_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2750.303596][ T7889] XFS (loop2): Unmount and run xfs_repair [ 2750.324399][ T7889] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2750.332726][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 0f ff 10 00 XFSB............ [ 2750.341904][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2750.366313][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2750.375575][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 01:18:37 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000003100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xef01}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:18:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f\\\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:18:37 executing program 5: getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r2 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r2, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r5 = getpid() r6 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r6) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r6) syz_open_procfs(r5, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r7) [ 2750.389849][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2750.445131][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:18:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xef02}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2750.486030][ T3232] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf\l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2750.519925][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 01:18:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2750.564894][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2750.623137][ T5067] XFS (loop0): SB sanity check failed [ 2750.631298][ T5067] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2750.644698][ T5067] XFS (loop0): Unmount and run xfs_repair [ 2750.650973][ T5067] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2750.658633][ T5067] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 03 10 00 XFSB............ [ 2750.668333][ T5067] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2750.677456][ T5067] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2750.686659][ T5067] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2750.695535][ T5067] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2750.704869][ T5067] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2750.714083][ T5067] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2750.723249][ T5067] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:38 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000000000400000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:38 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f\xda\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:18:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xef03}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:38 executing program 5: getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r2 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r2, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r5 = getpid() r6 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r6) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r6) syz_open_procfs(r5, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r7) [ 2750.962132][ T3387] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGfl1Έ~@qHm34Ih!(.x㝟}'s $O' 01:18:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x0, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:18:38 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000004100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:38 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200026bd7000ffdbdf250300000008003b000900000005003000c30fb269701103c2000000000800a88edb3c00b800000005f1340003000000050037000000000005002e00010000007b9b00f708f9b7376664933befe4c8628b0c830b9769"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='exfat\x00', 0x4817, &(0x7f0000000480)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2751.171392][ T3513] XFS (loop2): SB sanity check failed [ 2751.187250][ T3513] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:18:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf000}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2751.220710][ T3513] XFS (loop2): Unmount and run xfs_repair [ 2751.226629][ T3513] XFS (loop2): First 128 bytes of corrupted metadata buffer: 01:18:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf001}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2751.335272][ T3513] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 00 04 XFSB............ [ 2751.340403][ T3528] XFS (loop0): SB sanity check failed [ 2751.356473][ T3528] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2751.446439][ T3513] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2751.464183][ T3513] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 01:18:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf002}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2751.494709][ T3513] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2751.504105][ T3513] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2751.513491][ T3513] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2751.515251][ T3528] XFS (loop0): Unmount and run xfs_repair [ 2751.526766][ T3513] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 01:18:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x0, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2751.544150][ T3513] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:39 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000000000800000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2751.616313][ T3528] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2751.628361][ T3528] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 04 10 00 XFSB............ 01:18:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf003}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2751.657508][ T3528] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2751.687629][ T3528] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2751.736347][ T3528] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 01:18:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = memfd_create(&(0x7f0000000080)='hugetlbfs\x00', 0x0) fcntl$notify(r2, 0x402, 0x36) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2751.860583][ T3659] XFS (loop2): SB sanity check failed [ 2751.872869][ T3659] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2751.886273][ T3659] XFS (loop2): Unmount and run xfs_repair [ 2751.892269][ T3659] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2751.900129][ T3659] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 00 08 XFSB............ [ 2751.909415][ T3659] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2751.917025][ T3528] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2751.918813][ T3659] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2751.936317][ T3659] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2751.945625][ T3659] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2751.954954][ T3659] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2751.964272][ T3659] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2751.974536][ T3659] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:39 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000000000b00000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2752.080383][ T3707] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2752.201477][ T3528] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2752.234753][ T3890] XFS (loop2): SB sanity check failed [ 2752.245229][ T3890] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2752.258511][ T3890] XFS (loop2): Unmount and run xfs_repair [ 2752.264414][ T3890] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2752.274357][ T3890] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 00 0b XFSB............ [ 2752.296521][ T3528] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2752.299809][ T3890] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2752.305438][ T3528] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:39 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2752.351968][ T3890] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2752.361322][ T3890] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2752.370656][ T3890] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2752.386728][ T3890] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:18:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf100}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2752.397399][ T3890] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2752.411996][ T3890] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:40 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000304100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r4 = fcntl$dupfd(r2, 0x0, r3) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x7fff, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000140)=0x8, 0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ceph\x00', 0x14008, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`\x03\x00\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf\x04\x00\x00\x00b\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00'/345) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000000)=0x1) 01:18:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x0, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:18:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf101}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2752.560134][ T3890] XFS (loop2): SB sanity check failed [ 2752.565662][ T3890] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2752.590664][ T3890] XFS (loop2): Unmount and run xfs_repair [ 2752.598297][ T3890] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2752.666399][ T3890] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 00 0b XFSB............ [ 2752.675587][ T3890] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2752.689796][ T3890] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2752.701677][ T3890] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2752.711013][ T3890] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2752.720832][ T3890] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2752.730390][ T3890] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2752.739702][ T3890] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2752.778612][ T3921] XFS (loop0): SB sanity check failed [ 2752.800957][ T3921] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:18:40 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000004000000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2752.826405][ T3921] XFS (loop0): Unmount and run xfs_repair [ 2752.848704][ T3921] XFS (loop0): First 128 bytes of corrupted metadata buffer: 01:18:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, 0x0) sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:18:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf102}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2752.929125][ T3921] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 03 04 10 00 XFSB............ [ 2753.004940][ T3921] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x100000000011, 0x2, 0x0) bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000240), &(0x7f00000002c0)=0xfeeb) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={r9, 0x78, &(0x7f0000000440)=[@in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x0, @local}, @in6={0xa, 0x4e24, 0x10000, @remote}, @in6={0xa, 0x0, 0x2, @rand_addr="8649f2a8cebb0c1b628d2993cea0f0b0"}]}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x80000000, 0xffffffff, 0x9, 0x5, 0x4c, 0x40, 0x800, {r9, @in={{0x2, 0x4e24, @empty}}, 0xfffff7bc, 0x3, 0xfffffff7, 0xfff, 0xdd}}, &(0x7f0000000380)=0xb0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000080)={r9, 0x2}, &(0x7f00000000c0)=0x8) r10 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r10, 0x84, 0xc, &(0x7f0000000000)=0x20, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='efivarfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2753.086373][ T3921] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2753.138196][ T3921] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2753.196334][ T3921] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2753.217987][ T3921] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:18:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf103}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2753.238535][ T3921] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2753.255950][ T3921] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, 0x0) sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2753.357814][ T5067] XFS (loop2): SB sanity check failed [ 2753.363501][ T5067] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2753.402682][ T5067] XFS (loop2): Unmount and run xfs_repair [ 2753.409195][ T5067] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2753.431021][ T5067] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 04 00 00 XFSB............ [ 2753.443661][ T5067] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2753.454151][ T3921] XFS (loop0): SB sanity check failed [ 2753.459684][ T5067] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2753.469487][ T3921] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2753.482237][ T5067] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2753.498563][ T3921] XFS (loop0): Unmount and run xfs_repair 01:18:41 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:18:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x8108a, &(0x7f0000000140)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3A\xa7\x85\x02x#O%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbe\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\xb6\xf3\xe1\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00') [ 2753.506557][ T5067] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2753.516684][ T3921] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2753.531944][ T3921] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 03 04 10 00 XFSB............ [ 2753.543417][ T5067] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2753.576393][ T3921] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2753.577611][ T5067] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2753.605702][ T5067] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2753.610848][ T3921] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2753.726517][ T3921] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2753.751875][ T3921] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2753.790756][ T3921] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2753.813852][ T3921] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2753.856662][ T3921] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:41 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000005100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf200}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:41 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r2, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "91359792231ae4d673fc04b4c5fcbca24fcc61ba8eff38e48234e9af92325e84882bc904d33091829c44b0e80c0893af0bb53042923adf0563dd29d53bf726", 0x24}, 0x60) close(r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:18:41 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000008000000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, 0x0) sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2754.173878][ T4282] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2754.307458][ T4280] XFS (loop2): SB sanity check failed [ 2754.315322][ T4280] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2754.338591][ T4280] XFS (loop2): Unmount and run xfs_repair [ 2754.344827][ T4280] XFS (loop2): First 128 bytes of corrupted metadata buffer: 01:18:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)) sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:18:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf201}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r2, 0x40044104, &(0x7f0000000080)=0x5) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") fcntl$addseals(r3, 0x409, 0x7) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2754.433848][ T5067] XFS (loop0): SB sanity check failed [ 2754.439819][ T5067] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2754.441553][ T4280] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 08 00 00 XFSB............ [ 2754.477243][ T5067] XFS (loop0): Unmount and run xfs_repair [ 2754.483238][ T5067] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2754.491061][ T5067] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 05 10 00 XFSB............ [ 2754.500567][ T5067] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2754.509877][ T5067] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2754.519083][ T5067] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2754.528367][ T5067] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2754.537960][ T5067] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2754.547169][ T5067] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2754.556141][ T5067] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)) sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2754.626361][ T4280] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2754.639050][ T4280] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2754.659193][ T4280] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2754.669426][ T4395] XFS (loop0): SB sanity check failed [ 2754.674979][ T4395] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2754.690944][ T4280] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2754.700849][ T4395] XFS (loop0): Unmount and run xfs_repair [ 2754.711176][ T4280] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2754.721447][ T4395] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2754.735096][ T4395] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 05 10 00 XFSB............ [ 2754.744600][ T4280] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2754.754097][ T4395] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2754.763411][ T4280] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2754.782303][ T4395] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2754.792848][ T4395] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2754.802737][ T4395] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2754.816289][ T4395] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:18:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf202}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2754.828472][ T4395] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2754.838035][ T4395] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2754.987256][ T4280] XFS (loop2): SB sanity check failed [ 2754.992956][ T4280] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2755.025408][ T4280] XFS (loop2): Unmount and run xfs_repair [ 2755.032115][ T4280] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2755.049729][ T4280] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 08 00 00 XFSB............ [ 2755.067273][ T4280] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2755.077046][ T4280] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2755.086692][ T4280] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2755.106081][ T4280] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2755.115387][ T4280] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2755.124771][ T4280] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 01:18:42 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000006100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)) sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:18:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='pstore\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:18:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf203}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:42 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2755.134724][ T4280] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:42 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000000b000000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:42 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x10100) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)}) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000140)={{0x4, @name="ef4c7694fbe5675604eca5bd4940e5b5f2050fc17234b74c11f04a642509b823"}, 0x8, 0x2, 0x5}) 01:18:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0b") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2755.436360][ T5067] XFS (loop0): SB sanity check failed [ 2755.442010][ T5067] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2755.469242][ T5067] XFS (loop0): Unmount and run xfs_repair [ 2755.475217][ T5067] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2755.491863][ T4661] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2755.511257][ T5067] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 06 10 00 XFSB............ [ 2755.520516][ T5067] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2755.529968][ T5067] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2755.544714][ T5067] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2755.560085][ T5067] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2755.569339][ T5067] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2755.578780][ T5067] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 01:18:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf300}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2755.588120][ T5067] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0xfeeb) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={r6, 0x78, &(0x7f0000000440)=[@in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e24, 0x2, @mcast1}, @in6={0xa, 0x0, 0x2, @local}]}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x80000000, 0xffffffff, 0x9, 0x5, 0x4c, 0x40, 0x800, {r6, @in={{0x2, 0x4e24, @loopback}}, 0xfffff7bc, 0x3, 0xfffffff7, 0xffe, 0x80000000}}, &(0x7f0000000380)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000000)={r6, 0x5}, 0x8) [ 2755.746999][ T5067] XFS (loop2): SB sanity check failed [ 2755.752847][ T5067] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2755.825311][ T5067] XFS (loop2): Unmount and run xfs_repair [ 2755.846849][ T5067] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2755.874841][ T5067] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 0b 00 00 XFSB............ [ 2755.909213][ T5067] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2755.943727][ T5067] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2755.978876][ T5067] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2756.013311][ T5067] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2756.046476][ T5067] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:18:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0b") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2756.052985][ T4791] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2756.055822][ T5067] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2756.087712][ T5067] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2756.097462][ T5067] XFS (loop0): SB sanity check failed 01:18:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf301}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2756.103823][ T5067] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2756.116934][ T5067] XFS (loop0): Unmount and run xfs_repair [ 2756.122921][ T5067] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2756.130903][ T5067] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 06 10 00 XFSB............ [ 2756.140291][ T5067] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2756.149750][ T5067] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2756.159071][ T5067] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2756.168371][ T5067] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2756.177777][ T5067] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2756.187638][ T5067] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2756.197316][ T5067] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:43 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000004c010000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:43 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000007100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:43 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:18:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x5865}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, @xdp={0x2c, 0x4, r5, 0x3a}, @in={0x2, 0x4e24, @empty}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0xfff, 0x0, 0x0, 0x0, 0xc01e, &(0x7f0000000000)='geneve0\x00', 0x5, 0x6, 0x7}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg2\x00', r6}) r7 = fcntl$dupfd(r1, 0x0, r1) syz_open_dev$cec(&(0x7f0000000480)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) signalfd4(0xffffffffffffffff, &(0x7f0000000440)={[0x1]}, 0x8, 0xbfb1f8ac87e3982b) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r10) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) r11 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2756.514952][ T5067] XFS (loop2): SB sanity check failed [ 2756.520554][ T5067] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2756.533300][ T5067] XFS (loop2): Unmount and run xfs_repair [ 2756.546747][ T5067] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2756.557983][ T5067] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 4c 01 00 XFSB.........L.. [ 2756.572620][ T5067] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2756.590179][ T5067] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2756.599781][ T5067] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 01:18:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0b") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2756.609246][ T5067] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2756.619520][ T5067] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2756.629910][ T5067] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2756.639445][ T5067] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2756.653810][ T3383] XFS (loop0): SB sanity check failed [ 2756.664598][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2756.677391][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2756.683218][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2756.691143][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 07 10 00 XFSB............ [ 2756.710374][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2756.724110][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2756.733616][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2756.744837][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:18:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf302}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2756.759284][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2756.769011][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2756.778486][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:44 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000000000000a0000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4001fe) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:18:44 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000008100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:18:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf303}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:44 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2757.151345][ T4948] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2757.318597][ T3383] XFS (loop2): SB sanity check failed [ 2757.324351][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2757.336931][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2757.342835][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2757.350892][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 0a 00 XFSB............ [ 2757.360376][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2757.369577][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2757.378938][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2757.388330][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2757.397802][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2757.407063][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2757.416905][ T4965] XFS (loop0): SB sanity check failed [ 2757.423019][ T4965] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2757.435947][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2757.445211][ T4965] XFS (loop0): Unmount and run xfs_repair [ 2757.453631][ T4965] XFS (loop0): First 128 bytes of corrupted metadata buffer: 01:18:45 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2757.461698][ T4965] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 08 10 00 XFSB............ [ 2757.470903][ T4965] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2757.480756][ T4965] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2757.490970][ T4965] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2757.500183][ T4965] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2757.509736][ T4965] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:18:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf400}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:45 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000009100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2757.519143][ T4965] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2757.528236][ T4965] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:45 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000000000000f0000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:45 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000280), &(0x7f0000000440)=0x4) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x20) ptrace$poke(0x4, r5, &(0x7f0000000240), 0x8001) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="bc00539f2579b4ff1ab9f4510cd33c536c9e6c4a64d7b52e96bd30cb9369b82a9b9dd5fac312ee669b3c918a76905a220b836e8a99f946cb8ff3ee3293a941c476fb22e27a56d973a3174a589b767df21d1d06e1962077c770e0b961fb7215b0602f6d18c124c164e7ffe0143a2daad835470179647458e8b645476f47aaf99bba1a7876aa52f2d63708c3f58a0936334e", @ANYRES16=r4, @ANYBLOB="040025bd7000ffdbdf251a00000024002280080005000400000008000500ff0100000800010008000000080002004000000008000100ffffffff4c0022800800030006000000080004000900008052e4ce2ce637470008000200070000e0070032000900000008000700020000000800020000800000080004008100000008002600fbffffff1c002280080004000180000008000200070000000800020000000800050092001400000008009a0002000000040dcc00a3ad0723acd2d229b8182340b67b8a3f1ea6a32ac8bc6bde5bb435720dab25a2ba830f16541e0ff57dc6f1389bbf85be7e6d7ab60f2bd16ac6154f65"], 0x3}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:18:45 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:18:45 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:18:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf401}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2757.866406][ T5097] XFS (loop2): SB sanity check failed [ 2757.872179][ T5097] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:18:45 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe84780") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2757.908120][ T5104] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2758.010040][ T5097] XFS (loop2): Unmount and run xfs_repair [ 2758.027024][T24031] XFS (loop0): SB sanity check failed [ 2758.034822][T24031] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2758.061946][ T5097] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2758.104412][T24031] XFS (loop0): Unmount and run xfs_repair [ 2758.142084][T24031] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2758.161579][ T5097] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 0f 00 XFSB............ [ 2758.174604][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 09 10 00 XFSB............ [ 2758.200142][T24031] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:45 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe84780") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2758.209431][ T5097] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2758.228219][ T5097] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2758.247653][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2758.260460][ T5097] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 01:18:45 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x428000, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:18:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf402}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2758.302553][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2758.322381][ T5097] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2758.348557][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2758.372146][ T5097] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2758.386414][ T5097] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2758.394792][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:18:46 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe84780") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2758.454593][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2758.480954][ T5097] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2758.505777][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2758.550972][ T5138] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:18:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf403}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:46 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000000a100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:46 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000002100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80002, 0x0) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbdf2504000000080002000200000008000100"/46], 0x34}}, 0x4000000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:18:46 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2758.974102][ T5364] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2759.002243][ T5356] XFS (loop0): SB sanity check failed [ 2759.007816][ T5356] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2759.080634][ T5356] XFS (loop0): Unmount and run xfs_repair 01:18:46 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:18:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf500}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2759.126111][ T5356] XFS (loop0): First 128 bytes of corrupted metadata buffer: 01:18:46 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:18:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x120) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2759.210438][ T5356] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 0a 10 00 XFSB............ 01:18:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf501}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2759.265457][ T5356] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2759.311995][ T5356] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2759.336653][ T5356] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2759.369395][ T3383] XFS (loop2): SB sanity check failed [ 2759.374922][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2759.385710][ T5356] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2759.406567][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2759.412450][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2759.425620][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 02 10 00 XFSB............ [ 2759.440248][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2759.455551][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 01:18:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf502}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2759.473711][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2759.482994][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2759.492307][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2759.501820][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2759.511011][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:47 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2759.574566][ T5495] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2759.594151][ T5356] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2759.669405][ T5356] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2759.690953][ T5474] XFS (loop2): SB sanity check failed [ 2759.696750][ T5474] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:18:47 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2759.719086][ T5474] XFS (loop2): Unmount and run xfs_repair [ 2759.736347][ T5356] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2759.764373][ T5474] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2759.782321][ T5474] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 02 10 00 XFSB............ [ 2759.796316][ T5474] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2759.838692][ T5474] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 01:18:47 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000000c100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2759.882799][ T5474] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2759.891908][ T5474] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2759.901102][ T5474] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2759.910259][ T5474] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2759.944554][ T5474] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:47 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000003100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf503}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:47 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2760.148727][ T3383] XFS (loop0): SB sanity check failed [ 2760.158446][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2760.180613][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2760.186620][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2760.194410][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 0c 10 00 XFSB............ [ 2760.203607][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2760.212777][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2760.231367][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2760.244027][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2760.253199][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2760.262493][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2760.271546][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2760.307755][ T5734] XFS (loop2): SB sanity check failed [ 2760.335168][ T5734] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2760.369795][ T5734] XFS (loop2): Unmount and run xfs_repair [ 2760.393413][ T5734] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2760.401190][ T5734] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 03 10 00 XFSB............ [ 2760.413558][ T5734] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2760.425134][ T5734] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2760.436969][ T5734] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2760.445930][ T5734] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2760.456846][ T5734] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2760.468238][ T5734] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2760.493506][ T5734] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:48 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:18:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x2, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:18:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:18:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf600}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:48 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000000d100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:18:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf601}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2760.732121][ T5762] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:18:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) creat(&(0x7f0000000100)='./file0\x00', 0x1ac) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:18:48 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000004100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2760.893402][T24031] XFS (loop0): SB sanity check failed [ 2760.899046][T24031] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2760.926491][T24031] XFS (loop0): Unmount and run xfs_repair [ 2760.950880][T24031] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2760.985287][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 0d 10 00 XFSB............ 01:18:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf602}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2761.005576][T24031] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2761.025571][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2761.038537][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2761.048438][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2761.057709][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2761.067178][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2761.076202][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf603}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:48 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000005100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2761.228416][ T5891] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2761.560452][T24031] XFS (loop2): SB sanity check failed [ 2761.566000][T24031] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2761.587620][T24031] XFS (loop2): Unmount and run xfs_repair [ 2761.604552][T24031] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2761.616625][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 05 10 00 XFSB............ [ 2761.635621][T24031] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2761.660583][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2761.676516][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2761.689046][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2761.698386][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2761.707573][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2761.716703][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:49 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000010e100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:49 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:18:49 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKRAGET(r4, 0x1263, &(0x7f0000000000)) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:18:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf700}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:49 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000006100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:49 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2762.009238][ T6032] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:18:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf701}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2762.097155][ T6036] XFS (loop2): SB sanity check failed [ 2762.103036][ T6038] XFS (loop0): SB sanity check failed [ 2762.111290][ T6038] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2762.125043][ T6036] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:18:49 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2762.144576][ T6036] XFS (loop2): Unmount and run xfs_repair [ 2762.157499][ T6038] XFS (loop0): Unmount and run xfs_repair [ 2762.168115][ T6036] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2762.175637][ T6038] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2762.193160][ T6036] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 06 10 00 XFSB............ [ 2762.202336][ T6038] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 01 0e 10 00 XFSB............ [ 2762.226373][ T6036] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2762.235536][ T6038] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2762.300091][ T6038] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2762.316371][ T6036] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2762.329911][ T6036] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2762.339641][ T6036] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:18:49 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0)='l2tp\x00') r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x80002, 0x94) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr, 0xfffffffd}, 0x1c) r5 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r5, 0x0, 0x0, 0x8000008800, &(0x7f0000000000)={0xa, 0x200000000004e23, 0x0, @mcast1}, 0x1c) sendto$inet6(r5, &(0x7f00000002c0)="02", 0x1, 0x404c000, 0x0, 0x0) recvfrom$inet6(r4, &(0x7f0000000740)=""/234, 0xea, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0x5, 0x0, 0x0, @empty}}}, 0x9c) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r8, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "91359792231ae4d673fc04b4c5fcbca24fcc61ba8eff38e48234e9af92325e84882bc904d33091829c44b0e80c0893af0bb53042923adf0563dd29d53bf726", 0x24}, 0x60) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl(r9, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r10 = socket$netlink(0x10, 0x3, 0x0) ioctl(r10, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") recvfrom(r10, &(0x7f0000000180)=""/192, 0xc0, 0x1, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x4, 0x1, 0x3, 0x2, {0xa, 0x4e20, 0x7, @ipv4={[], [], @multicast2}, 0x7}}}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x10000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r15, r14) [ 2762.349705][ T6036] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2762.360419][ T6036] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2762.369813][ T6036] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2762.386572][ T6038] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2762.411300][ T6038] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2762.434385][ T6038] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:18:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf702}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2762.463751][ T6038] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2762.486367][ T6038] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:18:50 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0xa00000, 0x101, 0x3493851d, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x980928, 0x0, [], @value=0xd93b}}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x1, 0x1, 0x801, 0x0, 0x0, {0xc, 0x0, 0x8}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xf4}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_STATUS={0x8}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x37}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4040001) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2762.704672][T24031] XFS (loop0): SB sanity check failed [ 2762.710637][T24031] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2762.746284][T24031] XFS (loop0): Unmount and run xfs_repair [ 2762.752124][T24031] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2762.759728][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 01 0e 10 00 XFSB............ [ 2762.768862][T24031] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2762.777766][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2762.796338][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2762.807737][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2762.816774][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2762.825896][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2762.834963][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2762.872667][ T6292] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:18:50 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000010100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:50 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000007100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf703}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:18:50 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x9a642, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000000c0)=0x113) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @in6={0xa, 0x4e22, 0x4, @ipv4={[], [], @multicast2}, 0x9}}}, 0x90) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000000)={0x20000002}) r7 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2763.076978][ T6405] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2763.177131][ T7889] XFS (loop2): SB sanity check failed [ 2763.182637][ T7889] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2763.220012][ T7889] XFS (loop2): Unmount and run xfs_repair [ 2763.226172][ T7889] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2763.234038][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 07 10 00 XFSB............ [ 2763.243367][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2763.264184][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2763.289922][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2763.300350][ T6414] XFS (loop0): SB sanity check failed [ 2763.306336][ T6414] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2763.319852][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2763.329026][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2763.338311][ T6414] XFS (loop0): Unmount and run xfs_repair [ 2763.344416][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2763.353672][ T6414] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2763.361266][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2763.370341][ T6414] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 10 10 00 XFSB............ [ 2763.381703][ T6414] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2763.390909][ T6414] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2763.399995][ T6414] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2763.409122][ T6414] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2763.418207][ T6414] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2763.427281][ T6414] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2763.436562][ T6414] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2763.584950][ T7889] XFS (loop0): SB sanity check failed [ 2763.598337][ T7889] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2763.625358][ T7889] XFS (loop0): Unmount and run xfs_repair [ 2763.631211][ T7889] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2763.656314][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 10 10 00 XFSB............ [ 2763.665213][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2763.676503][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2763.685459][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2763.694486][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2763.703633][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2763.712569][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2763.721513][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:51 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:18:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:18:51 executing program 4: timer_create(0x4, &(0x7f0000000140)={0x0, 0x3a, 0x1, @thr={&(0x7f0000000080)="d2db883dd1ed7c6be44820c1c42bf77a332d273773c5f63648fa33ca0754ccf540d0f46e0ab40eafe9f79c9af8dea3cefd4554d80d0a3016bcb99d9e4bf0b4857e5308e8b216ab2bd984026bcee8938330239b74fb8c9954", &(0x7f0000000000)="6163ea4ecab1d471a45ed6a3a2eb1c7bcf99c6"}}, &(0x7f0000000180)=0x0) timer_getoverrun(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x1, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x844) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x9) creat(&(0x7f0000000100)='./file0\x00', 0xe2) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:18:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf800}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:51 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000008100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:51 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000001a100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2763.907656][ T6450] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2763.945198][ T6447] XFS (loop2): SB sanity check failed [ 2763.951433][ T6447] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2763.975844][ T6447] XFS (loop2): Unmount and run xfs_repair [ 2763.986593][ T6447] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2763.998623][ T6447] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 08 10 00 XFSB............ 01:18:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf801}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2764.014478][ T6447] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2764.024026][ T6447] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2764.033076][ T6447] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2764.042514][ T6447] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2764.051779][ T6447] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:18:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2764.062008][ T6447] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2764.071792][ T7889] XFS (loop0): SB sanity check failed [ 2764.077384][ T7889] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2764.086887][ T6447] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2764.090054][ T7889] XFS (loop0): Unmount and run xfs_repair [ 2764.104674][ T7889] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2764.112385][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 1a 10 00 XFSB............ [ 2764.121674][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2764.131429][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2764.140713][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2764.149925][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2764.172234][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2764.183412][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2764.192651][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2764.282977][ T6463] XFS (loop0): SB sanity check failed [ 2764.288775][ T6463] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2764.312097][ T6463] XFS (loop0): Unmount and run xfs_repair [ 2764.322954][ T7889] XFS (loop2): SB sanity check failed [ 2764.326383][ T6463] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2764.328700][ T7889] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2764.335975][ T6463] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 1a 10 00 XFSB............ [ 2764.349277][ T7889] XFS (loop2): Unmount and run xfs_repair [ 2764.363257][ T7889] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2764.370920][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 08 10 00 XFSB............ [ 2764.380330][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2764.389562][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2764.398610][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2764.407800][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2764.416931][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2764.426058][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2764.435217][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) 01:18:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf802}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2764.480079][ T6463] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf803}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2764.605788][ T6463] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2764.631679][ T6598] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2764.706351][ T6463] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2764.715267][ T6463] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2764.767398][ T6463] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2764.814592][ T6463] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2764.851677][ T6463] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:52 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:18:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf900}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:52 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000009100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:18:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) 01:18:52 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000001f100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf901}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20002811}, 0x2000010) eventfd(0x1) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2765.208924][ T7889] XFS (loop2): SB sanity check failed [ 2765.215017][ T7889] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2765.235511][ T7889] XFS (loop2): Unmount and run xfs_repair [ 2765.248063][ T7889] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2765.264378][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 09 10 00 XFSB............ [ 2765.284383][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2765.305145][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2765.325689][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2765.346042][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2765.361440][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2765.370813][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2765.380421][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2765.393904][ T7889] XFS (loop0): SB sanity check failed [ 2765.399940][ T7889] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2765.412975][ T7889] XFS (loop0): Unmount and run xfs_repair [ 2765.419228][ T7889] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2765.427273][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 1f 10 00 XFSB............ [ 2765.437512][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2765.447161][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2765.456543][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2765.465928][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:18:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:18:53 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000000a100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2765.475526][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2765.485035][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2765.504161][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2765.523520][ T6947] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:18:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2765.674083][T24031] XFS (loop2): SB sanity check failed [ 2765.679883][T24031] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2765.692952][T24031] XFS (loop2): Unmount and run xfs_repair [ 2765.699249][T24031] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2765.707236][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 0a 10 00 XFSB............ 01:18:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf902}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2765.722266][T24031] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2765.744226][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2765.755711][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2765.765447][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2765.779396][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2765.791093][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2765.800612][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2765.812142][T24031] XFS (loop0): SB sanity check failed [ 2765.818167][T24031] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2765.831098][T24031] XFS (loop0): Unmount and run xfs_repair [ 2765.837340][T24031] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2765.845328][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 1f 10 00 XFSB............ [ 2765.855132][T24031] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2765.867758][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2765.879166][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2765.888784][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2765.898416][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2765.908291][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2765.918057][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2765.961553][ T6952] XFS (loop2): SB sanity check failed [ 2765.967341][ T6952] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2765.989977][ T6952] XFS (loop2): Unmount and run xfs_repair [ 2765.996701][ T6952] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2766.004844][ T6952] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 0a 10 00 XFSB............ [ 2766.014304][ T6952] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2766.023961][ T6952] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2766.033879][ T6952] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2766.044319][ T6952] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2766.053861][ T6952] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2766.070836][ T6952] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2766.098457][ T6952] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000980)=ANY=[@ANYBLOB="0a000000000000000000000000000000d100000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/209], @ANYBLOB="00000000000000000030000000000000ff00000000000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB='\x00'/255], @ANYBLOB="000000000000000001000000000000005f00000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/95], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00f\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/102], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/34], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB='\x00'/115], @ANYBLOB="000000000000000002000000000000004b00000000000000", @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00'/75], @ANYBLOB="000000000000000000000000000000001900000000000000", @ANYPTR=&(0x7f0000000640)=ANY=[@ANYBLOB='\x00'/25], @ANYBLOB="000000000000000000f0000000000000950000000006000000", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB='\x00'/149], @ANYBLOB="000000000000000001000000000000009d00000000000000", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB='\x00'/157], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:18:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:18:53 