][T12971] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 303.567850][T12971] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 303.577243][T12971] XFS (loop3): SB validate failed with error -117. 04:28:38 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='X', 0x1}], 0x0, 0x0) [ 303.746207][T13003] XFS (loop1): SB sanity check failed [ 303.755763][T13003] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 303.769247][T13003] XFS (loop1): Unmount and run xfs_repair [ 303.775356][T13003] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 303.815850][T13003] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 303.832777][T13013] XFS (loop0): Invalid superblock magic number [ 303.858987][T13003] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 303.868152][T13003] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 303.877090][T13003] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 303.886875][T13003] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 04:28:38 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 303.900644][T13003] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 303.925989][T13003] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 303.935578][T13003] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 303.952786][T13003] XFS (loop1): SB validate failed with error -117. 04:28:38 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x60, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 304.109621][T13029] XFS (loop3): SB sanity check failed [ 304.117325][T13029] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 304.132131][T13029] XFS (loop3): Unmount and run xfs_repair [ 304.160774][T13029] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 304.181297][T13029] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 304.195466][T13029] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 04:28:38 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFS', 0x3}], 0x0, 0x0) [ 304.212132][T13029] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 304.258161][T13029] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 304.267230][T13029] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 304.305729][T13029] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 304.346913][T13029] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 304.354437][T13003] XFS (loop1): SB sanity check failed [ 304.366955][T13003] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 304.381211][T13050] XFS (loop0): Invalid superblock magic number [ 304.388303][T13041] attempt to access beyond end of device [ 304.398757][T13041] loop5: rw=4096, want=32768, limit=29542 [ 304.404895][T13041] XFS (loop5): last sector read failed [ 304.411189][T13003] XFS (loop1): Unmount and run xfs_repair [ 304.412564][T13029] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 304.422143][T13003] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 304.434997][T13003] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 304.448949][T13029] XFS (loop3): SB validate failed with error -117. [ 304.459076][T13003] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 304.498412][T13003] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 304.507306][T13003] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 304.568086][T13003] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 04:28:39 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFS', 0x3}], 0x0, 0x0) [ 304.617628][T13003] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 304.653233][T13003] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 304.718424][T13003] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 304.727402][T13003] XFS (loop1): SB validate failed with error -117. 04:28:39 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 304.829785][T13073] XFS (loop0): Invalid superblock magic number [ 304.974608][ T2721] XFS (loop3): SB sanity check failed [ 304.981653][ T2721] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 305.007168][ T2721] XFS (loop3): Unmount and run xfs_repair 04:28:39 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x5000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 305.019924][ T2721] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 305.027670][ T2721] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 305.036996][ T2721] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 305.046430][ T2721] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 305.055804][ T2721] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 305.065430][ T2721] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 04:28:39 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x64, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 305.089400][ T2721] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 305.099883][ T2721] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 305.109166][ T2721] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 305.119275][T13087] XFS (loop3): SB validate failed with error -117. 04:28:39 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFS', 0x3}], 0x0, 0x0) [ 305.274642][ T2719] XFS (loop1): SB sanity check failed [ 305.281014][ T2719] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 305.294417][ T2719] XFS (loop1): Unmount and run xfs_repair [ 305.300602][ T2719] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 305.313012][ T2719] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 305.327613][ T2719] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 305.339243][T13106] attempt to access beyond end of device [ 305.344926][T13106] loop5: rw=4096, want=32768, limit=29542 [ 305.355106][T13106] XFS (loop5): last sector read failed [ 305.361233][ T2719] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 305.375980][ T2719] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 305.385481][ T2719] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 305.396381][ T2719] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 305.405766][ T2719] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 305.415776][ T2719] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 305.426611][T13098] XFS (loop1): SB validate failed with error -117. 04:28:39 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 305.453128][T13119] XFS (loop0): Invalid superblock magic number [ 305.703272][ T2721] XFS (loop3): SB sanity check failed [ 305.709089][ T2721] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 305.723450][ T2721] XFS (loop3): Unmount and run xfs_repair [ 305.730246][ T2721] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 305.737791][ T2721] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 305.747942][ T2721] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 305.757681][ T2721] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 305.768594][ T2721] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 305.779395][ T2721] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 305.788990][ T2721] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 305.799560][ T2721] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 305.810131][ T2721] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 305.827961][T13129] XFS (loop3): SB validate failed with error -117. [ 305.835665][T13106] attempt to access beyond end of device [ 305.846408][ T12] XFS (loop1): SB sanity check failed [ 305.852274][T13106] loop5: rw=4096, want=32768, limit=29542 [ 305.865746][ T12] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff 04:28:40 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='X', 0x1}], 0x0, 0x0) [ 305.896362][T13106] XFS (loop5): last sector read failed [ 305.942717][ T12] XFS (loop1): Unmount and run xfs_repair [ 305.976774][ T12] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 306.021014][ T12] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 306.056330][T13156] XFS (loop0): Invalid superblock magic number [ 306.081360][ T12] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 04:28:40 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c090804", 0x7c}], 0x0, 0x0) [ 306.127273][ T12] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 306.174586][ T12] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 04:28:40 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x68, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 306.216998][ T12] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 306.273321][T13167] XFS (loop3): SB sanity check failed [ 306.275996][ T12] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 306.278986][T13167] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 306.324489][T13167] XFS (loop3): Unmount and run xfs_repair [ 306.331309][ T12] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 306.335879][T13167] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 306.349617][T13167] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 306.359573][T13167] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 306.370313][T13167] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 306.374002][ T12] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 306.379626][T13167] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 306.397536][T13167] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 306.441515][T13098] XFS (loop1): SB validate failed with error -117. [ 306.455167][T13167] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 04:28:40 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x9, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 306.483590][T13167] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 306.514190][T13167] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 00 00 00 00 ................ [ 306.537107][T13167] XFS (loop3): SB validate failed with error -117. [ 306.624938][T13179] attempt to access beyond end of device [ 306.634014][T13179] loop5: rw=4096, want=32768, limit=29542 [ 306.642125][T13179] XFS (loop5): last sector read failed 04:28:41 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xa000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 306.692376][T13189] attempt to access beyond end of device [ 306.725693][T13189] loop0: rw=4096, want=32768, limit=29542 [ 306.808022][T13189] XFS (loop0): last sector read failed 04:28:41 executing program 4: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000000)={0x80}) 04:28:41 executing program 4: getitimer(0x3, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x2, &(0x7f0000000100)=[{&(0x7f0000000080)="8b8e5aee0042b04549", 0x9, 0x9}, {&(0x7f00000000c0)="b09cc8ef57a740c4d1f5ebbeed044506c34bca65ba98895397b2ef8ca5cce6b60c5ce4", 0x23, 0x1}], 0x0, 0x0) [ 306.952762][ T5] XFS (loop1): SB sanity check failed [ 306.959698][ T5] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 306.986509][ T5] XFS (loop1): Unmount and run xfs_repair [ 306.999061][ T5] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 307.015456][ T5] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 307.041420][ T5] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 307.062488][ T5] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 307.081811][ T5] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 307.102462][ T5] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 307.123079][ T5] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 307.142297][ T5] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 307.166705][ T5] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 307.192279][T13198] XFS (loop1): SB validate failed with error -117. 04:28:41 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c090804", 0x7c}], 0x0, 0x0) [ 307.343739][T13219] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=00000000) 04:28:41 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x0, 0x0) 04:28:41 executing program 4: getitimer(0x2, 0x0) 04:28:41 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x6c, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 307.623641][ T2719] XFS (loop3): SB sanity check failed [ 307.632596][ T2719] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 307.651705][ T2719] XFS (loop3): Unmount and run xfs_repair [ 307.657690][ T2719] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 307.666474][ T2719] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 307.675979][ T2719] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 307.685749][ T2719] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 307.695013][ T2719] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 307.699133][ T5] XFS (loop1): SB sanity check failed [ 307.707745][ T2719] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 04:28:42 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x0, 0x0) [ 307.722788][T13230] XFS (loop0): Invalid superblock magic number [ 307.734069][ T2719] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 307.744291][ T2719] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 307.753388][ T2719] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 00 00 00 00 ................ [ 307.763529][T13224] XFS (loop3): SB validate failed with error -117. [ 307.812528][T13255] attempt to access beyond end of device [ 307.818483][ T5] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 307.832541][T13255] loop5: rw=4096, want=32768, limit=29542 [ 307.857867][T13255] XFS (loop5): last sector read failed [ 307.868151][T13265] XFS (loop4): Invalid superblock magic number [ 307.872121][ T5] XFS (loop1): Unmount and run xfs_repair [ 307.911554][ T5] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 307.950846][ T5] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 307.994873][ T5] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 308.044926][ T5] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 04:28:42 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x4, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 308.088923][ T5] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 04:28:42 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c090804", 0x7c}], 0x0, 0x0) [ 308.133728][ T5] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 308.186059][ T5] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 308.238620][ T5] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 04:28:42 executing program 4 (fault-call:0 fault-nth:0): syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 308.280752][ T5] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 308.307929][T13198] XFS (loop1): SB validate failed with error -117. [ 308.336484][ T3090] XFS (loop3): SB sanity check failed [ 308.336855][T13255] attempt to access beyond end of device [ 308.343429][ T3090] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 308.350835][T13278] attempt to access beyond end of device [ 308.360688][ T3090] XFS (loop3): Unmount and run xfs_repair [ 308.373008][ T3090] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 308.385712][ T3090] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 308.395329][ T3090] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 308.402533][T13278] loop0: rw=4096, want=32768, limit=29542 [ 308.404779][ T3090] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 308.416112][T13255] loop5: rw=4096, want=32768, limit=29542 [ 308.420014][ T3090] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 308.436753][ T3090] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 308.450835][ T3090] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 308.461960][T13305] FAULT_INJECTION: forcing a failure. [ 308.461960][T13305] name failslab, interval 1, probability 0, space 0, times 0 [ 308.473740][T13278] XFS (loop0): last sector read failed [ 308.474732][ T3090] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 308.489497][T13305] CPU: 0 PID: 13305 Comm: syz-executor.4 Not tainted 5.6.0-rc7-syzkaller #0 [ 308.496724][T13255] XFS (loop5): last sector read failed [ 308.498540][T13305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.498546][T13305] Call Trace: [ 308.498571][T13305] dump_stack+0x188/0x20d [ 308.498597][T13305] should_fail.cold+0x5/0xa [ 308.498614][T13305] ? lock_downgrade+0x7f0/0x7f0 [ 308.498634][T13305] ? fault_create_debugfs_attr+0x140/0x140 [ 308.498665][T13305] should_failslab+0x5/0xf [ 308.498678][T13305] __kmalloc+0x2d9/0x7a0 [ 308.498692][T13305] ? __x64_sys_memfd_create+0x131/0x450 [ 308.498712][T13305] ? strnlen_user+0x1f5/0x2e0 [ 308.555924][T13305] __x64_sys_memfd_create+0x131/0x450 [ 308.562533][T13305] ? ksys_write+0x19f/0x250 [ 308.567662][T13305] ? memfd_fcntl+0x1720/0x1720 [ 308.572441][T13305] ? __ia32_sys_clock_settime+0x260/0x260 [ 308.578175][T13305] ? trace_hardirqs_off_caller+0x55/0x230 [ 308.583959][T13305] do_syscall_64+0xf6/0x7d0 [ 308.588485][T13305] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 308.594454][T13305] RIP: 0033:0x45c849 [ 308.598360][T13305] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 308.618083][T13305] RSP: 002b:00007ff0b0030a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 308.626953][T13305] RAX: ffffffffffffffda RBX: 00007ff0b00316d4 RCX: 000000000045c849 [ 308.634947][T13305] RDX: 0000000020000118 RSI: 0000000000000000 RDI: 00000000004c1941 [ 308.644671][T13305] RBP: 000000000076bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 308.652660][T13305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 308.660654][T13305] R13: 0000000000000bec R14: 00000000004ce0fd R15: 0000000000000000 [ 308.670038][ T3090] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 00 00 00 00 ................ [ 308.687909][T13284] XFS (loop3): SB validate failed with error -117. 04:28:43 executing program 4 (fault-call:0 fault-nth:1): syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:28:43 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xd000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 308.853985][T13308] FAULT_INJECTION: forcing a failure. [ 308.853985][T13308] name failslab, interval 1, probability 0, space 0, times 0 [ 308.902448][T13308] CPU: 1 PID: 13308 Comm: syz-executor.4 Not tainted 5.6.0-rc7-syzkaller #0 [ 308.911249][T13308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 308.921432][T13308] Call Trace: [ 308.924748][T13308] dump_stack+0x188/0x20d [ 308.929113][T13308] should_fail.cold+0x5/0xa [ 308.933637][T13308] ? lock_downgrade+0x7f0/0x7f0 [ 308.938780][T13308] ? fault_create_debugfs_attr+0x140/0x140 [ 308.944733][T13308] ? shmem_destroy_inode+0x70/0x70 [ 308.949931][T13308] should_failslab+0x5/0xf [ 308.954372][T13308] kmem_cache_alloc+0x29b/0x730 [ 308.959677][T13308] ? find_held_lock+0x2d/0x110 [ 308.964595][T13308] ? __alloc_fd+0x46d/0x600 [ 308.969146][T13308] ? shmem_destroy_inode+0x70/0x70 [ 308.974282][T13308] shmem_alloc_inode+0x18/0x40 [ 308.979201][T13308] ? shmem_destroy_inode+0x70/0x70 [ 308.984326][T13308] alloc_inode+0x61/0x1e0 [ 308.989515][T13308] new_inode_pseudo+0x14/0xe0 [ 308.994218][T13308] new_inode+0x1b/0x40 [ 308.998507][T13308] shmem_get_inode+0x84/0x7e0 [ 309.003333][T13308] __shmem_file_setup.part.0+0x7a/0x2b0 [ 309.008910][T13308] shmem_file_setup+0x61/0x90 [ 309.013615][T13308] __x64_sys_memfd_create+0x28a/0x450 [ 309.019038][T13308] ? memfd_fcntl+0x1720/0x1720 [ 309.023819][T13308] ? __ia32_sys_clock_settime+0x260/0x260 [ 309.029561][T13308] ? trace_hardirqs_off_caller+0x55/0x230 [ 309.035319][T13308] do_syscall_64+0xf6/0x7d0 [ 309.039893][T13308] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 309.045804][T13308] RIP: 0033:0x45c849 [ 309.049714][T13308] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 309.069452][T13308] RSP: 002b:00007ff0b0030a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 309.077880][T13308] RAX: ffffffffffffffda RBX: 00007ff0b00316d4 RCX: 000000000045c849 [ 309.086124][T13308] RDX: 0000000020000118 RSI: 0000000000000000 RDI: 00000000004c1941 [ 309.094370][T13308] RBP: 000000000076bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 309.102888][T13308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 309.110870][T13308] R13: 0000000000000bec R14: 00000000004ce0fd R15: 0000000000000001 04:28:43 executing program 0 (fault-call:0 fault-nth:0): syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:28:43 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x72, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:43 executing program 4 (fault-call:0 fault-nth:2): syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 309.351670][T13320] FAULT_INJECTION: forcing a failure. [ 309.351670][T13320] name failslab, interval 1, probability 0, space 0, times 0 [ 309.366209][T13323] FAULT_INJECTION: forcing a failure. [ 309.366209][T13323] name failslab, interval 1, probability 0, space 0, times 0 [ 309.386058][T13320] CPU: 1 PID: 13320 Comm: syz-executor.4 Not tainted 5.6.0-rc7-syzkaller #0 [ 309.394776][T13320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.404843][T13320] Call Trace: [ 309.408190][T13320] dump_stack+0x188/0x20d [ 309.412681][T13320] should_fail.cold+0x5/0xa [ 309.418113][T13320] ? lock_downgrade+0x7f0/0x7f0 [ 309.418329][T13312] XFS (loop1): SB sanity check failed [ 309.422992][T13320] ? fault_create_debugfs_attr+0x140/0x140 [ 309.434173][T13320] should_failslab+0x5/0xf [ 309.434208][T13312] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 309.438612][T13320] kmem_cache_alloc+0x29b/0x730 [ 309.438629][T13320] ? timestamp_truncate+0x20f/0x2f0 [ 309.438646][T13320] ? inode_init_owner+0x330/0x330 [ 309.438659][T13320] ? ktime_get_coarse_real_ts64+0xe5/0x280 [ 309.438678][T13320] __d_alloc+0x2b/0x8d0 [ 309.438698][T13320] d_alloc_pseudo+0x19/0x70 [ 309.438713][T13320] alloc_file_pseudo+0xc6/0x250 [ 309.438730][T13320] ? alloc_file+0x4d0/0x4d0 [ 309.438753][T13320] ? lockdep_annotate_inode_mutex_key+0x3c/0x70 [ 309.488799][T13312] XFS (loop1): Unmount and run xfs_repair [ 309.489574][T13320] ? shmem_get_inode+0x47a/0x7e0 [ 309.506531][T13320] __shmem_file_setup.part.0+0x102/0x2b0 [ 309.512225][T13312] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 309.512337][T13320] shmem_file_setup+0x61/0x90 [ 309.524388][T13320] __x64_sys_memfd_create+0x28a/0x450 [ 309.530384][T13320] ? memfd_fcntl+0x1720/0x1720 [ 309.535165][T13320] ? __ia32_sys_clock_settime+0x260/0x260 [ 309.536926][T13312] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ 04:28:43 executing program 3 (fault-call:0 fault-nth:0): syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 309.540898][T13320] ? trace_hardirqs_off_caller+0x55/0x230 [ 309.540927][T13320] do_syscall_64+0xf6/0x7d0 [ 309.540951][T13320] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 309.540963][T13320] RIP: 0033:0x45c849 [ 309.540978][T13320] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 309.540985][T13320] RSP: 002b:00007ff0b0030a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 309.540998][T13320] RAX: ffffffffffffffda RBX: 00007ff0b00316d4 RCX: 000000000045c849 [ 309.541006][T13320] RDX: 0000000020000118 RSI: 0000000000000000 RDI: 00000000004c1941 [ 309.541019][T13320] RBP: 000000000076bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 309.593068][T13312] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 309.598956][T13320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 309.598965][T13320] R13: 0000000000000bec R14: 00000000004ce0fd R15: 0000000000000002 [ 309.613316][T13323] CPU: 1 PID: 13323 Comm: syz-executor.0 Not tainted 5.6.0-rc7-syzkaller #0 [ 309.639704][T13312] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 309.639926][T13323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.656923][T13312] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 309.666835][T13323] Call Trace: [ 309.666863][T13323] dump_stack+0x188/0x20d [ 309.666887][T13323] should_fail.cold+0x5/0xa [ 309.666909][T13323] ? lock_downgrade+0x7f0/0x7f0 [ 309.666927][T13323] ? fault_create_debugfs_attr+0x140/0x140 [ 309.666953][T13323] should_failslab+0x5/0xf [ 309.666973][T13323] __kmalloc+0x2d9/0x7a0 [ 309.717251][T13323] ? __x64_sys_memfd_create+0x131/0x450 [ 309.722814][T13323] ? strnlen_user+0x1f5/0x2e0 [ 309.727512][T13323] __x64_sys_memfd_create+0x131/0x450 [ 309.732934][T13323] ? ksys_write+0x19f/0x250 [ 309.737450][T13323] ? memfd_fcntl+0x1720/0x1720 [ 309.737806][T13312] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 309.742493][T13323] ? __ia32_sys_clock_settime+0x260/0x260 [ 309.742514][T13323] ? trace_hardirqs_off_caller+0x55/0x230 [ 309.742542][T13323] do_syscall_64+0xf6/0x7d0 [ 309.768533][T13323] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 309.774522][T13323] RIP: 0033:0x45c849 [ 309.778430][T13323] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 309.798135][T13323] RSP: 002b:00007fbe06f2fa68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 309.801202][T13312] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 309.806551][T13323] RAX: ffffffffffffffda RBX: 00007fbe06f306d4 RCX: 000000000045c849 [ 309.806561][T13323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1941 [ 309.806569][T13323] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 309.806577][T13323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 309.806584][T13323] R13: 0000000000000be0 R14: 00000000004cdff5 R15: 0000000000000000 04:28:44 executing program 4 (fault-call:0 fault-nth:3): syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:28:44 executing program 0 (fault-call:0 fault-nth:1): syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 309.916329][T13335] FAULT_INJECTION: forcing a failure. [ 309.916329][T13335] name failslab, interval 1, probability 0, space 0, times 0 [ 309.924411][T13312] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 309.971981][T13340] FAULT_INJECTION: forcing a failure. [ 309.971981][T13340] name failslab, interval 1, probability 0, space 0, times 0 [ 310.002284][T13312] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 310.013881][T13340] CPU: 1 PID: 13340 Comm: syz-executor.0 Not tainted 5.6.0-rc7-syzkaller #0 [ 310.015695][T13327] attempt to access beyond end of device [ 310.022753][T13340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.022759][T13340] Call Trace: [ 310.022785][T13340] dump_stack+0x188/0x20d [ 310.022811][T13340] should_fail.cold+0x5/0xa [ 310.022828][T13340] ? lock_downgrade+0x7f0/0x7f0 [ 310.022845][T13340] ? fault_create_debugfs_attr+0x140/0x140 [ 310.022874][T13340] ? shmem_destroy_inode+0x70/0x70 [ 310.022887][T13340] should_failslab+0x5/0xf [ 310.022901][T13340] kmem_cache_alloc+0x29b/0x730 [ 310.022914][T13340] ? find_held_lock+0x2d/0x110 [ 310.022933][T13340] ? __alloc_fd+0x46d/0x600 [ 310.022954][T13340] ? shmem_destroy_inode+0x70/0x70 [ 310.022972][T13340] shmem_alloc_inode+0x18/0x40 [ 310.022986][T13340] ? shmem_destroy_inode+0x70/0x70 [ 310.023004][T13340] alloc_inode+0x61/0x1e0 [ 310.062846][T13327] loop5: rw=4096, want=32768, limit=29542 [ 310.062901][T13340] new_inode_pseudo+0x14/0xe0 [ 310.075268][T13312] XFS (loop1): SB validate failed with error -117. [ 310.079156][T13340] new_inode+0x1b/0x40 [ 310.079174][T13340] shmem_get_inode+0x84/0x7e0 [ 310.079199][T13340] __shmem_file_setup.part.0+0x7a/0x2b0 [ 310.079222][T13340] shmem_file_setup+0x61/0x90 [ 310.079241][T13340] __x64_sys_memfd_create+0x28a/0x450 [ 310.079257][T13340] ? memfd_fcntl+0x1720/0x1720 [ 310.079269][T13340] ? __ia32_sys_clock_settime+0x260/0x260 [ 310.079287][T13340] ? trace_hardirqs_off_caller+0x55/0x230 [ 310.079315][T13340] do_syscall_64+0xf6/0x7d0 [ 310.114203][T13327] XFS (loop5): last sector read failed [ 310.118618][T13340] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 310.118631][T13340] RIP: 0033:0x45c849 [ 310.118647][T13340] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 310.118655][T13340] RSP: 002b:00007fbe06f2fa68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 310.118668][T13340] RAX: ffffffffffffffda RBX: 00007fbe06f306d4 RCX: 000000000045c849 [ 310.118675][T13340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1941 [ 310.118682][T13340] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 310.118690][T13340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 310.118698][T13340] R13: 0000000000000be0 R14: 00000000004cdff5 R15: 0000000000000001 [ 310.266543][T13335] CPU: 0 PID: 13335 Comm: syz-executor.3 Not tainted 5.6.0-rc7-syzkaller #0 [ 310.275381][T13335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.285598][T13335] Call Trace: [ 310.288909][T13335] dump_stack+0x188/0x20d [ 310.293528][T13335] should_fail.cold+0x5/0xa [ 310.298048][T13335] ? lock_downgrade+0x7f0/0x7f0 [ 310.302925][T13335] ? fault_create_debugfs_attr+0x140/0x140 [ 310.309392][T13335] should_failslab+0x5/0xf [ 310.313825][T13335] __kmalloc+0x2d9/0x7a0 [ 310.318090][T13335] ? __x64_sys_memfd_create+0x131/0x450 [ 310.323659][T13335] ? strnlen_user+0x1f5/0x2e0 [ 310.328364][T13335] __x64_sys_memfd_create+0x131/0x450 [ 310.333752][T13335] ? ksys_write+0x19f/0x250 [ 310.338358][T13335] ? memfd_fcntl+0x1720/0x1720 [ 310.343131][T13335] ? __ia32_sys_clock_settime+0x260/0x260 [ 310.348863][T13335] ? trace_hardirqs_off_caller+0x55/0x230 [ 310.354612][T13335] do_syscall_64+0xf6/0x7d0 [ 310.359139][T13335] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 310.365063][T13335] RIP: 0033:0x45c849 [ 310.368973][T13335] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 310.388952][T13335] RSP: 002b:00007f9f0451ca68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 310.397597][T13335] RAX: ffffffffffffffda RBX: 00007f9f0451d6d4 RCX: 000000000045c849 [ 310.405585][T13335] RDX: 0000000020000418 RSI: 0000000000000000 RDI: 00000000004c1941 [ 310.413571][T13335] RBP: 000000000076bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 310.422510][T13335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 310.430495][T13335] R13: 0000000000000bec R14: 00000000004ce0fd R15: 0000000000000000 [ 310.460184][T13341] FAULT_INJECTION: forcing a failure. [ 310.460184][T13341] name failslab, interval 1, probability 0, space 0, times 0 [ 310.510384][T13341] CPU: 0 PID: 13341 Comm: syz-executor.4 Not tainted 5.6.0-rc7-syzkaller #0 [ 310.519114][T13341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.529185][T13341] Call Trace: [ 310.532503][T13341] dump_stack+0x188/0x20d [ 310.536863][T13341] should_fail.cold+0x5/0xa [ 310.541491][T13341] ? lock_downgrade+0x7f0/0x7f0 [ 310.546369][T13341] ? fault_create_debugfs_attr+0x140/0x140 [ 310.552206][T13341] should_failslab+0x5/0xf [ 310.556644][T13341] kmem_cache_alloc+0x29b/0x730 [ 310.561521][T13341] ? lock_downgrade+0x7f0/0x7f0 [ 310.566396][T13341] __alloc_file+0x21/0x340 [ 310.570843][T13341] alloc_empty_file+0x6d/0x170 [ 310.575632][T13341] alloc_file+0x5e/0x4d0 [ 310.579895][T13341] alloc_file_pseudo+0x165/0x250 [ 310.584849][T13341] ? alloc_file+0x4d0/0x4d0 [ 310.589509][T13341] ? shmem_get_inode+0x47a/0x7e0 [ 310.594482][T13341] __shmem_file_setup.part.0+0x102/0x2b0 [ 310.600137][T13341] shmem_file_setup+0x61/0x90 [ 310.604933][T13341] __x64_sys_memfd_create+0x28a/0x450 [ 310.610323][T13341] ? memfd_fcntl+0x1720/0x1720 [ 310.615115][T13341] ? __ia32_sys_clock_settime+0x260/0x260 [ 310.620857][T13341] ? trace_hardirqs_off_caller+0x55/0x230 [ 310.626611][T13341] do_syscall_64+0xf6/0x7d0 [ 310.631138][T13341] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 310.637045][T13341] RIP: 0033:0x45c849 [ 310.640969][T13341] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:28:45 executing program 0 (fault-call:0 fault-nth:2): syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 310.661016][T13341] RSP: 002b:00007ff0b0030a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 310.669486][T13341] RAX: ffffffffffffffda RBX: 00007ff0b00316d4 RCX: 000000000045c849 [ 310.677472][T13341] RDX: 0000000020000118 RSI: 0000000000000000 RDI: 00000000004c1941 [ 310.685455][T13341] RBP: 000000000076bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 310.693451][T13341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 310.702473][T13341] R13: 0000000000000bec R14: 00000000004ce0fd R15: 0000000000000003 [ 310.790757][T13349] FAULT_INJECTION: forcing a failure. [ 310.790757][T13349] name failslab, interval 1, probability 0, space 0, times 0 [ 310.810265][T13349] CPU: 0 PID: 13349 Comm: syz-executor.0 Not tainted 5.6.0-rc7-syzkaller #0 [ 310.818987][T13349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.829048][T13349] Call Trace: [ 310.832357][T13349] dump_stack+0x188/0x20d [ 310.836724][T13349] should_fail.cold+0x5/0xa [ 310.841249][T13349] ? lock_downgrade+0x7f0/0x7f0 [ 310.846120][T13349] ? fault_create_debugfs_attr+0x140/0x140 [ 310.851958][T13349] should_failslab+0x5/0xf [ 310.856393][T13349] kmem_cache_alloc+0x29b/0x730 [ 310.861270][T13349] ? timestamp_truncate+0x20f/0x2f0 [ 310.866577][T13349] ? inode_init_owner+0x330/0x330 [ 310.871617][T13349] ? ktime_get_coarse_real_ts64+0xe5/0x280 [ 310.877716][T13349] __d_alloc+0x2b/0x8d0 [ 310.882235][T13349] d_alloc_pseudo+0x19/0x70 [ 310.886751][T13349] alloc_file_pseudo+0xc6/0x250 [ 310.891653][T13349] ? alloc_file+0x4d0/0x4d0 [ 310.896547][T13349] ? lockdep_annotate_inode_mutex_key+0x3c/0x70 [ 310.902801][T13349] ? shmem_get_inode+0x47a/0x7e0 [ 310.907785][T13349] __shmem_file_setup.part.0+0x102/0x2b0 [ 310.913446][T13349] shmem_file_setup+0x61/0x90 [ 310.918140][T13349] __x64_sys_memfd_create+0x28a/0x450 [ 310.923524][T13349] ? memfd_fcntl+0x1720/0x1720 [ 310.928295][T13349] ? __ia32_sys_clock_settime+0x260/0x260 [ 310.934033][T13349] ? trace_hardirqs_off_caller+0x55/0x230 [ 310.940038][T13349] do_syscall_64+0xf6/0x7d0 [ 310.944563][T13349] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 310.950510][T13349] RIP: 0033:0x45c849 [ 310.954421][T13349] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 310.974033][T13349] RSP: 002b:00007fbe06f2fa68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 310.982457][T13349] RAX: ffffffffffffffda RBX: 00007fbe06f306d4 RCX: 000000000045c849 [ 310.991512][T13349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1941 [ 310.999526][T13349] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 311.007510][T13349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 311.015491][T13349] R13: 0000000000000be0 R14: 00000000004cdff5 R15: 0000000000000002 04:28:45 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xe000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 311.250088][ T3090] XFS (loop1): SB sanity check failed [ 311.258197][ T3090] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 311.285416][ T3090] XFS (loop1): Unmount and run xfs_repair 04:28:45 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x74, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 311.305507][ T3090] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 311.316290][ T3090] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ 04:28:45 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 311.350228][ T3090] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 311.371016][ T3090] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 311.381177][ T3090] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 311.391586][ T3090] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 311.407938][ T3090] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 311.421719][ T3090] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 311.434042][ T3090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 04:28:45 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 311.454671][T13354] XFS (loop1): SB validate failed with error -117. 04:28:45 executing program 0 (fault-call:0 fault-nth:3): syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 311.503430][T13365] attempt to access beyond end of device [ 311.509867][T13365] loop5: rw=4096, want=32768, limit=29542 [ 311.531365][T13380] FAULT_INJECTION: forcing a failure. [ 311.531365][T13380] name failslab, interval 1, probability 0, space 0, times 0 [ 311.554214][T13365] XFS (loop5): last sector read failed [ 311.592710][T13373] XFS (loop3): Mounting V4 Filesystem [ 311.598127][T13380] CPU: 1 PID: 13380 Comm: syz-executor.0 Not tainted 5.6.0-rc7-syzkaller #0 [ 311.598138][T13380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.598143][T13380] Call Trace: [ 311.598167][T13380] dump_stack+0x188/0x20d [ 311.598194][T13380] should_fail.cold+0x5/0xa [ 311.598209][T13380] ? lock_downgrade+0x7f0/0x7f0 [ 311.598225][T13380] ? fault_create_debugfs_attr+0x140/0x140 [ 311.598256][T13380] should_failslab+0x5/0xf [ 311.598277][T13380] kmem_cache_alloc+0x29b/0x730 [ 311.638013][T13373] XFS (loop3): empty log check failed [ 311.639896][T13380] ? lock_downgrade+0x7f0/0x7f0 [ 311.639919][T13380] __alloc_file+0x21/0x340 [ 311.639937][T13380] alloc_empty_file+0x6d/0x170 [ 311.639955][T13380] alloc_file+0x5e/0x4d0 [ 311.644489][T13373] XFS (loop3): log mount/recovery failed: error -5 [ 311.649213][T13380] alloc_file_pseudo+0x165/0x250 [ 311.649232][T13380] ? alloc_file+0x4d0/0x4d0 [ 311.649258][T13380] ? shmem_get_inode+0x47a/0x7e0 [ 311.649283][T13380] __shmem_file_setup.part.0+0x102/0x2b0 [ 311.649305][T13380] shmem_file_setup+0x61/0x90 [ 311.649322][T13380] __x64_sys_memfd_create+0x28a/0x450 [ 311.649338][T13380] ? memfd_fcntl+0x1720/0x1720 [ 311.649351][T13380] ? __ia32_sys_clock_settime+0x260/0x260 [ 311.649373][T13380] ? trace_hardirqs_off_caller+0x55/0x230 [ 311.649401][T13380] do_syscall_64+0xf6/0x7d0 [ 311.730596][T13380] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 311.736495][T13380] RIP: 0033:0x45c849 [ 311.741018][T13380] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 311.760628][T13380] RSP: 002b:00007fbe06f2fa68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 311.769143][T13380] RAX: ffffffffffffffda RBX: 00007fbe06f306d4 RCX: 000000000045c849 [ 311.777125][T13380] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1941 [ 311.785108][T13380] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 311.793095][T13380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 311.801184][T13380] R13: 0000000000000be0 R14: 00000000004cdff5 R15: 0000000000000003 [ 311.837743][T13373] XFS (loop3): log mount failed 04:28:46 executing program 0 (fault-call:0 fault-nth:4): syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 311.947754][T13384] XFS (loop4): device supports 512 byte sectors (not 0) [ 312.030902][T13398] FAULT_INJECTION: forcing a failure. [ 312.030902][T13398] name failslab, interval 1, probability 0, space 0, times 0 [ 312.050808][T13398] CPU: 0 PID: 13398 Comm: syz-executor.0 Not tainted 5.6.0-rc7-syzkaller #0 [ 312.059545][T13398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.069606][T13398] Call Trace: [ 312.073006][T13398] dump_stack+0x188/0x20d [ 312.077714][T13398] should_fail.cold+0x5/0xa [ 312.082244][T13398] ? lock_downgrade+0x7f0/0x7f0 [ 312.087129][T13398] ? fault_create_debugfs_attr+0x140/0x140 [ 312.092970][T13398] should_failslab+0x5/0xf [ 312.097412][T13398] kmem_cache_alloc+0x29b/0x730 [ 312.102287][T13398] ? kmem_cache_alloc+0x358/0x730 [ 312.107367][T13398] security_file_alloc+0x34/0x160 [ 312.112417][T13398] __alloc_file+0xd8/0x340 [ 312.116849][T13398] alloc_empty_file+0x6d/0x170 [ 312.121677][T13398] alloc_file+0x5e/0x4d0 [ 312.125954][T13398] alloc_file_pseudo+0x165/0x250 [ 312.130917][T13398] ? alloc_file+0x4d0/0x4d0 [ 312.135445][T13398] ? shmem_get_inode+0x47a/0x7e0 [ 312.140407][T13398] __shmem_file_setup.part.0+0x102/0x2b0 [ 312.146063][T13398] shmem_file_setup+0x61/0x90 [ 312.150758][T13398] __x64_sys_memfd_create+0x28a/0x450 [ 312.156160][T13398] ? memfd_fcntl+0x1720/0x1720 [ 312.160945][T13398] ? __ia32_sys_clock_settime+0x260/0x260 [ 312.166683][T13398] ? trace_hardirqs_off_caller+0x55/0x230 [ 312.172442][T13398] do_syscall_64+0xf6/0x7d0 [ 312.176968][T13398] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 312.182870][T13398] RIP: 0033:0x45c849 [ 312.186787][T13398] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 312.206406][T13398] RSP: 002b:00007fbe06f2fa68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 312.214843][T13398] RAX: ffffffffffffffda RBX: 00007fbe06f306d4 RCX: 000000000045c849 [ 312.222885][T13398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1941 [ 312.230875][T13398] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 312.239925][T13398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 312.247910][T13398] R13: 0000000000000be0 R14: 00000000004cdff5 R15: 0000000000000004 04:28:46 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xf000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:28:46 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x7a, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:46 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x2, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:46 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x2, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 312.638414][T13406] attempt to access beyond end of device [ 312.644207][T13406] loop5: rw=4096, want=32768, limit=29542 [ 312.669496][ T3090] XFS (loop1): SB sanity check failed [ 312.679551][T13406] XFS (loop5): last sector read failed 04:28:47 executing program 0 (fault-call:0 fault-nth:5): syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 312.682716][ T3090] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 312.714741][T13419] attempt to access beyond end of device [ 312.721705][T13419] loop3: rw=4096, want=32768, limit=29542 [ 312.743106][ T3090] XFS (loop1): Unmount and run xfs_repair [ 312.748768][T13419] XFS (loop3): last sector read failed [ 312.757649][ T3090] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 312.776139][ T3090] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 312.795742][T13444] FAULT_INJECTION: forcing a failure. [ 312.795742][T13444] name failslab, interval 1, probability 0, space 0, times 0 [ 312.799728][ T3090] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 312.817618][ T3090] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 312.826712][ T3090] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 312.835723][ T3090] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 312.844779][ T3090] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 312.853809][ T3090] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 312.863341][ T3090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 312.873930][T13404] XFS (loop1): SB validate failed with error -117. [ 312.880646][T13434] XFS (loop4): Invalid superblock magic number [ 312.917558][T13444] CPU: 1 PID: 13444 Comm: syz-executor.0 Not tainted 5.6.0-rc7-syzkaller #0 [ 312.926395][T13444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.936458][T13444] Call Trace: [ 312.939775][T13444] dump_stack+0x188/0x20d [ 312.944131][T13444] should_fail.cold+0x5/0xa [ 312.948662][T13444] ? fault_create_debugfs_attr+0x140/0x140 [ 312.954501][T13444] should_failslab+0x5/0xf [ 312.958935][T13444] __kmalloc+0x2d9/0x7a0 [ 312.963188][T13444] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 312.969213][T13444] ? tomoyo_realpath_from_path+0xc2/0x620 [ 312.974955][T13444] ? stack_trace_save+0x8c/0xc0 [ 312.979828][T13444] ? stack_trace_consume_entry+0x160/0x160 [ 312.985658][T13444] tomoyo_realpath_from_path+0xc2/0x620 [ 312.991244][T13444] ? tomoyo_path_perm+0x1ba/0x400 [ 312.997075][T13444] tomoyo_path_perm+0x214/0x400 [ 313.001937][T13444] ? tomoyo_path_perm+0x1ba/0x400 [ 313.006982][T13444] ? tomoyo_check_open_permission+0x370/0x370 [ 313.013070][T13444] ? find_held_lock+0x2d/0x110 [ 313.017919][T13444] ? rcu_read_lock_any_held+0xcd/0xf0 [ 313.023308][T13444] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 313.028624][T13444] security_path_truncate+0xeb/0x150 [ 313.034019][T13444] do_sys_ftruncate+0x3f0/0x560 [ 313.038907][T13444] do_syscall_64+0xf6/0x7d0 [ 313.043431][T13444] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 313.049331][T13444] RIP: 0033:0x45c817 [ 313.053232][T13444] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 313.073883][T13444] RSP: 002b:00007fbe06f2fa68 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 313.082311][T13444] RAX: ffffffffffffffda RBX: 00007fbe06f306d4 RCX: 000000000045c817 [ 313.090290][T13444] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 313.098269][T13444] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 313.106253][T13444] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000000003 [ 313.114241][T13444] R13: 0000000000000be0 R14: 00000000004cdff5 R15: 0000000000000005 [ 313.206159][T13444] ERROR: Out of memory at tomoyo_realpath_from_path. [ 313.259111][T13444] hfsplus: session requires an argument [ 313.268489][T13444] hfsplus: unable to parse mount options [ 313.289097][T13406] attempt to access beyond end of device [ 313.295554][T13406] loop5: rw=4096, want=32768, limit=29542 04:28:47 executing program 0 (fault-call:0 fault-nth:6): syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 313.346535][T13406] XFS (loop5): last sector read failed 04:28:47 executing program 2: getitimer(0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f00000001c0)={0x0, 0x0, 0xc49}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000200)={r4, 0x80000, r6}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000002c0)=0x800, 0x4) setuid(r7) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x6258da03ea4f6ff0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532332c70726976706f72742c736d61636b66736465663df92c7065726d69745f646972656374696f2c736d61636b6673666c6f6f723d706f7369785f61636c5f6163636573733a6367726f75702c61707072616973652c736d61636b66736861743d262e2c657569643d", @ANYRESDEC=r7, @ANYBLOB=',obj_user=,smackfsj_user=,\x00'/38]) 04:28:47 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x11000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 313.481184][T13468] FAULT_INJECTION: forcing a failure. [ 313.481184][T13468] name failslab, interval 1, probability 0, space 0, times 0 [ 313.503422][T13460] /dev/loop3: Can't open blockdev [ 313.508053][T13468] CPU: 0 PID: 13468 Comm: syz-executor.0 Not tainted 5.6.0-rc7-syzkaller #0 [ 313.517305][T13468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.527370][T13468] Call Trace: [ 313.530682][T13468] dump_stack+0x188/0x20d [ 313.535040][T13468] should_fail.cold+0x5/0xa [ 313.539572][T13468] ? fault_create_debugfs_attr+0x140/0x140 [ 313.545437][T13468] should_failslab+0x5/0xf [ 313.549883][T13468] __kmalloc+0x2d9/0x7a0 [ 313.554287][T13468] ? prepend+0x92/0xc0 [ 313.558374][T13468] ? tomoyo_encode2.part.0+0xec/0x3b0 [ 313.563787][T13468] ? dynamic_dname+0x170/0x170 [ 313.568570][T13468] ? simple_dname+0xc6/0x1f0 [ 313.573301][T13468] tomoyo_encode2.part.0+0xec/0x3b0 [ 313.578583][T13468] tomoyo_encode+0x28/0x50 [ 313.583050][T13468] tomoyo_realpath_from_path+0x184/0x620 [ 313.588706][T13468] tomoyo_path_perm+0x214/0x400 [ 313.593714][T13468] ? tomoyo_path_perm+0x1ba/0x400 [ 313.598769][T13468] ? tomoyo_check_open_permission+0x370/0x370 [ 313.604944][T13468] ? find_held_lock+0x2d/0x110 [ 313.609803][T13468] ? rcu_read_lock_any_held+0xcd/0xf0 [ 313.615197][T13468] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 313.620522][T13468] security_path_truncate+0xeb/0x150 [ 313.625823][T13468] do_sys_ftruncate+0x3f0/0x560 04:28:47 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x3, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 313.630698][T13468] do_syscall_64+0xf6/0x7d0 [ 313.635225][T13468] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 313.641128][T13468] RIP: 0033:0x45c817 [ 313.645034][T13468] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 313.665098][T13468] RSP: 002b:00007fbe06f2fa68 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 313.671395][T13474] XFS (loop1): SB sanity check failed 04:28:48 executing program 2: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = dup2(r1, r2) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000000)=""/202) [ 313.673536][T13468] RAX: ffffffffffffffda RBX: 00007fbe06f306d4 RCX: 000000000045c817 [ 313.673545][T13468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 313.673554][T13468] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 313.673563][T13468] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000000003 [ 313.673572][T13468] R13: 0000000000000be0 R14: 00000000004cdff5 R15: 0000000000000006 [ 313.704527][T13468] ERROR: Out of memory at tomoyo_realpath_from_path. [ 313.711630][T13474] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 313.717030][ T0] NOHZ: local_softirq_pending 08 [ 313.723787][T13474] XFS (loop1): Unmount and run xfs_repair [ 313.767384][T13474] XFS (loop1): First 128 bytes of corrupted metadata buffer: 04:28:48 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x3, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 313.775010][T13474] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 313.797395][T13474] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 313.807165][T13474] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 04:28:48 executing program 2: getitimer(0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvfrom$llc(r1, &(0x7f0000000000)=""/4096, 0x1000, 0x40, &(0x7f0000001000)={0x1a, 0xfffe, 0x0, 0x1, 0x9, 0x80, @multicast}, 0x10) 04:28:48 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x7e, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 313.863553][T13474] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 313.886820][T13474] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 313.902129][T13468] hfsplus: session requires an argument 04:28:48 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) getitimer(0x3, 0x0) [ 313.908488][T13468] hfsplus: unable to parse mount options [ 313.914205][T13474] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 313.924206][T13474] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 313.933827][T13474] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 313.944028][T13474] XFS (loop1): SB validate failed with error -117. [ 314.026935][T13488] attempt to access beyond end of device [ 314.032982][T13488] loop3: rw=4096, want=32768, limit=29542 [ 314.039575][T13488] XFS (loop3): last sector read failed 04:28:48 executing program 0 (fault-call:0 fault-nth:7): syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:28:48 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/raw6\x00') recvfrom$inet(r1, &(0x7f0000000040)=""/184, 0xb8, 0x0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) [ 314.156282][T13508] XFS (loop4): Invalid superblock magic number [ 314.205806][T13525] FAULT_INJECTION: forcing a failure. [ 314.205806][T13525] name failslab, interval 1, probability 0, space 0, times 0 [ 314.219634][T13525] CPU: 1 PID: 13525 Comm: syz-executor.0 Not tainted 5.6.0-rc7-syzkaller #0 [ 314.229030][T13525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.239097][T13525] Call Trace: [ 314.242332][T13517] attempt to access beyond end of device [ 314.242400][T13525] dump_stack+0x188/0x20d [ 314.250425][T13517] loop5: rw=4096, want=32768, limit=29542 [ 314.252373][T13525] should_fail.cold+0x5/0xa [ 314.252395][T13525] ? fault_create_debugfs_attr+0x140/0x140 [ 314.268411][T13525] should_failslab+0x5/0xf [ 314.271664][T13517] XFS (loop5): last sector read failed [ 314.272835][T13525] __kmalloc+0x2d9/0x7a0 [ 314.272849][T13525] ? prepend+0x92/0xc0 [ 314.272870][T13525] ? tomoyo_encode2.part.0+0xec/0x3b0 [ 314.292110][T13525] ? dynamic_dname+0x170/0x170 [ 314.297159][T13525] ? simple_dname+0xc6/0x1f0 04:28:48 executing program 2: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000000)) [ 314.301768][T13525] tomoyo_encode2.part.0+0xec/0x3b0 [ 314.306984][T13525] tomoyo_encode+0x28/0x50 [ 314.311503][T13525] tomoyo_realpath_from_path+0x184/0x620 [ 314.317165][T13525] tomoyo_path_perm+0x214/0x400 [ 314.322111][T13525] ? tomoyo_path_perm+0x1ba/0x400 [ 314.327219][T13525] ? tomoyo_check_open_permission+0x370/0x370 [ 314.333291][T13525] ? find_held_lock+0x2d/0x110 [ 314.338112][T13525] ? rcu_read_lock_any_held+0xcd/0xf0 [ 314.343499][T13525] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 314.348791][T13525] security_path_truncate+0xeb/0x150 [ 314.354065][T13525] do_sys_ftruncate+0x3f0/0x560 [ 314.359049][T13525] do_syscall_64+0xf6/0x7d0 [ 314.363640][T13525] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.369528][T13525] RIP: 0033:0x45c817 [ 314.373421][T13525] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 314.393361][T13525] RSP: 002b:00007fbe06f2fa68 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 314.401911][T13525] RAX: ffffffffffffffda RBX: 00007fbe06f306d4 RCX: 000000000045c817 [ 314.409975][T13525] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 314.420308][T13525] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 314.428798][T13525] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000000003 [ 314.436754][T13525] R13: 0000000000000be0 R14: 00000000004cdff5 R15: 0000000000000007 [ 314.455373][T13525] ERROR: Out of memory at tomoyo_realpath_from_path. [ 314.501272][T13525] hfsplus: session requires an argument [ 314.506882][T13525] hfsplus: unable to parse mount options 04:28:48 executing program 2: getitimer(0x0, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) [ 314.553856][T13532] /dev/loop1: Can't open blockdev 04:28:48 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x13000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:28:48 executing program 0 (fault-call:0 fault-nth:8): syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 314.686403][T13488] attempt to access beyond end of device [ 314.693449][T13488] loop3: rw=4096, want=32768, limit=29542 [ 314.707388][T13488] XFS (loop3): last sector read failed [ 314.710416][T13555] FAULT_INJECTION: forcing a failure. [ 314.710416][T13555] name failslab, interval 1, probability 0, space 0, times 0 [ 314.728512][T13555] CPU: 1 PID: 13555 Comm: syz-executor.0 Not tainted 5.6.0-rc7-syzkaller #0 [ 314.737418][T13555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.747510][T13555] Call Trace: [ 314.751340][T13555] dump_stack+0x188/0x20d [ 314.755693][T13555] should_fail.cold+0x5/0xa [ 314.760201][T13555] ? lock_downgrade+0x7f0/0x7f0 [ 314.765273][T13555] ? fault_create_debugfs_attr+0x140/0x140 [ 314.771132][T13555] should_failslab+0x5/0xf [ 314.775542][T13555] kmem_cache_alloc+0x29b/0x730 [ 314.780510][T13555] ? fsnotify_first_mark+0x200/0x200 [ 314.785795][T13555] ? lock_downgrade+0x7f0/0x7f0 [ 314.790652][T13555] getname_flags+0xd2/0x5b0 [ 314.795168][T13555] do_sys_openat2+0x3cf/0x740 [ 314.799856][T13555] ? file_open_root+0x3d0/0x3d0 [ 314.804718][T13555] ? find_held_lock+0x2d/0x110 [ 314.809482][T13555] ? do_sys_ftruncate+0x432/0x560 [ 314.814509][T13555] do_sys_open+0xc3/0x140 [ 314.818838][T13555] ? filp_open+0x70/0x70 [ 314.823100][T13555] ? trace_hardirqs_off_caller+0x55/0x230 [ 314.828837][T13555] do_syscall_64+0xf6/0x7d0 [ 314.833358][T13555] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.839253][T13555] RIP: 0033:0x4165e1 [ 314.843169][T13555] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 314.862879][T13555] RSP: 002b:00007fbe06f2fa60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 314.871388][T13555] RAX: ffffffffffffffda RBX: 00007fbe06f306d4 RCX: 00000000004165e1 [ 314.879384][T13555] RDX: 00007fbe06f2fb0a RSI: 0000000000000002 RDI: 00007fbe06f2fb00 [ 314.887361][T13555] RBP: 000000000076bf00 R08: 0000000000000000 R09: 000000000000000a [ 314.896390][T13555] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 [ 314.904358][T13555] R13: 0000000000000be0 R14: 00000000004cdff5 R15: 0000000000000008 [ 315.055918][ T2719] XFS (loop1): SB sanity check failed [ 315.062642][ T2719] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 315.081563][ T2719] XFS (loop1): Unmount and run xfs_repair [ 315.089253][ T2719] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 315.096835][ T2719] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 315.106959][ T2719] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 315.116725][ T2719] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 315.134544][ T2719] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 315.144179][ T2719] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 04:28:49 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x5, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:49 executing program 2: getitimer(0x1, 0x0) 04:28:49 executing program 0 (fault-call:0 fault-nth:9): syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:28:49 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x5, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:28:49 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x84, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 315.153676][ T2719] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 315.163191][ T2719] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 315.172738][ T2719] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 315.198933][T13562] XFS (loop1): SB validate failed with error -117. [ 315.205649][T13580] FAULT_INJECTION: forcing a failure. [ 315.205649][T13580] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 315.218951][T13580] CPU: 1 PID: 13580 Comm: syz-executor.0 Not tainted 5.6.0-rc7-syzkaller #0 [ 315.227976][T13580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.238225][T13580] Call Trace: [ 315.241743][T13580] dump_stack+0x188/0x20d 04:28:49 executing program 2: getitimer(0x0, 0x0) [ 315.246110][T13580] should_fail.cold+0x5/0xa [ 315.250652][T13580] ? fault_create_debugfs_attr+0x140/0x140 [ 315.256500][T13580] ? __lock_acquire+0x14bd/0x3ca0 [ 315.261574][T13580] __alloc_pages_nodemask+0x17a/0x820 [ 315.267116][T13580] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 315.272886][T13580] ? find_held_lock+0x2d/0x110 [ 315.277691][T13580] ? lock_downgrade+0x7f0/0x7f0 [ 315.282570][T13580] cache_grow_begin+0x8c/0xc30 [ 315.287363][T13580] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 315.292855][T13580] kmem_cache_alloc+0x66a/0x730 [ 315.297810][T13580] ? fsnotify_first_mark+0x200/0x200 [ 315.303109][T13580] ? lock_downgrade+0x7f0/0x7f0 [ 315.307988][T13580] getname_flags+0xd2/0x5b0 [ 315.313053][T13580] do_sys_openat2+0x3cf/0x740 [ 315.317756][T13580] ? file_open_root+0x3d0/0x3d0 [ 315.322662][T13580] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 315.328237][T13580] do_sys_open+0xc3/0x140 [ 315.332582][T13580] ? filp_open+0x70/0x70 [ 315.336898][T13580] ? switch_fpu_return+0x1db/0x4b0 [ 315.342038][T13580] ? trace_hardirqs_off_caller+0x55/0x230 [ 315.347904][T13580] do_syscall_64+0xf6/0x7d0 [ 315.352475][T13580] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 315.358378][T13580] RIP: 0033:0x4165e1 [ 315.362300][T13580] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 315.381919][T13580] RSP: 002b:00007fbe06f2fa60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 315.390347][T13580] RAX: ffffffffffffffda RBX: 00007fbe06f306d4 RCX: 00000000004165e1 [ 315.398333][T13580] RDX: 00007fbe06f2fb0a RSI: 0000000000000002 RDI: 00007fbe06f2fb00 [ 315.406412][T13580] RBP: 000000000076bf00 R08: 0000000000000000 R09: 000000000000000a [ 315.414393][T13580] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 [ 315.422516][T13580] R13: 0000000000000be0 R14: 00000000004cdff5 R15: 0000000000000009 [ 315.436117][T13579] XFS (loop4): Invalid superblock magic number [ 315.524933][T13580] hfsplus: session requires an argument [ 315.564818][T13580] hfsplus: unable to parse mount options 04:28:49 executing program 2: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001ff) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000180)={0x6, 0x9, {0x52, 0xffb9, 0x6, {0x2, 0x1e36}, {0x2, 0x800}, @const={0x0, {0x2c, 0x59, 0x1, 0x401}}}, {0x54, 0x1, 0x200, {0xfc00, 0x4}, {0x6, 0x4}, @period={0x59, 0xffe0, 0x9, 0x3, 0xffff, {0x20, 0x3ff, 0x7fff, 0x8}, 0x3, &(0x7f0000000140)=[0x2000, 0x2, 0x3]}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x408480, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000240)=0xffffffffffffff6b) r5 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xf4, 0x204000) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000100)=0xffffff00, 0x4) [ 315.630118][T13585] attempt to access beyond end of device [ 315.647535][T13585] loop5: rw=4096, want=32768, limit=29542 [ 315.660684][T13585] XFS (loop5): last sector read failed 04:28:50 executing program 2: getitimer(0x1, 0x0) 04:28:50 executing program 0 (fault-call:0 fault-nth:10): syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:28:50 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x3c000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 315.764897][T13602] attempt to access beyond end of device [ 315.798996][T13602] loop3: rw=4096, want=32768, limit=29542 [ 315.825316][T13602] XFS (loop3): last sector read failed [ 315.831115][T13625] FAULT_INJECTION: forcing a failure. [ 315.831115][T13625] name failslab, interval 1, probability 0, space 0, times 0 [ 315.862673][T13625] CPU: 0 PID: 13625 Comm: syz-executor.0 Not tainted 5.6.0-rc7-syzkaller #0 04:28:50 executing program 2: getitimer(0x2, 0x0) [ 315.871388][T13625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.881661][T13625] Call Trace: [ 315.884970][T13625] dump_stack+0x188/0x20d [ 315.889313][T13625] should_fail.cold+0x5/0xa [ 315.893804][T13625] ? lock_downgrade+0x7f0/0x7f0 [ 315.898649][T13625] ? fault_create_debugfs_attr+0x140/0x140 [ 315.904451][T13625] should_failslab+0x5/0xf [ 315.908980][T13625] kmem_cache_alloc+0x29b/0x730 [ 315.913882][T13625] ? stack_trace_save+0x8c/0xc0 [ 315.918742][T13625] __alloc_file+0x21/0x340 [ 315.923254][T13625] alloc_empty_file+0x6d/0x170 [ 315.928049][T13625] path_openat+0xef/0x32b0 [ 315.932477][T13625] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 315.938276][T13625] ? kmem_cache_alloc+0x11b/0x730 [ 315.943312][T13625] ? getname_flags+0xd2/0x5b0 [ 315.948008][T13625] ? do_sys_openat2+0x3cf/0x740 [ 315.952873][T13625] ? do_sys_open+0xc3/0x140 [ 315.957569][T13625] ? do_syscall_64+0xf6/0x7d0 [ 315.962260][T13625] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 315.968353][T13625] ? __lock_acquire+0x14bd/0x3ca0 04:28:50 executing program 2: sysfs$3(0x3) getitimer(0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x400000, 0x0) [ 315.973405][T13625] ? path_mountpoint.isra.0+0x370/0x370 [ 315.979065][T13625] ? __lock_acquire+0x14bd/0x3ca0 [ 315.984141][T13625] do_filp_open+0x192/0x260 [ 315.988665][T13625] ? may_open_dev+0xf0/0xf0 [ 315.993196][T13625] ? __alloc_fd+0x46d/0x600 [ 315.997727][T13625] ? lock_downgrade+0x7f0/0x7f0 [ 316.002600][T13625] ? do_raw_spin_lock+0x129/0x2e0 [ 316.007665][T13625] ? _raw_spin_unlock+0x24/0x40 [ 316.012565][T13625] ? __alloc_fd+0x46d/0x600 [ 316.017106][T13625] do_sys_openat2+0x54c/0x740 [ 316.021811][T13625] ? file_open_root+0x3d0/0x3d0 [ 316.026695][T13625] ? do_sys_openat2+0x4/0x740 [ 316.031400][T13625] do_sys_open+0xc3/0x140 [ 316.035751][T13625] ? filp_open+0x70/0x70 [ 316.036181][T13629] XFS (loop1): SB sanity check failed [ 316.040008][T13625] ? trace_hardirqs_off_caller+0x55/0x230 [ 316.040038][T13625] do_syscall_64+0xf6/0x7d0 [ 316.040062][T13625] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 316.040072][T13625] RIP: 0033:0x4165e1 [ 316.040092][T13625] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 316.045658][T13629] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 316.051355][T13625] RSP: 002b:00007fbe06f2fa60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 316.051369][T13625] RAX: ffffffffffffffda RBX: 00007fbe06f306d4 RCX: 00000000004165e1 [ 316.051377][T13625] RDX: 00007fbe06f2fb0a RSI: 0000000000000002 RDI: 00007fbe06f2fb00 [ 316.051386][T13625] RBP: 000000000076bf00 R08: 0000000000000000 R09: 000000000000000a [ 316.051394][T13625] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 [ 316.051403][T13625] R13: 0000000000000be0 R14: 00000000004cdff5 R15: 000000000000000a [ 316.154025][T13629] XFS (loop1): Unmount and run xfs_repair [ 316.159947][T13629] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 316.167766][T13629] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 316.176869][T13629] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 316.185897][T13629] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 316.200545][T13629] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 316.211256][T13629] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 316.220301][T13629] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 316.229341][T13629] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 316.250706][T13629] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 316.281121][T13629] XFS (loop1): SB validate failed with error -117. 04:28:50 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xa, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:50 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x85, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:50 executing program 2: getitimer(0x0, 0x0) 04:28:50 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xa, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:28:50 executing program 0 (fault-call:0 fault-nth:11): syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:28:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000000)=0x37c0000000000000) getitimer(0x3, 0x0) [ 316.498194][T13654] FAULT_INJECTION: forcing a failure. [ 316.498194][T13654] name failslab, interval 1, probability 0, space 0, times 0 [ 316.532656][T13654] CPU: 0 PID: 13654 Comm: syz-executor.0 Not tainted 5.6.0-rc7-syzkaller #0 [ 316.541735][T13654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.551807][T13654] Call Trace: [ 316.555148][T13654] dump_stack+0x188/0x20d [ 316.559656][T13654] should_fail.cold+0x5/0xa [ 316.564186][T13654] ? lock_downgrade+0x7f0/0x7f0 [ 316.569189][T13654] ? fault_create_debugfs_attr+0x140/0x140 [ 316.575038][T13654] should_failslab+0x5/0xf [ 316.580086][T13654] kmem_cache_alloc+0x29b/0x730 [ 316.585060][T13654] ? kmem_cache_alloc+0x358/0x730 [ 316.590101][T13654] security_file_alloc+0x34/0x160 [ 316.595143][T13654] __alloc_file+0xd8/0x340 [ 316.599676][T13654] alloc_empty_file+0x6d/0x170 [ 316.604453][T13654] path_openat+0xef/0x32b0 [ 316.608867][T13654] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 316.614665][T13654] ? kmem_cache_alloc+0x11b/0x730 [ 316.619933][T13654] ? getname_flags+0xd2/0x5b0 [ 316.624617][T13654] ? do_sys_openat2+0x3cf/0x740 [ 316.627457][T13657] XFS (loop4): Invalid superblock magic number [ 316.629460][T13654] ? do_sys_open+0xc3/0x140 [ 316.629478][T13654] ? do_syscall_64+0xf6/0x7d0 [ 316.629496][T13654] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 316.629517][T13654] ? __lock_acquire+0x14bd/0x3ca0 [ 316.637809][T13662] attempt to access beyond end of device [ 316.640174][T13654] ? path_mountpoint.isra.0+0x370/0x370 [ 316.640200][T13654] ? __lock_acquire+0x14bd/0x3ca0 [ 316.640228][T13654] do_filp_open+0x192/0x260 [ 316.645176][T13662] loop3: rw=4096, want=32768, limit=29542 [ 316.650940][T13654] ? may_open_dev+0xf0/0xf0 [ 316.650959][T13654] ? __alloc_fd+0x46d/0x600 [ 316.650981][T13654] ? lock_downgrade+0x7f0/0x7f0 [ 316.650998][T13654] ? do_raw_spin_lock+0x129/0x2e0 [ 316.651030][T13654] ? _raw_spin_unlock+0x24/0x40 [ 316.651045][T13654] ? __alloc_fd+0x46d/0x600 [ 316.651074][T13654] do_sys_openat2+0x54c/0x740 [ 316.660911][T13662] XFS (loop3): last sector read failed [ 316.662347][T13654] ? file_open_root+0x3d0/0x3d0 [ 316.662376][T13654] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 316.662404][T13654] do_sys_open+0xc3/0x140 [ 316.674184][T13656] attempt to access beyond end of device 04:28:51 executing program 0 (fault-call:0 fault-nth:12): syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 316.677588][T13654] ? filp_open+0x70/0x70 [ 316.677606][T13654] ? switch_fpu_return+0x1db/0x4b0 [ 316.677633][T13654] ? trace_hardirqs_off_caller+0x55/0x230 [ 316.677661][T13654] do_syscall_64+0xf6/0x7d0 [ 316.677683][T13654] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 316.677694][T13654] RIP: 0033:0x4165e1 [ 316.677714][T13654] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 316.683740][T13656] loop5: rw=4096, want=32768, limit=29542 [ 316.687909][T13654] RSP: 002b:00007fbe06f2fa60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 316.687924][T13654] RAX: ffffffffffffffda RBX: 00007fbe06f306d4 RCX: 00000000004165e1 [ 316.687931][T13654] RDX: 00007fbe06f2fb0a RSI: 0000000000000002 RDI: 00007fbe06f2fb00 [ 316.687940][T13654] RBP: 000000000076bf00 R08: 0000000000000000 R09: 000000000000000a [ 316.687948][T13654] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 04:28:51 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xfeffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 316.687957][T13654] R13: 0000000000000be0 R14: 00000000004cdff5 R15: 000000000000000b [ 316.851327][T13656] XFS (loop5): last sector read failed [ 316.914249][T13686] FAULT_INJECTION: forcing a failure. [ 316.914249][T13686] name failslab, interval 1, probability 0, space 0, times 0 [ 316.951275][T13686] CPU: 1 PID: 13686 Comm: syz-executor.0 Not tainted 5.6.0-rc7-syzkaller #0 [ 316.959999][T13686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.970087][T13686] Call Trace: [ 316.973402][T13686] dump_stack+0x188/0x20d [ 316.977776][T13686] should_fail.cold+0x5/0xa [ 316.982322][T13686] ? fault_create_debugfs_attr+0x140/0x140 [ 316.988171][T13686] should_failslab+0x5/0xf [ 316.992782][T13686] __kmalloc+0x2d9/0x7a0 [ 316.997151][T13686] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 317.003147][T13686] ? tomoyo_realpath_from_path+0xc2/0x620 [ 317.008884][T13686] ? do_sys_open+0xc3/0x140 [ 317.013405][T13686] ? do_syscall_64+0xf6/0x7d0 [ 317.018097][T13686] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 317.024188][T13686] ? mark_lock+0xbc/0x1220 [ 317.028636][T13686] tomoyo_realpath_from_path+0xc2/0x620 [ 317.034204][T13686] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 317.039876][T13686] tomoyo_path_number_perm+0x1c2/0x4d0 [ 317.045354][T13686] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 317.051124][T13686] ? tomoyo_execute_permission+0x470/0x470 [ 317.056966][T13686] ? __fget_files+0x307/0x4f0 [ 317.061701][T13686] ? __fget_files+0x329/0x4f0 [ 317.066408][T13686] ? ksys_dup3+0x3c0/0x3c0 [ 317.071037][T13686] security_file_ioctl+0x6c/0xb0 [ 317.075998][T13686] ksys_ioctl+0x50/0x180 [ 317.080271][T13686] __x64_sys_ioctl+0x6f/0xb0 [ 317.084905][T13686] ? lockdep_hardirqs_on+0x417/0x5d0 [ 317.090214][T13686] do_syscall_64+0xf6/0x7d0 [ 317.094741][T13686] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 317.100648][T13686] RIP: 0033:0x45c6b7 [ 317.104570][T13686] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 317.124186][T13686] RSP: 002b:00007fbe06f2fa68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.132610][T13686] RAX: ffffffffffffffda RBX: 00007fbe06f306d4 RCX: 000000000045c6b7 [ 317.140592][T13686] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 317.148589][T13686] RBP: 000000000076bf00 R08: 0000000000000000 R09: 000000000000000a [ 317.156577][T13686] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 04:28:51 executing program 2: getitimer(0x2, 0x0) [ 317.164560][T13686] R13: 0000000000000be0 R14: 00000000004cdff5 R15: 000000000000000c 04:28:51 executing program 2: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000000)) [ 317.243789][T13686] ERROR: Out of memory at tomoyo_realpath_from_path. 04:28:51 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x20000, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x1}, 0x6) getitimer(0x3, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x3ff, 0x5, 0x4, 0x40, 0x71, {0x77359400}, {0x2, 0xc, 0x9, 0x0, 0x0, 0x80, "5445825d"}, 0x20, 0x2, @userptr=0x80000001, 0x7ff, 0x0, r0}) setsockopt$inet_buf(r1, 0x0, 0x2a, &(0x7f0000000100)="ba3a1d29f1689ce2098a73770c322580361e81ff47cc3dad14d4cd94a9a59a2141d1c9d754dd7a14db7c6cf7e1627c9c76b0e983d7fdd3202473ccc463eaee5107135065ff6369805469b9bd56b535a821880cba818bb056d5ab7135c9bd4b7ce4eeb62b04b6dfd44f2a954bde61b895f6b16afc13d60f", 0x77) [ 317.309212][T13686] hfsplus: session requires an argument [ 317.315569][T13686] hfsplus: unable to parse mount options [ 317.369053][ T3090] XFS (loop1): SB sanity check failed [ 317.374649][ T3090] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 317.391106][ T3090] XFS (loop1): Unmount and run xfs_repair [ 317.396851][ T3090] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 317.405279][ T3090] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 317.420541][ T3090] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 317.431252][ T3090] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 317.444694][ T3090] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 317.467534][ T3090] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 317.476860][ T3090] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 04:28:51 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xd, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:51 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xd, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:28:51 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x88, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:51 executing program 0 (fault-call:0 fault-nth:13): syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 317.517129][ T3090] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 317.526020][ T3090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 317.555385][T13694] XFS (loop1): SB validate failed with error -117. 04:28:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18, 0x0, 0x8, {0x1ff}}, 0x18) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@ng={0x4, 0x10, "339a2866dd0df4708c81"}, 0xc, 0x3) getitimer(0x3, 0x0) [ 317.692255][T13730] FAULT_INJECTION: forcing a failure. [ 317.692255][T13730] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 317.705508][T13730] CPU: 1 PID: 13730 Comm: syz-executor.0 Not tainted 5.6.0-rc7-syzkaller #0 [ 317.714278][T13730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.724349][T13730] Call Trace: [ 317.727656][T13730] dump_stack+0x188/0x20d [ 317.732033][T13730] should_fail.cold+0x5/0xa 04:28:52 executing program 2: getitimer(0x0, 0x0) [ 317.737040][T13730] ? fault_create_debugfs_attr+0x140/0x140 [ 317.743164][T13730] ? find_held_lock+0x2d/0x110 [ 317.748123][T13730] ? is_bpf_image_address+0x1a9/0x280 [ 317.753641][T13730] __alloc_pages_nodemask+0x17a/0x820 [ 317.759030][T13730] ? lock_downgrade+0x7f0/0x7f0 [ 317.764035][T13730] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 317.769946][T13730] ? bpf_image_alloc+0x10/0x10 [ 317.774844][T13730] cache_grow_begin+0x8c/0xc30 [ 317.779630][T13730] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 317.785130][T13730] __kmalloc+0x6d6/0x7a0 [ 317.789519][T13730] ? tomoyo_realpath_from_path+0xc2/0x620 [ 317.795473][T13730] tomoyo_realpath_from_path+0xc2/0x620 [ 317.801060][T13730] tomoyo_check_open_permission+0x26d/0x370 [ 317.806978][T13730] ? tomoyo_path_number_perm+0x4d0/0x4d0 [ 317.812631][T13730] ? mark_lock+0xbc/0x1220 [ 317.817060][T13730] ? __lock_acquire+0x14bd/0x3ca0 [ 317.822150][T13730] ? lock_downgrade+0x7f0/0x7f0 [ 317.827133][T13730] ? do_raw_spin_lock+0x129/0x2e0 [ 317.832175][T13730] ? rwlock_bug.part.0+0x90/0x90 [ 317.837209][T13730] tomoyo_file_open+0x9d/0xc0 [ 317.841949][T13730] security_file_open+0x6a/0x2e0 [ 317.847139][T13730] do_dentry_open+0x349/0x1250 [ 317.852032][T13730] ? devcgroup_check_permission+0x1a8/0x420 [ 317.857947][T13730] ? security_inode_permission+0xc4/0xf0 [ 317.863599][T13730] ? chown_common+0x550/0x550 [ 317.868298][T13730] ? inode_permission+0xab/0x500 [ 317.873279][T13730] path_openat+0x122a/0x32b0 [ 317.877907][T13730] ? path_mountpoint.isra.0+0x370/0x370 [ 317.883480][T13730] ? __lock_acquire+0x14bd/0x3ca0 [ 317.888532][T13730] do_filp_open+0x192/0x260 [ 317.893052][T13730] ? may_open_dev+0xf0/0xf0 [ 317.898012][T13730] ? do_raw_spin_lock+0x129/0x2e0 [ 317.903081][T13730] ? _raw_spin_unlock+0x24/0x40 [ 317.907946][T13730] ? __alloc_fd+0x46d/0x600 [ 317.912476][T13730] do_sys_openat2+0x54c/0x740 [ 317.917168][T13730] ? file_open_root+0x3d0/0x3d0 [ 317.920150][T13736] attempt to access beyond end of device [ 317.922048][T13730] ? find_held_lock+0x2d/0x110 [ 317.932447][T13730] ? do_sys_ftruncate+0x432/0x560 [ 317.937503][T13730] do_sys_open+0xc3/0x140 [ 317.941881][T13730] ? filp_open+0x70/0x70 [ 317.946164][T13730] ? trace_hardirqs_off_caller+0x55/0x230 [ 317.952349][T13730] do_syscall_64+0xf6/0x7d0 [ 317.956964][T13730] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 317.959045][T13736] loop3: rw=4096, want=32768, limit=29542 [ 317.962873][T13730] RIP: 0033:0x4165e1 [ 317.962889][T13730] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 317.962897][T13730] RSP: 002b:00007fbe06f2fa60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 317.962912][T13730] RAX: ffffffffffffffda RBX: 00007fbe06f306d4 RCX: 00000000004165e1 [ 317.962921][T13730] RDX: 00007fbe06f2fb0a RSI: 0000000000000002 RDI: 00007fbe06f2fb00 [ 317.962929][T13730] RBP: 000000000076bf00 R08: 0000000000000000 R09: 000000000000000a [ 317.962936][T13730] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 [ 317.962951][T13730] R13: 0000000000000be0 R14: 00000000004cdff5 R15: 000000000000000d [ 318.050073][T13729] XFS (loop4): Invalid superblock magic number [ 318.056965][T13728] attempt to access beyond end of device [ 318.074930][T13728] loop5: rw=4096, want=32768, limit=29542 [ 318.126155][T13736] XFS (loop3): last sector read failed [ 318.129221][T13730] hfsplus: session requires an argument [ 318.144232][T13728] XFS (loop5): last sector read failed [ 318.149303][T13730] hfsplus: unable to parse mount options 04:28:52 executing program 0 (fault-call:0 fault-nth:14): syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:28:52 executing program 2: getitimer(0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYBLOB="11114280c77c675d48e7bd0b5c253b61962c52cf29ee90f17651dbe6a51db05d43de88d1df3f88b5aaac6888010000000000a6f385d8dd38453e0bda4c9d00005952ecf097f6588fe5888f2ecffa8b6875a79cd09bc2c8ca4c961cc910478fd1c938a50f3820c15edc29c473feea5ad713ce3082bb73c650640fd9af1993f3c37d3f2442", @ANYRES16=r5, @ANYBLOB="010000000000fcdbdf250100000000000000014160000014001700000000000000006574683a00000000"], 0x26}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0018", @ANYRES16=r5, @ANYBLOB="000125bd7000fddbdf25010000000000000002410000000c00136574683a6c6f0000"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x48000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x30, r5, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8, 0x7fe, 0x6, 0xb1}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8004904}, 0x40800) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x2000) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x76, &(0x7f0000000400)=@assoc_value={r10}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r10, 0x6bc}, 0x8) 04:28:52 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xff3fffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 318.353228][T13767] FAULT_INJECTION: forcing a failure. [ 318.353228][T13767] name failslab, interval 1, probability 0, space 0, times 0 [ 318.377945][T13767] CPU: 0 PID: 13767 Comm: syz-executor.0 Not tainted 5.6.0-rc7-syzkaller #0 [ 318.386647][T13767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.396724][T13767] Call Trace: [ 318.400032][T13767] dump_stack+0x188/0x20d [ 318.404393][T13767] should_fail.cold+0x5/0xa [ 318.408901][T13767] ? fault_create_debugfs_attr+0x140/0x140 [ 318.415221][T13767] should_failslab+0x5/0xf [ 318.419622][T13767] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 318.424985][T13767] ? lockdep_init_map+0x1b0/0x6c0 [ 318.429997][T13767] ? lockdep_init_map+0x1b0/0x6c0 [ 318.435054][T13767] ? loop_info64_to_compat+0x690/0x690 [ 318.440506][T13767] ? loop_info64_to_compat+0x690/0x690 [ 318.446036][T13767] __kthread_create_on_node+0xd2/0x410 [ 318.451593][T13767] ? kthread_parkme+0xa0/0xa0 [ 318.456272][T13767] ? loop_set_fd+0x645/0x13e0 [ 318.460972][T13767] ? kobject_put+0xb4/0x2e0 [ 318.465523][T13767] ? do_raw_spin_unlock+0x171/0x260 [ 318.471178][T13767] ? loop_info64_to_compat+0x690/0x690 [ 318.477088][T13767] kthread_create_on_node+0xbb/0xf0 [ 318.482285][T13767] ? __kthread_create_on_node+0x410/0x410 [ 318.488158][T13767] ? ksys_dup3+0x3c0/0x3c0 [ 318.492607][T13767] ? lockdep_init_map+0x1b0/0x6c0 [ 318.497634][T13767] ? lockdep_init_map+0x1b0/0x6c0 [ 318.502652][T13767] loop_set_fd+0x310/0x13e0 [ 318.507166][T13767] lo_ioctl+0x19d/0x1460 [ 318.511422][T13767] ? loop_set_fd+0x13e0/0x13e0 [ 318.516447][T13767] blkdev_ioctl+0x25b/0x660 [ 318.520952][T13767] ? blkdev_common_ioctl+0x1770/0x1770 [ 318.527113][T13767] ? ksys_dup3+0x3c0/0x3c0 [ 318.531549][T13767] block_ioctl+0xe9/0x130 [ 318.535973][T13767] ? blkdev_fallocate+0x3f0/0x3f0 [ 318.540993][T13767] ksys_ioctl+0x11a/0x180 [ 318.545311][T13767] __x64_sys_ioctl+0x6f/0xb0 [ 318.549890][T13767] ? lockdep_hardirqs_on+0x417/0x5d0 [ 318.555169][T13767] do_syscall_64+0xf6/0x7d0 [ 318.559661][T13767] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 318.565614][T13767] RIP: 0033:0x45c6b7 [ 318.569549][T13767] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 318.589226][T13767] RSP: 002b:00007fbe06f2fa68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.598849][T13767] RAX: ffffffffffffffda RBX: 00007fbe06f306d4 RCX: 000000000045c6b7 [ 318.606812][T13767] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 318.614797][T13767] RBP: 000000000076bf00 R08: 0000000000000000 R09: 000000000000000a [ 318.623282][T13767] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 318.631271][T13767] R13: 0000000000000be0 R14: 00000000004cdff5 R15: 000000000000000e 04:28:53 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = getpid() ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000000)=r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x76, &(0x7f0000000400)=@assoc_value={r7}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={r7, 0x4}, &(0x7f00000001c0)=0x8) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240), 0x8) getitimer(0x3, 0x0) 04:28:53 executing program 0 (fault-call:0 fault-nth:15): syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:28:53 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:28:53 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xe, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:53 executing program 2: getitimer(0x3, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0xe, 0x4, 0x4, "880cb9ad3d6512488af2eba777e8e56593c18538738115530fb8c8deea045bcb54640f421e277331419731b60d624f40f2c2b9d3a9358a2feb9c1bca8a42bc25", "900fc65752c52620ecbead1ad23786813bcdebf8f45e9c34d23651185a4193f446760dbc204279d262747706be269a608788015f0892bde36e2a8922c7d86c89", "a8828d33f037ea556f6fcd238e0c7273d2f2a36f4f2e6878b78133fba4c1ce7e", [0x649, 0x81]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x76, &(0x7f0000000400)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000300)={r6, 0x101}, &(0x7f0000000340)=0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000080)={{0x5, 0x1, 0x8, 0x3f, '\x00', 0x6}, 0x5, 0x20000000, 0x3f, r0, 0x3, 0x8, 'syz0\x00', &(0x7f0000000040)=['lo$-)^bdev\x00', 'em0!(,user\x00', '\'eth0em1\x00'], 0x1f, [], [0x7f, 0x6, 0x800, 0x6]}) 04:28:53 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xc4, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 318.847894][T13789] FAULT_INJECTION: forcing a failure. [ 318.847894][T13789] name failslab, interval 1, probability 0, space 0, times 0 [ 318.892476][ T2721] XFS (loop1): SB sanity check failed [ 318.901646][ T2721] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 318.934433][T13789] CPU: 0 PID: 13789 Comm: syz-executor.0 Not tainted 5.6.0-rc7-syzkaller #0 [ 318.937182][ T2721] XFS (loop1): Unmount and run xfs_repair [ 318.943158][T13789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.958931][T13789] Call Trace: [ 318.962243][T13789] dump_stack+0x188/0x20d [ 318.966613][T13789] should_fail.cold+0x5/0xa [ 318.967028][ T2721] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 318.971125][T13789] ? fault_create_debugfs_attr+0x140/0x140 [ 318.978905][ T2721] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 318.985225][T13789] should_failslab+0x5/0xf [ 318.985246][T13789] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 318.994657][ T2721] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 318.998551][T13789] ? lockdep_init_map+0x1b0/0x6c0 [ 318.998568][T13789] ? lockdep_init_map+0x1b0/0x6c0 [ 318.998581][T13789] ? loop_info64_to_compat+0x690/0x690 [ 318.998598][T13789] ? loop_info64_to_compat+0x690/0x690 [ 318.998618][T13789] __kthread_create_on_node+0xd2/0x410 [ 319.004920][ T2721] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 319.012807][T13789] ? kthread_parkme+0xa0/0xa0 [ 319.012839][T13789] ? loop_set_fd+0x645/0x13e0 [ 319.012853][T13789] ? kobject_put+0xb4/0x2e0 [ 319.012872][T13789] ? do_raw_spin_unlock+0x171/0x260 [ 319.018191][ T2721] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 319.022906][T13789] ? loop_info64_to_compat+0x690/0x690 [ 319.028617][ T2721] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 319.033806][T13789] kthread_create_on_node+0xbb/0xf0 [ 319.039530][ T2721] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 319.048098][T13789] ? __kthread_create_on_node+0x410/0x410 [ 319.048124][T13789] ? ksys_dup3+0x3c0/0x3c0 [ 319.048139][T13789] ? lockdep_init_map+0x1b0/0x6c0 [ 319.048156][T13789] ? lockdep_init_map+0x1b0/0x6c0 [ 319.053606][ T2721] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 319.057495][T13789] loop_set_fd+0x310/0x13e0 [ 319.057526][T13789] lo_ioctl+0x19d/0x1460 [ 319.057550][T13789] ? loop_set_fd+0x13e0/0x13e0 [ 319.062654][ T2721] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 319.067240][T13789] blkdev_ioctl+0x25b/0x660 [ 319.067258][T13789] ? blkdev_common_ioctl+0x1770/0x1770 [ 319.067273][T13789] ? ksys_dup3+0x3c0/0x3c0 [ 319.067301][T13789] block_ioctl+0xe9/0x130 [ 319.087122][T13769] XFS (loop1): SB validate failed with error -117. [ 319.090865][T13789] ? blkdev_fallocate+0x3f0/0x3f0 [ 319.188680][T13789] ksys_ioctl+0x11a/0x180 [ 319.192998][T13789] __x64_sys_ioctl+0x6f/0xb0 [ 319.197585][T13789] ? lockdep_hardirqs_on+0x417/0x5d0 [ 319.203039][T13789] do_syscall_64+0xf6/0x7d0 [ 319.207545][T13789] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 319.213533][T13789] RIP: 0033:0x45c6b7 04:28:53 executing program 2: getitimer(0x3, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x785c0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x76, &(0x7f0000000400)=@assoc_value={r3}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x8202, 0x1, 0x6, r3}, 0x10) [ 319.217420][T13789] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 319.237160][T13789] RSP: 002b:00007fbe06f2fa68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.245739][T13789] RAX: ffffffffffffffda RBX: 00007fbe06f306d4 RCX: 000000000045c6b7 [ 319.253932][T13789] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 319.261892][T13789] RBP: 000000000076bf00 R08: 0000000000000000 R09: 000000000000000a [ 319.269876][T13789] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 319.277957][T13789] R13: 0000000000000be0 R14: 00000000004cdff5 R15: 000000000000000f 04:28:53 executing program 0 (fault-call:0 fault-nth:16): syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:28:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x9f0000, 0x7, 0x9, r3, 0x0, &(0x7f00000000c0)={0x9a0921, 0x7ff, [], @value64=0x2}}) read$dsp(r4, &(0x7f0000000140)=""/31, 0x1f) getitimer(0x3, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2, 0x9, 0x6c3, 0x6}, 0x2}, 0x20, 0x0, 0x0) [ 319.459457][T13801] attempt to access beyond end of device [ 319.465303][T13801] loop3: rw=4096, want=32768, limit=29542 [ 319.484707][T13801] XFS (loop3): last sector read failed [ 319.502179][T13804] XFS (loop4): Invalid superblock magic number [ 319.503355][T13825] FAULT_INJECTION: forcing a failure. [ 319.503355][T13825] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 319.521667][T13825] CPU: 1 PID: 13825 Comm: syz-executor.0 Not tainted 5.6.0-rc7-syzkaller #0 [ 319.530350][T13825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.543295][T13825] Call Trace: [ 319.546609][T13825] dump_stack+0x188/0x20d [ 319.550975][T13825] should_fail.cold+0x5/0xa 04:28:53 executing program 2: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x3, 0x4, 0x5, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) [ 319.555507][T13825] ? fault_create_debugfs_attr+0x140/0x140 [ 319.561497][T13825] ? is_bpf_image_address+0x1cb/0x280 [ 319.566901][T13825] __alloc_pages_nodemask+0x17a/0x820 [ 319.572387][T13825] ? unwind_get_return_address+0x5a/0xa0 [ 319.578121][T13825] ? profile_setup.cold+0xc1/0xc1 [ 319.583183][T13825] ? arch_stack_walk+0x84/0xd0 [ 319.587962][T13825] ? __alloc_pages_slowpath+0x26a0/0x26a0 [ 319.593727][T13825] cache_grow_begin+0x8c/0xc30 [ 319.598531][T13825] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 319.604008][T13825] __kmalloc+0x6d6/0x7a0 [ 319.608269][T13825] ? tomoyo_realpath_from_path+0xc2/0x620 [ 319.614002][T13825] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 319.620256][T13825] ? mark_lock+0xbc/0x1220 [ 319.624694][T13825] tomoyo_realpath_from_path+0xc2/0x620 [ 319.630252][T13825] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 319.635908][T13825] tomoyo_path_number_perm+0x1c2/0x4d0 [ 319.641377][T13825] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 319.647031][T13825] ? tomoyo_execute_permission+0x470/0x470 [ 319.652879][T13825] ? __fget_files+0x307/0x4f0 [ 319.653452][T13810] attempt to access beyond end of device [ 319.657642][T13825] ? __fget_files+0x329/0x4f0 [ 319.657667][T13825] ? ksys_dup3+0x3c0/0x3c0 [ 319.657699][T13825] security_file_ioctl+0x6c/0xb0 [ 319.657723][T13825] ksys_ioctl+0x50/0x180 [ 319.657744][T13825] __x64_sys_ioctl+0x6f/0xb0 [ 319.657756][T13825] ? lockdep_hardirqs_on+0x417/0x5d0 [ 319.657778][T13825] do_syscall_64+0xf6/0x7d0 [ 319.669233][T13810] loop5: rw=4096, want=32768, limit=29542 [ 319.672475][T13825] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 319.672489][T13825] RIP: 0033:0x45c6b7 [ 319.672505][T13825] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 319.672514][T13825] RSP: 002b:00007fbe06f2fa68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.672529][T13825] RAX: ffffffffffffffda RBX: 00007fbe06f306d4 RCX: 000000000045c6b7 [ 319.672537][T13825] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 04:28:54 executing program 2: getitimer(0x3, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)=""/89) [ 319.672545][T13825] RBP: 000000000076bf00 R08: 0000000000000000 R09: 000000000000000a [ 319.672559][T13825] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 319.693503][T13810] XFS (loop5): last sector read failed [ 319.696144][T13825] R13: 0000000000000be0 R14: 00000000004cdff5 R15: 0000000000000010 04:28:54 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff0402, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:28:54 executing program 2: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0xc7b1, &(0x7f00000000c0)=0x2) 04:28:54 executing program 2: getitimer(0x1, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfff, 0x84201) [ 319.878461][T13825] hfsplus: session requires an argument [ 319.899831][T13825] hfsplus: unable to parse mount options [ 320.058074][T13850] XFS (loop1): SB sanity check failed [ 320.066734][T13850] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 320.082104][T13850] XFS (loop1): Unmount and run xfs_repair [ 320.088389][T13850] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 320.095776][T13850] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 320.108281][T13850] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 320.118340][T13850] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 320.128771][T13850] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 320.140219][T13850] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 320.149848][T13850] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 320.159604][T13850] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 320.171186][T13850] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 320.180823][T13850] XFS (loop1): SB validate failed with error -117. [ 320.217840][T13804] /dev/loop4: Can't open blockdev 04:28:54 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xf, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 320.246126][T13810] attempt to access beyond end of device [ 320.264148][T13810] loop5: rw=4096, want=32768, limit=29542 [ 320.271961][T13810] XFS (loop5): last sector read failed [ 320.423379][T13881] XFS (loop4): Invalid superblock magic number 04:28:54 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xf, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:54 executing program 0 (fault-call:0 fault-nth:17): syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:28:54 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x144, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:54 executing program 2: getitimer(0x3, 0x0) shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil) 04:28:54 executing program 2: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001400)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) connect$bt_l2cap(r7, &(0x7f0000001500)={0x1f, 0x200, @any, 0x6}, 0xe) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000001480)={0x0, 0xb, 0x4, 0x10000, 0x11, {0x77359400}, {0x4, 0x8, 0x8, 0x4, 0x20, 0x7, "519d3d9c"}, 0x5, 0x3, @planes=&(0x7f0000001440)={0x9, 0x80, @mem_offset=0x8001, 0x4}, 0x3, 0x0, r6}) newfstatat(0xffffffffffffff9c, &(0x7f0000001340)='./file0\x00', &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(r2, r4, r8) r9 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000001300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000012c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x127c}, 0x1, 0x0, 0x0, 0xafdfb4dcc267fdbe}, 0x24040010) [ 320.617340][T13894] FAULT_INJECTION: forcing a failure. [ 320.617340][T13894] name failslab, interval 1, probability 0, space 0, times 0 [ 320.645460][T13894] CPU: 1 PID: 13894 Comm: syz-executor.0 Not tainted 5.6.0-rc7-syzkaller #0 [ 320.654180][T13894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.664252][T13894] Call Trace: [ 320.667694][T13894] dump_stack+0x188/0x20d [ 320.672053][T13894] should_fail.cold+0x5/0xa [ 320.676597][T13894] ? fault_create_debugfs_attr+0x140/0x140 [ 320.682443][T13894] should_failslab+0x5/0xf [ 320.686873][T13894] __kmalloc+0x2d9/0x7a0 [ 320.691128][T13894] ? tomoyo_encode2.part.0+0xec/0x3b0 [ 320.696771][T13894] ? d_absolute_path+0x10c/0x160 [ 320.701808][T13894] ? __d_path+0x140/0x140 [ 320.706387][T13894] tomoyo_encode2.part.0+0xec/0x3b0 [ 320.711615][T13894] tomoyo_encode+0x28/0x50 [ 320.716046][T13894] tomoyo_realpath_from_path+0x184/0x620 [ 320.721704][T13894] tomoyo_path_number_perm+0x1c2/0x4d0 [ 320.727189][T13894] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 320.732856][T13894] ? tomoyo_execute_permission+0x470/0x470 [ 320.738797][T13894] ? __fget_files+0x307/0x4f0 [ 320.743528][T13894] ? __fget_files+0x329/0x4f0 [ 320.748239][T13894] ? ksys_dup3+0x3c0/0x3c0 [ 320.752690][T13894] security_file_ioctl+0x6c/0xb0 [ 320.757645][T13894] ksys_ioctl+0x50/0x180 [ 320.761909][T13894] __x64_sys_ioctl+0x6f/0xb0 [ 320.766511][T13894] ? lockdep_hardirqs_on+0x417/0x5d0 [ 320.771808][T13894] do_syscall_64+0xf6/0x7d0 [ 320.776331][T13894] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 320.782232][T13894] RIP: 0033:0x45c6b7 [ 320.786135][T13894] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 320.807050][T13894] RSP: 002b:00007fbe06f2fa68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 04:28:55 executing program 2: getitimer(0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x258600, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000180)={r0}) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x30, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x4101, 0x60}, {0x14, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, '\x00'}}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="ef8b27b97000fddbdf00000c00c1b17f9bd210d61365"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x48000) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xb216}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) [ 320.814445][T13907] attempt to access beyond end of device [ 320.817289][T13894] RAX: ffffffffffffffda RBX: 00007fbe06f306d4 RCX: 000000000045c6b7 [ 320.817298][T13894] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 320.817306][T13894] RBP: 000000000076bf00 R08: 0000000000000000 R09: 000000000000000a [ 320.817315][T13894] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 320.817324][T13894] R13: 0000000000000be0 R14: 00000000004cdff5 R15: 0000000000000011 04:28:55 executing program 2: getitimer(0x1, 0x0) [ 320.940943][T13881] XFS (loop4): Invalid superblock magic number [ 320.944618][T13907] loop3: rw=4096, want=32768, limit=29542 [ 320.965182][T13907] XFS (loop3): last sector read failed 04:28:55 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff3fff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 321.027741][T13919] attempt to access beyond end of device [ 321.054345][T13919] loop5: rw=4096, want=32768, limit=29542 04:28:55 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xd, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 321.136461][T13919] XFS (loop5): last sector read failed 04:28:55 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x11, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 321.285774][T13894] ERROR: Out of memory at tomoyo_realpath_from_path. 04:28:55 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 321.415232][T13942] attempt to access beyond end of device [ 321.428964][T13942] loop2: rw=4096, want=32768, limit=29542 [ 321.439513][T13942] XFS (loop2): last sector read failed [ 321.579880][T13980] hfsplus: session requires an argument [ 321.587347][T13956] attempt to access beyond end of device [ 321.593188][T13956] loop3: rw=4096, want=32768, limit=29542 [ 321.601968][T13980] hfsplus: unable to parse mount options [ 321.613285][T13956] XFS (loop3): last sector read failed [ 321.625436][T13968] XFS (loop4): Invalid superblock magic number [ 321.632976][T13919] attempt to access beyond end of device [ 321.646598][T13919] loop5: rw=4096, want=32768, limit=29542 04:28:56 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 321.674073][T13919] XFS (loop5): last sector read failed [ 321.818265][T13994] hfsplus: session requires an argument [ 321.823859][T13994] hfsplus: unable to parse mount options 04:28:56 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x11, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:56 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xd, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:28:56 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x15c, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:56 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xfffff3ff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 321.986695][T13994] hfsplus: session requires an argument [ 321.993081][T13994] hfsplus: unable to parse mount options 04:28:56 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 322.117170][T14002] XFS (loop2): Invalid superblock magic number 04:28:56 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x13, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 322.292945][T14012] XFS (loop1): SB sanity check failed [ 322.299027][T14012] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 322.312342][T14012] XFS (loop1): Unmount and run xfs_repair [ 322.323437][T14012] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 322.332183][T14012] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 322.343895][T14012] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 322.371629][T14012] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 322.458807][T14012] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 322.466481][T14041] XFS (loop4): Invalid superblock magic number 04:28:56 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x11000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 322.478281][T14025] attempt to access beyond end of device [ 322.485966][T14028] attempt to access beyond end of device [ 322.493186][T14025] loop3: rw=4096, want=32768, limit=29542 [ 322.525092][T14028] loop5: rw=4096, want=32768, limit=29542 [ 322.527002][T14012] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 322.542860][T14025] XFS (loop3): last sector read failed 04:28:56 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x74, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 322.567450][T14012] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 322.583385][T14028] XFS (loop5): last sector read failed [ 322.585060][T14012] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 322.625679][T14012] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 322.643911][T14062] hfsplus: session requires an argument [ 322.648211][T14012] XFS (loop1): SB validate failed with error -117. [ 322.669033][T14062] hfsplus: unable to parse mount options [ 322.720009][T14066] attempt to access beyond end of device [ 322.726035][T14066] loop2: rw=4096, want=32768, limit=29542 [ 322.750735][T14066] XFS (loop2): last sector read failed [ 322.785425][T14062] hfsplus: session requires an argument [ 322.811787][T14041] XFS (loop4): Invalid superblock magic number [ 322.837641][T14062] hfsplus: unable to parse mount options 04:28:57 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:28:57 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x4, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:28:57 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x3c, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 323.164750][T14028] attempt to access beyond end of device [ 323.171320][T14028] loop5: rw=4096, want=32768, limit=29542 [ 323.178396][T14028] XFS (loop5): last sector read failed 04:28:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800004000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x153) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)=0x1) 04:28:57 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x13, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 323.428272][ T2926] XFS (loop1): SB sanity check failed [ 323.435467][ T2926] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 323.454467][ T2926] XFS (loop1): Unmount and run xfs_repair [ 323.461374][ T2926] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 323.470161][ T2926] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 323.480373][ T2926] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 323.490427][ T2926] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 323.500540][ T2926] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 323.510481][ T2926] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 04:28:57 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x194, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 323.520255][ T2926] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 323.521232][T14127] hfsplus: session requires an argument [ 323.530491][ T2926] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 323.544725][ T2926] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 323.555083][T14101] XFS (loop1): SB validate failed with error -117. [ 323.558266][T14127] hfsplus: unable to parse mount options [ 323.616320][T14126] XFS (loop4): Invalid superblock magic number [ 323.640132][T14128] attempt to access beyond end of device [ 323.645834][T14128] loop3: rw=4096, want=32768, limit=29542 [ 323.699065][T14127] hfsplus: session requires an argument [ 323.704660][T14127] hfsplus: unable to parse mount options [ 323.711697][T14128] XFS (loop3): last sector read failed 04:28:58 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x5, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 323.887575][T14151] attempt to access beyond end of device [ 323.893296][T14151] loop5: rw=4096, want=32768, limit=29542 [ 323.927089][T14151] XFS (loop5): last sector read failed [ 324.010013][T14126] XFS (loop4): Invalid superblock magic number [ 324.010357][T14172] hfsplus: session requires an argument [ 324.022159][T14172] hfsplus: unable to parse mount options 04:28:58 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:28:58 executing program 2: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffa, 0x6d1a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x9000000) [ 324.192819][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 324.192833][ T27] audit: type=1804 audit(1585369738.513:22): pid=14180 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir231905816/syzkaller.6I1Yym/136/file0/file0" dev="sda1" ino=16222 res=1 04:28:58 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x402, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:28:58 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x6, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 324.492158][ T12] XFS (loop1): SB sanity check failed [ 324.497989][ T12] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 324.510657][ T12] XFS (loop1): Unmount and run xfs_repair [ 324.517625][ T12] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 324.525138][ T12] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ 04:28:58 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x3c, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:58 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x1f8, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 324.535823][ T12] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 324.553110][ T12] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 324.601751][ T12] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 324.634682][ T12] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 324.685186][ T12] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 324.711360][T14211] hfsplus: session requires an argument [ 324.727389][T14211] hfsplus: unable to parse mount options [ 324.747259][ T12] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 324.759398][T14210] XFS (loop4): device supports 512 byte sectors (not 0) [ 324.773311][T14215] attempt to access beyond end of device [ 324.790841][T14215] loop3: rw=4096, want=32768, limit=29542 [ 324.811536][T14215] XFS (loop3): last sector read failed [ 324.822932][ T12] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 324.863486][T14211] hfsplus: session requires an argument [ 324.869999][T14211] hfsplus: unable to parse mount options [ 324.937948][T14187] XFS (loop1): SB validate failed with error -117. [ 324.972326][T14228] attempt to access beyond end of device [ 324.989222][T14228] loop5: rw=4096, want=32768, limit=29542 [ 325.075390][T14228] XFS (loop5): last sector read failed 04:28:59 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x7, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:28:59 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x194, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:59 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x402, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:28:59 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x3, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 325.263538][T14210] XFS (loop4): device supports 512 byte sectors (not 0) [ 325.327339][T14267] hfsplus: session requires an argument [ 325.333134][T14267] hfsplus: unable to parse mount options [ 325.356914][T14260] attempt to access beyond end of device [ 325.363971][T14260] loop2: rw=4096, want=32768, limit=29542 [ 325.370654][T14260] XFS (loop2): last sector read failed 04:28:59 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:28:59 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x1000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 325.573425][ T2721] XFS (loop1): SB sanity check failed [ 325.586972][ T2721] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 325.601148][T14287] hfsplus: session requires an argument [ 325.610330][T14287] hfsplus: unable to parse mount options 04:28:59 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 325.622496][ T2721] XFS (loop1): Unmount and run xfs_repair [ 325.639741][ T2721] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 325.648456][ T2721] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ 04:29:00 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x3c, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 325.667806][ T2721] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 325.693545][ T2721] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 325.732609][ T2721] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 325.746678][ T2721] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 325.756032][ T2721] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 325.773867][ T2721] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 325.800162][T14287] hfsplus: session requires an argument [ 325.805754][T14287] hfsplus: unable to parse mount options [ 325.819721][ T2721] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 325.848981][T14273] XFS (loop1): SB validate failed with error -117. [ 325.856495][T14228] attempt to access beyond end of device [ 325.863710][T14310] XFS (loop2): Invalid superblock magic number [ 325.870353][T14228] loop5: rw=4096, want=32768, limit=29542 [ 325.870414][T14228] XFS (loop5): last sector read failed [ 325.885922][T14298] XFS (loop3): Mounting V4 Filesystem 04:29:00 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x9, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 325.915173][T14321] XFS (loop4): device supports 512 byte sectors (not 0) [ 325.941018][T14298] XFS (loop3): empty log check failed [ 325.947195][T14298] XFS (loop3): log mount/recovery failed: error -5 [ 326.017448][T14298] XFS (loop3): log mount failed [ 326.047175][T14335] hfsplus: session requires an argument [ 326.053586][T14335] hfsplus: unable to parse mount options 04:29:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{&(0x7f0000000880)=@nl, 0x80, 0x0, 0x0, &(0x7f0000000680)=""/110, 0x6e}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sendmsg$nl_netfilter(r2, 0x0, 0x20008801) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x0, 0x3, 0x1c}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) vmsplice(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x10, 0xffffffffffffffff, 0x0) [ 326.172040][T14335] hfsplus: session requires an argument [ 326.193468][T14335] hfsplus: unable to parse mount options 04:29:00 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x220, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:00 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xa, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:00 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 326.512687][T14353] hfsplus: session requires an argument [ 326.524369][T14353] hfsplus: unable to parse mount options 04:29:00 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x2000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 326.587717][T14353] hfsplus: session requires an argument [ 326.629129][T14353] hfsplus: unable to parse mount options [ 326.674747][T14376] XFS (loop1): SB sanity check failed [ 326.683375][T14376] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 326.695444][T14376] XFS (loop1): Unmount and run xfs_repair [ 326.701486][T14376] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 326.710620][T14376] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ 04:29:01 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x2000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 326.719716][T14376] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 326.736531][T14376] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 326.745428][T14376] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 326.755381][T14376] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 326.766143][T14376] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 04:29:01 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xf, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 326.775263][T14376] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 326.784539][T14376] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 326.793542][T14376] XFS (loop1): SB validate failed with error -117. [ 326.868240][T14379] attempt to access beyond end of device [ 326.882360][T14379] loop5: rw=4096, want=32768, limit=29542 [ 326.893488][T14379] XFS (loop5): last sector read failed [ 326.961133][T14390] XFS (loop3): Mounting V4 Filesystem [ 326.973995][T14390] XFS (loop3): empty log check failed [ 326.981896][T14390] XFS (loop3): log mount/recovery failed: error -5 [ 326.993398][T14416] hfsplus: session requires an argument [ 327.005739][T14416] hfsplus: unable to parse mount options [ 327.012874][T14399] XFS (loop4): device supports 512 byte sectors (not 0) [ 327.027426][T14390] XFS (loop3): log mount failed [ 327.104019][T14416] hfsplus: session requires an argument [ 327.117822][T14416] hfsplus: unable to parse mount options [ 327.118217][ T2727] XFS (loop1): SB sanity check failed [ 327.139113][ T2727] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 327.153136][ T2727] XFS (loop1): Unmount and run xfs_repair [ 327.163688][ T2727] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 327.175937][ T2727] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 327.189244][ T2727] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 327.198592][ T2727] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 327.208049][ T2727] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 327.217482][ T2727] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 327.230870][ T2727] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 327.240072][ T2727] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 04:29:01 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x1000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:01 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 327.249478][ T2727] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 327.259378][T14376] XFS (loop1): SB validate failed with error -117. [ 327.272082][T14379] attempt to access beyond end of device [ 327.292752][T14379] loop5: rw=4096, want=32768, limit=29542 [ 327.305876][T14379] XFS (loop5): last sector read failed [ 327.373855][T14399] XFS (loop4): device supports 512 byte sectors (not 0) [ 327.387736][T14390] XFS (loop3): Mounting V4 Filesystem [ 327.421141][T14390] XFS (loop3): empty log check failed [ 327.444590][T14451] XFS (loop2): Mounting V4 Filesystem [ 327.479770][T14451] XFS (loop2): empty log check failed [ 327.486747][T14451] XFS (loop2): log mount/recovery failed: error -5 [ 327.506548][T14390] XFS (loop3): log mount/recovery failed: error -5 [ 327.556589][T14451] XFS (loop2): log mount failed [ 327.560910][T14474] hfsplus: session requires an argument 04:29:02 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x9, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:29:02 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x2a0, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 327.650661][T14474] hfsplus: unable to parse mount options [ 327.716641][T14390] XFS (loop3): log mount failed 04:29:02 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 327.848810][T14474] hfsplus: session requires an argument [ 327.866690][T14474] hfsplus: unable to parse mount options 04:29:02 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x1f8, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 327.955309][ T5] XFS (loop1): SB sanity check failed [ 327.961432][ T5] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 327.974659][ T5] XFS (loop1): Unmount and run xfs_repair [ 327.982509][ T5] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 327.990707][ T5] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 328.000864][ T5] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 328.010279][ T5] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 328.019800][ T5] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 328.036691][ T5] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 328.045564][ T5] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 04:29:02 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x2ba, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 328.055321][ T5] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 328.064751][ T5] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 328.074603][T14486] XFS (loop1): SB validate failed with error -117. 04:29:02 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x11, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:02 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 328.284075][T14500] attempt to access beyond end of device [ 328.292186][T14500] loop2: rw=4096, want=32768, limit=29542 [ 328.303950][T14506] XFS (loop4): device supports 512 byte sectors (not 0) [ 328.318195][T14510] hfsplus: session requires an argument [ 328.321181][T14500] XFS (loop2): last sector read failed [ 328.324442][T14510] hfsplus: unable to parse mount options [ 328.356703][T14507] attempt to access beyond end of device [ 328.363710][T14507] loop5: rw=4096, want=32768, limit=29542 [ 328.377747][T14507] XFS (loop5): last sector read failed [ 328.410630][T14510] hfsplus: session requires an argument [ 328.423249][T14531] XFS (loop3): Mounting V4 Filesystem [ 328.447635][T14510] hfsplus: unable to parse mount options [ 328.494037][T14531] XFS (loop3): empty log check failed [ 328.508319][T14531] XFS (loop3): log mount/recovery failed: error -5 04:29:02 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x48, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 328.586589][T14531] XFS (loop3): log mount failed 04:29:03 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xa, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:29:03 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x2000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:03 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x5000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 328.863953][T14561] hfsplus: session requires an argument [ 328.871320][T14561] hfsplus: unable to parse mount options [ 328.915754][T14531] XFS (loop3): Mounting V4 Filesystem [ 328.915884][ T2727] XFS (loop1): SB sanity check failed [ 328.935441][ T2727] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 328.955559][ T2727] XFS (loop1): Unmount and run xfs_repair [ 328.964187][ T2727] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 328.978130][T14531] XFS (loop3): empty log check failed [ 328.978963][ T2727] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 328.983799][T14531] XFS (loop3): log mount/recovery failed: error -5 [ 328.992815][ T2727] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 329.016014][ T2727] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 329.026895][T14561] hfsplus: session requires an argument [ 329.036894][ T2727] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 329.048347][ T2727] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 329.057588][ T2727] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 329.062587][T14561] hfsplus: unable to parse mount options [ 329.066745][ T2727] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 329.066757][ T2727] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 329.071659][T14578] XFS (loop2): Mounting V4 Filesystem [ 329.074486][T14566] XFS (loop1): SB validate failed with error -117. [ 329.095953][T14578] XFS (loop2): empty log check failed [ 329.102898][T14571] XFS (loop4): device supports 512 byte sectors (not 0) 04:29:03 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x2cc, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 329.108376][T14578] XFS (loop2): log mount/recovery failed: error -5 [ 329.122671][T14531] XFS (loop3): log mount failed [ 329.186008][T14578] XFS (loop2): log mount failed 04:29:03 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x4c, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 329.416631][T14616] attempt to access beyond end of device [ 329.422485][T14616] loop5: rw=4096, want=32768, limit=29542 [ 329.429448][T14616] XFS (loop5): last sector read failed [ 329.469351][T14622] hfsplus: session requires an argument [ 329.498233][T14571] XFS (loop4): device supports 512 byte sectors (not 0) 04:29:03 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x5000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:03 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xb, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 329.538507][T14622] hfsplus: unable to parse mount options 04:29:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2000000000400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000c00"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000e3ff22c0306554362dddcb892ef8051404bde5bf296e3d566a03d724f7eac1ef33adfdbe08b8c5236b93b9791fa6000000000000", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x440d4}, 0x20000800) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r8, @ANYBLOB="ffff00000000000008000a0000000000"], 0x28}}, 0x0) [ 329.673857][T14622] hfsplus: session requires an argument [ 329.712465][T14622] hfsplus: unable to parse mount options 04:29:04 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x300, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:04 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xa000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:04 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x60, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 329.843785][T14649] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 04:29:04 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xa000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:29:04 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xf, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 329.929123][T14652] batman_adv: batadv0: Adding interface: veth3 [ 329.981713][T14652] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.076405][T14652] batman_adv: batadv0: Not using interface veth3 (retrying later): interface not active [ 330.093604][T14664] hfsplus: session requires an argument [ 330.112503][T14664] hfsplus: unable to parse mount options [ 330.117803][T14649] device veth3 entered promiscuous mode [ 330.132269][T14649] batman_adv: batadv0: Interface activated: veth3 [ 330.141091][T14649] batman_adv: batadv0: Interface deactivated: veth3 [ 330.150507][T14649] batman_adv: batadv0: Removing interface: veth3 [ 330.162190][T14662] XFS (loop3): Mounting V4 Filesystem [ 330.169945][ T2727] XFS (loop1): SB sanity check failed [ 330.173154][T14664] hfsplus: session requires an argument [ 330.176758][ T2727] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 330.191893][T14664] hfsplus: unable to parse mount options [ 330.201659][T14658] attempt to access beyond end of device [ 330.213295][T14658] loop5: rw=4096, want=32768, limit=29542 [ 330.216671][ T2727] XFS (loop1): Unmount and run xfs_repair [ 330.219323][T14658] XFS (loop5): last sector read failed [ 330.231067][T14662] XFS (loop3): empty log check failed [ 330.236904][T14673] XFS (loop4): device supports 512 byte sectors (not 0) [ 330.245569][T14662] XFS (loop3): log mount/recovery failed: error -5 [ 330.259015][ T2727] XFS (loop1): First 128 bytes of corrupted metadata buffer: 04:29:04 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x68, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 330.279887][ T2727] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 330.299006][ T2727] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 330.322855][ T2727] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 330.332187][T14662] XFS (loop3): log mount failed [ 330.352378][ T2727] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 330.372999][T14710] hfsplus: session requires an argument [ 330.375065][ T2727] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 330.382226][T14710] hfsplus: unable to parse mount options [ 330.414999][ T2727] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 330.452047][ T2727] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 330.465132][ T2727] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 330.475054][T14669] XFS (loop1): SB validate failed with error -117. [ 330.492172][T14710] hfsplus: session requires an argument [ 330.504515][T14710] hfsplus: unable to parse mount options [ 330.572368][T14652] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 330.587361][T14649] batman_adv: batadv0: Adding interface: veth3 [ 330.595460][T14649] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 04:29:05 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x6c, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 330.625815][T14649] batman_adv: batadv0: Interface activated: veth3 [ 330.633745][T14660] batman_adv: batadv0: Interface deactivated: veth3 [ 330.645031][T14660] batman_adv: batadv0: Removing interface: veth3 04:29:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x40000000002, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) listen(r3, 0x2) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) [ 330.681607][T14658] attempt to access beyond end of device [ 330.691666][T14658] loop5: rw=4096, want=32768, limit=29542 [ 330.712516][T14658] XFS (loop5): last sector read failed [ 330.743264][T14673] XFS (loop4): device supports 512 byte sectors (not 0) 04:29:05 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 330.836556][T14740] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! 04:29:05 executing program 2: syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000240)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$FUSE_GETXATTR(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000000c0)={0x11, 0xfffffffffffffee0, 0xfa00, {0x0}}, 0x5dc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r2, 0x0, 0x100000351, 0x20020059, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0xe1) shutdown(r2, 0x1) accept4(r2, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x80, 0x80000) bind(0xffffffffffffffff, &(0x7f0000000100)=@xdp={0x2c, 0x0, r3, 0x2a}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000100)=@xdp={0x2c, 0x0, 0x0, 0x23}, 0xfffffe3d) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @initdev, @empty}, &(0x7f00000004c0)=0xc) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_open_dev$amidi(0x0, 0x20, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) dup3(r4, r5, 0x0) dup2(r1, 0xffffffffffffffff) [ 330.944042][T14750] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 330.949085][T14747] hfsplus: session requires an argument 04:29:05 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x324, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 331.038552][T14747] hfsplus: unable to parse mount options 04:29:05 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xd000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:05 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xd000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:29:05 executing program 2: syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000240)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$FUSE_GETXATTR(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000000c0)={0x11, 0xfffffffffffffee0, 0xfa00, {0x0}}, 0x5dc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r2, 0x0, 0x100000351, 0x20020059, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0xe1) shutdown(r2, 0x1) accept4(r2, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x80, 0x80000) bind(0xffffffffffffffff, &(0x7f0000000100)=@xdp={0x2c, 0x0, r3, 0x2a}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000100)=@xdp={0x2c, 0x0, 0x0, 0x23}, 0xfffffe3d) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @initdev, @empty}, &(0x7f00000004c0)=0xc) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_open_dev$amidi(0x0, 0x20, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) dup3(r4, r5, 0x0) dup2(r1, 0xffffffffffffffff) [ 331.237802][ T2727] XFS (loop1): SB sanity check failed [ 331.243576][ T2727] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 331.264818][ T2727] XFS (loop1): Unmount and run xfs_repair [ 331.271412][ T2727] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 331.280004][ T2727] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 331.289705][ T2727] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 331.299748][ T2727] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 331.310200][ T2727] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 04:29:05 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x74, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 331.333445][ T2727] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 331.378080][ T2727] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 331.407688][ T2727] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 331.436263][ T2727] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 331.462216][T14785] XFS (loop3): Mounting V4 Filesystem [ 331.466822][T14755] XFS (loop1): SB validate failed with error -117. [ 331.479839][T14800] hfsplus: session requires an argument [ 331.497178][T14775] attempt to access beyond end of device [ 331.502891][T14785] XFS (loop3): empty log check failed [ 331.502907][T14785] XFS (loop3): log mount/recovery failed: error -5 [ 331.517705][T14800] hfsplus: unable to parse mount options [ 331.524342][T14775] loop5: rw=4096, want=32768, limit=29542 [ 331.532266][T14775] XFS (loop5): last sector read failed [ 331.543756][T14792] XFS (loop4): device supports 512 byte sectors (not 0) [ 331.556416][T14785] XFS (loop3): log mount failed [ 331.603626][T14800] hfsplus: session requires an argument [ 331.619034][T14800] hfsplus: unable to parse mount options 04:29:06 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x7a, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:06 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x12, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:29:06 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x37e, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:06 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xe000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 331.942173][T14819] hfsplus: session requires an argument [ 331.948441][T14819] hfsplus: unable to parse mount options [ 332.063797][T14792] XFS (loop4): device supports 512 byte sectors (not 0) [ 332.149950][T14819] hfsplus: session requires an argument [ 332.155543][T14819] hfsplus: unable to parse mount options 04:29:06 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x300, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 332.215994][ T2719] XFS (loop1): SB sanity check failed [ 332.226842][ T2719] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 332.238501][T14828] attempt to access beyond end of device [ 332.245010][T14828] loop5: rw=4096, want=32768, limit=29542 [ 332.251809][T14828] XFS (loop5): last sector read failed 04:29:06 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xe000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 332.286385][ T2719] XFS (loop1): Unmount and run xfs_repair [ 332.292386][ T2719] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 332.300908][ T2719] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 332.320468][ T2719] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 332.339739][ T2719] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 332.350166][ T2719] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 332.359919][ T2719] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 332.370346][ T2719] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 332.380335][ T2719] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 332.390556][ T2719] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 332.401779][T14821] XFS (loop1): SB validate failed with error -117. [ 332.423125][T14829] XFS (loop3): Mounting V4 Filesystem [ 332.445060][T14868] hfsplus: session requires an argument [ 332.465333][T14868] hfsplus: unable to parse mount options 04:29:06 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xd000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 332.495801][T14874] XFS (loop4): device supports 512 byte sectors (not 0) [ 332.518162][T14829] XFS (loop3): log mount failed 04:29:06 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x3ca, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 332.558042][T14868] hfsplus: session requires an argument [ 332.564847][T14868] hfsplus: unable to parse mount options 04:29:07 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x500, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:07 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x14, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:29:07 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xf000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 332.844986][T14888] XFS (loop2): Mounting V4 Filesystem [ 332.865695][T14888] XFS (loop2): empty log check failed [ 332.872285][T14888] XFS (loop2): log mount/recovery failed: error -5 [ 332.929798][T14904] attempt to access beyond end of device [ 332.935609][T14904] loop5: rw=4096, want=32768, limit=29542 [ 332.956306][T14888] XFS (loop2): log mount failed [ 332.972932][T14874] XFS (loop4): device supports 512 byte sectors (not 0) [ 332.980852][T14904] XFS (loop5): last sector read failed [ 333.016738][T14920] hfsplus: session requires an argument [ 333.035577][T14920] hfsplus: unable to parse mount options [ 333.060511][T14717] XFS (loop1): SB sanity check failed [ 333.067835][T14717] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 333.102062][T14717] XFS (loop1): Unmount and run xfs_repair [ 333.109790][T14717] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 333.117810][T14717] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 333.120292][T14920] hfsplus: session requires an argument [ 333.127395][T14717] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 333.141808][T14717] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 333.149025][T14920] hfsplus: unable to parse mount options [ 333.155187][T14717] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 333.166009][T14717] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 333.175150][T14717] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 333.184414][T14717] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 333.193645][T14717] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 333.203190][T14922] XFS (loop1): SB validate failed with error -117. [ 333.211606][T14936] XFS (loop3): Mounting V4 Filesystem 04:29:07 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x600, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 333.247235][T14936] XFS (loop3): empty log check failed [ 333.258522][T14936] XFS (loop3): log mount/recovery failed: error -5 04:29:07 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x12, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 333.316403][T14936] XFS (loop3): log mount failed 04:29:07 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xf000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 333.453032][T14904] attempt to access beyond end of device [ 333.461229][T14904] loop5: rw=4096, want=32768, limit=29542 [ 333.468910][T14904] XFS (loop5): last sector read failed [ 333.486399][T14960] hfsplus: session requires an argument [ 333.491981][T14960] hfsplus: unable to parse mount options [ 333.535401][T14953] XFS (loop2): SB sanity check failed [ 333.542845][T14953] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 333.570196][T14953] XFS (loop2): Unmount and run xfs_repair [ 333.578212][T14953] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 333.585913][T14953] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 333.601480][T14953] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 333.647507][T14953] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 333.664290][T14960] hfsplus: session requires an argument [ 333.679827][T14976] XFS (loop4): device supports 512 byte sectors (not 0) [ 333.695924][T14960] hfsplus: unable to parse mount options [ 333.709957][T14953] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 333.726170][T14953] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 333.727781][T14936] XFS (loop3): Mounting V4 Filesystem 04:29:08 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x700, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:08 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x3f0, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 333.735801][T14953] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 333.750107][T14953] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 333.759362][T14953] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 333.763761][T14936] XFS (loop3): empty log check failed [ 333.768712][T14953] XFS (loop2): SB validate failed with error -117. [ 333.780890][T14936] XFS (loop3): log mount/recovery failed: error -5 [ 333.840645][T14936] XFS (loop3): log mount failed 04:29:08 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x3c, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 333.995339][T15007] hfsplus: session requires an argument [ 334.007711][T15007] hfsplus: unable to parse mount options 04:29:08 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x11000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:29:08 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x14, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 334.214508][T15007] hfsplus: session requires an argument [ 334.242312][T15007] hfsplus: unable to parse mount options 04:29:08 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x11000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 334.278616][T15010] attempt to access beyond end of device [ 334.284430][T15010] loop5: rw=4096, want=32768, limit=29542 [ 334.339120][T15016] XFS (loop1): SB sanity check failed [ 334.344933][T15016] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 334.351519][T15010] XFS (loop5): last sector read failed [ 334.359445][T15016] XFS (loop1): Unmount and run xfs_repair [ 334.370845][T15016] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 334.379477][T15016] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 334.389655][T15016] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 334.399719][T15016] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 334.410102][T15016] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 334.420624][T15016] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 334.431096][T15016] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 04:29:08 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 334.441481][T15016] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 334.479199][T15039] XFS (loop4): device supports 512 byte sectors (not 0) [ 334.486678][ T12] XFS (loop2): SB sanity check failed [ 334.492719][ T12] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 334.504752][T15016] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 334.513819][T15016] XFS (loop1): SB validate failed with error -117. [ 334.519250][ T12] XFS (loop2): Unmount and run xfs_repair [ 334.531630][ T12] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 334.539667][ T12] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 334.550245][ T12] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 334.564881][ T12] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 334.574119][ T12] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 334.584347][ T12] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 334.597802][ T12] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 334.607478][ T12] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 334.616845][ T12] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 334.627192][T15037] XFS (loop2): SB validate failed with error -117. [ 334.645521][T15060] hfsplus: session requires an argument [ 334.672446][T15056] XFS (loop3): Mounting V4 Filesystem [ 334.697753][T15060] hfsplus: unable to parse mount options [ 334.746496][T15056] XFS (loop3): log mount failed [ 334.796845][T15010] attempt to access beyond end of device [ 334.802902][T15010] loop5: rw=4096, want=32768, limit=29542 [ 334.828028][T15010] XFS (loop5): last sector read failed 04:29:09 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xa00, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 334.888192][T15039] XFS (loop4): device supports 512 byte sectors (not 0) [ 334.924223][T14717] XFS (loop1): SB sanity check failed [ 334.933890][T14717] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 334.951291][T14717] XFS (loop1): Unmount and run xfs_repair [ 334.962378][T14717] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 334.970679][T14717] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ 04:29:09 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x13000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 334.980430][T14717] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 334.995491][T14717] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 04:29:09 executing program 2: syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000240)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$FUSE_GETXATTR(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000000c0)={0x11, 0xfffffffffffffee0, 0xfa00, {0x0}}, 0x5dc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r2, 0x0, 0x100000351, 0x20020059, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0xe1) shutdown(r2, 0x1) accept4(r2, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x80, 0x80000) bind(0xffffffffffffffff, &(0x7f0000000100)=@xdp={0x2c, 0x0, r3, 0x2a}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000100)=@xdp={0x2c, 0x0, 0x0, 0x23}, 0xfffffe3d) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @initdev, @empty}, &(0x7f00000004c0)=0xc) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_open_dev$amidi(0x0, 0x20, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) dup3(r4, r5, 0x0) dup2(r1, 0xffffffffffffffff) [ 335.048797][T14717] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 335.083289][T14717] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 335.088363][T15101] hfsplus: session requires an argument 04:29:09 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x3f2, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 335.094070][T14717] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 335.098340][T15101] hfsplus: unable to parse mount options [ 335.123751][T14717] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 335.135323][T14717] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 335.146256][T15016] XFS (loop1): SB validate failed with error -117. 04:29:09 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x13000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 335.250929][T15101] hfsplus: session requires an argument [ 335.272375][T15101] hfsplus: unable to parse mount options [ 335.302390][T15110] XFS (loop3): Mounting V4 Filesystem 04:29:09 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xf00, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 335.359517][T15110] XFS (loop3): empty log check failed [ 335.365194][T15110] XFS (loop3): log mount/recovery failed: error -5 04:29:09 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x48, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 335.422905][T15123] attempt to access beyond end of device [ 335.426056][T15110] XFS (loop3): log mount failed [ 335.432526][T15123] loop5: rw=4096, want=32768, limit=29542 [ 335.450439][T15132] XFS (loop4): device supports 512 byte sectors (not 0) [ 335.478374][T15123] XFS (loop5): last sector read failed [ 335.493709][T15146] hfsplus: session requires an argument [ 335.510610][T15146] hfsplus: unable to parse mount options [ 335.582797][T15146] hfsplus: session requires an argument [ 335.597616][T15146] hfsplus: unable to parse mount options 04:29:10 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x1020, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 335.689532][ T2727] XFS (loop1): SB sanity check failed [ 335.695494][ T2727] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 335.717992][ T2727] XFS (loop1): Unmount and run xfs_repair [ 335.727649][ T2727] XFS (loop1): First 128 bytes of corrupted metadata buffer: 04:29:10 executing program 2: syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000240)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$FUSE_GETXATTR(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000000c0)={0x11, 0xfffffffffffffee0, 0xfa00, {0x0}}, 0x5dc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r2, 0x0, 0x100000351, 0x20020059, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0xe1) shutdown(r2, 0x1) accept4(r2, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x80, 0x80000) bind(0xffffffffffffffff, &(0x7f0000000100)=@xdp={0x2c, 0x0, r3, 0x2a}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000100)=@xdp={0x2c, 0x0, 0x0, 0x23}, 0xfffffe3d) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @initdev, @empty}, &(0x7f00000004c0)=0xc) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_open_dev$amidi(0x0, 0x20, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) dup3(r4, r5, 0x0) dup2(r1, 0xffffffffffffffff) [ 335.735270][ T2727] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 335.744717][ T2727] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 335.754435][ T2727] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 335.763642][ T2727] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 335.788822][ T2727] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 335.798394][ T2727] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 335.807595][ T2727] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 335.817024][ T2727] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 335.829587][T15157] XFS (loop1): SB validate failed with error -117. [ 335.847398][T15132] XFS (loop4): device supports 512 byte sectors (not 0) [ 335.860538][T15110] XFS (loop3): Mounting V4 Filesystem [ 335.892240][T15193] hfsplus: session requires an argument [ 335.909153][T15110] XFS (loop3): empty log check failed [ 335.914579][T15110] XFS (loop3): log mount/recovery failed: error -5 [ 335.932846][T15123] attempt to access beyond end of device [ 335.937049][T15193] hfsplus: unable to parse mount options [ 335.945675][T15123] loop5: rw=4096, want=32768, limit=29542 [ 335.951583][T15123] XFS (loop5): last sector read failed [ 335.998594][T15193] hfsplus: session requires an argument [ 336.004344][T15193] hfsplus: unable to parse mount options [ 336.056676][T15110] XFS (loop3): log mount failed 04:29:10 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x1100, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:10 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x3c000000, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:29:10 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x500, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:10 executing program 2: syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000240)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$FUSE_GETXATTR(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000000c0)={0x11, 0xfffffffffffffee0, 0xfa00, {0x0}}, 0x5dc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r2, 0x0, 0x100000351, 0x20020059, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0xe1) shutdown(r2, 0x1) accept4(r2, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x80, 0x80000) bind(0xffffffffffffffff, &(0x7f0000000100)=@xdp={0x2c, 0x0, r3, 0x2a}, 0x80) bind(0xffffffffffffffff, &(0x7f0000000100)=@xdp={0x2c, 0x0, 0x0, 0x23}, 0xfffffe3d) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @initdev, @empty}, &(0x7f00000004c0)=0xc) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_open_dev$amidi(0x0, 0x20, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) dup3(r4, r5, 0x0) dup2(r1, 0xffffffffffffffff) 04:29:10 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x3c000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 336.366342][T15210] hfsplus: session requires an argument [ 336.383902][T15210] hfsplus: unable to parse mount options 04:29:10 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x63, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:29:10 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x600, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 336.515064][T15210] hfsplus: session requires an argument [ 336.542879][T15210] hfsplus: unable to parse mount options [ 336.543279][T15221] XFS (loop4): device supports 512 byte sectors (not 0) 04:29:10 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x1f00, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 336.604750][T15229] XFS (loop1): SB sanity check failed [ 336.628318][T15229] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 336.646676][T15229] XFS (loop1): Unmount and run xfs_repair 04:29:11 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xcfffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 336.661958][T15229] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 336.727605][T15229] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 336.750209][T15229] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 336.782342][T15229] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 336.812701][T15229] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 336.832028][T15229] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 336.890073][T15229] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 336.900208][T15229] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 336.916937][T15229] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 336.927059][T15229] XFS (loop1): SB validate failed with error -117. [ 336.944202][T15274] hfsplus: session requires an argument [ 336.949942][T15274] hfsplus: unable to parse mount options [ 336.960813][T15221] XFS (loop4): device supports 512 byte sectors (not 0) [ 336.969187][T15252] XFS (loop3): Mounting V4 Filesystem [ 336.982139][T15247] attempt to access beyond end of device 04:29:11 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x13000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 336.998695][T15247] loop5: rw=4096, want=32768, limit=29542 [ 337.006134][T15247] XFS (loop5): last sector read failed [ 337.007273][T15274] hfsplus: session requires an argument [ 337.029380][T15252] XFS (loop3): empty log check failed [ 337.034811][T15252] XFS (loop3): log mount/recovery failed: error -5 [ 337.067835][T15274] hfsplus: unable to parse mount options 04:29:11 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x2000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 337.146249][T15252] XFS (loop3): log mount failed [ 337.179976][T15289] XFS (loop2): Mounting V4 Filesystem [ 337.224817][T15289] XFS (loop2): empty log check failed [ 337.237320][T15306] hfsplus: session requires an argument [ 337.243229][T15289] XFS (loop2): log mount/recovery failed: error -5 [ 337.250905][T15306] hfsplus: unable to parse mount options [ 337.263604][ T2719] XFS (loop1): SB sanity check failed 04:29:11 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xfeffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 337.274175][ T2719] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 337.292802][ T2719] XFS (loop1): Unmount and run xfs_repair [ 337.296634][T15289] XFS (loop2): log mount failed [ 337.300192][ T2719] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 337.335993][ T2719] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 337.366145][ T2719] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 337.375080][ T2719] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 337.386291][ T2719] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 337.395626][ T2719] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 337.408081][ T2719] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 337.420719][ T2719] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 337.430599][ T2719] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 337.441185][T15229] XFS (loop1): SB validate failed with error -117. [ 337.468541][T15247] attempt to access beyond end of device [ 337.483597][T15247] loop5: rw=4096, want=32768, limit=29542 [ 337.497723][T15306] hfsplus: session requires an argument [ 337.501626][T15247] XFS (loop5): last sector read failed [ 337.503308][T15306] hfsplus: unable to parse mount options 04:29:11 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x2010, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 337.584927][T15252] XFS (loop3): Mounting V4 Filesystem [ 337.602061][T15328] XFS (loop4): device supports 512 byte sectors (not 0) [ 337.606462][T15252] XFS (loop3): AIL initialisation failed: error -12 04:29:12 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x13000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 337.676292][T15252] XFS (loop3): log mount failed 04:29:12 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x194, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 337.755527][T15350] hfsplus: session requires an argument [ 337.773324][T15350] hfsplus: unable to parse mount options 04:29:12 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x700, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:12 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xfeffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 337.929185][T15355] XFS (loop2): Mounting V4 Filesystem [ 337.945442][T15355] XFS (loop2): empty log check failed [ 337.964608][T15355] XFS (loop2): log mount/recovery failed: error -5 [ 338.005723][ T2719] XFS (loop1): SB sanity check failed [ 338.016244][ T2719] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 338.030125][T15355] XFS (loop2): log mount failed [ 338.040007][ T2719] XFS (loop1): Unmount and run xfs_repair [ 338.046423][ T2719] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 338.053833][ T2719] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 338.063848][ T2719] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 338.074571][ T2719] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 338.084034][ T2719] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 338.093669][ T2719] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 338.103166][ T2719] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 338.115857][ T2719] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 338.160971][ T2719] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 338.172324][T15359] XFS (loop1): SB validate failed with error -117. [ 338.200222][T15350] hfsplus: session requires an argument [ 338.246399][T15328] XFS (loop4): device supports 512 byte sectors (not 0) [ 338.297980][T15350] hfsplus: unable to parse mount options [ 338.330250][T15384] attempt to access beyond end of device 04:29:12 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x3f00, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 338.357315][T15384] loop5: rw=4096, want=32768, limit=29542 [ 338.390303][T15385] XFS (loop3): Mounting V4 Filesystem [ 338.427176][T15384] XFS (loop5): last sector read failed [ 338.429924][T15385] XFS (loop3): empty log check failed [ 338.444163][T15385] XFS (loop3): log mount/recovery failed: error -5 04:29:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r3, 0x200004) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) connect$ax25(r3, &(0x7f0000000180)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast]}, 0x48) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 338.497501][T15385] XFS (loop3): log mount failed [ 338.551957][T15414] hfsplus: session requires an argument [ 338.576382][T15414] hfsplus: unable to parse mount options 04:29:13 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff0402, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:29:13 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x300, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:29:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x6, 0x6, 0xfffffff7}}, 0x30) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)='|', 0x9d80}], 0x8, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [r5, r5]}}], 0x18}], 0x1, 0x0) [ 338.897279][ T27] audit: type=1800 audit(1585369753.224:23): pid=15418 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16264 res=0 [ 338.996070][T15414] hfsplus: session requires an argument [ 339.002178][T15414] hfsplus: unable to parse mount options [ 339.013140][T15384] attempt to access beyond end of device [ 339.027038][T15384] loop5: rw=4096, want=32768, limit=29542 [ 339.038434][T15384] XFS (loop5): last sector read failed 04:29:13 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e22, 0x8, @mcast1, 0x800}, {0xa, 0x4e20, 0x7, @empty, 0x6}, 0x1ff, [0xa7, 0x1, 0xfff, 0xb51, 0x8e, 0x76, 0x81]}, 0x5c) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000000)) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001900050300000000000000ff020000030000000000000000002001000000000000000000000000000000000000000000000000020020000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) [ 339.071148][T15385] XFS (loop3): Mounting V4 Filesystem [ 339.089834][ T3090] XFS (loop1): SB sanity check failed [ 339.095863][ T3090] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 339.109177][ T3090] XFS (loop1): Unmount and run xfs_repair 04:29:13 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 339.115486][ T3090] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 339.123746][ T3090] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 339.133446][ T3090] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 339.143671][ T3090] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 339.159965][T15385] XFS (loop3): empty log check failed [ 339.170256][T15385] XFS (loop3): log mount/recovery failed: error -5 [ 339.189889][ T3090] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 339.199217][ T3090] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 339.208411][ T3090] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 04:29:13 executing program 2: socket(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) creat(&(0x7f00000000c0)='./file0\x00', 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000000)=0xfffffffffffffda3) setreuid(0x0, r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') [ 339.226005][T15385] XFS (loop3): log mount failed [ 339.236858][ T3090] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 339.254190][T15475] hfsplus: session requires an argument [ 339.260217][ T3090] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 04:29:13 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x900, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 339.275445][T15475] hfsplus: unable to parse mount options [ 339.282166][T15435] XFS (loop1): SB validate failed with error -117. [ 339.289570][T15450] XFS (loop4): device supports 512 byte sectors (not 0) 04:29:13 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x700, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 339.418265][T15475] hfsplus: session requires an argument [ 339.423865][T15475] hfsplus: unable to parse mount options 04:29:13 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:13 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffdfffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 339.524502][T15487] attempt to access beyond end of device [ 339.533333][T15487] loop5: rw=4096, want=32768, limit=29542 [ 339.544317][T15487] XFS (loop5): last sector read failed [ 339.702079][T15498] attempt to access beyond end of device [ 339.707907][T15523] hfsplus: session requires an argument [ 339.707916][T15523] hfsplus: unable to parse mount options [ 339.722898][T15450] XFS (loop4): device supports 512 byte sectors (not 0) [ 339.728749][T15435] XFS (loop1): SB sanity check failed [ 339.735503][T15435] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 339.753657][T15435] XFS (loop1): Unmount and run xfs_repair [ 339.760159][T15435] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 339.764677][T15498] loop2: rw=4096, want=32768, limit=29542 [ 339.767784][T15435] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 339.767799][T15435] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 339.784938][T15498] XFS (loop2): last sector read failed [ 339.801176][T15523] hfsplus: session requires an argument [ 339.810542][T15523] hfsplus: unable to parse mount options [ 339.816479][T15435] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 339.825544][T15435] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 339.844736][T15435] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 339.867362][T15435] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 339.877774][T15435] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 339.890514][T15529] XFS (loop3): Mounting V4 Filesystem [ 339.897307][T15435] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 339.927223][T15529] XFS (loop3): empty log check failed [ 339.932655][T15529] XFS (loop3): log mount/recovery failed: error -5 [ 339.962970][T15487] attempt to access beyond end of device 04:29:14 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x4c00, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 339.974927][T15487] loop5: rw=4096, want=32768, limit=29542 [ 339.985951][T15435] XFS (loop1): SB validate failed with error -117. [ 339.998696][T15487] XFS (loop5): last sector read failed 04:29:14 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffbfff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 340.065825][T15529] XFS (loop3): log mount failed 04:29:14 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xfeffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 340.169832][T15554] hfsplus: session requires an argument [ 340.191184][T15554] hfsplus: unable to parse mount options 04:29:14 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x310, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 340.269951][T15561] XFS (loop4): device supports 512 byte sectors (not 0) 04:29:14 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x970, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 340.343457][T15554] hfsplus: session requires an argument [ 340.354110][T15554] hfsplus: unable to parse mount options [ 340.399023][T15565] XFS (loop2): Mounting V4 Filesystem [ 340.421124][T15565] XFS (loop2): empty log check failed [ 340.427776][T15565] XFS (loop2): log mount/recovery failed: error -5 [ 340.475833][T15565] XFS (loop2): log mount failed 04:29:14 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x6000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 340.537860][T15529] XFS (loop3): Mounting V4 Filesystem [ 340.557370][T15529] XFS (loop3): AIL initialisation failed: error -12 [ 340.611168][T15529] XFS (loop3): log mount failed [ 340.624396][T14717] XFS (loop1): SB sanity check failed [ 340.640515][T14717] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 340.647728][T15624] hfsplus: session requires an argument [ 340.659728][T15624] hfsplus: unable to parse mount options [ 340.671103][T15593] attempt to access beyond end of device [ 340.677729][T15593] loop5: rw=4096, want=32768, limit=29542 [ 340.687517][T14717] XFS (loop1): Unmount and run xfs_repair [ 340.688159][T15593] XFS (loop5): last sector read failed [ 340.694594][T14717] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 340.724587][T15624] hfsplus: session requires an argument [ 340.739609][T15624] hfsplus: unable to parse mount options [ 340.741201][T14717] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 340.765789][T14717] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 340.774860][T14717] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 340.800412][T14717] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 340.815542][T14717] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 04:29:15 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x6800, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 340.825061][T14717] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 340.855819][T14717] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 340.864773][T14717] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 04:29:15 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x95, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x401, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x1, 0x1000}, {0x4, 0x0, 0x1800}, {0x62a6eeafdd2887ac, 0x8001, 0x800}, {0x2, 0x3, 0x800}, {0x3, 0x800, 0x1000}, {0x0, 0x517c, 0x1800}, {0x0, 0xcc, 0x800}, {0x4, 0x6, 0x800}], 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x800000, &(0x7f0000000440)=ANY=[]) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000002c40)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b030400000000000092290a7e4555a763c15ceda085e276ed3ae7a290ab0e74467713328b5e4577124d1a2e21da765cd1ce2356a8097e673ea7fe4ae382173456f0bf8893cc7149595314f0771b65d33e129933dd93f99f03cd6b000003e1dd04000000706eb14c1d3d1a204fe2e9c50d7920f69e970618bfaba4"], 0x8b) close(0xffffffffffffffff) [ 340.887028][T15592] XFS (loop1): SB validate failed with error -117. [ 340.890079][T15561] XFS (loop4): device supports 512 byte sectors (not 0) 04:29:15 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff0402, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 341.004252][T15636] hfsplus: session requires an argument [ 341.031650][T15636] hfsplus: unable to parse mount options [ 341.082735][T15641] debugfs: Directory '15641-4' with parent 'kvm' already present! [ 341.136409][T15636] hfsplus: session requires an argument [ 341.142028][T15636] hfsplus: unable to parse mount options [ 341.180357][T15651] XFS (loop3): Mounting V4 Filesystem [ 341.205517][T15651] XFS (loop3): empty log check failed 04:29:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000300001050000000000000000000000003800010034000100080001006270660024000280060003000000000018000200000000000000000000000000000000000000000001000600"], 0x4c}}, 0x0) 04:29:15 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 341.231467][T15651] XFS (loop3): log mount/recovery failed: error -5 04:29:15 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x971, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 341.301209][T15651] XFS (loop3): log mount failed 04:29:15 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x6c00, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:15 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x970, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 341.404393][T15676] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 04:29:15 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x39e, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:29:15 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x7400, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 341.682305][T15684] attempt to access beyond end of device [ 341.688703][T15685] attempt to access beyond end of device [ 341.713832][T15684] loop5: rw=4096, want=32768, limit=29542 [ 341.717862][T15685] loop2: rw=4096, want=32768, limit=29542 [ 341.725835][T15685] XFS (loop2): last sector read failed 04:29:16 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffbfff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 341.738315][T15684] XFS (loop5): last sector read failed [ 341.745879][ T2727] XFS (loop1): SB sanity check failed [ 341.745911][T15689] XFS (loop4): device supports 512 byte sectors (not 0) [ 341.765201][ T2727] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 341.778620][ T2727] XFS (loop1): Unmount and run xfs_repair [ 341.784496][ T2727] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 341.796908][ T2727] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 341.806469][ T2727] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 341.817540][ T2727] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 341.820909][T15714] hfsplus: session requires an argument [ 341.831293][ T2727] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 341.841850][ T2727] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 341.852839][T15714] hfsplus: unable to parse mount options [ 341.861522][ T2727] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 341.879086][ T2727] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 341.889484][ T2727] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 341.898996][T15698] XFS (loop1): SB validate failed with error -117. [ 341.966484][T15714] hfsplus: session requires an argument [ 341.973475][T15714] hfsplus: unable to parse mount options [ 342.011011][T15724] XFS (loop3): Mounting V4 Filesystem 04:29:16 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x7a00, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 342.035202][T15724] XFS (loop3): empty log check failed [ 342.065213][T15724] XFS (loop3): log mount/recovery failed: error -5 [ 342.105932][T15724] XFS (loop3): log mount failed [ 342.250556][T15750] hfsplus: session requires an argument [ 342.264686][T15750] hfsplus: unable to parse mount options [ 342.327728][T15689] XFS (loop4): device supports 512 byte sectors (not 0) [ 342.350396][T15750] hfsplus: session requires an argument 04:29:16 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xa00, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 342.382169][T15750] hfsplus: unable to parse mount options 04:29:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000000)={0x18, r1, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0x18}, 0x1, 0x6000}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="d57f000019bb620b8f1216"], 0x3}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r2, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa2c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8263}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 04:29:16 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xedc0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:16 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x39f, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:29:17 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x2, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:29:17 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffe, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 342.899538][T15780] attempt to access beyond end of device [ 342.941307][T15780] loop5: rw=4096, want=32768, limit=29542 04:29:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000000)={0x18, r1, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0x18}, 0x1, 0x6000}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="d57f000019bb620b8f1216"], 0x3}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r2, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa2c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8263}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) [ 343.046700][T15780] XFS (loop5): last sector read failed [ 343.068619][T15808] hfsplus: session requires an argument [ 343.080882][T15808] hfsplus: unable to parse mount options 04:29:17 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xff00, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 343.108402][T15797] XFS (loop1): SB sanity check failed [ 343.113920][T15797] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 343.133843][T15802] XFS (loop4): device supports 512 byte sectors (not 0) [ 343.173861][T15797] XFS (loop1): Unmount and run xfs_repair [ 343.194816][T15797] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 343.239129][T15797] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ 04:29:17 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x3b, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 343.366777][T15822] hfsplus: session requires an argument [ 343.372474][T15822] hfsplus: unable to parse mount options [ 343.396357][T15797] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 343.405446][T15797] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 04:29:17 executing program 2: r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x2, 0x80, 0xff, 0x9, 0x0, 0x101, 0x80, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x3ff}, 0x15042, 0xfff, 0xd8, 0x1, 0x4, 0x3, 0xc31}, r1, 0x3, r0, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0xfffe, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f00000000c0)=0x4) sendmmsg(r2, &(0x7f00000092c0), 0x4000000000002a5, 0x4008000) 04:29:17 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xc00, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 343.458734][T15797] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 343.515611][T15797] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 343.524615][T15797] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 343.581723][T15822] hfsplus: session requires an argument [ 343.606889][T15822] hfsplus: unable to parse mount options [ 343.630137][T15830] XFS (loop3): Mounting V4 Filesystem [ 343.665940][T15797] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 343.680061][T15830] XFS (loop3): empty log check failed [ 343.702420][T15830] XFS (loop3): log mount/recovery failed: error -5 04:29:18 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="3f296d887c166584000000000000000000000000b9b528f791cdfd0f32c7b7f56ed207706ff5613a66f307e65155b011f687f5a47f455e2408d7d1832f879fd9e61ba42bd647aef0755b9d0b2414af107046bbb0229f98e26fd93a34448c6fe36ca804bf30ffce3a6072b8cb4855041929e73b0ebf2fb39182a9cfa63af9dc7a4e016aafc3da2c03f4ed25e47268663c8e16bc684ac6cefd3e61e1f49f68617b897182d5556f043d921df3d9ee229150f6e06413a4217ee968cb3185537053e5b0c12dfec09703f39e0aa5c3b1ebc063cb6fa56cbb"], 0x14) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x15, &(0x7f0000000140)=0x160, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x2780, 0x4) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 04:29:18 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xff0f, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 343.755633][T15797] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 343.802412][T15854] attempt to access beyond end of device [ 343.809616][T15854] loop5: rw=4096, want=32768, limit=29542 [ 343.820902][T15854] XFS (loop5): last sector read failed 04:29:18 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x3, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 343.848961][T15797] XFS (loop1): SB validate failed with error -117. [ 343.855722][T15830] XFS (loop3): log mount failed [ 343.906624][T15869] hfsplus: session requires an argument [ 343.935915][T15869] hfsplus: unable to parse mount options [ 344.047826][T15874] XFS (loop4): device supports 512 byte sectors (not 0) [ 344.065120][T15869] hfsplus: session requires an argument [ 344.082492][T15869] hfsplus: unable to parse mount options 04:29:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x7, 0x0) r2 = dup(r1) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x0, 0x3, 0x0, "d3853a82102dd254baff2a3f28821daca102d264862b1cdcef2f40492c028c46"}) r3 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x7, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) read$char_usb(r5, &(0x7f0000000700)=""/4096, 0x1000) r6 = dup(r3) getresuid(&(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_mount_image$gfs2(&(0x7f00000001c0)='gfs2\x00', &(0x7f00000002c0)='./file0\x00', 0x20, 0x4, &(0x7f0000000580)=[{&(0x7f0000000380)="dfa389dca958e2909b92de096873e5458b129e9a8d8bee46e3743c266bad81a0f9e994fc8d1bf81497389802ffc55c5a22e12c6bcb74c8c3b55387a4e2f8fc35aa9caa55050a503ea75870f50ae73cfbb6c204d7ebb23b11a39e8995922bd54cd8b5b1697fb569d82f09bf", 0x6b, 0x9}, {&(0x7f0000000400)="5ef304d0bfd6d9aa80403a46d3ce4081321cf5a05b01d463365a48b505290ae839516091adba758f6f1b1e4d1f2447b71851c1b169776d6fde6d8e10194bf0c4244014b725f0be3b3a6badb36298497a943490105958d94253a474aaf12ec24448fb8428caf94d5e5ca762d14de4dea4370b8dbe3f44f13e3ca7fb6fa4ee921c61aa7572f59aaeed01cbe12e206e2b41707296ffb90331edec4fddd486ac2d60946335518887b08123c326ca105e409f35cebd9924c02670e440cfc02bff98828d8f14e0983991b6f8f136dd482255b276faea", 0xd3, 0x1}, {&(0x7f0000000300)="28e4aebe3ec0807bb0496b16d164b8630b2527c76b69db67f54aa19eca58bf80276029e47f9f6ca6d851bdce18246bfa3b0b688ad274846fea8cc56355", 0x3d}, {&(0x7f0000000500)="defdfde33b2e909a6f70129f89871ada63db6b68d9006a93d619ba4563cd3e9580e4c33c6571c2dabd2920010d26f288242bf969cc849b9298c3fb6a6b7cedc30a0246dd8a9529823f155013d3273b74d792eb83f560a318fbb70d1f828e", 0x5e, 0x5}], 0x844a0, &(0x7f0000000600)={[{@statfs_percent={'statfs_percent', 0x3d, 0x400}}, {@upgrade='upgrade'}], [{@pcr={'pcr', 0x3d, 0x2f}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@dont_appraise='dont_appraise'}, {@smackfsroot={'smackfsroot', 0x3d, 'cache=fscache'}}, {@dont_measure='dont_measure'}, {@subj_type={'subj_type', 0x3d, 'cgroup'}}, {@uid_eq={'uid', 0x3d, r9}}, {@uid_eq={'uid', 0x3d, r7}}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070e0000000000000080000000", @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff010000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008640)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000002e000102000000000000000700000000", @ANYRES32, @ANYBLOB="d7c5d2150000000000000000"], 0x24}}, 0x4) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r6, &(0x7f0000001900)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x60, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x48d9}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x1}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x60}}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x200016, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache='cache=fscache'}, {@access_user='access=user'}], [{@audit='audit'}, {@uid_gt={'uid>', r8}}]}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000102b4593a666bd0d8f00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c001a80080002800400018008001b0000000000"], 0x34}}, 0x0) 04:29:18 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x3f0, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:29:18 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x3c, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:18 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x20000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:18 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xd00, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 344.593556][ T5] XFS (loop1): SB sanity check failed [ 344.609889][T15911] XFS (loop3): Mounting V4 Filesystem [ 344.615684][ T5] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 344.678709][T15911] XFS (loop3): empty log check failed [ 344.687984][T15911] XFS (loop3): log mount/recovery failed: error -5 04:29:19 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xe00, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 344.722722][ T5] XFS (loop1): Unmount and run xfs_repair [ 344.747236][T15930] hfsplus: session requires an argument [ 344.756589][T15930] hfsplus: unable to parse mount options [ 344.789210][ T5] XFS (loop1): First 128 bytes of corrupted metadata buffer: 04:29:19 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:19 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 344.865135][ T5] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 344.881796][ T5] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 344.891740][T15911] XFS (loop3): log mount failed [ 344.892561][ T5] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 344.908921][ T5] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 344.918948][ T5] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 344.927896][ T5] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 344.937013][ T5] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 344.946602][ T5] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 344.965558][T15899] XFS (loop1): SB validate failed with error -117. [ 345.064005][T15952] hfsplus: session requires an argument [ 345.092046][T15952] hfsplus: unable to parse mount options [ 345.125006][T15946] XFS (loop4): device supports 512 byte sectors (not 0) [ 345.152016][T15940] attempt to access beyond end of device 04:29:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616ee9ec276f2c7224228ff4b4b424decf330d2f6609000000", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',nodevmap,k']) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_RESUME(r6, 0x4147, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendto$rose(r7, &(0x7f0000000280)="1de68ee0520bf55c1a3006b4d0cd9271a7529d9e71bfad97733ad5f0e33f1608438d205ac988c8c0465f9f689d796a596f4ae3fb8a5dffe39eaaf39a7d41d1b9f9d3daf0569eb93c40935b6471d79181e56e52b3f8fddc3e2b68e72f22997616cef81585b4511dca67b8bd6956bc5f52c5cd0deef2f59bfb1a0cacb5c544c9f7e100d2c614a005a15a7f9647cad5f3e93816dac5e5966c293f86779c34b4f4dfa9b517d4b652d63fa6cbcf61ea5f00b5012a8f4cb2a4ba8b5abf23da6bb80ff008fb4d3a532dad92524f0e425cc244bd87b2f09c609e48d87f42e67d998de4818e65305259420e3a1a2f404eec176a47c001a5", 0xf3, 0x1, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x4, [@default, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000040)={0x6, 0x200}) [ 345.172472][T15940] loop5: rw=4096, want=32768, limit=29542 [ 345.194074][T15940] XFS (loop5): last sector read failed [ 345.210128][T15952] hfsplus: session requires an argument [ 345.224976][T15952] hfsplus: unable to parse mount options [ 345.278536][T15911] XFS (loop3): Mounting V4 Filesystem [ 345.318359][T15911] XFS (loop3): empty log check failed [ 345.323774][T15911] XFS (loop3): log mount/recovery failed: error -5 04:29:19 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r4 = socket$nl_route(0x10, 0x3, 0x0) setxattr$security_ima(0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0151345a6d3a72d8f9b0e04c735366ac1fb7245e57b7db4fc9c810bbef3d83e167b89542a05ac058e50d320b9a3d85ca1506b2d89bd0c205290253662c7b00dcc49ab9a2ad8e079b5fba895076cefe774ee1b57d920330a911e84cb6275246261e965cd78b0694ebb646d8599a54a9bd788bf66ca38ab798ff5878c1da9108b8"], 0x1, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) clone3(&(0x7f0000000600)={0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x39}, &(0x7f00000003c0)=""/36, 0x24, &(0x7f0000000480)=""/130, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, r7, r6, 0x0, r7], 0x3ffffffffffffeba}, 0x50) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100441202000000000000000000", @ANYRES32=r8, @ANYBLOB="0000200000000000240012001400010062726964676505979f1865326b839a695671fbb9138215683eddd3835bd335e9898c"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) recvfrom$l2tp(r3, &(0x7f00000001c0)=""/32, 0x20, 0x0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) 04:29:19 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:19 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x3f2, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 345.475715][T15911] XFS (loop3): log mount failed 04:29:19 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x1020, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 345.592745][T15998] hfsplus: session requires an argument [ 345.613338][T15998] hfsplus: unable to parse mount options [ 345.632951][ T2719] XFS (loop1): SB sanity check failed [ 345.646152][ T2719] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 345.681000][ T2719] XFS (loop1): Unmount and run xfs_repair [ 345.688013][ T2719] XFS (loop1): First 128 bytes of corrupted metadata buffer: 04:29:20 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x2000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 345.700274][ T2719] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 345.731782][ T2719] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 345.753615][ T2719] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 345.780293][ T2719] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 345.803811][ T2719] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 345.815259][ T2719] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 345.825539][ T2719] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 345.834669][ T2719] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 345.845679][T15987] XFS (loop1): SB validate failed with error -117. 04:29:20 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="0a46534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:20 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x3000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:20 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x5, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 346.104198][T16014] hfsplus: session requires an argument [ 346.123284][T16014] hfsplus: unable to parse mount options [ 346.153024][T16010] attempt to access beyond end of device [ 346.161326][T16010] loop5: rw=4096, want=32768, limit=29542 [ 346.167602][T16010] XFS (loop5): last sector read failed [ 346.184137][T16026] XFS (loop3): Invalid superblock magic number [ 346.203905][T16014] hfsplus: session requires an argument [ 346.209863][T16014] hfsplus: unable to parse mount options [ 346.230297][T16029] XFS (loop4): device supports 512 byte sectors (not 0) 04:29:20 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x4000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 346.362627][T16061] hfsplus: session requires an argument [ 346.384691][T16061] hfsplus: unable to parse mount options 04:29:20 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x410, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:29:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x81}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = open(&(0x7f00000000c0)='./file0\x00', 0x240001, 0x88) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000100)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = dup(0xffffffffffffffff) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000003c0)=ANY=[@ANYBLOB="07000000000000000700000000000000ff030000000000000004000000000000060000008b01c8d6749e23b9148673d100000000030557030000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000001800000000000000003032000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000da00000000000000803f81ff000000000000000000000000000000000000000000000000000000000000000000000000400000000000000003"]) clock_gettime(0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001f80)={'wg0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffe2, 0x0) r5 = accept$packet(0xffffffffffffffff, &(0x7f00000020c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002100)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f0000002240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002200)={&(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRESHEX=r6, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRESHEX=r4, @ANYRES32, @ANYPTR64, @ANYRES64=r3, @ANYRES64], @ANYRESOCT=r5, @ANYRES64=r0, @ANYRESDEC=r5], @ANYRESDEC, @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000002280)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], @ANYBLOB="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", @ANYRESDEC, @ANYRES16, @ANYPTR], @ANYRESOCT, @ANYRESHEX, @ANYRES64, @ANYRES32], 0x8}}, 0x4000014) r7 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000380)) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f0000000000)) syz_genetlink_get_family_id$batadv(0x0) 04:29:20 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x2002, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:20 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x5000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 346.801166][T16085] hfsplus: session requires an argument [ 346.821079][T16085] hfsplus: unable to parse mount options [ 346.871822][T16093] attempt to access beyond end of device [ 346.889522][T16093] loop5: rw=4096, want=32768, limit=29542 [ 346.912769][T16093] XFS (loop5): last sector read failed [ 346.934689][T16085] hfsplus: session requires an argument [ 346.980184][T16085] hfsplus: unable to parse mount options [ 346.989652][ T12] XFS (loop1): SB sanity check failed [ 347.005831][ T12] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff 04:29:21 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="2546534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:21 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x6, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:29:21 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x6000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 347.111226][ T12] XFS (loop1): Unmount and run xfs_repair [ 347.146006][ T12] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 347.184439][ T12] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 347.207949][ T12] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 347.218743][ T12] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 347.245497][ T12] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 347.264718][ T12] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 347.271390][T16072] hub 9-0:1.0: USB hub found [ 347.275412][ T12] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 347.288052][ T12] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 347.293883][T16072] hub 9-0:1.0: 8 ports detected [ 347.297515][ T12] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 347.297576][T16100] XFS (loop1): SB validate failed with error -117. [ 347.400916][T16125] hfsplus: session requires an argument [ 347.410209][T16125] hfsplus: unable to parse mount options [ 347.450329][T16122] XFS (loop3): Invalid superblock magic number [ 347.462461][T16121] XFS (loop4): device supports 512 byte sectors (not 0) [ 347.472309][T16093] attempt to access beyond end of device [ 347.479669][T16093] loop5: rw=4096, want=32768, limit=29542 [ 347.490998][T16093] XFS (loop5): last sector read failed 04:29:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x81}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = open(&(0x7f00000000c0)='./file0\x00', 0x240001, 0x88) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000100)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = dup(0xffffffffffffffff) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000003c0)=ANY=[@ANYBLOB="07000000000000000700000000000000ff030000000000000004000000000000060000008b01c8d6749e23b9148673d100000000030557030000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000001800000000000000003032000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000da00000000000000803f81ff000000000000000000000000000000000000000000000000000000000000000000000000400000000000000003"]) clock_gettime(0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001f80)={'wg0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffe2, 0x0) r5 = accept$packet(0xffffffffffffffff, &(0x7f00000020c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002100)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f0000002240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002200)={&(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRESHEX=r6, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRESHEX=r4, @ANYRES32, @ANYPTR64, @ANYRES64=r3, @ANYRES64], @ANYRESOCT=r5, @ANYRES64=r0, @ANYRESDEC=r5], @ANYRESDEC, @ANYRESDEC=0x0, @ANYPTR=&(0x7f0000002280)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], @ANYBLOB="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", @ANYRESDEC, @ANYRES16, @ANYPTR], @ANYRESOCT, @ANYRESHEX, @ANYRES64, @ANYRES32], 0x8}}, 0x4000014) r7 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000380)) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f0000000000)) syz_genetlink_get_family_id$batadv(0x0) [ 347.593344][T16125] hfsplus: session requires an argument [ 347.620015][T16125] hfsplus: unable to parse mount options [ 347.713846][ T12] XFS (loop1): SB sanity check failed [ 347.726712][ T12] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 347.752725][ T12] XFS (loop1): Unmount and run xfs_repair 04:29:22 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x7000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 347.764483][ T12] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 347.772518][ T12] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 347.781917][ T12] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 347.791319][ T12] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 347.801153][ T12] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 04:29:22 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x2010, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 347.810889][ T12] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 347.820491][ T12] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 347.830313][ T12] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 347.840247][ T12] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 347.850008][T16100] XFS (loop1): SB validate failed with error -117. 04:29:22 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5d46534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:22 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x2300, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 348.111157][T16161] hub 9-0:1.0: USB hub found [ 348.147956][T16161] hub 9-0:1.0: 8 ports detected 04:29:22 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x8100, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:29:22 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="6346534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:22 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x8000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:22 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x8, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 348.340667][T16187] attempt to access beyond end of device [ 348.368360][T16187] loop5: rw=4096, want=32768, limit=29542 [ 348.406367][T16187] XFS (loop5): last sector read failed [ 348.499292][T16207] hfsplus: session requires an argument [ 348.521432][T16207] hfsplus: unable to parse mount options [ 348.529929][T16206] XFS (loop4): device supports 512 byte sectors (not 0) [ 348.542413][T16210] XFS (loop3): Invalid superblock magic number [ 348.637058][T16207] hfsplus: session requires an argument [ 348.647589][T16207] hfsplus: unable to parse mount options 04:29:23 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x9000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 348.812773][ T12] XFS (loop1): SB sanity check failed [ 348.819384][ T12] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 348.834456][ T12] XFS (loop1): Unmount and run xfs_repair 04:29:23 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r1 = clone3(0x0, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)) syz_open_procfs(r1, &(0x7f0000000080)='attr/fscreate\x00') getresgid(0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000200)='fuse\x00', 0x1901021, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x8c540, 0x0) lseek(r0, 0x0, 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {0x1, 0x6}, [], {}, [{}, {0x8, 0x0, r5}]}, 0x34, 0x0) write$P9_RGETATTR(r0, &(0x7f0000000240)={0xa0, 0x19, 0x1, {0x8, {0x80, 0x0, 0x2}, 0x1, 0xee01, r5, 0x4, 0x9, 0x1, 0x20, 0x2, 0x5, 0x7f, 0x9, 0x80, 0xffffffffffff6f64, 0x800, 0x1, 0x8, 0x6, 0x9}}, 0xa0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x20008) [ 348.866298][ T12] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 348.884333][ T12] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 348.900340][ T12] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 348.910190][ T12] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 348.919745][ T12] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 348.928866][ T12] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 348.938523][ T12] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 348.947916][ T12] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 348.957185][ T12] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 348.968984][T16211] XFS (loop1): SB validate failed with error -117. [ 348.980014][T16187] attempt to access beyond end of device [ 349.000624][T16187] loop5: rw=4096, want=32768, limit=29542 [ 349.006711][ T27] audit: type=1804 audit(1585369763.325:24): pid=16261 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir231905816/syzkaller.6I1Yym/174/bus" dev="sda1" ino=16305 res=1 [ 349.032760][T16252] hfsplus: session requires an argument [ 349.041935][T16210] XFS (loop3): Invalid superblock magic number [ 349.047264][T16206] XFS (loop4): device supports 512 byte sectors (not 0) [ 349.063023][T16252] hfsplus: unable to parse mount options [ 349.083307][T16187] XFS (loop5): last sector read failed [ 349.112260][ T27] audit: type=1800 audit(1585369763.325:25): pid=16261 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16305 res=0 04:29:23 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r1 = clone3(0x0, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x7fffffff, &(0x7f0000001ac0)) syz_open_procfs(r1, &(0x7f0000000080)='attr/fscreate\x00') getresgid(0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000200)='fuse\x00', 0x1901021, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x8c540, 0x0) lseek(r0, 0x0, 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {0x1, 0x6}, [], {}, [{}, {0x8, 0x0, r5}]}, 0x34, 0x0) write$P9_RGETATTR(r0, &(0x7f0000000240)={0xa0, 0x19, 0x1, {0x8, {0x80, 0x0, 0x2}, 0x1, 0xee01, r5, 0x4, 0x9, 0x1, 0x20, 0x2, 0x5, 0x7f, 0x9, 0x80, 0xffffffffffff6f64, 0x800, 0x1, 0x8, 0x6, 0x9}}, 0xa0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x20008) [ 349.151456][T16252] hfsplus: session requires an argument [ 349.160706][T16252] hfsplus: unable to parse mount options [ 349.191388][ T27] audit: type=1804 audit(1585369763.335:26): pid=16261 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir231905816/syzkaller.6I1Yym/174/bus" dev="sda1" ino=16305 res=1 04:29:23 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xa000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 349.279354][ T27] audit: type=1804 audit(1585369763.435:27): pid=16273 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir231905816/syzkaller.6I1Yym/174/bus" dev="sda1" ino=16305 res=1 [ 349.354599][ T27] audit: type=1800 audit(1585369763.435:28): pid=16273 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16305 res=0 04:29:23 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x8300, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 349.417647][ T27] audit: type=1804 audit(1585369763.435:29): pid=16261 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir231905816/syzkaller.6I1Yym/174/bus" dev="sda1" ino=16305 res=1 04:29:23 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="6446534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:23 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000008000001201", 0x2e}], 0x1}, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x2, 0x2}, 0x10) socket$kcm(0x10, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f0000000200)={0x7, "caabc53f35753b09f398234c3f2501fa899d12c81928b14b102f4649aafe9a06", 0x5, 0x40, 0xffff, 0x5, 0x1, 0x3, 0x7}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x64, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x42000, 0x0, 0x20}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xc) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 349.446454][ T27] audit: type=1804 audit(1585369763.675:30): pid=16281 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir231905816/syzkaller.6I1Yym/175/bus" dev="sda1" ino=16286 res=1 [ 349.471379][ T27] audit: type=1800 audit(1585369763.675:31): pid=16281 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16286 res=0 [ 349.491045][ T27] audit: type=1804 audit(1585369763.705:32): pid=16281 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir231905816/syzkaller.6I1Yym/175/bus" dev="sda1" ino=16286 res=1 04:29:23 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x2403, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:23 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x9, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 349.631196][T16283] hfsplus: session requires an argument [ 349.639020][T16283] hfsplus: unable to parse mount options [ 349.654906][T16289] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 349.688403][T16289] team0: Device ipvlan1 failed to register rx_handler [ 349.856819][T16283] hfsplus: session requires an argument [ 349.862417][T16283] hfsplus: unable to parse mount options 04:29:24 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f0000000100)=""/64, &(0x7f0000000180)=0x40) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x2, 0x0, 0x80, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf0e, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x8000}, 0x22ce, 0x5b92, 0x7, 0x7, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @broadcast}, 'veth0_to_bond\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @broadcast}, 'veth0_to_bond\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @broadcast}, 'veth0_to_bond\x00'}) setsockopt$sock_void(r1, 0x1, 0x12, 0x0, 0x0) ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f00000001c0)) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="020005000000000e001400000000000000000f0000000023000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @broadcast}, 'veth0_to_bond\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f00000002c0)={0x283, 0x2}) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000000)={'virt_wifi0\x00', {0x2, 0x4e22, @broadcast}}) [ 349.932330][T16302] XFS (loop3): Invalid superblock magic number 04:29:24 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xf000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 350.000394][T16309] XFS (loop4): device supports 512 byte sectors (not 0) [ 350.238024][T16334] hfsplus: session requires an argument [ 350.260167][T16334] hfsplus: unable to parse mount options [ 350.281725][T16302] XFS (loop3): Invalid superblock magic number [ 350.340721][T16332] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 350.362955][T16332] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 04:29:24 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xa, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 350.403780][T16332] loop2: p2 < > [ 350.413044][T16334] hfsplus: session requires an argument [ 350.425445][T16334] hfsplus: unable to parse mount options [ 350.499529][T16317] attempt to access beyond end of device [ 350.526505][T16317] loop5: rw=4096, want=32768, limit=29542 [ 350.540910][T16317] XFS (loop5): last sector read failed 04:29:24 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x10000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 350.551587][ T4248] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 350.570864][ T4248] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 350.586830][ T4248] loop2: p2 < > 04:29:25 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="6946534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 350.671369][T16359] XFS (loop4): device supports 512 byte sectors (not 0) [ 350.766725][T16371] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 350.796007][T16371] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 04:29:25 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xbd00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 350.819116][T16371] loop2: p2 < > [ 350.837936][T16376] hfsplus: session requires an argument [ 350.860439][T16376] hfsplus: unable to parse mount options 04:29:25 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f0000000100)=""/64, &(0x7f0000000180)=0x40) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x2, 0x0, 0x80, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf0e, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x8000}, 0x22ce, 0x5b92, 0x7, 0x7, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @broadcast}, 'veth0_to_bond\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @broadcast}, 'veth0_to_bond\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @broadcast}, 'veth0_to_bond\x00'}) setsockopt$sock_void(r1, 0x1, 0x12, 0x0, 0x0) ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f00000001c0)) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="020005000000000e001400000000000000000f0000000023000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @broadcast}, 'veth0_to_bond\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f00000002c0)={0x283, 0x2}) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000000)={'virt_wifi0\x00', {0x2, 0x4e22, @broadcast}}) 04:29:25 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x3f00, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 351.095845][T16376] hfsplus: session requires an argument [ 351.119963][T16376] hfsplus: unable to parse mount options [ 351.184483][T16359] XFS (loop4): device supports 512 byte sectors (not 0) [ 351.185766][T16385] XFS (loop3): Invalid superblock magic number 04:29:25 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x11000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 351.304431][T16414] attempt to access beyond end of device [ 351.345398][T16414] loop5: rw=4096, want=32768, limit=29542 [ 351.351791][T16414] XFS (loop5): last sector read failed [ 351.413142][T16410] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 351.441547][T16410] ldm_validate_privheads(): Cannot find PRIVHEAD 1. 04:29:25 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xb, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 351.466040][T16427] hfsplus: session requires an argument [ 351.471625][T16427] hfsplus: unable to parse mount options [ 351.496626][T16410] loop2: p2 < > [ 351.625550][T16385] XFS (loop3): Invalid superblock magic number [ 351.756261][T16427] hfsplus: session requires an argument [ 351.773632][T16427] hfsplus: unable to parse mount options 04:29:26 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x1f000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 351.873189][T16444] XFS (loop4): device supports 512 byte sectors (not 0) 04:29:26 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xa, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:29:26 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="6c46534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:26 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x4000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:26 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xc000, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 352.226737][T16475] XFS (loop2): device supports 512 byte sectors (not 0) [ 352.287675][T16478] hfsplus: session requires an argument [ 352.293352][T16478] hfsplus: unable to parse mount options [ 352.503988][T16500] XFS (loop3): Invalid superblock magic number [ 352.539683][T16505] attempt to access beyond end of device [ 352.555118][T16505] loop5: rw=4096, want=32768, limit=29542 [ 352.560984][T16505] XFS (loop5): last sector read failed 04:29:26 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x20000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:27 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xf, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 352.902924][T16526] hfsplus: session requires an argument [ 352.914803][T16526] hfsplus: unable to parse mount options [ 352.971566][T16528] XFS (loop4): device supports 512 byte sectors (not 0) [ 352.982361][T16500] XFS (loop3): Invalid superblock magic number [ 353.031778][T16526] hfsplus: session requires an argument [ 353.039919][T16526] hfsplus: unable to parse mount options [ 353.097167][T16505] attempt to access beyond end of device [ 353.121718][T16505] loop5: rw=4096, want=32768, limit=29542 04:29:27 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x20100000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 353.169076][T16505] XFS (loop5): last sector read failed 04:29:27 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="6f46534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 353.308485][T16564] hfsplus: session requires an argument [ 353.314172][T16564] hfsplus: unable to parse mount options [ 353.357533][T16528] XFS (loop4): device supports 512 byte sectors (not 0) 04:29:27 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xc100, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:29:27 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x23ca5e9c, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 353.480978][T16564] hfsplus: session requires an argument [ 353.490694][T16564] hfsplus: unable to parse mount options 04:29:27 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x4401, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:27 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 353.807811][T16583] hfsplus: session requires an argument [ 353.813412][T16583] hfsplus: unable to parse mount options [ 353.919861][T16583] hfsplus: session requires an argument [ 353.927864][T16583] hfsplus: unable to parse mount options [ 353.953676][T16593] XFS (loop3): Invalid superblock magic number [ 354.001996][T16596] attempt to access beyond end of device [ 354.010708][T16596] loop5: rw=4096, want=32768, limit=29542 [ 354.033588][T16600] XFS (loop4): device supports 512 byte sectors (not 0) 04:29:28 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x3f000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 354.075709][T16596] XFS (loop5): last sector read failed [ 354.139513][T16623] hfsplus: session requires an argument [ 354.145429][T16623] hfsplus: unable to parse mount options [ 354.204468][T16623] hfsplus: session requires an argument [ 354.224147][T16623] hfsplus: unable to parse mount options 04:29:28 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x40000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:28 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="7046534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 354.535552][T16596] attempt to access beyond end of device [ 354.541741][T16596] loop5: rw=4096, want=32768, limit=29542 [ 354.573145][T16644] hfsplus: session requires an argument 04:29:28 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xc200, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 354.591730][T16596] XFS (loop5): last sector read failed [ 354.609041][T16644] hfsplus: unable to parse mount options 04:29:29 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x12, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 354.761811][T16644] hfsplus: session requires an argument [ 354.779898][T16644] hfsplus: unable to parse mount options [ 354.866738][T16659] XFS (loop3): Invalid superblock magic number 04:29:29 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x4600, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:29 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x48000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:29 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="7346534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 355.156406][T16673] XFS (loop4): device supports 512 byte sectors (not 0) [ 355.170396][T16687] hfsplus: session requires an argument [ 355.177799][T16687] hfsplus: unable to parse mount options [ 355.222192][T16687] hfsplus: session requires an argument [ 355.253917][T16687] hfsplus: unable to parse mount options 04:29:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x141042, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r4, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r5, r5, &(0x7f0000000540)=0x201, 0x4000000000dc) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r6, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000002c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000007327342f348e88dd57a3edec97c2682cfee36a2a8cc9468314dafdc3f48431607737ba75d26429ecb13828688ba2cde331893c4c380137bcfb5cd33990f0b1eb2ec5821010d7a6b424af80385738e1a3e0c62d60b580fd3ee974a65051f65283570a27a11a895a051aa8", @ANYRES16=r6, @ANYBLOB="00022abd7000fbdbdf25020000000c0002000000000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x4880}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00063a", @ANYRES16=r5, @ANYBLOB="040028bd7000fddbdf25020000000c00050001000000000000000c0004000500000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x24044840}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) dup(0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000340)=0x800, 0xffffffffffffffff, &(0x7f0000000380)=0x4, 0x91, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="f3420f0133c42391483800450f3566baf80cb834b58a8aef66bafc0c66ed410f08b9800000c00f3235002000000f30440f01cf65470f01dfc4022d2c9a99d2f8e3c744240017000000c744240200580000ff2c24", 0x54}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 355.276288][T16686] attempt to access beyond end of device [ 355.351489][T16686] loop5: rw=4096, want=32768, limit=29542 [ 355.361662][T16686] XFS (loop5): last sector read failed 04:29:29 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x4c000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 355.503520][T16702] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 355.625356][T16705] XFS (loop3): Invalid superblock magic number [ 355.677135][T16673] XFS (loop4): device supports 512 byte sectors (not 0) 04:29:30 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xc300, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 355.731362][T16723] hfsplus: session requires an argument [ 355.757596][T16723] hfsplus: unable to parse mount options 04:29:30 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="6c46534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 355.808185][T16686] attempt to access beyond end of device [ 355.823598][T16686] loop5: rw=4096, want=32768, limit=29542 [ 355.897585][T16723] hfsplus: session requires an argument [ 355.910648][T16743] XFS (loop2): Invalid superblock magic number [ 355.921896][T16686] XFS (loop5): last sector read failed [ 355.949987][T16723] hfsplus: unable to parse mount options 04:29:30 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x14, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:29:30 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x60000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:30 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="7546534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 356.274447][T16763] XFS (loop3): Invalid superblock magic number [ 356.330421][T16776] hfsplus: session requires an argument [ 356.357909][T16770] XFS (loop4): device supports 512 byte sectors (not 0) [ 356.370802][T16776] hfsplus: unable to parse mount options 04:29:30 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x4800, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:30 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@sbsector={'sbsector'}}]}) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x800) sendto$unix(r0, &(0x7f0000000140)="b3f76c0d79745e2a735bd3dcfe4aa2ffb6e69c9381ad9dd0b3bc2a8b6ba1fea868af932e8489c32d502f7ef35842744f60f44613ec0e0271e42a77c99c4541aff682708c6241008e9d0b61b722eefd37c02afcaed73e543cb14c31f3686a88b9434a6899b7024dfab6750e6ce62d85353a469d0cdceb7c37d5c7cffdef2cbb6285a04817ad24cb6a6371f5a8da5a800eb938ecc8d3e192ef31cefc689e489a5ec5aa7c042c6f7a50d9c14c9da8102aebac56ddaf81", 0xb5, 0x4000000, 0x0, 0x0) [ 356.577805][T16776] hfsplus: session requires an argument [ 356.583402][T16776] hfsplus: unable to parse mount options [ 356.629554][T16763] XFS (loop3): Invalid superblock magic number [ 356.641915][ T2926] XFS (loop1): SB sanity check failed [ 356.648194][ T2926] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 356.667303][ T2926] XFS (loop1): Unmount and run xfs_repair 04:29:31 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x68000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 356.679885][ T2926] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 356.691785][ T2926] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 356.702092][ T2926] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 356.711855][ T2926] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 356.721484][ T2926] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 356.731124][ T2926] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 356.741722][ T2926] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 356.751420][ T2926] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 356.761149][ T2926] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 356.789987][T16756] XFS (loop1): SB validate failed with error -117. [ 356.819970][T16801] ISOFS: Unable to identify CD-ROM format. [ 356.894050][T16802] attempt to access beyond end of device [ 356.911895][T16802] loop5: rw=4096, want=32768, limit=29542 [ 356.919226][T16770] XFS (loop4): device supports 512 byte sectors (not 0) [ 356.947889][T16802] XFS (loop5): last sector read failed 04:29:31 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="7846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 356.992870][T16828] hfsplus: session requires an argument [ 357.010171][T16828] hfsplus: unable to parse mount options [ 357.043799][T16801] ISOFS: Unable to identify CD-ROM format. 04:29:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$caif_stream(0x25, 0x1, 0x3) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000140)="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") sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739ddb, 0x700, 0x0, 0xffffffffffffff39) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:29:31 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xc400, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 357.235868][T16828] hfsplus: session requires an argument [ 357.241991][T16828] hfsplus: unable to parse mount options 04:29:31 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x2b, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:29:31 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x6c000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 357.372302][T16845] XFS (loop3): Invalid superblock magic number 04:29:31 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x4c00, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 357.612817][T16872] hfsplus: session requires an argument [ 357.620518][T16870] XFS (loop4): device supports 512 byte sectors (not 0) [ 357.626573][T16872] hfsplus: unable to parse mount options [ 357.752455][T16872] hfsplus: session requires an argument [ 357.763219][T16872] hfsplus: unable to parse mount options 04:29:32 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x74000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:32 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="580a534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 357.940714][T16893] attempt to access beyond end of device [ 357.949310][T16893] loop5: rw=4096, want=32768, limit=29542 [ 357.957607][T16893] XFS (loop5): last sector read failed [ 357.972745][T16870] XFS (loop4): device supports 512 byte sectors (not 0) [ 358.014999][T16913] hfsplus: session requires an argument [ 358.020988][T16913] hfsplus: unable to parse mount options [ 358.107387][T16913] hfsplus: session requires an argument [ 358.113854][T16913] hfsplus: unable to parse mount options 04:29:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$caif_stream(0x25, 0x1, 0x3) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000140)="63045a0a48d4d0a57873cf580857dfc2322bd57310a590d24e20ad72898a56aec99edb669efe654cea81476cdb576147fa01a56252478a1e5fe57e38b952cff104b60f3252c60e60931b373f9d5754616748ff3ae345083fa155aaabab05676a6c9f56fc270308fc550062b04266f6c57d3054ac6c0359e00283d5a0f63083a79df6c2083d9e387b804b1bf72fc8074dc4295a14b07d5ecaf4dd9470a957faab7e0bb872c7a58eb3f97b833028a01dff37a466faf2070cbbbfadcb09c735951db6c6b5f9cd87311caece5c73f6782070b8a1097012e63b588fe121c12221f3d3771a3edb4b5170db0ed4da344a80eebaabc5b20152b9294919fdabe1688baec4") sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739ddb, 0x700, 0x0, 0xffffffffffffff39) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:29:32 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x7a000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 358.303836][T16922] XFS (loop3): Invalid superblock magic number 04:29:32 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x2d, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 358.389398][T16938] hfsplus: session requires an argument [ 358.410388][T16938] hfsplus: unable to parse mount options 04:29:32 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x5c00, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:33 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xc401, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 358.765017][T16938] hfsplus: session requires an argument [ 358.770608][T16938] hfsplus: unable to parse mount options [ 358.811696][T16954] XFS (loop4): device supports 512 byte sectors (not 0) [ 358.825824][T16922] XFS (loop3): Invalid superblock magic number 04:29:33 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x8cffffff, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 359.069948][T16978] attempt to access beyond end of device [ 359.078081][T16978] loop5: rw=4096, want=32768, limit=29542 [ 359.100558][T16978] XFS (loop5): last sector read failed 04:29:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="500e000030003dfa0000000000000000000000003c0e0100380e0100340e01007065646974000000240e0280200e020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000600"], 0xe50}}, 0x0) 04:29:33 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5825534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 359.306440][T16989] hfsplus: session requires an argument [ 359.313508][T16989] hfsplus: unable to parse mount options [ 359.388511][T16954] XFS (loop4): device supports 512 byte sectors (not 0) 04:29:33 executing program 2: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x76, &(0x7f0000000400)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000140)={r5, 0xfa, "a492bca591b28507382839c51aec4e82ade7f4e541070a77c8edac096c6457cf2631c1f1d018483f799f71efd92f4126e86567f6208ad4821259c56e12874683aa96dd686f92d3524ac3e10a61a10c078deebbd3470f52ec435cf8152db9076b5c7d18a390d4e9808a57150108cdbeb78c951125831431805da01063af3451825e35b7e5d6015ae91c44187a1b3cea84e763a6e80093d5384278417885f8143a76db7c6468fd9d73cf0c72f688cb4ca8ca74ad776ffa1dd085e7eb41446a1977f0fb6dd412362820bfd6ba7be116795bed89a048f10b037b40515c6483cebe64d35546e475aee64fb00f0ad105a643cc19ff800967ec8b78ca68"}, &(0x7f0000000000)=0x102) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000300)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7o\x80\xb2\xcf\x8a\xc9(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') [ 359.433440][T16989] hfsplus: session requires an argument [ 359.440466][T16989] hfsplus: unable to parse mount options [ 359.460540][T16978] attempt to access beyond end of device [ 359.475953][T16978] loop5: rw=4096, want=32768, limit=29542 [ 359.482602][T17018] device lo entered promiscuous mode [ 359.502468][T16978] XFS (loop5): last sector read failed 04:29:33 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x97ffffff, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 359.591286][T17020] XFS (loop3): Invalid superblock magic number 04:29:33 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x30, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 359.693122][T17033] hfsplus: session requires an argument [ 359.701884][T17033] hfsplus: unable to parse mount options 04:29:34 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xc500, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:29:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f0c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) 04:29:34 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x5c01, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 359.935974][T17033] hfsplus: session requires an argument [ 359.942372][T17033] hfsplus: unable to parse mount options 04:29:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f0c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) [ 360.092434][T17038] XFS (loop4): device supports 512 byte sectors (not 0) 04:29:34 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x9c5eca23, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 360.266250][T17072] attempt to access beyond end of device [ 360.351693][T17072] loop5: rw=4096, want=32768, limit=29542 [ 360.394402][T17088] hfsplus: session requires an argument [ 360.400495][T17088] hfsplus: unable to parse mount options [ 360.406595][T17072] XFS (loop5): last sector read failed 04:29:34 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="58460a4200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:34 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) capget(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x7f, @mcast2, 0x42dc}}, 0x24) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/922], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f065581fffffff00004000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x102, 0x60000000, 0x0, 0xfffffffffffffe48, &(0x7f0000000000), &(0x7f00000000c0)="61ae793cb58796e98bec67538e015077de7e272f4c58590e0a49abbb02864ce87f29c55242edc400de0f90b385e2f9c937fd3b232ab7c99460628f97e6d6f935e88684d642fd966756e2d8b5af7a9002d71c203c4dd9b55ae6eb91e77d823ca1a2de2496a532933552dfb5907808176243ef5971c1a9c84ebfbd113d1a233ed5490f124afc9b88bc97d734a20b1e"}, 0x28) socket$kcm(0x10, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000019100)={0x0, 'veth1_macvtap\x00', 0x1}, 0x18) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) [ 360.580943][T17088] hfsplus: session requires an argument [ 360.628679][T17088] hfsplus: unable to parse mount options 04:29:35 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846254200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:35 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x6000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:35 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xc0ed0000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:35 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x3c, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 360.824973][T17101] mmap: syz-executor.2 (17101) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 04:29:35 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="58465d4200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:35 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xc600, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 361.122178][T17108] hfsplus: session requires an argument [ 361.129217][T17108] hfsplus: unable to parse mount options [ 361.170072][T17129] XFS (loop4): device supports 512 byte sectors (not 0) [ 361.192594][T17117] XFS (loop3): Invalid superblock magic number [ 361.212325][T17108] hfsplus: session requires an argument [ 361.221958][T17113] attempt to access beyond end of device [ 361.222493][T17108] hfsplus: unable to parse mount options [ 361.231384][T17113] loop5: rw=4096, want=32768, limit=29542 [ 361.267533][T17113] XFS (loop5): last sector read failed 04:29:35 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xf6ffffff, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 361.550664][T17152] hfsplus: session requires an argument [ 361.561297][T17152] hfsplus: unable to parse mount options [ 361.617829][T17129] XFS (loop4): device supports 512 byte sectors (not 0) [ 361.631029][T17117] XFS (loop3): Invalid superblock magic number 04:29:36 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x5, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) [ 361.711723][T17152] hfsplus: session requires an argument [ 361.722991][T17152] hfsplus: unable to parse mount options 04:29:36 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xf9fdffff, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:36 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x6400, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:36 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xc700, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:29:36 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534204000000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:36 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x4d, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 362.205564][T17189] hfsplus: session requires an argument [ 362.218352][T17189] hfsplus: unable to parse mount options [ 362.315623][T17198] attempt to access beyond end of device [ 362.321317][T17198] loop5: rw=4096, want=32768, limit=29542 [ 362.330009][T17189] hfsplus: session requires an argument [ 362.335267][T17198] XFS (loop5): last sector read failed [ 362.351735][T17189] hfsplus: unable to parse mount options [ 362.361654][T17206] XFS (loop4): device supports 512 byte sectors (not 0) [ 362.361899][ T12] XFS (loop3): SB sanity check failed [ 362.374798][ T12] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 362.394157][ T12] XFS (loop3): Unmount and run xfs_repair [ 362.400594][ T12] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 362.409127][ T12] 00000000: 58 46 53 42 04 00 00 00 00 00 00 00 00 00 10 00 XFSB............ [ 362.419184][ T12] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 362.428727][ T12] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 362.446703][ T12] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 362.456295][ T12] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 04:29:36 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xfcfdffff, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 362.465978][ T12] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 362.476037][ T12] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 362.485743][ T12] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 362.514753][T17208] XFS (loop3): SB validate failed with error -117. [ 362.532312][T17231] hfsplus: session requires an argument [ 362.551084][T17231] hfsplus: unable to parse mount options [ 362.638874][T17231] hfsplus: session requires an argument [ 362.655884][T17231] hfsplus: unable to parse mount options 04:29:37 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xfdfdffff, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:37 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x6573, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:37 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x63, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:29:37 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xc800, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 363.039837][T17245] hfsplus: session requires an argument [ 363.053853][T17245] hfsplus: unable to parse mount options 04:29:37 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x4d, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 363.116860][T17243] XFS (loop4): device supports 512 byte sectors (not 0) [ 363.150494][T17246] attempt to access beyond end of device [ 363.159275][T17246] loop5: rw=4096, want=32768, limit=29542 04:29:37 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534210030000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 363.192892][T17246] XFS (loop5): last sector read failed [ 363.215055][T17245] hfsplus: session requires an argument [ 363.225850][T17245] hfsplus: unable to parse mount options [ 363.347996][T17275] XFS (loop2): device supports 512 byte sectors (not 0) 04:29:37 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xfdffffff, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 363.468024][ T12] XFS (loop3): SB sanity check failed [ 363.484942][ T12] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 363.513919][ T12] XFS (loop3): Unmount and run xfs_repair [ 363.529359][ T12] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 363.547180][ T12] 00000000: 58 46 53 42 10 03 00 00 00 00 00 00 00 00 10 00 XFSB............ [ 363.567455][ T12] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 363.588022][ T12] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 363.606982][ T12] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 363.627634][ T12] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 363.646797][ T12] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 363.657215][ T12] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 363.666356][ T12] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 363.713290][T17285] XFS (loop3): SB validate failed with error -117. [ 363.720147][T17243] XFS (loop4): device supports 512 byte sectors (not 0) [ 363.730030][T17246] attempt to access beyond end of device [ 363.761629][T17246] loop5: rw=4096, want=32768, limit=29542 [ 363.780423][T17312] hfsplus: session requires an argument [ 363.866467][T17246] XFS (loop5): last sector read failed [ 363.875711][T17312] hfsplus: unable to parse mount options 04:29:38 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer\x00', 0x46a8c0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/107) 04:29:38 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xff000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:38 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xc900, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:29:38 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x310, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:29:38 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x6800, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:38 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="58465342400c0000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:38 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xff0f0000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 364.275126][T17327] hfsplus: session requires an argument [ 364.281278][T17327] hfsplus: unable to parse mount options 04:29:38 executing program 2: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x1, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000d, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(r2, r0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x82051, r3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$MON_IOCQ_URB_LEN(r5, 0x9201) [ 364.545528][T17340] hfsplus: session requires an argument [ 364.560282][ T12] XFS (loop3): SB sanity check failed [ 364.567732][ T12] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 364.567795][T17340] hfsplus: unable to parse mount options [ 364.603108][ T12] XFS (loop3): Unmount and run xfs_repair [ 364.618773][ T12] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 364.636550][ T12] 00000000: 58 46 53 42 40 0c 00 00 00 00 00 00 00 00 10 00 XFSB@........... [ 364.654562][ T12] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 364.663652][ T12] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 364.672853][ T12] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 364.682000][ T12] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 364.691139][ T12] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 364.702783][ T12] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 364.712226][ T12] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 364.714888][T17340] hfsplus: session requires an argument [ 364.727421][T17336] XFS (loop3): SB validate failed with error -117. [ 364.737725][T17344] XFS (loop4): device supports 512 byte sectors (not 0) [ 364.748057][T17334] attempt to access beyond end of device [ 364.755896][T17334] loop5: rw=4096, want=32768, limit=29542 [ 364.794605][T17334] XFS (loop5): last sector read failed [ 364.814410][T17340] hfsplus: unable to parse mount options 04:29:39 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xfffffdf9, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:39 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x399, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:29:39 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200000200000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:39 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x6c00, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:39 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xca00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:29:39 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x47, &(0x7f0000000580)=""/71, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x0, 0xf, 0x10001}, 0x10}, 0x78) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.controllers\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x19, 0x19, 0xa, [@func, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], ' '}]}, {0x0, [0x2e, 0x0, 0x30, 0x61, 0x0, 0xb5514796c919ad26, 0x61, 0x2e]}}, &(0x7f0000000500)=""/98, 0x3e, 0x62, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="0000003f0000007e5bc5795ecaff", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 04:29:39 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xfffffdfc, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 365.411572][T17387] attempt to access beyond end of device [ 365.430491][T17390] XFS (loop3): SB sanity check failed [ 365.444464][T17387] loop5: rw=4096, want=32768, limit=29542 [ 365.452256][T17382] XFS (loop4): device supports 512 byte sectors (not 0) [ 365.490973][T17390] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 365.508472][T17387] XFS (loop5): last sector read failed [ 365.575378][T17390] XFS (loop3): Unmount and run xfs_repair [ 365.610067][T17418] hfsplus: session requires an argument [ 365.619282][T17390] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 365.632759][T17390] 00000000: 58 46 53 42 00 00 02 00 00 00 00 00 00 00 10 00 XFSB............ [ 365.642687][T17390] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 365.652561][T17390] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 365.662306][T17390] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 365.673077][T17418] hfsplus: unable to parse mount options [ 365.686308][T17390] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 365.699890][T17390] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 365.710693][T17390] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 365.720743][T17390] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 365.752605][T17390] XFS (loop3): SB validate failed with error -117. [ 365.811501][T17418] hfsplus: session requires an argument [ 365.818793][T17418] hfsplus: unable to parse mount options 04:29:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x30, 0x8, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) 04:29:40 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xfffffdfd, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 366.038421][T17387] attempt to access beyond end of device [ 366.049498][T17387] loop5: rw=4096, want=32768, limit=29542 [ 366.085986][T17387] XFS (loop5): last sector read failed 04:29:40 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000003040)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000002d80)=ANY=[@ANYBLOB="58000000000000001401000009000000060000000400"/32, @ANYPTR=&(0x7f00000025c0)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000080000000000000001000000000000d80000000000000002000000000000000600000000000000480000000000000014010000010000000900000000000000", @ANYPTR=&(0x7f0000002680)=ANY=[@ANYBLOB='\x00'/218], @ANYBLOB="da00000000000000", @ANYPTR=&(0x7f0000002900)=ANY=[@ANYPTR=&(0x7f0000002780)=ANY=[@ANYBLOB='\x00'/127], @ANYBLOB="7f00"/24], @ANYBLOB="02000000000000000d0000000000000001040000000000005800000000000000140100000900000000000000ffffff7f", @ANYPTR=&(0x7f00000029c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000002a00)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="060000000000000000000000000000000500000000000000010000000000000008000000000000000000000000000000580000000000000014010000060000000000000006000000", @ANYPTR=&(0x7f0000002a40)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000002a80)=ANY=[@ANYBLOB="0000000001000000"], @ANYBLOB="190000000000000008000000000000000000000000000000ff0f0000000000000900000000000000ff000000000000005800000000000000140100000700"/72, @ANYPTR=&(0x7f0000002ac0)=ANY=[@ANYBLOB='j\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000002b00)=ANY=[@ANYBLOB="8502000000000000"], @ANYBLOB="f20000000000000007000000000000000100000000000000050000000000000004000000000000000300000000000000480000000000000014010000010000002000000000000000", @ANYPTR=&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00'/10], @ANYBLOB='\n\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000002d40)=ANY=[@ANYPTR=&(0x7f0000002c40)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="4000000000000000000000000000000000843935e8"], @ANYBLOB="020000000000000010000000000000002879000000000000"], 0x1f0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup3(r2, r3, 0x0) dup2(r1, r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00af8dad77db2b5d137a120000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf250100000008003c0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4000041) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r6, 0x8008ae9d, &(0x7f0000000100)=""/60) 04:29:40 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x39a, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 366.171749][T17444] hfsplus: session requires an argument [ 366.211303][T17444] hfsplus: unable to parse mount options [ 366.241663][T17413] XFS (loop1): SB sanity check failed [ 366.259338][T17413] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff 04:29:40 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xffffff7f, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:40 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534202001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 366.425946][T17413] XFS (loop1): Unmount and run xfs_repair [ 366.427387][T17463] XFS (loop4): device supports 512 byte sectors (not 0) [ 366.431744][T17413] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 366.431761][T17413] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 366.431773][T17413] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 366.431787][T17413] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 366.527350][T17413] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 366.542877][T17413] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 366.557999][T17413] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 366.569059][T17413] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 366.579059][T17413] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 366.599777][T17413] XFS (loop1): SB validate failed with error -117. [ 366.614636][T17473] hfsplus: session requires an argument [ 366.620630][T17473] hfsplus: unable to parse mount options 04:29:40 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x7009, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 366.636034][ T12] XFS (loop3): SB sanity check failed [ 366.658833][ T12] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 366.672958][ T12] XFS (loop3): Unmount and run xfs_repair [ 366.679727][ T12] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 366.688754][ T12] 00000000: 58 46 53 42 02 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 366.699031][ T12] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 366.723006][ T12] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 366.741849][ T12] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 366.758674][ T12] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 366.769080][ T12] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 366.779446][ T12] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 366.791025][ T12] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 366.793641][T17473] hfsplus: session requires an argument [ 366.806417][T17475] XFS (loop3): SB validate failed with error -117. [ 366.836008][T17473] hfsplus: unable to parse mount options 04:29:41 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xffffff8c, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 366.895504][T17495] attempt to access beyond end of device [ 366.927126][T17495] loop5: rw=4096, want=32768, limit=29542 04:29:41 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xcb00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 366.959353][T17495] XFS (loop5): last sector read failed [ 366.968552][T17463] XFS (loop4): device supports 512 byte sectors (not 0) [ 367.086923][T17515] hfsplus: session requires an argument [ 367.092518][T17515] hfsplus: unable to parse mount options 04:29:41 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534203001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:41 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x3c00, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:29:41 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xffffff97, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:41 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x7109, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 367.505022][T17529] XFS (loop3): SB sanity check failed [ 367.510792][T17529] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff 04:29:41 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xfffffff6, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 367.576059][T17529] XFS (loop3): Unmount and run xfs_repair [ 367.606556][T17529] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 367.628854][T17529] 00000000: 58 46 53 42 03 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 367.652584][T17529] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 367.673131][T17529] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 367.695853][T17529] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 367.712603][T17545] hfsplus: session requires an argument [ 367.716647][T17529] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 367.729454][T17529] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 367.738016][T17545] hfsplus: unable to parse mount options [ 367.739370][T17529] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 367.753798][T17529] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 367.763600][T17529] XFS (loop3): SB validate failed with error -117. [ 367.872633][T17545] hfsplus: session requires an argument [ 367.886503][T17545] hfsplus: unable to parse mount options [ 368.021021][T17543] XFS (loop4): device supports 512 byte sectors (not 0) 04:29:42 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000003040)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000002d80)=ANY=[@ANYBLOB="58000000000000001401000009000000060000000400"/32, @ANYPTR=&(0x7f00000025c0)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000080000000000000001000000000000d80000000000000002000000000000000600000000000000480000000000000014010000010000000900000000000000", @ANYPTR=&(0x7f0000002680)=ANY=[@ANYBLOB='\x00'/218], @ANYBLOB="da00000000000000", @ANYPTR=&(0x7f0000002900)=ANY=[@ANYPTR=&(0x7f0000002780)=ANY=[@ANYBLOB='\x00'/127], @ANYBLOB="7f00"/24], @ANYBLOB="02000000000000000d0000000000000001040000000000005800000000000000140100000900000000000000ffffff7f", @ANYPTR=&(0x7f00000029c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000002a00)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="060000000000000000000000000000000500000000000000010000000000000008000000000000000000000000000000580000000000000014010000060000000000000006000000", @ANYPTR=&(0x7f0000002a40)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000002a80)=ANY=[@ANYBLOB="0000000001000000"], @ANYBLOB="190000000000000008000000000000000000000000000000ff0f0000000000000900000000000000ff000000000000005800000000000000140100000700"/72, @ANYPTR=&(0x7f0000002ac0)=ANY=[@ANYBLOB='j\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000002b00)=ANY=[@ANYBLOB="8502000000000000"], @ANYBLOB="f20000000000000007000000000000000100000000000000050000000000000004000000000000000300000000000000480000000000000014010000010000002000000000000000", @ANYPTR=&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00'/10], @ANYBLOB='\n\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000002d40)=ANY=[@ANYPTR=&(0x7f0000002c40)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="4000000000000000000000000000000000843935e8"], @ANYBLOB="020000000000000010000000000000002879000000000000"], 0x1f0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup3(r2, r3, 0x0) dup2(r1, r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00af8dad77db2b5d137a120000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf250100000008003c0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4000041) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r6, 0x8008ae9d, &(0x7f0000000100)=""/60) 04:29:42 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x7200, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:42 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xfffffffd, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:42 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xcc00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:29:42 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534204001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 368.264896][T17566] attempt to access beyond end of device [ 368.271767][T17566] loop5: rw=4096, want=32768, limit=29542 [ 368.291316][T17566] XFS (loop5): last sector read failed [ 368.317336][T17573] XFS (loop3): SB sanity check failed [ 368.323355][T17573] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 368.419971][T17591] hfsplus: session requires an argument [ 368.448870][T17573] XFS (loop3): Unmount and run xfs_repair [ 368.476750][T17591] hfsplus: unable to parse mount options [ 368.529711][T17573] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 368.542226][T17573] 00000000: 58 46 53 42 04 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 368.558922][T17573] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 04:29:42 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x8003, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:29:42 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x7365, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 368.600505][T17573] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 368.621364][T17573] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 04:29:43 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xedc000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 368.650285][T17573] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 368.689482][T17573] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 368.723397][T17573] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 368.764950][T17573] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 368.825242][T17573] XFS (loop3): SB validate failed with error -117. [ 368.880262][T17606] hfsplus: session requires an argument [ 368.905444][T17606] hfsplus: unable to parse mount options [ 368.951375][T17603] attempt to access beyond end of device [ 368.961011][T17603] loop5: rw=4096, want=32768, limit=29542 [ 368.990386][T17606] hfsplus: session requires an argument [ 369.022367][T17603] XFS (loop5): last sector read failed [ 369.046416][T17606] hfsplus: unable to parse mount options 04:29:43 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534205001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:43 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x1000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:43 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xcd00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 369.330357][ T5] XFS (loop3): SB sanity check failed [ 369.336332][ T5] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 369.358684][ T5] XFS (loop3): Unmount and run xfs_repair [ 369.372941][ T5] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 369.390456][ T5] 00000000: 58 46 53 42 05 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 369.410092][ T5] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 369.459566][ T5] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 369.485417][ T5] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 369.507088][ T5] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 369.528062][ T5] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 369.554165][ T5] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 369.563054][ T5] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 369.584682][T17626] XFS (loop3): SB validate failed with error -117. 04:29:44 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xaf00, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 369.653084][T17634] hfsplus: session requires an argument [ 369.700270][T17634] hfsplus: unable to parse mount options 04:29:44 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000003040)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000002d80)=ANY=[@ANYBLOB="58000000000000001401000009000000060000000400"/32, @ANYPTR=&(0x7f00000025c0)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000080000000000000001000000000000d80000000000000002000000000000000600000000000000480000000000000014010000010000000900000000000000", @ANYPTR=&(0x7f0000002680)=ANY=[@ANYBLOB='\x00'/218], @ANYBLOB="da00000000000000", @ANYPTR=&(0x7f0000002900)=ANY=[@ANYPTR=&(0x7f0000002780)=ANY=[@ANYBLOB='\x00'/127], @ANYBLOB="7f00"/24], @ANYBLOB="02000000000000000d0000000000000001040000000000005800000000000000140100000900000000000000ffffff7f", @ANYPTR=&(0x7f00000029c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000002a00)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="060000000000000000000000000000000500000000000000010000000000000008000000000000000000000000000000580000000000000014010000060000000000000006000000", @ANYPTR=&(0x7f0000002a40)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000002a80)=ANY=[@ANYBLOB="0000000001000000"], @ANYBLOB="190000000000000008000000000000000000000000000000ff0f0000000000000900000000000000ff000000000000005800000000000000140100000700"/72, @ANYPTR=&(0x7f0000002ac0)=ANY=[@ANYBLOB='j\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000002b00)=ANY=[@ANYBLOB="8502000000000000"], @ANYBLOB="f20000000000000007000000000000000100000000000000050000000000000004000000000000000300000000000000480000000000000014010000010000002000000000000000", @ANYPTR=&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00'/10], @ANYBLOB='\n\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000002d40)=ANY=[@ANYPTR=&(0x7f0000002c40)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="4000000000000000000000000000000000843935e8"], @ANYBLOB="020000000000000010000000000000002879000000000000"], 0x1f0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup3(r2, r3, 0x0) dup2(r1, r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00af8dad77db2b5d137a120000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf250100000008003c0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40040d4}, 0x4000041) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r6, 0x8008ae9d, &(0x7f0000000100)=""/60) 04:29:44 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x7400, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:44 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x2000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:44 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xce00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 370.390100][T17651] XFS (loop4): device supports 512 byte sectors (not 0) 04:29:44 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534206001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:45 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534207001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 370.643897][T17684] hfsplus: session requires an argument [ 370.663051][T17681] attempt to access beyond end of device [ 370.681800][T17681] loop5: rw=4096, want=32768, limit=29542 [ 370.696290][T17681] XFS (loop5): last sector read failed [ 370.705782][T17684] hfsplus: unable to parse mount options [ 370.815291][T17684] hfsplus: session requires an argument [ 370.820961][T17684] hfsplus: unable to parse mount options [ 370.837925][T14717] XFS (loop3): SB sanity check failed [ 370.843877][T14717] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 370.871505][T14717] XFS (loop3): Unmount and run xfs_repair [ 370.893581][T14717] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 370.926791][T14717] 00000000: 58 46 53 42 07 00 10 00 00 00 00 00 00 00 10 00 XFSB............ 04:29:45 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xbd00, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:29:45 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 370.978307][T14717] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 04:29:45 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x7a00, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 371.050290][T14717] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 371.096904][T14717] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 371.129459][T14717] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 371.154316][T14717] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 371.175038][T14717] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 371.199286][T14717] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 371.213643][T17713] hfsplus: session requires an argument [ 371.223831][T17713] hfsplus: unable to parse mount options [ 371.237491][T17696] XFS (loop3): SB validate failed with error -117. [ 371.325091][T17713] hfsplus: session requires an argument [ 371.330689][T17713] hfsplus: unable to parse mount options [ 371.443318][T17718] attempt to access beyond end of device [ 371.471444][T17718] loop5: rw=4096, want=32768, limit=29542 04:29:45 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534208001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:45 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x200000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:45 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xcf00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 371.548032][T17718] XFS (loop5): last sector read failed [ 371.731652][T17738] hfsplus: session requires an argument [ 371.759139][T17738] hfsplus: unable to parse mount options [ 371.824574][T17741] XFS (loop3): SB sanity check failed [ 371.868145][T17741] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 371.885188][T17738] hfsplus: session requires an argument [ 371.920955][T17738] hfsplus: unable to parse mount options [ 371.984500][T17741] XFS (loop3): Unmount and run xfs_repair [ 371.990583][T17741] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 371.998376][T17741] 00000000: 58 46 53 42 08 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 372.007898][T17741] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 372.018220][T17741] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 372.028818][T17741] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 372.038474][T17741] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 372.047932][T17741] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 372.066800][T17741] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 372.076731][T17741] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 372.086468][T17741] XFS (loop3): SB validate failed with error -117. 04:29:47 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534203001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:47 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x7e00, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:47 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x300000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:47 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xbe00, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:29:47 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534209001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:47 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xd000, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 372.865591][T17778] hfsplus: session requires an argument [ 372.883502][T17768] attempt to access beyond end of device [ 372.928822][T17768] loop5: rw=4096, want=32768, limit=29542 [ 372.957528][T17774] XFS (loop2): SB sanity check failed [ 372.963513][T17774] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 372.977166][T17778] hfsplus: unable to parse mount options [ 372.990852][T17768] XFS (loop5): last sector read failed [ 372.995003][T17774] XFS (loop2): Unmount and run xfs_repair [ 373.007206][ T12] XFS (loop3): SB sanity check failed [ 373.013295][ T12] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff 04:29:47 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x400000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 373.071489][T17774] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 373.130248][T17774] 00000000: 58 46 53 42 03 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 373.145425][ T12] XFS (loop3): Unmount and run xfs_repair [ 373.177558][ T12] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 373.196448][T17774] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 373.266461][T17800] hfsplus: session requires an argument [ 373.287779][ T12] 00000000: 58 46 53 42 09 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 373.329678][T17800] hfsplus: unable to parse mount options [ 373.337949][T17774] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 373.405608][ T12] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 04:29:47 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x7e03, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 373.459586][T17774] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 04:29:47 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x500000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 373.535679][ T12] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 373.544154][T17774] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 373.620932][T17774] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 373.626065][ T12] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 373.701167][T17774] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 373.724033][ T12] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 373.738805][T17774] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 04:29:48 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xd100, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:29:48 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xbf00, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 373.770278][ T12] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 373.782750][ T12] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 373.800852][ T12] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 373.812395][T17780] XFS (loop3): SB validate failed with error -117. [ 373.826153][T17812] hfsplus: session requires an argument [ 373.832711][T17812] hfsplus: unable to parse mount options [ 373.845976][T17774] XFS (loop2): SB validate failed with error -117. [ 373.892073][T17812] hfsplus: session requires an argument [ 373.902522][T17812] hfsplus: unable to parse mount options [ 373.915445][T17810] attempt to access beyond end of device [ 373.931137][T17810] loop5: rw=4096, want=32768, limit=29542 04:29:48 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x600000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 373.960275][T17810] XFS (loop5): last sector read failed [ 374.076044][T17832] hfsplus: session requires an argument [ 374.081958][T17832] hfsplus: unable to parse mount options 04:29:48 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534203001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 374.294264][T17832] hfsplus: session requires an argument [ 374.299864][T17832] hfsplus: unable to parse mount options 04:29:48 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="584653420a001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:48 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x8400, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:48 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x700000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 374.500252][T14717] XFS (loop2): SB sanity check failed [ 374.507422][T14717] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 374.552534][T14717] XFS (loop2): Unmount and run xfs_repair [ 374.564460][T14717] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 374.581768][T14717] 00000000: 58 46 53 42 03 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 374.595067][T14717] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 374.608846][T14717] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 374.635048][T14717] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 04:29:48 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x800000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 374.644414][T14717] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 374.661305][T14717] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 374.670698][T14717] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 374.679833][T14717] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 374.689165][T17843] XFS (loop2): SB validate failed with error -117. [ 374.698944][T17860] attempt to access beyond end of device [ 374.699176][T17847] XFS (loop3): SB sanity check failed [ 374.710525][T17847] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 374.718036][T17860] loop5: rw=4096, want=32768, limit=29542 [ 374.722746][T17847] XFS (loop3): Unmount and run xfs_repair [ 374.743962][T17847] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 374.760510][T17847] 00000000: 58 46 53 42 0a 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 374.779818][T17847] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 374.789130][T17847] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 374.798213][T17847] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 374.808637][T17847] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 374.817919][T17847] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 374.828467][T17847] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 374.836501][T17860] XFS (loop5): last sector read failed [ 374.837887][T17847] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 374.851955][T17847] XFS (loop3): SB validate failed with error -117. 04:29:49 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xd200, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:29:49 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xc000, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 374.880186][T17876] hfsplus: session requires an argument [ 374.900553][T17876] hfsplus: unable to parse mount options [ 375.012468][T17876] hfsplus: session requires an argument [ 375.047157][T17876] hfsplus: unable to parse mount options 04:29:49 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="584653420c001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:49 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x900000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:49 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x7e00, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:49 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x8500, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 375.440799][T17907] hfsplus: session requires an argument [ 375.446850][T17907] hfsplus: unable to parse mount options [ 375.468738][T17891] XFS (loop3): SB sanity check failed [ 375.483919][T17891] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 375.503943][T17891] XFS (loop3): Unmount and run xfs_repair [ 375.515306][T17891] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 375.515475][T17907] hfsplus: session requires an argument [ 375.523740][T17900] attempt to access beyond end of device [ 375.534444][T17900] loop2: rw=4096, want=32768, limit=29542 [ 375.540796][T17900] XFS (loop2): last sector read failed [ 375.555974][T17912] attempt to access beyond end of device [ 375.589010][T17912] loop5: rw=4096, want=32768, limit=29542 [ 375.596551][T17891] 00000000: 58 46 53 42 0c 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 375.606793][T17907] hfsplus: unable to parse mount options [ 375.622568][T17912] XFS (loop5): last sector read failed [ 375.641825][T17891] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 04:29:50 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xa00000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 375.698835][T17891] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 375.748015][T17891] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 375.790718][T17891] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 375.853221][T17891] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 04:29:50 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xd300, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 375.897393][T17891] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... 04:29:50 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200000200000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 375.960861][T17891] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 376.003727][T17931] hfsplus: session requires an argument [ 376.010625][T17931] hfsplus: unable to parse mount options 04:29:50 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xf00000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 376.086058][T17912] attempt to access beyond end of device [ 376.091758][T17912] loop5: rw=4096, want=32768, limit=29542 04:29:50 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xc100, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 376.137357][T17891] XFS (loop3): SB validate failed with error -117. [ 376.161076][T17912] XFS (loop5): last sector read failed [ 376.278812][T17953] hfsplus: session requires an argument [ 376.284824][T17953] hfsplus: unable to parse mount options [ 376.312758][T14717] XFS (loop2): SB sanity check failed [ 376.321027][T14717] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 376.358072][T17953] hfsplus: session requires an argument [ 376.376434][T17953] hfsplus: unable to parse mount options [ 376.397792][T14717] XFS (loop2): Unmount and run xfs_repair 04:29:50 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x9401, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 376.428750][T14717] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 376.461674][T14717] 00000000: 58 46 53 42 00 00 02 00 00 00 00 00 00 00 10 00 XFSB............ 04:29:50 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="584653420d001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 376.507554][T14717] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 04:29:50 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x1000000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 376.551623][T14717] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 376.619887][T14717] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 376.640809][T14717] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 376.660330][T14717] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 376.680661][T14717] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 376.700937][T14717] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 376.710526][T17948] XFS (loop2): SB validate failed with error -117. [ 376.716163][T17983] hfsplus: session requires an argument [ 376.727493][T17971] attempt to access beyond end of device [ 376.733316][T17971] loop5: rw=4096, want=32768, limit=29542 [ 376.753920][T17983] hfsplus: unable to parse mount options [ 376.770307][ T2926] XFS (loop3): SB sanity check failed [ 376.775662][T17971] XFS (loop5): last sector read failed [ 376.776529][ T2926] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 376.812569][ T2926] XFS (loop3): Unmount and run xfs_repair [ 376.831781][ T2926] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 376.842231][T17983] hfsplus: session requires an argument [ 376.851277][ T2926] 00000000: 58 46 53 42 0d 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 376.853987][T17983] hfsplus: unable to parse mount options [ 376.903616][ T2926] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 04:29:51 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xd400, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:29:51 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x1100000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 376.971942][ T2926] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 377.072478][ T2926] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 04:29:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x80, 0x0) write$binfmt_elf64(r2, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x22, 0x1, 0xf1, 0x1, 0x4, 0x2, 0x1ea41469e345f779, 0xaf, 0x1cb, 0x40, 0x5d, 0x9, 0x6, 0x38, 0x2, 0x4, 0x4, 0xfff7}, [{0x2, 0xfffffff9, 0x3, 0xbd, 0x6, 0x6, 0x699, 0x8}], "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", [[], [], [], [], [], [], []]}, 0x1778) clone(0x201100, 0x0, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/full\x00', 0x80040, 0x0) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f0000001ac0)) gettid() setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x2, 0x3, 0x208, 0x6, 0x0, 0x0, 0x0, 0x0, 0x170, 0x170, 0x170, 0x170, 0x170, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x6020000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x170}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 04:29:51 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xa002, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:51 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xc200, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 377.145710][ T2926] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 377.182391][ T2926] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 377.208851][ T2926] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 377.229742][ T2926] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 377.244496][T18004] hfsplus: session requires an argument [ 377.255007][T17972] XFS (loop3): SB validate failed with error -117. [ 377.319036][T18004] hfsplus: unable to parse mount options [ 377.424173][T18011] Cannot find set identified by id 0 to match 04:29:51 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x1f00000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 377.491023][T18021] Cannot find set identified by id 0 to match [ 377.516275][T18015] attempt to access beyond end of device [ 377.539758][T18015] loop5: rw=4096, want=32768, limit=29542 04:29:51 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="584653420e001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 377.607640][T18015] XFS (loop5): last sector read failed 04:29:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1000}) ioctl$TUNATTACHFILTER(r0, 0x400454d0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x76, &(0x7f0000000400)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r5, 0x1, 0x3, 0x80000000}, &(0x7f0000000080)=0x10) [ 377.671697][T18030] hfsplus: session requires an argument [ 377.685727][T18030] hfsplus: unable to parse mount options [ 377.732080][T18030] hfsplus: session requires an argument [ 377.740253][T18030] hfsplus: unable to parse mount options 04:29:52 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x2000000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000006900200012800b000118913c00657273700000040012000000000000000000000000000000e6d55fd2dce63ce25d7dea51f32d0000003a96877d499d1faab86258d8a41041cbdd43d30e42e98f92fee1eba5d12a7eb4891d6a30355d513f4504a2afb7b2db867536333fae8dd622713a237da4dd"], 0x40}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg2\x00'}) [ 377.880225][ T3085] XFS (loop3): SB sanity check failed [ 377.887253][ T3085] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 377.917902][ T3085] XFS (loop3): Unmount and run xfs_repair [ 377.930787][ T3085] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 377.947475][ T3085] 00000000: 58 46 53 42 0e 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 377.966861][ T3085] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 377.989960][ T3085] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 378.009186][ T3085] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 378.014755][T18059] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 378.029768][ T3085] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 378.050119][ T3085] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 378.073658][ T3085] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 378.074646][T18061] hfsplus: session requires an argument [ 378.083464][ T3085] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 04:29:52 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xd500, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 378.098277][T18040] XFS (loop3): SB validate failed with error -117. [ 378.106428][T18015] attempt to access beyond end of device [ 378.112904][T18015] loop5: rw=4096, want=32768, limit=29542 [ 378.126870][T18015] XFS (loop5): last sector read failed [ 378.139506][T18061] hfsplus: unable to parse mount options [ 378.178637][T18012] XFS (loop4): device supports 512 byte sectors (not 0) 04:29:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsetxattr(r1, &(0x7f0000000000)=@random={'btrfs.', 'geneve\x00'}, &(0x7f0000000040)='^/]vboxnet1P\x00', 0xd, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xffffffffffffffc6, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @cfhsi={{0x0, 0x1, 'cfhsi\x00'}, {0x0, 0x2, 0x0, 0x1, [@__IFLA_CAIF_HSI_QLOW_WATERMARK={0x0, 0x6, 0x3}, @__IFLA_CAIF_HSI_TAIL_ALIGN={0x0, 0x4, 0x5}, @__IFLA_CAIF_HSI_QHIGH_WATERMARK={0x0, 0x5, 0x8000}, @__IFLA_CAIF_HSI_HEAD_ALIGN, @__IFLA_CAIF_HSI_HEAD_ALIGN={0x0, 0x3, 0xf89}, @__IFLA_CAIF_HSI_QHIGH_WATERMARK, @__IFLA_CAIF_HSI_TAIL_ALIGN={0x0, 0x4, 0xfff}, @__IFLA_CAIF_HSI_HEAD_ALIGN={0x0, 0x3, 0x7ff}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000}, 0x0) [ 378.224363][T18061] hfsplus: session requires an argument [ 378.230215][T18061] hfsplus: unable to parse mount options 04:29:52 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x2010000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:52 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xba02, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:52 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000618cea10000002000000850000002a000000950000000000006af14bd60500000000f8000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0xf8, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x3, 0x10, 0x0}, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$CAPI_REGISTER(r4, 0x400c4301, &(0x7f0000000040)={0x1, 0x4, 0x7}) 04:29:52 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xc300, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 378.530394][T18040] XFS (loop3): SB sanity check failed [ 378.545077][T18040] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 378.611375][T18097] hfsplus: session requires an argument [ 378.629903][T18097] hfsplus: unable to parse mount options [ 378.638896][T18040] XFS (loop3): Unmount and run xfs_repair [ 378.651020][T18098] attempt to access beyond end of device [ 378.669076][T18098] loop5: rw=4096, want=32768, limit=29542 [ 378.695471][T18040] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 378.715962][T18098] XFS (loop5): last sector read failed [ 378.727629][T18097] hfsplus: session requires an argument [ 378.752786][T18097] hfsplus: unable to parse mount options [ 378.772432][T18040] 00000000: 58 46 53 42 0e 00 10 00 00 00 00 00 00 00 10 00 XFSB............ 04:29:53 executing program 2: syz_emit_ethernet(0x0, &(0x7f0000000000)=ANY=[], 0x0) shmget(0x0, 0x4000, 0x40, &(0x7f0000ff9000/0x4000)=nil) [ 378.823398][T18040] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 04:29:53 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x23ca5e9c00000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 378.866282][T18040] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 378.913073][T18040] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 378.962522][T18040] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 379.011267][T18040] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 379.039257][T18125] hfsplus: session requires an argument [ 379.052277][T18125] hfsplus: unable to parse mount options [ 379.063365][T18040] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 379.103702][T18040] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 379.112636][T18040] XFS (loop3): SB validate failed with error -117. [ 379.160730][T18125] hfsplus: session requires an argument [ 379.171090][T18125] hfsplus: unable to parse mount options [ 379.238264][T18098] attempt to access beyond end of device [ 379.277355][T18098] loop5: rw=4096, want=32768, limit=29542 [ 379.313860][T18098] XFS (loop5): last sector read failed 04:29:53 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534210001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:53 executing program 2: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 04:29:53 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xd600, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:29:53 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x3f00000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:54 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xc400, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 379.644934][T18147] hfsplus: session requires an argument [ 379.659820][T18147] hfsplus: unable to parse mount options 04:29:54 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xc400, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 379.815776][T18147] hfsplus: session requires an argument [ 379.832217][T18147] hfsplus: unable to parse mount options [ 379.889766][T18157] XFS (loop3): SB sanity check failed [ 379.905314][T18157] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 379.933000][T18161] attempt to access beyond end of device 04:29:54 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 379.941901][T18161] loop5: rw=4096, want=32768, limit=29542 [ 379.982271][T18161] XFS (loop5): last sector read failed [ 379.988631][T18157] XFS (loop3): Unmount and run xfs_repair [ 379.994434][T18189] hfsplus: session requires an argument [ 379.994442][T18189] hfsplus: unable to parse mount options [ 380.041611][T18157] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 380.055314][T18189] hfsplus: session requires an argument [ 380.060905][T18189] hfsplus: unable to parse mount options [ 380.079684][T18157] 00000000: 58 46 53 42 10 00 10 00 00 00 00 00 00 00 10 00 XFSB............ 04:29:54 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x4800000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 380.133967][T18157] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 04:29:54 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) r6 = dup(r1) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="828c246b6b47a397fc1eeacc69af299477241e95d1b321d2b64d3688b3512839ca8b00000000000000050951fbfa7c9eb9e19021a55a03ab8f7e0a4ab78a38918d8ffb9cdc808adbd86f75ea0bc2d71771b3a3bddc6e5ffdc14ff421f3ef13f77005d540ab62cbe10e9d1c77c77dd43c04281fa2249b5c9ebf04bf0414086db95857e514fceb5c92e9150bad1016f7b455b1ebf745f5ae0f4ba882d784ab6b4dbece483457e6", @ANYRES16=r10, @ANYRESHEX], 0x3}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=r10, @ANYBLOB="140329bd7000fbdbdf250a0000002c00018006000200370000000c000700040000000300000008000500040000000c00070010000000000000000800060005000000080005000002000040000180080009008000000014000300ac1414aa0000000000000000000000000800050000000000060001000a00000008000b0073697000080005000300000028000000000000000000000000000000000108000500ac1414aa08000500403500cd89f7764f13913089000800050012e4032f68000180060002005c0000000c000700040000000400000008000600777272001400030000000000000000000000000000000001060004004e210000140003008314f637172315bca79b636b495c0900080008003f000000060004004e230000060004004e2300"/307], 0x3}, 0x1, 0x0, 0x0, 0x48000}, 0x4c850) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r11, r0) [ 380.220251][T18157] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 380.327881][T18157] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 380.336354][T18200] hfsplus: session requires an argument [ 380.342781][T18200] hfsplus: unable to parse mount options 04:29:54 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x4c00000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 380.377819][T18199] block nbd2: shutting down sockets 04:29:54 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xca03, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 380.417194][T18157] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 380.437471][T18157] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 380.456720][T18157] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... 04:29:54 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) r6 = dup(r1) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="828c246b6b47a397fc1eeacc69af299477241e95d1b321d2b64d3688b3512839ca8b00000000000000050951fbfa7c9eb9e19021a55a03ab8f7e0a4ab78a38918d8ffb9cdc808adbd86f75ea0bc2d71771b3a3bddc6e5ffdc14ff421f3ef13f77005d540ab62cbe10e9d1c77c77dd43c04281fa2249b5c9ebf04bf0414086db95857e514fceb5c92e9150bad1016f7b455b1ebf745f5ae0f4ba882d784ab6b4dbece483457e6", @ANYRES16=r10, @ANYRESHEX], 0x3}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=r10, @ANYBLOB="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"/307], 0x3}, 0x1, 0x0, 0x0, 0x48000}, 0x4c850) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r11, r0) [ 380.484284][T18157] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 380.494701][T18157] XFS (loop3): SB validate failed with error -117. [ 380.630398][T18211] block nbd2: shutting down sockets [ 380.630503][T18214] hfsplus: session requires an argument [ 380.670150][T18209] attempt to access beyond end of device [ 380.680478][T18209] loop5: rw=4096, want=32768, limit=29542 [ 380.700303][T18214] hfsplus: unable to parse mount options [ 380.714691][T18209] XFS (loop5): last sector read failed 04:29:55 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534223001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:55 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xd700, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:29:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) r6 = dup(r1) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="828c246b6b47a397fc1eeacc69af299477241e95d1b321d2b64d3688b3512839ca8b00000000000000050951fbfa7c9eb9e19021a55a03ab8f7e0a4ab78a38918d8ffb9cdc808adbd86f75ea0bc2d71771b3a3bddc6e5ffdc14ff421f3ef13f77005d540ab62cbe10e9d1c77c77dd43c04281fa2249b5c9ebf04bf0414086db95857e514fceb5c92e9150bad1016f7b455b1ebf745f5ae0f4ba882d784ab6b4dbece483457e6", @ANYRES16=r10, @ANYRESHEX], 0x3}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=r10, @ANYBLOB="140329bd7000fbdbdf250a0000002c00018006000200370000000c000700040000000300000008000500040000000c00070010000000000000000800060005000000080005000002000040000180080009008000000014000300ac1414aa0000000000000000000000000800050000000000060001000a00000008000b0073697000080005000300000028000000000000000000000000000000000108000500ac1414aa08000500403500cd89f7764f13913089000800050012e4032f68000180060002005c0000000c000700040000000400000008000600777272001400030000000000000000000000000000000001060004004e210000140003008314f637172315bca79b636b495c0900080008003f000000060004004e230000060004004e2300"/307], 0x3}, 0x1, 0x0, 0x0, 0x48000}, 0x4c850) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r11, r0) 04:29:55 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x6000000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:55 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xc500, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 381.030569][T18228] block nbd2: shutting down sockets 04:29:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) r6 = dup(r1) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="828c246b6b47a397fc1eeacc69af299477241e95d1b321d2b64d3688b3512839ca8b00000000000000050951fbfa7c9eb9e19021a55a03ab8f7e0a4ab78a38918d8ffb9cdc808adbd86f75ea0bc2d71771b3a3bddc6e5ffdc14ff421f3ef13f77005d540ab62cbe10e9d1c77c77dd43c04281fa2249b5c9ebf04bf0414086db95857e514fceb5c92e9150bad1016f7b455b1ebf745f5ae0f4ba882d784ab6b4dbece483457e6", @ANYRES16=r10, @ANYRESHEX], 0x3}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=r10, @ANYBLOB="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"/307], 0x3}, 0x1, 0x0, 0x0, 0x48000}, 0x4c850) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r11, r0) [ 381.099185][ T5] XFS (loop3): SB sanity check failed [ 381.106299][ T5] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 381.133466][ T5] XFS (loop3): Unmount and run xfs_repair [ 381.154229][ T5] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 381.171172][ T5] 00000000: 58 46 53 42 23 00 10 00 00 00 00 00 00 00 10 00 XFSB#........... [ 381.191847][ T5] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 381.211485][ T5] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 381.231191][ T5] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 381.251992][ T5] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 381.271932][ T5] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 381.283720][ T5] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 381.292846][ T5] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 381.303017][T18234] XFS (loop3): SB validate failed with error -117. [ 381.311864][T18232] hfsplus: session requires an argument [ 381.327424][T18232] hfsplus: unable to parse mount options 04:29:55 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x6800000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 381.380148][T18209] attempt to access beyond end of device [ 381.397216][T18209] loop5: rw=4096, want=32768, limit=29542 [ 381.433692][T18209] XFS (loop5): last sector read failed [ 381.503289][T18255] block nbd2: shutting down sockets [ 381.537473][T18259] hfsplus: session requires an argument [ 381.543424][T18259] hfsplus: unable to parse mount options 04:29:55 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) r6 = dup(r1) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="828c246b6b47a397fc1eeacc69af299477241e95d1b321d2b64d3688b3512839ca8b00000000000000050951fbfa7c9eb9e19021a55a03ab8f7e0a4ab78a38918d8ffb9cdc808adbd86f75ea0bc2d71771b3a3bddc6e5ffdc14ff421f3ef13f77005d540ab62cbe10e9d1c77c77dd43c04281fa2249b5c9ebf04bf0414086db95857e514fceb5c92e9150bad1016f7b455b1ebf745f5ae0f4ba882d784ab6b4dbece483457e6", @ANYRES16=r10, @ANYRESHEX], 0x3}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=r10, @ANYBLOB="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"/307], 0x3}, 0x1, 0x0, 0x0, 0x48000}, 0x4c850) dup2(0xffffffffffffffff, r0) [ 381.650597][T18259] hfsplus: session requires an argument [ 381.673606][T18259] hfsplus: unable to parse mount options [ 381.741588][T18234] XFS (loop3): SB sanity check failed [ 381.748537][T18234] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 381.765326][T18270] block nbd2: shutting down sockets 04:29:56 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xd800, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:29:56 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) r6 = dup(r1) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="828c246b6b47a397fc1eeacc69af299477241e95d1b321d2b64d3688b3512839ca8b00000000000000050951fbfa7c9eb9e19021a55a03ab8f7e0a4ab78a38918d8ffb9cdc808adbd86f75ea0bc2d71771b3a3bddc6e5ffdc14ff421f3ef13f77005d540ab62cbe10e9d1c77c77dd43c04281fa2249b5c9ebf04bf0414086db95857e514fceb5c92e9150bad1016f7b455b1ebf745f5ae0f4ba882d784ab6b4dbece483457e6", @ANYRES16=r10, @ANYRESHEX], 0x3}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=r10, @ANYBLOB="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"/307], 0x3}, 0x1, 0x0, 0x0, 0x48000}, 0x4c850) dup2(0xffffffffffffffff, r0) 04:29:56 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xcc02, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:56 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x6c00000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 381.818548][T18234] XFS (loop3): Unmount and run xfs_repair [ 381.916349][T18234] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 381.956723][T18234] 00000000: 58 46 53 42 23 00 10 00 00 00 00 00 00 00 10 00 XFSB#........... [ 382.023266][T18279] block nbd2: shutting down sockets [ 382.030124][T18234] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 382.119731][T18234] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 382.138769][T18286] hfsplus: session requires an argument [ 382.149396][T18286] hfsplus: unable to parse mount options [ 382.157528][T18234] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 382.170623][T18234] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 382.181689][T18234] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 382.199107][T18234] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 382.210329][T18234] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 382.225436][T18234] XFS (loop3): SB validate failed with error -117. [ 382.252146][T18286] hfsplus: session requires an argument [ 382.258500][T18286] hfsplus: unable to parse mount options 04:29:56 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="584653423c001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:56 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xc600, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:29:56 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) r6 = dup(r1) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="828c246b6b47a397fc1eeacc69af299477241e95d1b321d2b64d3688b3512839ca8b00000000000000050951fbfa7c9eb9e19021a55a03ab8f7e0a4ab78a38918d8ffb9cdc808adbd86f75ea0bc2d71771b3a3bddc6e5ffdc14ff421f3ef13f77005d540ab62cbe10e9d1c77c77dd43c04281fa2249b5c9ebf04bf0414086db95857e514fceb5c92e9150bad1016f7b455b1ebf745f5ae0f4ba882d784ab6b4dbece483457e6", @ANYRES16=r10, @ANYRESHEX], 0x3}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=r10, @ANYBLOB="140329bd7000fbdbdf250a0000002c00018006000200370000000c000700040000000300000008000500040000000c00070010000000000000000800060005000000080005000002000040000180080009008000000014000300ac1414aa0000000000000000000000000800050000000000060001000a00000008000b0073697000080005000300000028000000000000000000000000000000000108000500ac1414aa08000500403500cd89f7764f13913089000800050012e4032f68000180060002005c0000000c000700040000000400000008000600777272001400030000000000000000000000000000000001060004004e210000140003008314f637172315bca79b636b495c0900080008003f000000060004004e230000060004004e2300"/307], 0x3}, 0x1, 0x0, 0x0, 0x48000}, 0x4c850) dup2(0xffffffffffffffff, r0) 04:29:56 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xedc0, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:56 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x7400000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 382.624311][T18304] hfsplus: session requires an argument [ 382.631952][T18298] block nbd2: shutting down sockets 04:29:57 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) r6 = dup(r1) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="828c246b6b47a397fc1eeacc69af299477241e95d1b321d2b64d3688b3512839ca8b00000000000000050951fbfa7c9eb9e19021a55a03ab8f7e0a4ab78a38918d8ffb9cdc808adbd86f75ea0bc2d71771b3a3bddc6e5ffdc14ff421f3ef13f77005d540ab62cbe10e9d1c77c77dd43c04281fa2249b5c9ebf04bf0414086db95857e514fceb5c92e9150bad1016f7b455b1ebf745f5ae0f4ba882d784ab6b4dbece483457e6", @ANYRES16=r10, @ANYRESHEX], 0x3}}, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r11, r0) [ 382.667111][T18304] hfsplus: unable to parse mount options [ 382.688289][T18302] attempt to access beyond end of device [ 382.698895][T18302] loop5: rw=4096, want=32768, limit=29542 [ 382.745315][T18302] XFS (loop5): last sector read failed [ 382.778893][T18304] hfsplus: session requires an argument [ 382.801700][T18304] hfsplus: unable to parse mount options [ 382.840609][ T5] XFS (loop3): SB sanity check failed [ 382.849293][ T5] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 382.874590][ T5] XFS (loop3): Unmount and run xfs_repair [ 382.887362][ T5] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 382.902941][ T5] 00000000: 58 46 53 42 3c 00 10 00 00 00 00 00 00 00 10 00 XFSB<........... [ 382.919785][ T5] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 382.933265][ T5] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 382.942387][ T5] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 04:29:57 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x7a00000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 382.951454][ T5] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 382.963922][ T5] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 382.972939][ T5] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 382.983231][ T5] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 382.993065][T18311] XFS (loop3): SB validate failed with error -117. 04:29:57 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xd900, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 383.028253][T18330] block nbd2: shutting down sockets 04:29:57 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) r6 = dup(r1) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') r9 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r9, r0) [ 383.169226][T18337] hfsplus: session requires an argument [ 383.183309][T18337] hfsplus: unable to parse mount options [ 383.243036][T18302] attempt to access beyond end of device [ 383.254223][T18302] loop5: rw=4096, want=32768, limit=29542 [ 383.297287][T18302] XFS (loop5): last sector read failed [ 383.306487][T18337] hfsplus: session requires an argument [ 383.312518][T18337] hfsplus: unable to parse mount options [ 383.342780][ T12] XFS (loop3): SB sanity check failed [ 383.346567][T18352] block nbd2: shutting down sockets [ 383.349815][ T12] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 383.365840][ T12] XFS (loop3): Unmount and run xfs_repair [ 383.371577][ T12] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 383.393506][ T12] 00000000: 58 46 53 42 3c 00 10 00 00 00 00 00 00 00 10 00 XFSB<........... [ 383.402396][ T12] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 383.423490][ T12] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 383.432441][ T12] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 383.453477][ T12] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 383.473730][ T12] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 383.482617][ T12] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 383.496146][ T12] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 383.513711][T18311] XFS (loop3): SB validate failed with error -117. 04:29:57 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x8cffffff00000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:57 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) r6 = dup(r1) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r9, r0) 04:29:58 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xc700, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 383.776160][T18370] hfsplus: session requires an argument [ 383.781760][T18370] hfsplus: unable to parse mount options [ 383.856374][T18373] block nbd2: shutting down sockets [ 383.970202][T18370] hfsplus: session requires an argument [ 383.983479][T18370] hfsplus: unable to parse mount options 04:29:58 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534248001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:58 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xf003, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) r6 = dup(r1) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r9, r0) 04:29:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) r6 = dup(r1) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r8, r0) [ 384.059623][T18383] block nbd2: shutting down sockets 04:29:58 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x97ffffff00000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:58 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xda00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 384.159700][T18387] block nbd2: shutting down sockets [ 384.205541][T18386] attempt to access beyond end of device [ 384.215892][T18402] hfsplus: session requires an argument [ 384.216933][T18386] loop5: rw=4096, want=32768, limit=29542 [ 384.221915][T18402] hfsplus: unable to parse mount options [ 384.237428][ T12] XFS (loop3): SB sanity check failed [ 384.244019][ T12] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 384.256416][ T12] XFS (loop3): Unmount and run xfs_repair [ 384.262155][ T12] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 384.269768][ T12] 00000000: 58 46 53 42 48 00 10 00 00 00 00 00 00 00 10 00 XFSBH........... [ 384.278850][ T12] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 384.294425][T18402] hfsplus: session requires an argument [ 384.300596][T18402] hfsplus: unable to parse mount options 04:29:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) r6 = dup(r1) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r8, r0) [ 384.306263][T18386] XFS (loop5): last sector read failed [ 384.313485][ T12] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 384.375497][ T12] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 384.402813][ T12] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 384.423135][ T12] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 384.435615][ T12] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 384.450059][ T12] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 384.465812][T18394] XFS (loop3): SB validate failed with error -117. 04:29:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) r6 = dup(r1) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r8, r0) [ 384.478149][T18416] block nbd2: shutting down sockets 04:29:58 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xf6ffffff00000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 384.672740][T18418] block nbd2: shutting down sockets 04:29:59 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) r6 = dup(r1) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) [ 384.719217][T18422] hfsplus: session requires an argument [ 384.731986][T18422] hfsplus: unable to parse mount options 04:29:59 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xc800, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 384.805503][T18386] attempt to access beyond end of device [ 384.812446][T18386] loop5: rw=4096, want=32768, limit=29542 [ 384.828783][T18386] XFS (loop5): last sector read failed [ 384.846051][T18437] block nbd2: shutting down sockets [ 384.863043][T18422] hfsplus: session requires an argument [ 384.874920][T18422] hfsplus: unable to parse mount options 04:29:59 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) r6 = dup(r1) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) [ 384.935080][T18394] XFS (loop3): SB sanity check failed [ 384.941712][T18394] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 385.002000][T18394] XFS (loop3): Unmount and run xfs_repair [ 385.024985][T18394] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 385.049740][T18394] 00000000: 58 46 53 42 48 00 10 00 00 00 00 00 00 00 10 00 XFSBH........... [ 385.070952][T18394] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 385.096970][T18451] block nbd2: shutting down sockets [ 385.102548][T18394] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 385.139796][T18394] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 385.223456][T18394] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 385.253102][T18394] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 385.273429][T18394] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 385.282329][T18394] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 385.313451][T18394] XFS (loop3): SB validate failed with error -117. 04:29:59 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="584653424c001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:59 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xf9fdffff00000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:29:59 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xf203, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:29:59 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) r6 = dup(r1) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) 04:29:59 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xdb00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 385.672802][T18445] XFS (loop4): device supports 512 byte sectors (not 0) [ 385.757747][T18471] block nbd2: shutting down sockets [ 385.784868][T18474] hfsplus: session requires an argument [ 385.790939][T18474] hfsplus: unable to parse mount options [ 385.817260][T18473] attempt to access beyond end of device [ 385.829024][T18473] loop5: rw=4096, want=32768, limit=29542 04:30:00 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) r6 = dup(r1) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r6) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r8, r0) [ 385.857511][T18473] XFS (loop5): last sector read failed [ 385.861162][T18479] XFS (loop3): SB sanity check failed [ 385.884436][T18479] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 385.900651][T18474] hfsplus: session requires an argument [ 385.911007][T18479] XFS (loop3): Unmount and run xfs_repair [ 385.916901][T18474] hfsplus: unable to parse mount options [ 385.936139][T18479] XFS (loop3): First 128 bytes of corrupted metadata buffer: 04:30:00 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xfcfdffff00000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 385.983721][T18479] 00000000: 58 46 53 42 4c 00 10 00 00 00 00 00 00 00 10 00 XFSBL........... [ 385.989911][T18500] block nbd2: shutting down sockets 04:30:00 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xc900, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 386.046948][T18479] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 04:30:00 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) r6 = dup(r1) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r6) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r8, r0) [ 386.097287][T18479] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 386.122041][T18502] hfsplus: session requires an argument [ 386.142778][T18502] hfsplus: unable to parse mount options [ 386.169226][T18479] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 04:30:00 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) r6 = dup(r1) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r6) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r8, r0) [ 386.221374][T18479] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 386.226165][T18511] block nbd2: shutting down sockets [ 386.252823][T18473] attempt to access beyond end of device [ 386.272208][T18502] hfsplus: session requires an argument [ 386.283675][T18479] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 386.292923][T18479] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 386.302232][T18479] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 386.310642][T18473] loop5: rw=4096, want=32768, limit=29542 [ 386.311976][T18479] XFS (loop3): SB validate failed with error -117. [ 386.323361][T18502] hfsplus: unable to parse mount options [ 386.344897][T18473] XFS (loop5): last sector read failed 04:30:00 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xfdfdffff00000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 386.368818][T18523] block nbd2: shutting down sockets 04:30:00 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) dup(r1) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r8, r0) [ 386.504149][T18527] hfsplus: session requires an argument [ 386.518180][T18527] hfsplus: unable to parse mount options [ 386.604643][T18527] hfsplus: session requires an argument [ 386.610238][T18527] hfsplus: unable to parse mount options [ 386.650923][T18537] block nbd2: shutting down sockets 04:30:01 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534260001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:01 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xdc00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:01 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xf801, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r8, r0) 04:30:01 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xfdffffff00000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 386.972399][T18545] XFS (loop3): SB sanity check failed [ 386.979392][T18545] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 386.983189][T18552] block nbd2: shutting down sockets [ 387.024163][T18559] hfsplus: session requires an argument 04:30:01 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xca00, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 387.070921][T18559] hfsplus: unable to parse mount options [ 387.073593][T18550] attempt to access beyond end of device [ 387.088553][T18545] XFS (loop3): Unmount and run xfs_repair [ 387.096101][T18550] loop5: rw=4096, want=32768, limit=29542 04:30:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) [ 387.122030][T18545] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 387.127851][T18550] XFS (loop5): last sector read failed [ 387.135310][T18545] 00000000: 58 46 53 42 60 00 10 00 00 00 00 00 00 00 10 00 XFSB`........... [ 387.135322][T18545] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 387.135341][T18545] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 387.173532][T18545] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 387.199168][T18545] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 387.212961][T18559] hfsplus: session requires an argument [ 387.230131][T18559] hfsplus: unable to parse mount options [ 387.242194][T18575] block nbd2: shutting down sockets [ 387.245213][T18545] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 04:30:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) 04:30:01 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xff00000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 387.323630][T18545] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 387.338273][T18545] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 387.378404][T18545] XFS (loop3): SB validate failed with error -117. [ 387.434012][T18577] block nbd2: shutting down sockets 04:30:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) [ 387.532197][T18581] hfsplus: session requires an argument 04:30:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) [ 387.583771][T18581] hfsplus: unable to parse mount options [ 387.586206][T18584] block nbd2: shutting down sockets 04:30:02 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534264001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 387.734356][T18581] hfsplus: session requires an argument [ 387.741473][T18581] hfsplus: unable to parse mount options 04:30:02 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xdd00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:02 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xff0f000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 387.864208][T18596] block nbd2: shutting down sockets 04:30:02 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xff00, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) dup2(0xffffffffffffffff, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) [ 387.987518][T18608] hfsplus: session requires an argument [ 388.011349][T18608] hfsplus: unable to parse mount options [ 388.027301][ T5] XFS (loop3): SB sanity check failed [ 388.037954][ T5] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 388.067543][ T5] XFS (loop3): Unmount and run xfs_repair [ 388.084264][ T5] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 388.084309][T18608] hfsplus: session requires an argument [ 388.100770][ T5] 00000000: 58 46 53 42 64 00 10 00 00 00 00 00 00 00 10 00 XFSBd........... [ 388.118448][ T5] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 388.128518][ T5] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 388.138149][ T5] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 388.147055][T18616] block nbd2: shutting down sockets [ 388.147889][ T5] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 388.162065][ T5] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 388.171794][ T5] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... 04:30:02 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xcb00, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 388.181170][ T5] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 388.190662][T18602] XFS (loop3): SB validate failed with error -117. [ 388.198308][T18618] attempt to access beyond end of device [ 388.221314][T18618] loop5: rw=4096, want=32768, limit=29542 [ 388.237644][T18608] hfsplus: unable to parse mount options 04:30:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) dup2(0xffffffffffffffff, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) [ 388.268617][T18618] XFS (loop5): last sector read failed 04:30:02 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xffffff7f00000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 388.490343][T18639] hfsplus: session requires an argument [ 388.502850][T18639] hfsplus: unable to parse mount options [ 388.504661][T18635] block nbd2: shutting down sockets 04:30:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) dup2(0xffffffffffffffff, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) [ 388.632863][T18639] hfsplus: session requires an argument [ 388.643411][T18639] hfsplus: unable to parse mount options [ 388.705348][T18618] attempt to access beyond end of device [ 388.711173][T18618] loop5: rw=4096, want=32768, limit=29542 [ 388.773835][T18654] block nbd2: shutting down sockets 04:30:03 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xffffffff00000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 388.796887][T18618] XFS (loop5): last sector read failed 04:30:03 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534268001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) dup(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) 04:30:03 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xde00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:03 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="584653426c001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:03 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:03 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xff0f, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) dup(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) 04:30:03 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xcc00, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 389.289827][T18679] hfsplus: session requires an argument [ 389.314822][ T12] XFS (loop3): SB sanity check failed [ 389.320431][ T12] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 389.331854][T18679] hfsplus: unable to parse mount options [ 389.353209][ T12] XFS (loop3): Unmount and run xfs_repair [ 389.358999][ T12] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 389.382196][ T12] 00000000: 58 46 53 42 6c 00 10 00 00 00 00 00 00 00 10 00 XFSBl........... [ 389.403188][ T12] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 389.412082][ T12] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 389.443207][ T12] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 389.452105][ T12] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 389.475394][T18679] hfsplus: session requires an argument [ 389.483229][ T12] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 389.492805][ T12] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 389.512533][T18679] hfsplus: unable to parse mount options [ 389.513285][ T12] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 389.543268][T18674] XFS (loop3): SB validate failed with error -117. [ 389.550859][T18691] attempt to access beyond end of device 04:30:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) dup(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) [ 389.573474][T18691] loop5: rw=4096, want=32768, limit=29542 [ 389.610357][T18691] XFS (loop5): last sector read failed 04:30:04 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x2, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r0) [ 389.921423][T18710] hfsplus: session requires an argument [ 389.939511][ T3085] XFS (loop3): SB sanity check failed [ 389.946423][ T3085] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 389.952611][T18710] hfsplus: unable to parse mount options [ 389.971900][ T3085] XFS (loop3): Unmount and run xfs_repair [ 390.000016][ T3085] XFS (loop3): First 128 bytes of corrupted metadata buffer: 04:30:04 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xdf00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 390.015529][ T3085] 00000000: 58 46 53 42 6c 00 10 00 00 00 00 00 00 00 10 00 XFSBl........... [ 390.040687][ T3085] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 390.060030][ T3085] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 04:30:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r0) [ 390.079235][ T3085] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 390.099928][ T3085] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 390.122933][ T3085] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 390.140939][ T3085] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 390.153320][ T3085] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 390.166311][T18674] XFS (loop3): SB validate failed with error -117. 04:30:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r0) [ 390.196846][T18710] hfsplus: session requires an argument [ 390.234170][T18710] hfsplus: unable to parse mount options 04:30:04 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x16143, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:04 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534274001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) 04:30:04 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xcd00, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:30:04 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x3, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 390.689112][T18743] attempt to access beyond end of device [ 390.702447][T18743] loop5: rw=4096, want=32768, limit=29542 [ 390.731142][T18743] XFS (loop5): last sector read failed [ 390.752342][T18756] hfsplus: session requires an argument [ 390.771799][T18756] hfsplus: unable to parse mount options 04:30:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) [ 390.894259][T18756] hfsplus: session requires an argument [ 390.901737][T18756] hfsplus: unable to parse mount options [ 390.912294][T18765] XFS (loop3): SB sanity check failed [ 390.923076][T18765] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 390.937492][T18739] XFS (loop1): SB sanity check failed [ 390.944751][T18739] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 390.966140][T18765] XFS (loop3): Unmount and run xfs_repair [ 390.972281][T18739] XFS (loop1): Unmount and run xfs_repair [ 390.979117][T18765] XFS (loop3): First 128 bytes of corrupted metadata buffer: 04:30:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) 04:30:05 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x4, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 390.990209][T18739] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 391.003658][T18765] 00000000: 58 46 53 42 74 00 10 00 00 00 00 00 00 00 10 00 XFSBt........... [ 391.012915][T18739] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 391.022608][T18765] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 391.045562][T18739] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 391.056755][T18765] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 391.072697][T18739] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 391.086736][T18765] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 391.103724][T18739] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 391.125224][T18765] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 391.140761][T18739] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 391.162460][T18793] hfsplus: session requires an argument [ 391.170356][T18765] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 391.195181][T18743] attempt to access beyond end of device [ 391.200262][T18739] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 04:30:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) [ 391.202086][T18743] loop5: rw=4096, want=32768, limit=29542 [ 391.219756][T18793] hfsplus: unable to parse mount options [ 391.243571][T18765] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 391.287454][T18743] XFS (loop5): last sector read failed [ 391.304225][T18739] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 391.345560][T18765] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 391.380673][T18739] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 391.417763][T18765] XFS (loop3): SB validate failed with error -117. [ 391.452548][T18739] XFS (loop1): SB validate failed with error -117. 04:30:06 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) 04:30:06 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x5, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:06 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xce00, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:30:06 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x16144, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:06 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xe000, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:06 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="584653427a001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 391.898398][T18821] hfsplus: session requires an argument [ 391.905541][T18821] hfsplus: unable to parse mount options [ 391.932495][ T2727] XFS (loop3): SB sanity check failed [ 391.938423][ T2727] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 391.941885][T18818] attempt to access beyond end of device [ 391.958638][T18821] hfsplus: session requires an argument [ 391.964371][T18821] hfsplus: unable to parse mount options [ 391.979244][ T2727] XFS (loop3): Unmount and run xfs_repair [ 391.993376][ T2727] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 391.993403][ T2727] 00000000: 58 46 53 42 7a 00 10 00 00 00 00 00 00 00 10 00 XFSBz........... [ 391.993414][ T2727] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 391.993425][ T2727] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 391.993436][ T2727] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 391.993453][ T2727] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 391.993463][ T2727] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 391.993476][ T2727] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 392.027063][T18818] loop5: rw=4096, want=32768, limit=29542 [ 392.066507][ T2727] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 392.092665][T18826] XFS (loop3): SB validate failed with error -117. 04:30:06 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) 04:30:06 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x6, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 392.228752][T18818] XFS (loop5): last sector read failed 04:30:06 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) [ 392.368343][T18851] hfsplus: session requires an argument [ 392.393245][T18851] hfsplus: unable to parse mount options [ 392.437521][T18851] hfsplus: session requires an argument [ 392.445508][T18851] hfsplus: unable to parse mount options [ 392.459814][T18855] block nbd2: shutting down sockets 04:30:06 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x7, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:06 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, 0xffffffffffffffff) 04:30:07 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, 0xffffffffffffffff) [ 392.665277][T18873] hfsplus: session requires an argument [ 392.688413][T18873] hfsplus: unable to parse mount options 04:30:07 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="584653427e001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 392.774723][T18873] hfsplus: session requires an argument [ 392.790616][T18873] hfsplus: unable to parse mount options 04:30:07 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xcf00, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:30:07 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xe100, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:07 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x16145, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:07 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, 0xffffffffffffffff) 04:30:07 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x8, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:07 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) [ 393.057641][T18900] hfsplus: session requires an argument [ 393.084338][T18900] hfsplus: unable to parse mount options [ 393.098478][T14717] XFS (loop3): SB sanity check failed [ 393.113087][T14717] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 393.137842][T14717] XFS (loop3): Unmount and run xfs_repair [ 393.147108][T14717] XFS (loop3): First 128 bytes of corrupted metadata buffer: 04:30:07 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) [ 393.169154][T14717] 00000000: 58 46 53 42 7e 00 10 00 00 00 00 00 00 00 10 00 XFSB~........... [ 393.183600][T18900] hfsplus: session requires an argument [ 393.188216][T14717] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 393.189174][T18900] hfsplus: unable to parse mount options [ 393.212423][T14717] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 393.222024][T14717] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 393.231872][T14717] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 393.244352][T14717] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 04:30:07 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x9, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 393.262477][T14717] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 393.284821][T14717] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 04:30:07 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) [ 393.322163][T18901] XFS (loop3): SB validate failed with error -117. [ 393.330473][T18899] attempt to access beyond end of device [ 393.343231][T18928] hfsplus: session requires an argument [ 393.349109][T18928] hfsplus: unable to parse mount options [ 393.354332][T18899] loop5: rw=4096, want=32768, limit=29542 [ 393.368360][T18899] XFS (loop5): last sector read failed [ 393.442374][T18928] hfsplus: session requires an argument [ 393.461012][T18928] hfsplus: unable to parse mount options 04:30:07 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) 04:30:07 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0xa, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:08 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534282001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 393.790373][T18942] hfsplus: session requires an argument [ 393.796261][T18942] hfsplus: unable to parse mount options 04:30:08 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xd000, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:30:08 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xe200, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:08 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x16146, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) 04:30:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) [ 393.946704][T18942] hfsplus: session requires an argument [ 393.952312][T18942] hfsplus: unable to parse mount options [ 394.035318][T18951] attempt to access beyond end of device [ 394.041004][T18951] loop5: rw=4096, want=32768, limit=29542 [ 394.074705][T14717] XFS (loop3): SB sanity check failed 04:30:08 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0xf, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 394.080300][T14717] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 394.098870][T14717] XFS (loop3): Unmount and run xfs_repair [ 394.107813][T18951] XFS (loop5): last sector read failed [ 394.110509][T14717] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 394.126215][T14717] 00000000: 58 46 53 42 82 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 394.135617][T14717] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 394.144912][T14717] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 394.154180][T14717] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 394.164034][T14717] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 394.173061][T14717] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 04:30:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) [ 394.182021][T14717] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 394.198157][T14717] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 394.213155][T18981] hfsplus: session requires an argument [ 394.218909][T18946] XFS (loop3): SB validate failed with error -117. [ 394.220849][T18981] hfsplus: unable to parse mount options [ 394.293969][T18981] hfsplus: session requires an argument [ 394.307909][T18981] hfsplus: unable to parse mount options 04:30:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) 04:30:08 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x10, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 394.533516][T18951] attempt to access beyond end of device [ 394.544024][T19002] hfsplus: session requires an argument [ 394.553147][T18951] loop5: rw=4096, want=32768, limit=29542 [ 394.558689][T19002] hfsplus: unable to parse mount options 04:30:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) [ 394.586127][T18951] XFS (loop5): last sector read failed [ 394.607221][T18946] XFS (loop3): SB sanity check failed [ 394.616844][T18946] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 394.646615][T19002] hfsplus: session requires an argument [ 394.659485][T19002] hfsplus: unable to parse mount options [ 394.672104][T18946] XFS (loop3): Unmount and run xfs_repair [ 394.686709][T18946] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 394.702111][T18946] 00000000: 58 46 53 42 82 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 394.749207][T18946] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 04:30:09 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x11, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 394.803000][T18946] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 394.831975][T18946] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 394.873949][T18946] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 394.905546][T18946] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 394.925847][T18946] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 394.942712][T18946] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 394.958595][T18946] XFS (loop3): SB validate failed with error -117. [ 394.961576][T19023] hfsplus: session requires an argument [ 394.985617][T19023] hfsplus: unable to parse mount options [ 395.094421][T19023] hfsplus: session requires an argument [ 395.100017][T19023] hfsplus: unable to parse mount options 04:30:09 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534244011000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) 04:30:09 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xe300, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:09 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x16147, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:09 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xd100, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:30:09 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x48, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) [ 395.347557][T19044] hfsplus: session requires an argument [ 395.361222][T19044] hfsplus: unable to parse mount options [ 395.389859][T19040] attempt to access beyond end of device [ 395.397918][T19040] loop5: rw=4096, want=32768, limit=29542 [ 395.432298][T19040] XFS (loop5): last sector read failed [ 395.438802][T19053] XFS (loop3): SB sanity check failed [ 395.447780][T19053] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 395.460489][T19053] XFS (loop3): Unmount and run xfs_repair [ 395.464644][T19044] hfsplus: session requires an argument [ 395.472662][T19044] hfsplus: unable to parse mount options [ 395.473208][T19053] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 395.486561][T19053] 00000000: 58 46 53 42 44 01 10 00 00 00 00 00 00 00 10 00 XFSBD........... [ 395.496187][T19053] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 395.505643][T19053] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 395.515058][T19053] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 04:30:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) [ 395.524665][T19053] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 395.533947][T19053] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 395.544852][T19053] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 395.555726][T19053] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 395.566638][T19053] XFS (loop3): SB validate failed with error -117. 04:30:09 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x4c, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) [ 395.841870][T19072] hfsplus: session requires an argument [ 395.851178][T19072] hfsplus: unable to parse mount options 04:30:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) 04:30:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) [ 396.013015][T19072] hfsplus: session requires an argument [ 396.041588][T19072] hfsplus: unable to parse mount options [ 396.068251][T19040] attempt to access beyond end of device [ 396.092888][T19040] loop5: rw=4096, want=32768, limit=29542 [ 396.098795][T19040] XFS (loop5): last sector read failed 04:30:10 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534280011000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:10 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xe400, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:10 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xd200, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:30:10 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x16148, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:10 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x60, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, 0x0) dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) [ 396.529508][T19116] block nbd2: shutting down sockets [ 396.549507][T19112] XFS (loop3): SB sanity check failed [ 396.555221][T19112] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff 04:30:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, 0x0) dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) [ 396.622428][T19123] hfsplus: session requires an argument [ 396.636683][T19112] XFS (loop3): Unmount and run xfs_repair [ 396.671791][T19123] hfsplus: unable to parse mount options [ 396.684995][T19112] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 396.699105][T19128] attempt to access beyond end of device [ 396.706680][T19128] loop5: rw=4096, want=32768, limit=29542 [ 396.720748][T19128] XFS (loop5): last sector read failed [ 396.728705][T19112] 00000000: 58 46 53 42 80 01 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 396.748375][T19112] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 396.757669][T19112] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 396.767115][T19112] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 396.794411][T19123] hfsplus: session requires an argument [ 396.800008][T19123] hfsplus: unable to parse mount options [ 396.801351][T19112] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 396.832237][T19112] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 396.840917][T19137] block nbd2: shutting down sockets 04:30:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, 0x0) dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) 04:30:11 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x68, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 396.903259][T19112] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 396.912309][T19112] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 396.977446][T19112] XFS (loop3): SB validate failed with error -117. [ 397.081196][T19145] block nbd2: shutting down sockets 04:30:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(0xffffffffffffffff, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) [ 397.117487][T19153] hfsplus: session requires an argument [ 397.131678][T19153] hfsplus: unable to parse mount options [ 397.214755][T19153] hfsplus: session requires an argument [ 397.225438][T19153] hfsplus: unable to parse mount options [ 397.282498][T19159] block nbd2: shutting down sockets 04:30:11 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x6c, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(0xffffffffffffffff, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) 04:30:11 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534294011000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:11 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xe500, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:11 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xd300, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:30:11 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x16149, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 397.508293][T19169] block nbd2: shutting down sockets 04:30:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(0xffffffffffffffff, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) [ 397.654094][T19175] hfsplus: session requires an argument [ 397.661292][T19175] hfsplus: unable to parse mount options [ 397.759294][T19175] hfsplus: session requires an argument [ 397.769619][T19183] attempt to access beyond end of device [ 397.775770][T19176] XFS (loop3): SB sanity check failed [ 397.781700][T19176] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 397.796540][T19183] loop5: rw=4096, want=32768, limit=29542 [ 397.807416][T19188] block nbd2: shutting down sockets [ 397.826468][T19175] hfsplus: unable to parse mount options [ 397.834936][T19183] XFS (loop5): last sector read failed 04:30:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) 04:30:12 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x74, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 397.866509][T19176] XFS (loop3): Unmount and run xfs_repair [ 397.897763][T19176] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 397.937053][T19176] 00000000: 58 46 53 42 94 01 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 397.979597][T19206] block nbd2: shutting down sockets [ 397.988291][T19176] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 04:30:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) [ 398.046048][T19176] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 398.068328][T19210] hfsplus: session requires an argument [ 398.079373][T19210] hfsplus: unable to parse mount options [ 398.107642][T19213] block nbd2: shutting down sockets 04:30:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) [ 398.133678][T19176] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 398.151693][T19183] attempt to access beyond end of device [ 398.179123][T19183] loop5: rw=4096, want=32768, limit=29542 [ 398.192555][T19183] XFS (loop5): last sector read failed [ 398.203726][T19210] hfsplus: session requires an argument [ 398.209415][T19210] hfsplus: unable to parse mount options [ 398.225792][T19176] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 398.228481][T19224] block nbd2: shutting down sockets [ 398.263371][T19176] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 398.273790][T19176] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 398.284065][T19176] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 398.294459][T19176] XFS (loop3): SB validate failed with error -117. 04:30:12 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x7a, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) 04:30:12 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xe600, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:12 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="58465342ca011000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:12 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xff00, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) 04:30:12 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x1614a, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 398.590133][T19236] block nbd2: shutting down sockets 04:30:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) [ 398.643105][T19238] hfsplus: session requires an argument [ 398.668997][T19238] hfsplus: unable to parse mount options [ 398.786886][T19238] hfsplus: session requires an argument [ 398.802468][T19238] hfsplus: unable to parse mount options 04:30:13 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x1614b, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) [ 398.860202][T19251] block nbd2: shutting down sockets 04:30:13 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x300, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 399.009720][T19262] block nbd2: shutting down sockets [ 399.019637][ T2926] XFS (loop3): SB sanity check failed [ 399.026858][ T2926] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff 04:30:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) [ 399.080073][ T2926] XFS (loop3): Unmount and run xfs_repair [ 399.099023][ T2926] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 399.117481][ T2926] 00000000: 58 46 53 42 ca 01 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 399.139648][ T2926] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 399.162781][ T2926] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 399.183566][ T2926] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 399.196155][T19266] attempt to access beyond end of device [ 399.205470][T19266] loop5: rw=4096, want=32768, limit=29542 [ 399.219754][T19266] XFS (loop5): last sector read failed [ 399.229263][ T2926] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 399.243459][ T2926] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 399.255261][ T2926] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 399.265030][ T2926] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 399.275418][T19255] XFS (loop3): SB validate failed with error -117. [ 399.290661][T19276] hfsplus: session requires an argument [ 399.296943][T19276] hfsplus: unable to parse mount options [ 399.315611][T19279] block nbd2: shutting down sockets 04:30:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) 04:30:13 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x500, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:13 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xe700, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 399.556514][T19287] block nbd2: shutting down sockets 04:30:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) [ 399.702557][T19266] attempt to access beyond end of device [ 399.722164][T19293] hfsplus: session requires an argument [ 399.725573][T19266] loop5: rw=4096, want=32768, limit=29542 [ 399.728322][T19293] hfsplus: unable to parse mount options 04:30:14 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="58465342f8011000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:14 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x40800, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 399.782903][T19266] XFS (loop5): last sector read failed [ 399.805654][T19311] block nbd2: shutting down sockets 04:30:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) 04:30:14 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x600, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 400.087307][T19319] XFS (loop3): SB sanity check failed [ 400.095021][T19319] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 400.109403][T19319] XFS (loop3): Unmount and run xfs_repair [ 400.116367][T19319] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 400.124482][T19319] 00000000: 58 46 53 42 f8 01 10 00 00 00 00 00 00 00 10 00 XFSB............ 04:30:14 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x1614c, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 400.134669][T19319] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 400.146239][T19319] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 400.151772][T19327] block nbd2: shutting down sockets [ 400.158008][T19319] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 400.171097][T19319] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 400.180981][T19319] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 400.191861][T19319] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 400.201563][T19319] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 400.211786][T19319] XFS (loop3): SB validate failed with error -117. 04:30:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) [ 400.306238][T19329] hfsplus: session requires an argument [ 400.320921][T19329] hfsplus: unable to parse mount options 04:30:14 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x1614d, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 400.446908][T19336] block nbd2: shutting down sockets 04:30:14 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x700, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) 04:30:14 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xe800, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 400.660970][T19348] attempt to access beyond end of device [ 400.689060][T19348] loop5: rw=4096, want=32768, limit=29542 [ 400.719268][T19360] block nbd2: shutting down sockets [ 400.722790][T19348] XFS (loop5): last sector read failed 04:30:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) 04:30:15 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200031000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:15 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x7ffffff2, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 400.969384][T19369] block nbd2: shutting down sockets 04:30:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) [ 401.074922][T19359] hfsplus: session requires an argument [ 401.090945][ T2727] XFS (loop3): SB sanity check failed [ 401.098288][ T2727] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 401.111785][ T2727] XFS (loop3): Unmount and run xfs_repair [ 401.117328][T19359] hfsplus: unable to parse mount options [ 401.119408][ T2727] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 401.133602][ T2727] 00000000: 58 46 53 42 00 03 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 401.144599][ T2727] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 401.154582][ T2727] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 401.164152][ T2727] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 401.182359][ T2727] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 401.201509][ T2727] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 401.218479][T19390] block nbd2: shutting down sockets 04:30:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) [ 401.224879][ T2727] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 401.234575][ T2727] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 401.244828][T19371] XFS (loop3): SB validate failed with error -117. [ 401.257925][T19348] attempt to access beyond end of device [ 401.281674][T19348] loop5: rw=4096, want=32768, limit=29542 04:30:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) [ 401.305659][T19393] block nbd2: shutting down sockets [ 401.320499][T19348] XFS (loop5): last sector read failed 04:30:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) [ 401.406706][T19396] block nbd2: shutting down sockets 04:30:15 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x900, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 401.646554][T19401] block nbd2: shutting down sockets 04:30:16 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x1614e, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:16 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xe900, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) 04:30:16 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x7ffffff8, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 401.841748][T19411] block nbd2: shutting down sockets 04:30:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, 0x0) dup2(r7, r0) 04:30:16 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="584653426e031000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 401.953025][T19400] hfsplus: session requires an argument [ 401.981031][T19400] hfsplus: unable to parse mount options [ 402.017933][T19423] block nbd2: shutting down sockets 04:30:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, 0x0) dup2(r7, r0) [ 402.091454][T19416] attempt to access beyond end of device [ 402.099878][T19416] loop5: rw=4096, want=32768, limit=29542 [ 402.119972][T19416] XFS (loop5): last sector read failed [ 402.183315][T19431] XFS (loop3): SB sanity check failed [ 402.190067][T19431] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 402.203694][T19431] XFS (loop3): Unmount and run xfs_repair [ 402.210537][T19431] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 402.225034][T19431] 00000000: 58 46 53 42 6e 03 10 00 00 00 00 00 00 00 10 00 XFSBn........... [ 402.238417][T19440] block nbd2: shutting down sockets [ 402.238670][T19431] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 402.258540][T19431] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 402.269561][T19431] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 04:30:16 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0xa00, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, 0x0) dup2(r7, r0) [ 402.279958][T19431] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 402.291187][T19431] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 402.301392][T19431] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 402.358482][T19431] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 402.373609][T19431] XFS (loop3): SB validate failed with error -117. [ 402.471843][T19445] block nbd2: shutting down sockets 04:30:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(0xffffffffffffffff, r0) [ 402.565388][T19416] attempt to access beyond end of device [ 402.580820][T19416] loop5: rw=4096, want=32768, limit=29542 [ 402.622951][T19416] XFS (loop5): last sector read failed [ 402.626018][T19456] block nbd2: shutting down sockets [ 402.683588][T19447] hfsplus: session requires an argument 04:30:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(0xffffffffffffffff, r0) [ 402.733243][T19447] hfsplus: unable to parse mount options [ 402.752471][T19431] XFS (loop3): SB sanity check failed [ 402.758570][T19431] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff 04:30:17 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xea00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 402.807371][T19431] XFS (loop3): Unmount and run xfs_repair [ 402.869107][T19472] block nbd2: shutting down sockets [ 402.887096][T19431] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 402.946547][T19431] 00000000: 58 46 53 42 6e 03 10 00 00 00 00 00 00 00 10 00 XFSBn........... [ 403.013856][T19431] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 04:30:17 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x1614f, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:17 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(0xffffffffffffffff, r0) 04:30:17 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0xf00, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:17 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x7ffffff9, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 403.057164][T19431] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 403.100408][T19431] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 403.132848][T19431] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 403.176367][T19431] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 403.179829][T19476] block nbd2: shutting down sockets [ 403.232146][T19431] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 403.272732][T19431] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 04:30:17 executing program 2: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, 0xffffffffffffffff) [ 403.350120][T19431] XFS (loop3): SB validate failed with error -117. [ 403.469144][T19484] attempt to access beyond end of device [ 403.472125][T19478] hfsplus: session requires an argument [ 403.481288][T19478] hfsplus: unable to parse mount options [ 403.525978][T19484] loop5: rw=4096, want=32768, limit=29542 [ 403.534426][T19495] block nbd2: shutting down sockets [ 403.553418][T19484] XFS (loop5): last sector read failed 04:30:18 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="58465342f0031000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:18 executing program 2: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, 0xffffffffffffffff) 04:30:18 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x1020, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:18 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xeb00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 403.936473][T19500] block nbd2: shutting down sockets 04:30:18 executing program 2: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, 0xffffffffffffffff) [ 404.006796][T19484] attempt to access beyond end of device [ 404.019875][T19484] loop5: rw=4096, want=32768, limit=29542 [ 404.049667][T19506] XFS (loop3): SB sanity check failed [ 404.057724][T19506] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 404.071978][T19506] XFS (loop3): Unmount and run xfs_repair [ 404.079497][T19506] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 404.088354][T19506] 00000000: 58 46 53 42 f0 03 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 404.089242][T19484] XFS (loop5): last sector read failed [ 404.100036][T19506] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 404.123794][T19506] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 404.142565][T19525] block nbd2: shutting down sockets 04:30:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) [ 404.188678][T19506] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 404.278311][T19506] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 404.314960][T19529] block nbd2: shutting down sockets 04:30:18 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xffffff1f, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 404.318768][T19506] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 404.395641][T19506] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 404.442544][T19506] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 404.473576][T19502] hfsplus: session requires an argument [ 404.479181][T19502] hfsplus: unable to parse mount options 04:30:18 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x16150, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) [ 404.492569][T19506] XFS (loop3): SB validate failed with error -117. [ 404.678873][T19536] block nbd2: shutting down sockets 04:30:19 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x1100, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 404.734920][T19540] attempt to access beyond end of device [ 404.749281][T19540] loop5: rw=4096, want=32768, limit=29542 04:30:19 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x1614f, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 404.874660][T19540] XFS (loop5): last sector read failed [ 404.942205][T19557] attempt to access beyond end of device [ 404.966104][T19557] loop2: rw=4096, want=32768, limit=29542 04:30:19 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="58465342f2031000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:19 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xec00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 405.030658][T19557] XFS (loop2): last sector read failed [ 405.201632][T19562] hfsplus: session requires an argument [ 405.215532][T19562] hfsplus: unable to parse mount options [ 405.253601][T19570] XFS (loop3): SB sanity check failed [ 405.259420][T19570] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 405.272840][T19570] XFS (loop3): Unmount and run xfs_repair [ 405.279127][T19570] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 405.290333][T19570] 00000000: 58 46 53 42 f2 03 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 405.301076][T19570] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 405.331471][T19570] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 405.341058][T19570] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 04:30:19 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xffff8880a14734e8, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4}], 0x0, 0x0) [ 405.351311][T19570] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 405.361113][T19570] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 405.370678][T19570] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 405.380801][T19570] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 405.404954][T19570] XFS (loop3): SB validate failed with error -117. 04:30:19 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x1f00, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:19 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x16151, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) r6 = dup(r1) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r6) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r8, r0) [ 405.791353][ T2727] XFS (loop3): SB sanity check failed [ 405.798634][T19603] block nbd2: shutting down sockets [ 405.802455][ T2727] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 405.816897][ T2727] XFS (loop3): Unmount and run xfs_repair [ 405.823057][ T2727] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 405.831830][ T2727] 00000000: 58 46 53 42 f2 03 10 00 00 00 00 00 00 00 10 00 XFSB............ 04:30:20 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) r6 = dup(r1) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r8, r0) [ 405.841411][ T2727] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 405.855452][ T2727] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 405.884605][ T2727] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 405.905755][ T2727] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 405.925052][ T2727] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 405.945613][ T2727] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 405.965247][ T2727] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 405.992618][T19570] XFS (loop3): SB validate failed with error -117. [ 405.994883][T19600] attempt to access beyond end of device [ 406.032474][T19600] loop5: rw=4096, want=32768, limit=29542 [ 406.058227][T19600] XFS (loop5): last sector read failed 04:30:20 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xed00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 406.162960][T19620] block nbd2: shutting down sockets 04:30:20 executing program 2: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x4800000000000000, 0x0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:20 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200051000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:20 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='\nFSB', 0x4}], 0x0, 0x0) [ 406.479519][T19596] hfsplus: session requires an argument [ 406.485947][T19596] hfsplus: unable to parse mount options [ 406.497235][T19627] hfsplus: session requires an argument [ 406.566329][T19627] hfsplus: unable to parse mount options [ 406.569186][T19640] XFS (loop4): Invalid superblock magic number 04:30:21 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x2000, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:21 executing program 2 (fault-call:11 fault-nth:0): r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) 04:30:21 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x16152, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 406.850042][ T12] XFS (loop3): SB sanity check failed [ 406.858469][ T12] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 406.891057][ T12] XFS (loop3): Unmount and run xfs_repair [ 406.906459][ T12] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 406.939259][ T12] 00000000: 58 46 53 42 00 05 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 406.989476][T19666] block nbd2: shutting down sockets [ 407.003965][ T12] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 407.055584][T19640] XFS (loop4): Invalid superblock magic number [ 407.092434][ T12] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 407.101926][ T12] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 407.117332][ T12] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 407.119435][T19678] attempt to access beyond end of device [ 407.134193][T19678] loop5: rw=4096, want=32768, limit=29542 [ 407.140186][T19678] XFS (loop5): last sector read failed 04:30:21 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xee00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 407.211043][ T12] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 407.261995][ T12] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 407.335003][ T12] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 407.379266][T19653] XFS (loop3): SB validate failed with error -117. 04:30:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) 04:30:21 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='%FSB', 0x4}], 0x0, 0x0) 04:30:22 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x16153, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:22 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200061000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 407.777118][T19698] block nbd2: shutting down sockets [ 407.784727][T19702] XFS (loop4): Invalid superblock magic number 04:30:22 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x2010, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:22 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) r7 = socket$pptp(0x18, 0x1, 0x2) fsetxattr$security_ima(r7, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0412c930c370122684ab1fa02b9a"], 0x7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r8, r0) [ 407.960303][T19717] attempt to access beyond end of device [ 407.972176][T19717] loop5: rw=4096, want=32768, limit=29542 [ 408.001300][T19717] XFS (loop5): last sector read failed [ 408.021351][ T3085] XFS (loop3): SB sanity check failed [ 408.036461][ T3085] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff 04:30:22 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xef00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 408.144767][T19702] XFS (loop4): Invalid superblock magic number [ 408.156094][ T3085] XFS (loop3): Unmount and run xfs_repair [ 408.168205][T19735] block nbd2: shutting down sockets [ 408.199508][ T3085] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 408.231650][ T3085] 00000000: 58 46 53 42 00 06 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 408.274826][ T3085] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 408.318321][ T3085] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 408.365679][ T3085] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 408.430699][T19717] attempt to access beyond end of device [ 408.437824][ T3085] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 408.453918][T19717] loop5: rw=4096, want=32768, limit=29542 [ 408.467947][ T3085] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 408.475262][T19717] XFS (loop5): last sector read failed 04:30:22 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)=']FSB', 0x4}], 0x0, 0x0) [ 408.532793][T19716] hfsplus: session requires an argument [ 408.537387][ T3085] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 408.538722][T19716] hfsplus: unable to parse mount options [ 408.598143][ T3085] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 408.622648][T19722] XFS (loop3): SB validate failed with error -117. 04:30:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe8) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000300)=r2) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup(r3) ioctl$NBD_SET_SOCK(r1, 0xab00, r6) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) ptrace$peek(0x1, r10, &(0x7f0000000040)) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r11, r0) 04:30:23 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x3f00, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:23 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x16154, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 408.857497][T19767] block nbd2: shutting down sockets [ 408.898178][T19763] XFS (loop4): Invalid superblock magic number 04:30:23 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200071000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 409.085697][T19779] attempt to access beyond end of device [ 409.092648][T19779] loop5: rw=4096, want=32768, limit=29542 [ 409.098457][T19779] XFS (loop5): last sector read failed 04:30:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f0000000180)={0x9, 0x0, 0x0, 'queue1\x00', 0x6}) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(0xffffffffffffffff, r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f00000000c0)) r8 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r9, r0) 04:30:23 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xf000, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 409.207545][ T5] XFS (loop3): SB sanity check failed [ 409.220199][ T5] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 409.232664][ T5] XFS (loop3): Unmount and run xfs_repair [ 409.239011][ T5] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 409.246772][ T5] 00000000: 58 46 53 42 00 07 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 409.255846][ T5] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 409.265287][ T5] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 409.278962][ T5] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 409.288302][ T5] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 409.297440][ T5] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 409.308105][ T5] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 409.318163][ T5] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 409.332178][T19789] XFS (loop3): SB validate failed with error -117. [ 409.358090][T19799] block nbd2: shutting down sockets [ 409.474080][T19779] attempt to access beyond end of device [ 409.492605][T19779] loop5: rw=4096, want=32768, limit=29542 04:30:23 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) dup(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="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"], 0x38}}, 0x40000) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r6) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') dup2(r8, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r9, r0) [ 409.552490][T19779] XFS (loop5): last sector read failed 04:30:23 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='cFSB', 0x4}], 0x0, 0x0) 04:30:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) [ 409.734243][ T2926] XFS (loop3): SB sanity check failed [ 409.752085][ T2926] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff 04:30:24 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x4000, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 409.798702][ T2926] XFS (loop3): Unmount and run xfs_repair [ 409.835398][ T2926] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 409.871633][ T2926] 00000000: 58 46 53 42 00 07 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 409.884401][T19834] block nbd2: shutting down sockets [ 409.890091][ T2926] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 409.905083][ T2926] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 409.906985][T19830] XFS (loop4): Invalid superblock magic number 04:30:24 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x16155, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 409.915867][ T2926] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 409.930671][ T2926] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 409.942150][ T2926] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 409.952290][ T2926] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 409.961200][ T2926] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 409.992342][T19789] XFS (loop3): SB validate failed with error -117. 04:30:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCDISCONN(r1, 0x7439) r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = dup(r4) ioctl$NBD_SET_SOCK(r3, 0xab00, r5) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, r11, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_FTM_RESPONDER={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r11, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xfffff3d7, 0xffffffffffffffff}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040011}, 0x4000000) dup2(r9, r2) 04:30:24 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xf100, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x101402) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000040)={0x4, [0x6, 0x2, 0xbb, 0x57e]}, 0xc) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) dup(r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) inotify_init1(0x800) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r8, r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="cb0838ea974b02e4939ad44e3c4413a2645cef3a65e886d865f194c7e3ae4b631e6e1f4f37bb215a6292a65c6a3f5340768e972be9d641f472fb6597db17c0d2f2afab2ef8170ecb3827a280cc1bd5450546f5248bd4b2fa24cb911a2d17692f710f50db46a6eb70693b4a51eacf462247d30173a9669ffb30af95f98ece8dbac7f6ba60561b5b0bd9105abdc145a7b0a0787d8e6bcdfa8ba05f5c21c7683717ddffc3f2f73eebd56048625c1874a12b97c79b809fd5187cfa7f80cef1707de03f0763c861bbd9a689290d5598", 0xcd}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1100000000000000000000000100000000000000000000001100000000000000000000000100000005000000000000004c0000000000000000000000070000004408fb607fffffff8206bbc60bc4890b9eac1414bbac1414bb019404013b271e000000020703aa000b35beda7a06c800384901020706c13d0f3a040200000000140000000000000000000000020000000100000000000000"], 0x98}, 0x4000041) [ 410.235933][T19844] attempt to access beyond end of device [ 410.241619][T19844] loop5: rw=4096, want=32768, limit=29542 [ 410.252597][T19844] XFS (loop5): last sector read failed 04:30:24 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200091000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x10000) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = syz_open_procfs(r6, &(0x7f00000000c0)='net/ip_tables_targets\x00') dup2(r7, r0) 04:30:24 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='dFSB', 0x4}], 0x0, 0x0) [ 410.583253][T19867] XFS (loop3): SB sanity check failed [ 410.588885][T19867] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 410.661273][T19867] XFS (loop3): Unmount and run xfs_repair [ 410.697075][T19867] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 410.705598][T19867] 00000000: 58 46 53 42 00 09 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 410.716149][T19867] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 410.726216][T19867] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 410.736564][T19867] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 410.748577][T19867] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 04:30:25 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x30b64, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 410.773702][T19885] XFS (loop4): Invalid superblock magic number [ 410.824701][T19867] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 04:30:25 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x4800, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 410.888120][T19867] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 410.945618][T19867] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 410.993717][T19867] XFS (loop3): SB validate failed with error -117. [ 411.011101][T19897] attempt to access beyond end of device [ 411.020099][T19897] loop5: rw=4096, want=32768, limit=29542 [ 411.051085][T19897] XFS (loop5): last sector read failed 04:30:25 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xf200, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:25 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='iFSB', 0x4}], 0x0, 0x0) 04:30:25 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="58465342000a1000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r4, 0xc46dfc707e1df77d}, 0x14}}, 0x0) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b00095c5", @ANYRES16=r5, @ANYBLOB="000327bd7000fbdbdf2501000000600008802c00078008000500a708896e08000600c900000008000500577b3b02080006002900000008000500c77cc4552c00078008000600f7000000080006001b00000008000500699c4b26080006003600000008000500d233477a04000780340004800500030002000000050003000200000005000300000000000500030007000000050003000500000005000300020000000800010001000000"], 0xb0}}, 0x488d1) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1ec, r5, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bce32e2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48012e86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28c98ed3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7fcb7bf5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ca6a7dd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2856fe41}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x880979e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa0, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ffa42bf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5277f0a3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23b01448}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2887bdfa}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21ef2e41}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xda345f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51fc68cb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc7d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe90d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe731}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc00d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5549}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000085}, 0x4c004) r6 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r6) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r10, r0) 04:30:25 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x30ba0, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 411.548297][T19922] block nbd2: shutting down sockets 04:30:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x248c0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r0) [ 411.661717][T19926] XFS (loop4): Invalid superblock magic number [ 411.740882][T19932] XFS (loop3): SB sanity check failed [ 411.747944][T19932] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 411.774735][T19939] attempt to access beyond end of device [ 411.784158][T19939] loop5: rw=4096, want=32768, limit=29542 [ 411.798761][T19953] block nbd2: shutting down sockets [ 411.804609][T19932] XFS (loop3): Unmount and run xfs_repair [ 411.809023][T19939] XFS (loop5): last sector read failed 04:30:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f00000000c0)={{0x29, @local, 0x4e22, 0x2, 'fo\x00', 0x2c, 0x4, 0x5d}, {@local, 0x4e21, 0x0, 0x30cc, 0x4, 0x4}}, 0x44) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) ioctl$sock_SIOCDELDLCI(r7, 0x8981, &(0x7f0000000040)={'vlan0\x00', 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x100000001) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r9, r0) [ 411.846449][T19932] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 411.882182][T19932] 00000000: 58 46 53 42 00 0a 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 411.949560][T19932] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 04:30:26 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x4c00, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 412.012157][T19932] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 412.014447][T19962] block nbd2: shutting down sockets [ 412.068962][T19932] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 412.080294][T19926] XFS (loop4): Invalid superblock magic number [ 412.140324][T19932] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 412.176682][T19939] attempt to access beyond end of device 04:30:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = clone3(&(0x7f0000001280)={0x8000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180), {0x2e}, &(0x7f00000001c0)=""/4096, 0x1000, &(0x7f00000011c0)=""/70, &(0x7f0000001240)=[0x0, 0x0, r4, 0x0, r5, r6], 0x6}, 0x50) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002800)={&(0x7f0000005500)=ANY=[@ANYBLOB="58160000110205002dbd7000fcdbdf2502000002b600740090bb6e653f9c43e66aefd38a74db79a6fb5f9e8b011492ca83e9f528742ee86f516b0b3a7db67127180223a5701748365ca9148b61e7f62e692ec5b35e30ae70f1fdbc3a0864577edb18d0e16ca603b29d03c65d6a8a7ee79bed0d1a3ea0f7f2063478a423fb491f4a76c3642e64737789c59aa51ea71e4e33d06db2f64c873083b3db892dab3ea73e0221e648ab41f1a919b1ae06c8b31f87f25f11ee327fb0bf2e9ed3f939136ea4573ec99874eb1444660000d4003780a4bee049950019eb225fc17c80ad61b5ce807e17c7ab92b7c48208004d00", @ANYRES32=r7, @ANYBLOB="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"], 0x1658}, 0x1, 0x0, 0x0, 0x200000d8}, 0x240408c0) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r8, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r11, r0) [ 412.191280][T19932] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 412.202215][T19939] loop5: rw=4096, want=32768, limit=29542 04:30:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) fcntl$setpipe(r2, 0x407, 0x1) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r8, r0) [ 412.236455][T19939] XFS (loop5): last sector read failed [ 412.241770][T19980] block nbd2: shutting down sockets [ 412.260990][T19932] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... 04:30:26 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xf300, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 412.329527][T19982] block nbd2: shutting down sockets [ 412.336203][T19932] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 04:30:26 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f0000000040), 0x4) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r9, r0) [ 412.400581][T19932] XFS (loop3): SB validate failed with error -117. [ 412.549343][T19988] block nbd2: shutting down sockets 04:30:26 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='lFSB', 0x4}], 0x0, 0x0) 04:30:27 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{}, {}, {}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r9, r0) 04:30:27 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="58465342000c1000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:27 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x40000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:27 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000000180)=""/245, &(0x7f0000000040)=0xf5) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r9, r0) [ 412.819372][T19994] block nbd2: shutting down sockets [ 412.894527][T19990] XFS (loop4): Invalid superblock magic number [ 412.911999][T20006] block nbd2: shutting down sockets 04:30:27 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'osx.', '/dev/nbd#\x00'}, &(0x7f0000000180)=""/71, 0x47) r6 = dup(r5) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000100)={'veth1_macvtap\x00', 0x542a4ecb}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) 04:30:27 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x6000, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 413.074553][T20019] veth1_macvtap: mtu greater than device maximum [ 413.086265][T20019] block nbd2: shutting down sockets [ 413.113241][T20009] attempt to access beyond end of device 04:30:27 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) connect$l2tp(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1, 0x3}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r9, r0) [ 413.119216][T20009] loop5: rw=4096, want=32768, limit=29542 [ 413.138600][T20009] XFS (loop5): last sector read failed [ 413.158739][ T5] XFS (loop3): SB sanity check failed [ 413.165017][ T5] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 413.177199][ T5] XFS (loop3): Unmount and run xfs_repair [ 413.183481][ T5] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 413.195715][ T5] 00000000: 58 46 53 42 00 0c 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 413.214142][ T5] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 413.234914][ T5] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 413.247208][T20030] block nbd2: shutting down sockets [ 413.253141][ T5] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 413.262414][ T5] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 413.277141][ T5] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 413.289128][ T5] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 413.298861][ T5] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 413.312472][T20013] XFS (loop3): SB validate failed with error -117. 04:30:27 executing program 2: msgsnd(0x0, &(0x7f0000000000), 0x2002, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) dup(r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_SET_SOCK(r3, 0xab00, r3) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r9, r0) 04:30:27 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xf400, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 413.565542][T20009] attempt to access beyond end of device [ 413.583401][T20009] loop5: rw=4096, want=32768, limit=29542 04:30:28 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='oFSB', 0x4}], 0x0, 0x0) [ 413.645549][T20009] XFS (loop5): last sector read failed 04:30:28 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r5 = dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)={0x0, 0xc, 0x4, 0x0, 0xfffffff7, {r9, r10/1000+10000}, {0x3, 0xc, 0x5, 0x1, 0x9, 0x6, "f10100ff"}, 0x0, 0x1, @offset=0x7, 0x36c, 0x0, r5}) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x12, r11, 0x0) r12 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r13, r0) [ 413.709130][ T5] XFS (loop3): SB sanity check failed [ 413.717116][ T5] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 413.744951][ T5] XFS (loop3): Unmount and run xfs_repair [ 413.778098][ T5] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 413.805292][ T5] 00000000: 58 46 53 42 00 0c 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 413.833959][ T5] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 413.861544][T20067] block nbd2: shutting down sockets [ 413.869391][ T5] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 413.888888][ T5] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 413.908567][ T5] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 413.928917][ T5] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 413.948459][ T5] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 413.968717][ T5] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 413.988373][T20013] XFS (loop3): SB validate failed with error -117. [ 413.995042][T20065] XFS (loop4): Invalid superblock magic number 04:30:28 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x70000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:28 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x76, &(0x7f0000000400)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={r5, 0x7a8, 0x1000}, &(0x7f0000000100)=0x8) fcntl$getown(r0, 0x9) r6 = fcntl$getown(r2, 0x9) r7 = syz_open_procfs(r6, &(0x7f0000000040)='attr\x00') dup2(r7, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r10, r0) [ 414.339475][T20079] attempt to access beyond end of device [ 414.416422][T20083] block nbd2: shutting down sockets 04:30:28 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="58465342000d1000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:28 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x6800, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:28 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='pFSB', 0x4}], 0x0, 0x0) [ 414.440483][T20079] loop5: rw=4096, want=32768, limit=29542 04:30:28 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xf500, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 414.523766][T20079] XFS (loop5): last sector read failed [ 414.736982][T20093] XFS (loop4): Invalid superblock magic number [ 414.958116][T20079] attempt to access beyond end of device [ 414.967589][ T5] XFS (loop3): SB sanity check failed [ 414.970178][T20079] loop5: rw=4096, want=32768, limit=29542 [ 414.977005][ T5] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 414.992205][ T5] XFS (loop3): Unmount and run xfs_repair [ 414.998109][ T5] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 415.000919][T20079] XFS (loop5): last sector read failed [ 415.006142][ T5] 00000000: 58 46 53 42 00 0d 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 415.020530][ T5] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 415.029767][ T5] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 415.038904][ T5] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 415.048015][ T5] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 415.057144][ T5] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 415.066441][ T5] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 415.075567][ T5] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 415.084897][T20106] XFS (loop3): SB validate failed with error -117. [ 415.169018][T20093] XFS (loop4): Invalid superblock magic number 04:30:29 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x6c00, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:29 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xe0000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:29 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='sFSB', 0x4}], 0x0, 0x0) 04:30:29 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xf600, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:30 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="58465342000e1000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 415.765902][T20144] attempt to access beyond end of device [ 415.774469][T20144] loop5: rw=4096, want=32768, limit=29542 [ 415.812437][T20150] XFS (loop4): Invalid superblock magic number [ 415.831016][ T2926] XFS (loop3): SB sanity check failed [ 415.850449][T20144] XFS (loop5): last sector read failed [ 415.858120][ T2926] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 416.011368][ T2926] XFS (loop3): Unmount and run xfs_repair [ 416.099786][ T2926] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 416.141838][ T2926] 00000000: 58 46 53 42 00 0e 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 416.185859][ T2926] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 416.224734][ T2926] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 416.264920][ T2926] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 416.316152][ T2926] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 416.350048][ T2926] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 416.395455][T20144] attempt to access beyond end of device [ 416.401427][T20144] loop5: rw=4096, want=32768, limit=29542 [ 416.461553][ T2926] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 416.472175][T20144] XFS (loop5): last sector read failed 04:30:30 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x7400, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 416.548721][ T2926] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 416.595451][T20159] XFS (loop3): SB validate failed with error -117. 04:30:31 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='uFSB', 0x4}], 0x0, 0x0) 04:30:31 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xf700, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:31 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x7e0000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:31 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534220101000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 417.131249][T20203] XFS (loop4): Invalid superblock magic number [ 417.244383][T20214] attempt to access beyond end of device [ 417.251283][T20214] loop5: rw=4096, want=32768, limit=29542 [ 417.264121][T20214] XFS (loop5): last sector read failed [ 417.287142][T20220] XFS (loop3): SB sanity check failed [ 417.293837][T20220] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 417.321054][T20220] XFS (loop3): Unmount and run xfs_repair [ 417.333819][T20220] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 417.349251][T20220] 00000000: 58 46 53 42 20 10 10 00 00 00 00 00 00 00 10 00 XFSB ........... [ 417.358996][T20220] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 417.368452][T20220] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 417.378071][T20220] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 417.388400][T20220] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 417.400923][T20220] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 417.410274][T20220] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 417.421284][T20220] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 417.430917][T20220] XFS (loop3): SB validate failed with error -117. [ 417.527430][T20203] XFS (loop4): Invalid superblock magic number [ 417.621817][T20214] attempt to access beyond end of device [ 417.627897][T20214] loop5: rw=4096, want=32768, limit=29542 04:30:32 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x7a00, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 417.688104][T20214] XFS (loop5): last sector read failed [ 417.755465][T20220] XFS (loop3): SB sanity check failed [ 417.761047][T20220] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 417.790299][T20220] XFS (loop3): Unmount and run xfs_repair [ 417.803042][T20220] XFS (loop3): First 128 bytes of corrupted metadata buffer: 04:30:32 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='xFSB', 0x4}], 0x0, 0x0) [ 417.926994][T20220] 00000000: 58 46 53 42 20 10 10 00 00 00 00 00 00 00 10 00 XFSB ........... [ 418.007830][T20220] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 04:30:32 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xf800, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:32 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x800000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 418.094668][T20220] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 418.131158][T20220] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 418.154586][T20263] XFS (loop4): Invalid superblock magic number [ 418.187664][T20220] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 418.231929][T20220] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 418.281965][T20220] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 418.340672][T20220] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 418.372355][T20277] attempt to access beyond end of device [ 418.379617][T20277] loop5: rw=4096, want=32768, limit=29542 [ 418.400471][T20220] XFS (loop3): SB validate failed with error -117. [ 418.400490][T20277] XFS (loop5): last sector read failed [ 418.547037][T20263] XFS (loop4): Invalid superblock magic number 04:30:33 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200201000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:33 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x989680, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:33 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0xedc0, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:33 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='X\nSB', 0x4}], 0x0, 0x0) 04:30:33 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xf900, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 419.225138][T20307] attempt to access beyond end of device [ 419.231110][T20307] loop5: rw=4096, want=32768, limit=29542 [ 419.255167][T20302] XFS (loop3): SB sanity check failed [ 419.262883][T20302] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 419.271139][T20307] XFS (loop5): last sector read failed [ 419.275672][T20302] XFS (loop3): Unmount and run xfs_repair [ 419.275687][T20302] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 419.275703][T20302] 00000000: 58 46 53 42 00 20 10 00 00 00 00 00 00 00 10 00 XFSB. .......... [ 419.275714][T20302] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 419.275729][T20302] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 419.321637][T20302] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 419.337205][T20302] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 419.346433][T20302] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 419.356158][T20302] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 419.365736][T20302] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 419.375162][T20302] XFS (loop3): SB validate failed with error -117. [ 419.388286][T20326] XFS (loop4): Invalid superblock magic number [ 419.765227][T20326] XFS (loop4): Invalid superblock magic number 04:30:34 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x34, r10, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x6c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x76e}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffe}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x28}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1652}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000010}, 0x580d1) sendmsg$SMC_PNETID_ADD(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r10, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8050}, 0x48011) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r11, r0) 04:30:34 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xf0ff3f, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 419.908528][T20359] block nbd2: shutting down sockets 04:30:34 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0xff00, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:34 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534210201000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:34 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x4bc, 0x1, 0x5, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [{{0x254, 0x1, {{0x3, 0x5}, 0x6, 0x5, 0x2, 0x2de, 0x1b, 'syz1\x00', "1cc154559c8aeed376fc2d2ab3743d87c6bb8a210ea1e1068e60bb366d5dfbfe", "5f49e6e95b32e16af02e3fdb72a8310a42b3d9fc0b0246c8abc1f4e9389fe00c", [{0x400, 0x6, {0x3, 0x9e5}}, {0x7f, 0x2, {0x3, 0x3f}}, {0x5, 0x6, {0x3, 0x80}}, {0x8000, 0x7, {0x3, 0x1}}, {0x9f7, 0x200, {0x3, 0x8}}, {0x400, 0xffff, {0x2, 0x2}}, {0x8, 0x3, {0x3}}, {0x400, 0x6, {0x0, 0x6}}, {0x3f, 0x200, {0x2, 0x4}}, {0x3, 0x1000, {0x0, 0x8637}}, {0x4, 0x4, {0x2, 0xfffffff7}}, {0x401, 0x5, {0x1, 0x2}}, {0x100, 0x4, {0x3, 0x328}}, {0x8, 0x1, {0x2, 0xbe3}}, {0x0, 0x970, {0x1, 0x80000001}}, {0x1, 0x9, {0x2, 0x3}}, {0x8000, 0x3f, {0x0, 0x11b0}}, {0x9, 0x18, {0x2, 0x6}}, {0x8f7, 0xff, {0x3, 0xfffffffc}}, {0x4, 0x5d7, {0x2, 0xffff}}, {0x1, 0x8000, {0x1, 0x400}}, {0x4, 0x2, {0x2, 0x2}}, {0x1, 0xffff, {0x1, 0xfff}}, {0x5, 0x8, {0x1, 0x1}}, {0x88a9, 0x7}, {0xff7f, 0x7, {0x2, 0x1}}, {0x4, 0xe4b, {0x1, 0x7fffffff}}, {0x1, 0x7342, {0x3, 0x80}}, {0x1c, 0x7, {0x0, 0x4}}, {0x200, 0x0, {0x2, 0x3}}, {0x4d, 0x2, {0x0, 0xffff}}, {0x101, 0x31, {0x0, 0xb4f9}}, {0x5, 0x20, {0x0, 0x77e4}}, {0xffff, 0x0, {0x3, 0x4}}, {0x0, 0x81, {0x2, 0x9}}, {0x7, 0x1ff, {0x3, 0x5}}, {0x9, 0x57bd, {0x0, 0x1f}}, {0x101, 0x7, {0x3, 0xffffffe1}}, {0x7f, 0x0, {0x3, 0x5}}, {0xff5b, 0x0, {0x1, 0xed57}}]}}}, {{0x254, 0x1, {{0x1, 0xff}, 0x20, 0x15, 0x3, 0x8, 0x21, 'syz0\x00', "b5c8e4915b83c465c1f7ad12a9776fbd5f542e7351693a7748ef064736cd6263", "669157c625ed4740bb3611b4eb731fb8b8cb3cc52f25a68117bf48736c87c363", [{0x6, 0x1, {0x3, 0x4}}, {0x9, 0x7f, {0x2, 0x1}}, {0x101, 0x2, {0x3, 0x9}}, {0x89, 0x8, {0x3, 0xc63}}, {0x1b32, 0x5, {0x3, 0xf5}}, {0x1, 0x7, {0x1, 0x10000}}, {0x81, 0xb15, {0x0, 0x3}}, {0x1ff, 0x2, {0x3, 0x2}}, {0x8000, 0x8, {0x3, 0x100}}, {0x100, 0x6, {0x0, 0x6}}, {0x0, 0x0, {0x0, 0x2}}, {0xffee, 0xd370, {0x2, 0xfff}}, {0xb2, 0x9, {0x0, 0x2}}, {0x3, 0xffff, {0x3, 0x9}}, {0x7, 0x0, {0x1, 0x6}}, {0x1, 0x800, {0x3, 0xc0a}}, {0x1, 0x1000, {0x0, 0x6}}, {0x0, 0xff81, {0x0, 0x1660}}, {0x4, 0x6, {0x2, 0xffffff00}}, {0x1, 0x7, {0x0, 0x9}}, {0x7ff, 0x7, {0x0, 0x7}}, {0x7, 0x200, {0x3, 0x4}}, {0x8, 0x6, {0x3, 0x5}}, {0xe0, 0x3, {0x3, 0x9}}, {0x1, 0x8, {0x1, 0x4}}, {0x800, 0x0, {0x1, 0x6}}, {0xfff, 0x9, {0x3, 0x8}}, {0x101, 0x7, {0x0, 0x40}}, {0x9, 0xfffc, {0x3, 0xc4f}}, {0x7ff, 0x67a, {0x1, 0xb27d}}, {0x7, 0x0, {0x0, 0x762}}, {0x400, 0x5, {0x2, 0xce}}, {0x5, 0x4, {0x3, 0x7fff}}, {0x8290, 0x3f, {0x2, 0xeac}}, {0x81, 0x81, {0x3, 0x4}}, {0x6, 0x3f, {0x3}}, {0x1ff, 0xbb9, {0x2, 0x5}}, {0x80, 0x3, {0x1, 0x100}}, {0x400, 0xf800, {0x0, 0xe375}}, {0x8, 0xf97, {0x2, 0x8519}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) [ 420.125625][T20362] attempt to access beyond end of device [ 420.131313][T20362] loop5: rw=4096, want=32768, limit=30847 04:30:34 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='X%SB', 0x4}], 0x0, 0x0) 04:30:34 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xfa00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 420.194258][T20362] XFS (loop5): last sector read failed [ 420.205516][T20377] block nbd2: shutting down sockets 04:30:34 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000040)={0x6, 0x100, 0x0, 0x4, 0x6}) r6 = dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x100000001) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r8, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r10, 0xc0205647, &(0x7f0000001840)={0x990000, 0x8ce8, 0x800, 0xffffffffffffffff, 0x0, &(0x7f0000001800)={0x990a66, 0x7, [], @value64=0x2000000000000}}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r11, 0x84, 0x8, &(0x7f0000001880)=0x78b3, 0x4) [ 420.298558][T20378] XFS (loop3): SB sanity check failed [ 420.309736][T20378] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 420.339496][T20378] XFS (loop3): Unmount and run xfs_repair [ 420.364160][T20378] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 420.377111][T20378] 00000000: 58 46 53 42 10 20 10 00 00 00 00 00 00 00 10 00 XFSB. .......... [ 420.390390][T20378] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 420.410678][T20378] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 420.414181][T20395] block nbd2: shutting down sockets [ 420.420326][T20378] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 420.443497][T20378] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 420.454301][T20378] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 420.464165][T20378] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 420.474229][T20378] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 420.488259][T20390] XFS (loop4): Invalid superblock magic number [ 420.499821][T20378] XFS (loop3): SB validate failed with error -117. 04:30:34 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) open$dir(&(0x7f0000000040)='./file0\x00', 0x80100, 0x20) [ 420.646410][T20362] attempt to access beyond end of device [ 420.660863][T20411] block nbd2: shutting down sockets [ 420.661802][T20362] loop5: rw=4096, want=32768, limit=30847 04:30:35 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x2000) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) [ 420.721423][T20362] XFS (loop5): last sector read failed 04:30:35 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XMSB', 0x4}], 0x0, 0x0) 04:30:35 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XF\nB', 0x4}], 0x0, 0x0) [ 421.002320][T20423] block nbd2: shutting down sockets 04:30:35 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XF%B', 0x4}], 0x0, 0x0) 04:30:35 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x1000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:35 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_CAP(r10, 0xc010640c, &(0x7f0000000040)={0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$USBDEVFS_GET_SPEED(r8, 0x551f) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r11, r0) 04:30:35 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200231000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:35 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0xff0f, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:35 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XF]B', 0x4}], 0x0, 0x0) [ 421.296074][T20441] block nbd2: shutting down sockets 04:30:35 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xfb00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = dup(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r5) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r8, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r11, r2) [ 421.331433][T20437] XFS (loop5): Mounting V4 Filesystem [ 421.373863][T20437] XFS (loop5): empty log check failed [ 421.379316][T20437] XFS (loop5): log mount/recovery failed: error -5 [ 421.461902][T20437] XFS (loop5): log mount failed [ 421.507293][T20454] XFS (loop4): Invalid superblock magic number [ 421.532629][T20459] XFS (loop3): SB sanity check failed [ 421.538327][T20459] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff 04:30:35 executing program 2: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x7, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000040)) getpeername$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10) r7 = socket$inet_smc(0x2b, 0x1, 0x0) dup2(r7, r5) r8 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$TIPC_IMPORTANCE(r8, 0x10f, 0x7f, &(0x7f0000000180)=0x5, 0x4) [ 421.578604][T20459] XFS (loop3): Unmount and run xfs_repair [ 421.612912][T20459] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 421.690220][T20459] 00000000: 58 46 53 42 00 23 10 00 00 00 00 00 00 00 10 00 XFSB.#.......... [ 421.757401][T20459] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 421.802821][T20459] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 04:30:36 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/bnep\x00') dup2(r4, r1) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='loginuid\x00') socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400ff76456673383fae986b1116772ce21e12dc0a5bce49ff37da92e4dcf02de97efc0000465b85e4120b47cde712a44eb37ded4bcb483666659dae37f5adf99847443f957ea1f715c786ba144caea93c8ba82874f8622d94b1a81f8615a9d1b058dad5144daf10bb0a3662edeaf17242a4abd01885", @ANYRES16=0x0, @ANYBLOB="0004000000000000000004000000"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x94) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x54, r9, 0x9c63746d26d782f6, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x814) dup2(r8, r0) [ 421.847024][T20459] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 421.910914][T20437] XFS (loop5): Mounting V4 Filesystem [ 421.911492][T20459] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 421.926250][T20437] XFS (loop5): empty log check failed [ 421.932018][T20437] XFS (loop5): log mount/recovery failed: error -5 [ 421.981762][T20437] XFS (loop5): log mount failed [ 421.981986][T20454] XFS (loop4): Invalid superblock magic number [ 422.016216][T20459] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 422.073196][T20459] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... 04:30:36 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x101000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) socket$phonet_pipe(0x23, 0x5, 0x2) dup2(r1, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f0000000180)={0x5a, &(0x7f00000000c0)="cb8f6d4295e237ed1450497383dd347f61cf8ab95f9d65e28a1f932a303289581b7005d466ed1e02590da94d2e263584aaa445e9ed2eaecdc831126cae49bf892003b2e56ceee5c808863f16380778e8dec7f6950f89b4f30f0b"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r8, r0) [ 422.133103][T20459] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 422.142871][T20459] XFS (loop3): SB validate failed with error -117. 04:30:36 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x2000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:36 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x20000, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:36 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSM', 0x4}], 0x0, 0x0) 04:30:36 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x800, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x28, r10, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}]}, 0x28}}, 0x0) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r11, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_IFINDEX={0x8}]}, 0x38}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r11, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x1c}}, 0x20000008) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r10, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xc8}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) [ 422.434955][T20512] block nbd2: shutting down sockets 04:30:36 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="58465342003c1000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:36 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xfc00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:36 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x4002) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000100)=0x3000) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = dup(r4) ioctl$NBD_SET_SOCK(r1, 0xab00, r5) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r9, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r10) finit_module(r10, &(0x7f0000000040)='/dev/nbd#\x00', 0x0) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e24, 0x1ff, @empty, 0x523}, 0x1c) [ 422.598293][T20511] XFS (loop5): Mounting V4 Filesystem [ 422.620047][T20511] XFS (loop5): empty log check failed [ 422.625909][T20511] XFS (loop5): log mount/recovery failed: error -5 [ 422.658449][T20523] XFS (loop4): Invalid superblock magic number [ 422.669798][T20537] block nbd2: shutting down sockets [ 422.677141][T20511] XFS (loop5): log mount failed 04:30:37 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) [ 422.710915][ T12] XFS (loop3): SB sanity check failed [ 422.718239][ T12] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 422.774315][ T12] XFS (loop3): Unmount and run xfs_repair [ 422.801539][ T12] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 422.817641][ T12] 00000000: 58 46 53 42 00 3c 10 00 00 00 00 00 00 00 10 00 XFSB.<.......... [ 422.834118][ T12] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 422.849791][ T12] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 422.861137][ T12] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 422.876166][ T12] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 422.884083][T20548] block nbd2: shutting down sockets [ 422.886608][ T12] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 422.905178][ T12] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 422.917205][ T12] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 04:30:37 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$TCSETA(r9, 0x5406, &(0x7f0000000040)={0x0, 0xbc5f, 0x101, 0x1, 0x13, "e586e2b23c83d023"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) setsockopt$inet_udp_encap(r11, 0x11, 0x64, &(0x7f00000000c0)=0x5, 0x4) [ 422.929563][T20534] XFS (loop3): SB validate failed with error -117. [ 423.130691][T20511] XFS (loop5): Mounting V4 Filesystem 04:30:37 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x2}], 0x0, 0x0) 04:30:37 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="58465342003f1000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 423.282130][T20511] XFS (loop5): log mount failed [ 423.297711][T20564] block nbd2: shutting down sockets 04:30:37 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x1000000, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 423.510373][T20570] XFS (loop4): Invalid superblock magic number [ 423.547183][ T5] XFS (loop3): SB sanity check failed 04:30:37 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x3000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:37 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) fsync(0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) 04:30:37 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xfd00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 423.553090][ T5] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 423.566622][ T5] XFS (loop3): Unmount and run xfs_repair [ 423.586220][ T5] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 423.599811][ T5] 00000000: 58 46 53 42 00 3f 10 00 00 00 00 00 00 00 10 00 XFSB.?.......... [ 423.626482][ T5] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 423.657725][ T5] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 423.682677][T20594] block nbd2: shutting down sockets [ 423.698139][ T5] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 423.745140][ T5] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 423.853382][T20597] XFS (loop5): Mounting V4 Filesystem [ 423.881620][ T5] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 423.916209][T20597] XFS (loop5): empty log check failed [ 423.942016][T20597] XFS (loop5): log mount/recovery failed: error -5 [ 423.948717][ T5] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 424.016330][ T5] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 424.072343][T20580] XFS (loop3): SB validate failed with error -117. [ 424.084609][T20597] XFS (loop5): log mount failed 04:30:38 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) dup(r2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f0000000180)=""/230) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f0000000100), &(0x7f0000000280)=0x4) dup2(r8, r0) 04:30:38 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x3}], 0x0, 0x0) 04:30:38 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x2000000, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:38 executing program 2: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x3606b27c, 0x0, [], 0x4, 0xa}) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r8, r2) [ 424.409365][T20623] XFS (loop4): Invalid superblock magic number 04:30:38 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200401000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:38 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xfe00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 424.569911][T20641] block nbd2: shutting down sockets 04:30:38 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x5c9000) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r8 = dup2(r7, r0) ioctl$KVM_PPC_GET_SMMU_INFO(r8, 0x8250aea6, &(0x7f0000000040)=""/27) 04:30:39 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x4000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 424.695518][ T2721] XFS (loop3): SB sanity check failed [ 424.703798][ T2721] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 424.729615][ T2721] XFS (loop3): Unmount and run xfs_repair [ 424.741884][ T2721] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 424.758676][ T2721] 00000000: 58 46 53 42 00 40 10 00 00 00 00 00 00 00 10 00 XFSB.@.......... [ 424.778138][ T2721] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 424.798762][ T2721] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 424.836458][ T2721] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 04:30:39 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x406640, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) ioctl$int_out(r7, 0x0, &(0x7f0000000100)) r8 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x44001, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f0000000040)={0x1, 0x3, 0x5, 0xfff, 0xa, "b70df74bd54ff35016a80a19e7511e120deed3"}) dup2(r9, r0) [ 424.886954][ T2721] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 424.910813][T20666] XFS (loop5): Mounting V4 Filesystem 04:30:39 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x5}], 0x0, 0x0) [ 424.937901][ T2721] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 424.952191][T20666] XFS (loop5): empty log check failed 04:30:39 executing program 2: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) dup2(r7, r8) [ 424.980403][T20677] block nbd2: shutting down sockets [ 424.985842][T20666] XFS (loop5): log mount/recovery failed: error -5 [ 425.007035][ T2721] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 425.068641][ T2721] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 425.091681][T20666] XFS (loop5): log mount failed [ 425.139217][T20645] XFS (loop3): SB validate failed with error -117. [ 425.164354][T20681] XFS (loop4): device supports 512 byte sectors (not 0) [ 425.166151][T20680] block nbd2: shutting down sockets 04:30:39 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='children\x00') dup2(r7, r0) 04:30:39 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x3000000, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:39 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x5000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 425.508491][T20693] block nbd2: shutting down sockets 04:30:39 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534201441000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:39 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0xd000) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) 04:30:40 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xff00, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 425.645775][T20699] XFS (loop5): Mounting V4 Filesystem [ 425.698415][T20699] XFS (loop5): empty log check failed [ 425.719540][T20699] XFS (loop5): log mount/recovery failed: error -5 [ 425.750975][T20724] block nbd2: shutting down sockets 04:30:40 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x6}], 0x0, 0x0) [ 425.803569][T14717] XFS (loop3): SB sanity check failed [ 425.809370][T14717] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff 04:30:40 executing program 2: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r3, r0) accept4(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000100)=0x80, 0x80800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00') r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x76, &(0x7f0000000400)=@assoc_value={r8}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x6, 0xf1, 0x8105, 0x1, 0x9, 0x6, 0x47, 0x7f, r8}, &(0x7f00000000c0)=0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r9) dup2(0xffffffffffffffff, r4) [ 425.891680][T20699] XFS (loop5): log mount failed [ 425.895862][T14717] XFS (loop3): Unmount and run xfs_repair [ 425.944121][T14717] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 425.976980][T14717] 00000000: 58 46 53 42 01 44 10 00 00 00 00 00 00 00 10 00 XFSB.D.......... [ 425.993442][T20734] block nbd2: shutting down sockets 04:30:40 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x7, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$NBD_DISCONNECT(r9, 0xab08) dup2(r7, r0) [ 426.028884][T14717] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 426.087617][T14717] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 04:30:40 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="020000000100060000000000040000000000000008000000", @ANYRES32=0x0, @ANYBLOB="004d9914b2d2483ac6d52c548f38000000", @ANYRES32=r12, @ANYBLOB="10000000000000002000000000000000"], 0x34, 0x0) fchownat(r9, &(0x7f0000000040)='./file0\x00', r10, r12, 0x100) [ 426.137632][T14717] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 426.204043][T20699] XFS (loop5): Mounting V4 Filesystem [ 426.227843][T20754] block nbd2: shutting down sockets [ 426.265369][T14717] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 426.359901][T14717] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 426.369860][T20699] XFS (loop5): log mount failed [ 426.411975][T14717] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 426.426221][T14717] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 04:30:40 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x4000000, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 426.471446][T20723] XFS (loop3): SB validate failed with error -117. [ 426.511230][T20737] XFS (loop4): device supports 512 byte sectors (not 0) 04:30:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$char_usb(r1, &(0x7f00000002c0)=""/127, 0x7f) r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = dup(r4) ioctl$NBD_SET_SOCK(r3, 0xab00, r5) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r9, r2) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r11) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}], [{@appraise='appraise'}, {@dont_measure='dont_measure'}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@uid_lt={'uid<', r11}}, {@obj_user={'obj_user', 0x3d, 'em0vboxnet1$$\n'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/nbd#\x00'}}, {@obj_role={'obj_role', 0x3d, '/dev/nbd#\x00'}}]}) 04:30:41 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x40800, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:41 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe2c5e16d87cebd96a909d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000540)='user\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000100), 0x26, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r8, r7, r9}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={'sha512\x00'}}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={r7, 0x3, 0xf8}, &(0x7f00000000c0)={'enc=', 'pkcs1', ' hash=', {'crct10dif\x00'}}, &(0x7f0000000180)="df3684", &(0x7f00000001c0)="8c123ad6b5f97cebae689a0e023dc76b9ae1ea9c82911ed7c771db9cadf11bda6c3a8480a5b72c204391152a93daf5820e6045dd28f339ee52c8ddfbde2a495c6c93aaf88d792337c6535aee171999831090ad7d61b1c151731ba6daab390a5bbb3e94e79c521c3406733b947275e0c1b8b2593b0f4503443ead9165e8dfb5251b0e3ec55098230a742652d91d2bb8580a0dcc5c13829a2f1d34546c6a5022174d53071ac382d271300310d0eca3cf1edf16900ea8d8b1b4294f3c0d65e96449725e32cc1855cc921adce81c1cd42764c408f192a4d1faa290b3910e3734f54de7d4ca195548709b321452e7741cc58ce012b96906226ded") r10 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r10, r0) 04:30:41 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x6000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:41 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200481000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:41 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x7}], 0x0, 0x0) [ 426.952775][T20776] block nbd2: shutting down sockets 04:30:41 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000040)) r4 = dup(0xffffffffffffffff) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) r5 = getpid() sched_setscheduler(r5, 0x0, &(0x7f0000000380)=0xebd) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) r6 = getpid() r7 = syz_open_procfs(r6, &(0x7f0000000180)='attr/current\x00') dup2(r7, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r10, r0) [ 427.083653][T20779] XFS (loop5): Mounting V4 Filesystem [ 427.118429][T20779] XFS (loop5): empty log check failed [ 427.141924][ T5] XFS (loop3): SB sanity check failed [ 427.148186][T20779] XFS (loop5): log mount/recovery failed: error -5 [ 427.149019][ T5] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 427.210451][ T5] XFS (loop3): Unmount and run xfs_repair [ 427.230076][ T5] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 427.246840][ T5] 00000000: 58 46 53 42 00 48 10 00 00 00 00 00 00 00 10 00 XFSB.H.......... [ 427.251608][T20779] XFS (loop5): log mount failed [ 427.261538][ T5] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 427.270713][ T5] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 427.280353][ T5] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 427.289892][ T5] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 427.299335][ T5] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 427.309032][ T5] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 427.318628][ T5] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 427.331923][T20787] XFS (loop3): SB validate failed with error -117. [ 427.339495][T20795] XFS (loop4): device supports 512 byte sectors (not 0) 04:30:41 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x5000000, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 427.639023][T20779] XFS (loop5): Mounting V4 Filesystem 04:30:42 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x7ffffff2, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 427.682462][T20779] XFS (loop5): empty log check failed [ 427.706956][T20779] XFS (loop5): log mount/recovery failed: error -5 [ 427.861706][T20779] XFS (loop5): log mount failed 04:30:42 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x8}], 0x0, 0x0) 04:30:42 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="58465342004c1000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:42 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x7000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 428.145681][T20841] XFS (loop4): device supports 512 byte sectors (not 0) [ 428.337933][ T5] XFS (loop3): SB sanity check failed [ 428.345328][ T5] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 428.372652][ T5] XFS (loop3): Unmount and run xfs_repair [ 428.386522][ T5] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 428.402943][ T5] 00000000: 58 46 53 42 00 4c 10 00 00 00 00 00 00 00 10 00 XFSB.L.......... [ 428.423383][ T5] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 428.433219][ T5] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 428.443033][ T5] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 428.463233][ T5] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 428.484411][ T5] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 428.484935][T20841] XFS (loop4): device supports 512 byte sectors (not 0) [ 428.504581][ T5] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 428.523727][ T5] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 428.537868][T20852] XFS (loop3): SB validate failed with error -117. [ 428.548624][T20863] XFS (loop5): Mounting V4 Filesystem 04:30:42 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x6000000, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 428.608473][T20863] XFS (loop5): empty log check failed [ 428.636250][T20863] XFS (loop5): log mount/recovery failed: error -5 04:30:43 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200601000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 428.821734][T20863] XFS (loop5): log mount failed 04:30:43 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x7ffffff8, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:43 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0xa}], 0x0, 0x0) [ 429.093594][T20887] XFS (loop3): SB sanity check failed [ 429.099528][T20887] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 429.170393][T20887] XFS (loop3): Unmount and run xfs_repair [ 429.179059][T20863] XFS (loop5): Mounting V4 Filesystem [ 429.186531][T20900] XFS (loop4): device supports 512 byte sectors (not 0) [ 429.219659][T20863] XFS (loop5): AIL initialisation failed: error -12 [ 429.230450][T20887] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 429.272929][T20887] 00000000: 58 46 53 42 00 60 10 00 00 00 00 00 00 00 10 00 XFSB.`.......... [ 429.283385][T20863] XFS (loop5): log mount failed [ 429.306150][T20887] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 429.326965][T20887] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 429.338220][T20887] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 429.353278][T20887] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 429.374293][T20887] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 429.394767][T20887] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 429.415984][T20887] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 429.429188][T20887] XFS (loop3): SB validate failed with error -117. [ 429.592967][T20900] XFS (loop4): device supports 512 byte sectors (not 0) 04:30:44 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x7000000, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:44 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x8000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:44 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200641000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:44 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x7ffffff9, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:44 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0xf}], 0x0, 0x0) [ 430.036450][T20935] XFS (loop5): Mounting V4 Filesystem [ 430.058244][T20935] XFS (loop5): empty log check failed [ 430.076087][T20935] XFS (loop5): log mount/recovery failed: error -5 [ 430.126814][ T3085] XFS (loop3): SB sanity check failed [ 430.133767][ T3085] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 430.161280][ T3085] XFS (loop3): Unmount and run xfs_repair [ 430.174711][ T3085] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 430.191458][T20935] XFS (loop5): log mount failed [ 430.193552][ T3085] 00000000: 58 46 53 42 00 64 10 00 00 00 00 00 00 00 10 00 XFSB.d.......... [ 430.218974][ T3085] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 430.238783][ T3085] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 430.259596][ T3085] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 430.278944][ T3085] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 430.298373][ T3085] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 430.308149][ T3085] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 430.318103][ T3085] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 430.328192][T20947] XFS (loop3): SB validate failed with error -117. [ 430.336515][T20958] XFS (loop4): device supports 512 byte sectors (not 0) [ 430.573147][T20935] XFS (loop5): Mounting V4 Filesystem [ 430.637797][ T3085] XFS (loop3): SB sanity check failed [ 430.644058][ T3085] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 430.663028][ T3085] XFS (loop3): Unmount and run xfs_repair [ 430.669060][ T3085] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 430.669118][T20935] XFS (loop5): log mount failed [ 430.677952][ T3085] 00000000: 58 46 53 42 00 64 10 00 00 00 00 00 00 00 10 00 XFSB.d.......... [ 430.690872][ T3085] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 430.700261][ T3085] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 430.709626][ T3085] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 430.719155][ T3085] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 430.728632][ T3085] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 04:30:45 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x8000000, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 430.737860][ T3085] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 430.746951][ T3085] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 430.756798][T20947] XFS (loop3): SB validate failed with error -117. [ 430.763461][T20958] XFS (loop4): device supports 512 byte sectors (not 0) 04:30:45 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xffffff1f, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:45 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200681000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:45 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x10}], 0x0, 0x0) 04:30:45 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x9000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 431.343083][T21006] XFS (loop4): device supports 512 byte sectors (not 0) [ 431.351867][ T3085] XFS (loop3): SB sanity check failed [ 431.359391][ T3085] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 431.391307][ T3085] XFS (loop3): Unmount and run xfs_repair [ 431.406500][ T3085] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 431.442325][ T3085] 00000000: 58 46 53 42 00 68 10 00 00 00 00 00 00 00 10 00 XFSB.h.......... [ 431.478974][ T3085] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 431.500558][ T3085] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 431.514041][ T3085] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 431.523780][ T3085] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 431.534456][ T3085] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 431.545015][ T3085] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 431.555089][ T3085] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 431.564805][T21002] XFS (loop3): SB validate failed with error -117. [ 431.568452][T21009] XFS (loop5): Mounting V4 Filesystem [ 431.585140][T21009] XFS (loop5): empty log check failed [ 431.592624][T21009] XFS (loop5): log mount/recovery failed: error -5 [ 431.651646][T21009] XFS (loop5): log mount failed 04:30:46 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x12}], 0x0, 0x0) 04:30:46 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x9000000, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:46 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xa000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:46 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xffff8880a1fae5a8, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:46 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="58465342006c1000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 432.083710][T21043] XFS (loop4): device supports 512 byte sectors (not 0) [ 432.267422][T21054] XFS (loop5): Mounting V4 Filesystem [ 432.300438][T21054] XFS (loop5): empty log check failed [ 432.343661][T21065] XFS (loop3): SB sanity check failed [ 432.350707][T21065] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 432.351671][T21054] XFS (loop5): log mount/recovery failed: error -5 [ 432.379534][T21065] XFS (loop3): Unmount and run xfs_repair [ 432.393962][T21065] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 432.402050][T21065] 00000000: 58 46 53 42 00 6c 10 00 00 00 00 00 00 00 10 00 XFSB.l.......... [ 432.411952][T21065] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 432.425374][T21065] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 432.436601][T21065] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 432.447206][T21065] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 432.459501][T21065] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 432.470377][T21065] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 432.481480][T21065] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 432.490923][T21065] XFS (loop3): SB validate failed with error -117. [ 432.512944][T21043] XFS (loop4): device supports 512 byte sectors (not 0) [ 432.662064][T21054] XFS (loop5): log mount failed 04:30:47 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="58465342036e1000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:47 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0xa000000, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:47 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x14}], 0x0, 0x0) 04:30:47 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0xffff8880a1fae768, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:47 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xc000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 433.234436][ T3085] XFS (loop3): SB sanity check failed [ 433.261302][ T3085] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff 04:30:47 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x3c}], 0x0, 0x0) [ 433.383856][ T3085] XFS (loop3): Unmount and run xfs_repair [ 433.420230][ T3085] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 433.452022][ T3085] 00000000: 58 46 53 42 03 6e 10 00 00 00 00 00 00 00 10 00 XFSB.n.......... [ 433.474577][ T3085] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 433.516061][T21115] XFS (loop4): device supports 512 byte sectors (not 0) [ 433.525713][T21111] XFS (loop5): Mounting V4 Filesystem [ 433.554340][ T3085] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 433.577988][T21111] XFS (loop5): empty log check failed [ 433.584735][T21111] XFS (loop5): log mount/recovery failed: error -5 [ 433.614665][ T3085] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 433.641398][T21111] XFS (loop5): log mount failed [ 433.684645][ T3085] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 433.743487][ T3085] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 433.795014][ T3085] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 433.855432][ T3085] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 04:30:48 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xd000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 434.002282][T21092] XFS (loop3): SB validate failed with error -117. 04:30:48 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="0a46534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:48 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0xf000000, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:48 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4d}], 0x0, 0x0) [ 434.390329][T21141] XFS (loop5): Mounting V4 Filesystem [ 434.424649][T21141] XFS (loop5): empty log check failed [ 434.431081][T21141] XFS (loop5): log mount/recovery failed: error -5 04:30:48 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200741000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 434.475706][T21146] XFS (loop1): Invalid superblock magic number [ 434.481450][T21141] XFS (loop5): log mount failed 04:30:49 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000cc0)={0x0, 0x0, 0xffffffffffffffff}) r5 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4008641c, &(0x7f0000002c00)={r6, &(0x7f0000001c00)=""/4096}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000280)={r6}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000040)={r6, 0x30}) dup2(r3, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r9, r0) [ 434.624080][T21166] XFS (loop4): device supports 512 byte sectors (not 0) 04:30:49 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x10000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:49 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x8}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) 04:30:49 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="2546534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:49 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x103}], 0x0, 0x0) [ 434.991416][T21178] XFS (loop3): SB sanity check failed [ 434.998311][T21178] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 435.046929][T21178] XFS (loop3): Unmount and run xfs_repair [ 435.117318][T21178] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 435.126363][T21178] 00000000: 58 46 53 42 00 74 10 00 00 00 00 00 00 00 10 00 XFSB.t.......... [ 435.136504][T21178] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 435.148526][T21178] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 435.159193][T21178] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 435.161813][T21193] block nbd2: shutting down sockets [ 435.172265][T21178] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 435.184798][T21178] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 435.194828][T21178] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 435.208057][T21189] XFS (loop5): Mounting V4 Filesystem [ 435.214440][T21178] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 435.226898][T21201] XFS (loop1): Invalid superblock magic number [ 435.250270][T21189] XFS (loop5): empty log check failed [ 435.259589][T21189] XFS (loop5): log mount/recovery failed: error -5 04:30:49 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x10000000, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:49 executing program 2: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x79364d33c70629bb) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x111600, 0x0) dup2(r3, r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f0000000300)}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$bt_BT_RCVMTU(r10, 0x112, 0xd, &(0x7f0000000100)=0x400, &(0x7f0000000180)=0x2) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') [ 435.289345][T21178] XFS (loop3): SB validate failed with error -117. [ 435.331976][T21212] XFS (loop4): device supports 512 byte sectors (not 0) [ 435.351246][T21189] XFS (loop5): log mount failed [ 435.471679][T21225] block nbd2: shutting down sockets 04:30:49 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) userfaultfd(0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0x209) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') dup2(r9, r0) 04:30:50 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="58465342007a1000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 435.689109][T21201] XFS (loop1): Invalid superblock magic number [ 435.756706][T21235] block nbd2: shutting down sockets [ 435.869715][T21212] XFS (loop4): device supports 512 byte sectors (not 0) 04:30:50 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x20000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 436.077570][T21258] XFS (loop3): SB sanity check failed [ 436.084773][T21258] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 436.110330][T21258] XFS (loop3): Unmount and run xfs_repair 04:30:50 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000040)={0x200, @time={0xb0ab, 0x3}, 0x4, {0x0, 0x81}, 0x3f, 0x1, 0x98}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r9, 0x84, 0x8, &(0x7f00000000c0)=0x800, 0x4) r10 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r11, r0) [ 436.122260][T21258] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 436.138561][T21258] 00000000: 58 46 53 42 00 7a 10 00 00 00 00 00 00 00 10 00 XFSB.z.......... [ 436.157529][T21258] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 436.229353][T21258] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 04:30:50 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x11000000, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:50 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5d46534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 436.343723][T21258] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 436.377171][T21258] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 436.402979][T21272] block nbd2: shutting down sockets [ 436.415083][T21258] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 04:30:50 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x104}], 0x0, 0x0) [ 436.484573][T21258] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... 04:30:50 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="6346534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:50 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x101080) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) 04:30:50 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x20020000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 436.604633][T21258] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 436.654735][T21258] XFS (loop3): SB validate failed with error -117. [ 436.719109][T21285] XFS (loop4): device supports 512 byte sectors (not 0) [ 436.808571][T21284] XFS (loop1): Invalid superblock magic number [ 436.822227][T21287] XFS (loop5): Mounting V4 Filesystem [ 436.830565][T21283] block nbd2: shutting down sockets [ 436.916094][T21287] XFS (loop5): empty log check failed [ 436.938811][T21287] XFS (loop5): log mount/recovery failed: error -5 04:30:51 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000040)=0x0) sched_rr_get_interval(r8, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$NBD_SET_SOCK(r7, 0xab00, r3) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r9, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r10, r0) [ 437.051380][T21287] XFS (loop5): log mount failed 04:30:51 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4001}], 0x0, 0x0) 04:30:51 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="58465342007e1000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:51 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/exec\x00') dup2(r7, r0) 04:30:51 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="6446534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:51 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x1f000000, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) [ 437.403933][T21324] block nbd2: shutting down sockets 04:30:51 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x200482, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) [ 437.498383][T21323] XFS (loop4): device supports 512 byte sectors (not 0) [ 437.509698][T21329] XFS (loop3): SB sanity check failed [ 437.520322][T21329] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 437.547953][T21287] XFS (loop5): Mounting V4 Filesystem [ 437.558164][T21329] XFS (loop3): Unmount and run xfs_repair [ 437.601378][T21287] XFS (loop5): log mount failed [ 437.602843][T21329] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 437.606911][T21351] XFS (loop1): Invalid superblock magic number [ 437.617302][T21363] block nbd2: shutting down sockets 04:30:52 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r5 = dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f00000000c0)={0xfffff8c3, 0x3f, 0x3f, {0x78, 0xf4c5}, 0x10000, 0xe778}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r8, r0) [ 437.687135][T21329] 00000000: 58 46 53 42 00 7e 10 00 00 00 00 00 00 00 10 00 XFSB.~.......... [ 437.734363][T21329] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 437.792473][T21329] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 437.849199][T21367] block nbd2: shutting down sockets [ 437.859459][T21329] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 437.877668][T21323] XFS (loop4): device supports 512 byte sectors (not 0) 04:30:52 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x20100000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:52 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f00000000c0)=0x6fd) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r8, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r10, 0x5386, &(0x7f0000000040)) [ 437.954594][T21329] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 437.976797][T21351] XFS (loop1): Invalid superblock magic number [ 438.026684][T21329] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 438.044061][T21387] block nbd2: shutting down sockets [ 438.088095][T21329] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 438.113860][T21329] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 04:30:52 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r5 = dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r8, r0) ioctl$KVM_S390_UCAS_MAP(r5, 0x4018ae50, &(0x7f00000000c0)={0x5936f5c8, 0x2, 0x4}) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x448800, 0x0) r10 = creat(&(0x7f0000000100)='./file0\x00', 0x18) ioctl$TUNSETLINK(r10, 0x400454cd, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r9, 0xc10c5541, &(0x7f0000000180)={0x1, 0x8, 0x1}) [ 438.140033][T21329] XFS (loop3): SB validate failed with error -117. 04:30:52 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4002}], 0x0, 0x0) [ 438.219688][T21397] block nbd2: shutting down sockets [ 438.227746][T21389] XFS (loop5): Mounting V4 Filesystem 04:30:52 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = syz_open_procfs(r4, &(0x7f0000000100)='net/ptype\x00') dup2(r5, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x505601, 0x0) ioctl$SIOCX25SENDCALLACCPT(r9, 0x89e9) dup2(r8, r0) [ 438.262244][T21389] XFS (loop5): empty log check failed [ 438.270171][T21389] XFS (loop5): log mount/recovery failed: error -5 [ 438.351513][T21389] XFS (loop5): log mount failed 04:30:52 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="6946534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) [ 438.445773][T21405] block nbd2: shutting down sockets [ 438.521977][T21406] XFS (loop4): device supports 512 byte sectors (not 0) 04:30:52 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200811000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:52 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x20000000, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:53 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x23000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 438.751879][T21418] XFS (loop1): Invalid superblock magic number [ 438.923548][T14717] XFS (loop3): SB sanity check failed [ 438.929471][T14717] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 438.960503][T14717] XFS (loop3): Unmount and run xfs_repair [ 438.973492][T14717] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 438.989658][T14717] 00000000: 58 46 53 42 00 81 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 439.011097][T14717] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 439.030678][T14717] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 439.051712][T14717] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 439.072835][T14717] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 439.092476][T14717] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 439.112081][T14717] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... 04:30:53 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000040)=0x3) dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r8, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r9, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44015}, 0x33eef1da753b9789) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r10, r0) [ 439.131754][T14717] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 439.151261][T21427] XFS (loop3): SB validate failed with error -117. [ 439.167753][T21406] XFS (loop4): device supports 512 byte sectors (not 0) [ 439.175252][T21418] XFS (loop1): Invalid superblock magic number [ 439.192874][T21436] XFS (loop5): Mounting V4 Filesystem [ 439.226922][T21467] block nbd2: shutting down sockets [ 439.245805][T21436] XFS (loop5): empty log check failed [ 439.268596][T21436] XFS (loop5): log mount/recovery failed: error -5 [ 439.331249][T21436] XFS (loop5): log mount failed 04:30:53 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000300)={0x0, 0xfff, 0x7a, [], &(0x7f00000002c0)=0x5}) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x5800) write$binfmt_elf32(r5, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x2, 0x7f, 0x4, 0x4, 0x2, 0x3, 0x7, 0x257, 0x38, 0xa, 0xffffffff, 0xfff, 0x20, 0x2, 0xff00, 0x800, 0x400}, [{0x7, 0x5, 0x5, 0x1, 0x5, 0x7af6, 0x7, 0x8}], "7496b5c77e411875233ccf372ade9d41e287a06ec88b885d6114c1c9d0bb0f791acef3aad6d616f1675e3717eb720677410e21b86704dc62fc0af1f323946a209e8cbd1c66b897132078db5cde2aee9a15a38ed281486b082c9c62300ad3619dfb198db6c04618f095733a8b028e6b2f9ab90c0a9b476aca469fcffb6a0a83a2f8a98614f72f39a919a9249fc2a12925ffb0b1891f60bee5cef21663f3b37d771508dd6712f924af57716f2b9cdb2e2cc4ca393af47be8dbb1ce61da1b61c195df61df9f43cd199fbea7", [[], [], [], [], [], [], []]}, 0x822) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r6, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r9, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$IPSET_CMD_GET_BYNAME(r11, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x8046}, 0x4091) [ 439.554452][T21473] block nbd2: shutting down sockets 04:30:53 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200821000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:54 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4003}], 0x0, 0x0) 04:30:54 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="6c46534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:54 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x24030000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:54 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x20100000, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:54 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') ioctl$NBD_DO_IT(r0, 0xab03) dup2(r4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r7, r0) 04:30:54 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4d00}], 0x0, 0x0) [ 439.919734][T14717] XFS (loop3): SB sanity check failed [ 439.930484][T14717] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 439.976236][T14717] XFS (loop3): Unmount and run xfs_repair [ 439.997377][T14717] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 440.022536][T14717] 00000000: 58 46 53 42 00 82 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 440.040795][T14717] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 440.042524][T21489] XFS (loop1): Invalid superblock magic number [ 440.060168][T14717] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 440.079802][T14717] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 440.099518][T14717] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 440.119727][T14717] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 440.140161][T14717] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 440.160295][T14717] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 440.180276][T21479] XFS (loop3): SB validate failed with error -117. [ 440.193816][T21517] XFS (loop4): device supports 512 byte sectors (not 0) [ 440.201843][T21492] XFS (loop5): Mounting V4 Filesystem [ 440.225066][T21492] XFS (loop5): empty log check failed [ 440.278275][T21492] XFS (loop5): log mount/recovery failed: error -5 [ 440.396871][T21492] XFS (loop5): log mount failed [ 440.481079][T21489] XFS (loop1): Invalid superblock magic number [ 440.652989][T21488] block nbd2: shutting down sockets 04:30:55 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="6f46534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:55 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x3f000000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 04:30:55 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x23ca5e9c, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:55 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x4f02}], 0x0, 0x0) 04:30:55 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534201941000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 441.238226][T21562] XFS (loop1): Invalid superblock magic number [ 441.251860][T21561] XFS (loop5): Mounting V4 Filesystem 04:30:55 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x5002}], 0x0, 0x0) [ 441.286599][T21561] XFS (loop5): empty log check failed [ 441.292329][T21561] XFS (loop5): log mount/recovery failed: error -5 [ 441.362081][T21561] XFS (loop5): log mount failed [ 441.440652][ T2727] XFS (loop3): SB sanity check failed [ 441.452635][ T2727] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3c9/0x4e0, xfs_sb block 0xffffffffffffffff [ 441.478088][ T2727] XFS (loop3): Unmount and run xfs_repair [ 441.496496][ T2727] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 441.511470][ T2727] 00000000: 58 46 53 42 01 94 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 441.533629][ T2727] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 441.543291][ T2727] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 441.553149][ T2727] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 441.564077][ T2727] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 441.573192][ T2727] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 441.587511][ T2727] 00000060: 00 00 06 c0 34 a4 02 00 01 00 00 10 07 00 00 00 ....4........... [ 441.596723][ T2727] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 441.606146][T21580] XFS (loop3): SB validate failed with error -117. [ 441.613644][T21592] XFS (loop4): device supports 512 byte sectors (not 0) [ 441.627470][T21562] XFS (loop1): Invalid superblock magic number 04:30:56 executing program 0: syz_mount_image$hfsplus(&(0x7f00000006c0)='hfsplus\x00', &(0x7f0000000700)='./file0\x00', 0x0, 0x3f000000, 0x0, 0x0, &(0x7f00000008c0)={[{@session={'session', 0x3d, 0x100000001}}]}) 04:30:56 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)='XFSB', 0x5703}], 0x0, 0x0) 04:30:56 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="7046534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x0, 0x0) 04:30:56 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x3ffff000, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 442.234762][T21623] XFS (loop4): device supports 512 byte sectors (not 0) [ 442.313134][T21630] XFS (loop1): Invalid superblock magic number [ 442.704209][T21630] XFS (loop1): Invalid superblock magic number [ 499.300967][ T0] NOHZ: local_softirq_pending 08 [ 538.974771][ T0] NOHZ: local_softirq_pending 08 [ 541.533325][ T0] NOHZ: local_softirq_pending 08 [ 561.370984][ T0] NOHZ: local_softirq_pending 08 [ 572.892903][ T0] NOHZ: local_softirq_pending 08 [ 595.926221][ T1075] INFO: task syz-executor.2:21488 blocked for more than 143 seconds. [ 595.934517][ T1075] Not tainted 5.6.0-rc7-syzkaller #0 [ 595.950446][ T1075] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 595.963314][ T1075] syz-executor.2 D28328 21488 7375 0x00004004 [ 595.971144][ T1075] Call Trace: [ 595.974678][ T1075] ? __schedule+0x934/0x1f90 [ 595.980414][ T1075] ? __sched_text_start+0x8/0x8 [ 595.985379][ T1075] ? __lock_acquire+0x14bd/0x3ca0 [ 595.991331][ T1075] schedule+0xd0/0x2a0 [ 595.995478][ T1075] schedule_timeout+0x6db/0xba0 [ 596.001365][ T1075] ? find_held_lock+0x2d/0x110 [ 596.007000][ T1075] ? usleep_range+0x160/0x160 [ 596.011786][ T1075] ? wait_for_completion+0x262/0x3c0 [ 596.018594][ T1075] ? find_held_lock+0x2d/0x110 [ 596.023554][ T1075] ? lock_downgrade+0x7f0/0x7f0 [ 596.029414][ T1075] ? do_raw_spin_lock+0x129/0x2e0 [ 596.034453][ T1075] ? rwlock_bug.part.0+0x90/0x90 [ 596.040305][ T1075] ? _raw_spin_unlock_irq+0x1f/0x80 [ 596.045535][ T1075] wait_for_completion+0x26a/0x3c0 [ 596.051498][ T1075] ? wait_for_completion_interruptible+0x420/0x420 [ 596.058763][ T1075] ? __mutex_unlock_slowpath+0xe2/0x660 [ 596.064423][ T1075] ? _raw_spin_unlock_irq+0x1f/0x80 [ 596.070451][ T1075] ? wake_up_q+0x140/0x140 [ 596.074937][ T1075] ? flush_workqueue_prep_pwqs+0x298/0x4e0 [ 596.082100][ T1075] ? check_flush_dependency+0x86/0x400 [ 596.088344][ T1075] flush_workqueue+0x40a/0x14c0 [ 596.093368][ T1075] ? _dev_warn+0xd7/0x109 [ 596.098670][ T1075] ? pwq_unbound_release_workfn+0x2d0/0x2d0 [ 596.104831][ T1075] ? __mutex_unlock_slowpath+0xe2/0x660 [ 596.111566][ T1075] ? sock_shutdown.cold+0x3e/0x4a [ 596.117189][ T1075] ? nbd_ioctl+0x7ae/0xb7c [ 596.121636][ T1075] nbd_ioctl+0x7ae/0xb7c [ 596.128244][ T1075] ? nbd_release+0x150/0x150 [ 596.132854][ T1075] ? do_vfs_ioctl+0x506/0x12c0 [ 596.138550][ T1075] ? finish_wait+0x260/0x260 [ 596.143161][ T1075] ? ioctl_file_clone+0x180/0x180 [ 596.149212][ T1075] ? nbd_release+0x150/0x150 [ 596.154069][ T1075] blkdev_ioctl+0x25b/0x660 [ 596.159492][ T1075] ? blkdev_common_ioctl+0x1770/0x1770 [ 596.165081][ T1075] ? ksys_dup3+0x3c0/0x3c0 [ 596.174689][ T1075] ? __x64_sys_futex+0x380/0x4f0 [ 596.180258][ T1075] block_ioctl+0xe9/0x130 [ 596.184607][ T1075] ? blkdev_fallocate+0x3f0/0x3f0 [ 596.190354][ T1075] ksys_ioctl+0x11a/0x180 [ 596.194824][ T1075] __x64_sys_ioctl+0x6f/0xb0 [ 596.200302][ T1075] ? lockdep_hardirqs_on+0x417/0x5d0 [ 596.205594][ T1075] do_syscall_64+0xf6/0x7d0 [ 596.211617][ T1075] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 596.218074][ T1075] RIP: 0033:0x45c849 [ 596.221990][ T1075] Code: Bad RIP value. [ 596.226983][ T1075] RSP: 002b:00007fe4d157ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.235404][ T1075] RAX: ffffffffffffffda RBX: 00007fe4d157f6d4 RCX: 000000000045c849 [ 596.244835][ T1075] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 596.253887][ T1075] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 596.262651][ T1075] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 596.271360][ T1075] R13: 0000000000000401 R14: 00000000004c69df R15: 000000000076bf0c [ 596.280336][ T1075] [ 596.280336][ T1075] Showing all locks held in the system: [ 596.288676][ T1075] 1 lock held by khungtaskd/1075: [ 596.293717][ T1075] #0: ffffffff897accc0 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x260 [ 596.304105][ T1075] 2 locks held by kworker/u5:0/1619: [ 596.310392][ T1075] #0: ffff888099c64928 ((wq_completion)knbd2-recv){+.+.}, at: process_one_work+0x82a/0x1690 [ 596.322051][ T1075] #1: ffffc90005807dd0 ((work_completion)(&args->work)){+.+.}, at: process_one_work+0x85e/0x1690 [ 596.333277][ T1075] 1 lock held by in:imklog/6755: [ 596.339076][ T1075] #0: ffff88809c3a4ae0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xe3/0x100 [ 596.348998][ T1075] [ 596.351350][ T1075] ============================================= [ 596.351350][ T1075] [ 596.360777][ T1075] NMI backtrace for cpu 1 [ 596.365126][ T1075] CPU: 1 PID: 1075 Comm: khungtaskd Not tainted 5.6.0-rc7-syzkaller #0 [ 596.373352][ T1075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.383529][ T1075] Call Trace: [ 596.386812][ T1075] dump_stack+0x188/0x20d [ 596.391161][ T1075] nmi_cpu_backtrace.cold+0x70/0xb1 [ 596.396435][ T1075] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 596.402077][ T1075] nmi_trigger_cpumask_backtrace+0x231/0x27e [ 596.408125][ T1075] watchdog+0xa8c/0x1010 [ 596.412364][ T1075] ? reset_hung_task_detector+0x30/0x30 [ 596.417898][ T1075] kthread+0x357/0x430 [ 596.421965][ T1075] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 596.427685][ T1075] ret_from_fork+0x24/0x30 [ 596.432432][ T1075] Sending NMI from CPU 1 to CPUs 0: [ 596.438306][ C0] NMI backtrace for cpu 0 [ 596.438312][ C0] CPU: 0 PID: 4244 Comm: systemd-journal Not tainted 5.6.0-rc7-syzkaller #0 [ 596.438318][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.438321][ C0] RIP: 0010:__orc_find+0x83/0xf0 [ 596.438331][ C0] Code: 01 c2 48 d1 fa 48 8d 5c 95 00 48 89 d8 48 c1 e8 03 42 0f b6 14 38 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 48 48 63 13 <48> 01 da 48 39 d1 73 b0 4c 8d 63 fc 49 39 ec 73 b3 4d 29 ee 49 c1 [ 596.438335][ C0] RSP: 0018:ffffc90001667728 EFLAGS: 00000046 [ 596.438342][ C0] RAX: 0000000000000007 RBX: ffffffff8a7a5d24 RCX: ffffffff81bd687d [ 596.438347][ C0] RDX: fffffffff7430adf RSI: ffffffff8ad73da0 RDI: ffffffff8a7a5d20 [ 596.438352][ C0] RBP: ffffffff8a7a5d20 R08: 000000000002afca R09: ffffffff8ad73db2 [ 596.438356][ C0] R10: 000000000002afc8 R11: 000000000006e027 R12: ffffffff8a7a5d28 [ 596.438361][ C0] R13: ffffffff8a7a5d20 R14: ffffffff8a7a5d20 R15: dffffc0000000000 [ 596.438366][ C0] FS: 00007f983c7a08c0(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 596.438370][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 596.438374][ C0] CR2: 00007f9839c2c000 CR3: 00000000929c7000 CR4: 00000000001426f0 [ 596.438379][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 596.438383][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 596.438386][ C0] Call Trace: [ 596.438389][ C0] unwind_next_frame+0x34b/0x19d0 [ 596.438392][ C0] ? filename_create+0x9e/0x4a0 [ 596.438395][ C0] ? deref_stack_reg+0xe0/0xe0 [ 596.438398][ C0] ? rcu_read_lock_held+0x9c/0xb0 [ 596.438401][ C0] ? profile_setup.cold+0xc1/0xc1 [ 596.438405][ C0] arch_stack_walk+0x74/0xd0 [ 596.438408][ C0] ? filename_create+0x9e/0x4a0 [ 596.438411][ C0] stack_trace_save+0x8c/0xc0 [ 596.438414][ C0] ? stack_trace_consume_entry+0x160/0x160 [ 596.438417][ C0] ? mark_lock+0xbc/0x1220 [ 596.438420][ C0] save_stack+0x1b/0x80 [ 596.438423][ C0] ? save_stack+0x1b/0x80 [ 596.438426][ C0] ? __kasan_slab_free+0xf7/0x140 [ 596.438429][ C0] ? kmem_cache_free+0x7f/0x320 [ 596.438432][ C0] ? putname+0xe1/0x120 [ 596.438436][ C0] ? filename_parentat.isra.0+0x38c/0x400 [ 596.438439][ C0] ? filename_create+0x9e/0x4a0 [ 596.438442][ C0] ? find_held_lock+0x2d/0x110 [ 596.438445][ C0] ? debug_check_no_obj_freed+0x20f/0x445 [ 596.438448][ C0] ? lock_downgrade+0x7f0/0x7f0 [ 596.438451][ C0] ? lock_acquire+0x197/0x420 [ 596.438454][ C0] ? debug_check_no_obj_freed+0xc4/0x445 [ 596.438458][ C0] ? trace_hardirqs_off+0x50/0x220 [ 596.438461][ C0] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 596.438465][ C0] ? debug_check_no_obj_freed+0x20f/0x445 [ 596.438468][ C0] ? __phys_addr+0x9a/0x110 [ 596.438471][ C0] ? putname+0xe1/0x120 [ 596.438474][ C0] __kasan_slab_free+0xf7/0x140 [ 596.438476][ C0] ? putname+0xe1/0x120 [ 596.438480][ C0] kmem_cache_free+0x7f/0x320 [ 596.438482][ C0] putname+0xe1/0x120 [ 596.438486][ C0] filename_parentat.isra.0+0x38c/0x400 [ 596.438489][ C0] ? getname+0x20/0x20 [ 596.438492][ C0] ? find_held_lock+0x2d/0x110 [ 596.438495][ C0] ? kmem_cache_alloc+0x6ef/0x730 [ 596.438498][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 596.438501][ C0] ? getname_flags+0xd2/0x5b0 [ 596.438504][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 596.438508][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 596.438511][ C0] filename_create+0x9e/0x4a0 [ 596.438515][ C0] ? kern_path_mountpoint+0x40/0x40 [ 596.438518][ C0] ? strncpy_from_user+0x2ac/0x3e0 [ 596.438521][ C0] ? getname_flags+0x275/0x5b0 [ 596.438524][ C0] do_mkdirat+0xa0/0x280 [ 596.438527][ C0] ? __ia32_sys_mknod+0xb0/0xb0 [ 596.438530][ C0] ? trace_hardirqs_off_caller+0x55/0x230 [ 596.438533][ C0] do_syscall_64+0xf6/0x7d0 [ 596.438537][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 596.438540][ C0] RIP: 0033:0x7f983ba5c687 [ 596.438550][ C0] Code: 00 b8 ff ff ff ff c3 0f 1f 40 00 48 8b 05 09 d8 2b 00 64 c7 00 5f 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d e1 d7 2b 00 f7 d8 64 89 01 48 [ 596.438554][ C0] RSP: 002b:00007ffec31ea7c8 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 596.438562][ C0] RAX: ffffffffffffffda RBX: 00007ffec31ed6e0 RCX: 00007f983ba5c687 [ 596.438567][ C0] RDX: 00007f983c4cda00 RSI: 00000000000001ed RDI: 0000559e080f78a0 [ 596.438571][ C0] RBP: 00007ffec31ea800 R08: 0000000000000000 R09: 0000000000000000 [ 596.438575][ C0] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 596.438580][ C0] R13: 0000000000000000 R14: 00007ffec31ed6e0 R15: 00007ffec31eacf0 [ 596.438871][ T1075] Kernel panic - not syncing: hung_task: blocked tasks [ 596.900575][ T1075] CPU: 1 PID: 1075 Comm: khungtaskd Not tainted 5.6.0-rc7-syzkaller #0 [ 596.908848][ T1075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.918905][ T1075] Call Trace: [ 596.922189][ T1075] dump_stack+0x188/0x20d [ 596.928154][ T1075] panic+0x2e3/0x75c [ 596.932034][ T1075] ? add_taint.cold+0x16/0x16 [ 596.936696][ T1075] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 596.942321][ T1075] ? ___preempt_schedule+0x16/0x18 [ 596.947434][ T1075] ? watchdog+0xa8c/0x1010 [ 596.951836][ T1075] ? nmi_trigger_cpumask_backtrace+0x214/0x27e [ 596.957975][ T1075] watchdog+0xa9d/0x1010 [ 596.962231][ T1075] ? reset_hung_task_detector+0x30/0x30 [ 596.968050][ T1075] kthread+0x357/0x430 [ 596.972105][ T1075] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 596.977943][ T1075] ret_from_fork+0x24/0x30 [ 596.984108][ T1075] Kernel Offset: disabled [ 596.988451][ T1075] Rebooting in 86400 seconds..