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000020100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xf903}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:53 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:18:53 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000000b100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2f", 0x8}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2766.372233][ T7096] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:18:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xfa00}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2766.458254][ T7094] XFS (loop0): SB sanity check failed [ 2766.465892][ T7094] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2766.487736][ T7094] XFS (loop0): Unmount and run xfs_repair [ 2766.494217][ T7094] XFS (loop0): First 128 bytes of corrupted metadata buffer: 01:18:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$USBDEVFS_GET_CAPABILITIES(r7, 0x8004551a, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7ff) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='befs\x00', 0x2a18011, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2766.502554][ T7094] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 20 10 00 XFSB......... .. [ 2766.512866][T24031] XFS (loop2): SB sanity check failed [ 2766.516392][ T7094] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2766.518746][T24031] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2766.553909][T24031] XFS (loop2): Unmount and run xfs_repair [ 2766.560335][T24031] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2766.568819][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 0b 10 00 XFSB............ [ 2766.580464][T24031] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2766.588553][ T7094] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2766.598870][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2766.598886][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2766.598901][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2766.598914][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2766.598937][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2766.656439][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xfa01}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:54 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2f", 0x8}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2766.793570][ T7094] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2766.806742][ T7102] XFS (loop2): SB sanity check failed [ 2766.819642][ T7102] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2766.837817][ T7094] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2766.859461][ T7102] XFS (loop2): Unmount and run xfs_repair [ 2766.886339][ T7102] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2766.920031][ T7102] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 0b 10 00 XFSB............ [ 2766.927881][ T7094] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:18:54 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000140)={{0x2, 0x0, @identifier="13ba9519bc214da1d1d29c5efe84f2de"}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000000)={@multicast1, @local, @multicast2}, &(0x7f0000000080)=0xc) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='reiserfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8d/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe4\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xc9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:18:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xfa02}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:54 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2f", 0x8}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2766.960223][ T7102] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2767.002495][ T7102] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2767.042492][ T7102] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2767.075161][ T7094] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2767.082571][ T7102] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2767.106311][ T7094] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2767.168704][ T7102] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:18:54 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000001020100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xfa03}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2767.212869][ T7102] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2767.239235][ T7102] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2767.510146][ T3383] XFS (loop0): SB sanity check failed [ 2767.515871][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:18:55 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:18:55 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974f", 0xc}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:18:55 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000000c100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xfb00}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:55 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$KDMKTONE(r0, 0x4b30, 0x3) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000240)='msdos\x00', 0x0, &(0x7f0000000440)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt\x00\x00\x01\x00(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5w\x82\v\xa8\xb2\xc4\xf5$\x18O,\x7fG-\x90\x0fM\x00\xb6\x96^%\xdf\x8d\xc9zs3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\b^\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00M\x9a\xdf\xfc\x84\xe9p\v\x8bc\xa9\xff\xd87\x94\x0e\xac') r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r1, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "91359792231ae4d673fc04b4c5fcbca24fcc61ba8eff38e48234e9af92325e84882bc904d33091829c44b0e80c0893af0bb53042923adf0563dd29d53bf726", 0x24}, 0x60) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x200, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x3, 0x4}, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0xffff}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)='/dev/kvm\x00', r6}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, r5, 0x0, 0x6, &(0x7f0000000040)='msdos\x00', r6}, 0x30) fcntl$lock(r1, 0x24, &(0x7f0000000100)={0x1, 0x3, 0xe9, 0x2, r7}) [ 2767.598981][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2767.609687][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: 01:18:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xfb01}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2767.723785][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 10 20 10 00 XFSB......... .. 01:18:55 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974f", 0xc}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2767.790459][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2767.899827][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2767.909769][T24031] XFS (loop2): SB sanity check failed [ 2767.915588][T24031] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2767.949414][T24031] XFS (loop2): Unmount and run xfs_repair [ 2767.955618][T24031] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2767.963674][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 0c 10 00 XFSB............ [ 2767.965805][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2767.973623][T24031] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:55 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974f", 0xc}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2767.992339][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2768.001957][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2768.011556][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2768.021195][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2768.031369][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2768.041048][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:55 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1", 0xe}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:18:55 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000000d100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2768.125488][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2768.216493][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2768.265035][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2768.334713][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2768.396570][ T3383] XFS (loop2): SB sanity check failed [ 2768.402807][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2768.416435][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2768.422388][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2768.437501][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 0d 10 00 XFSB............ 01:18:56 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000023100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r6 = accept4$unix(r3, &(0x7f00000001c0), &(0x7f0000000080)=0x6e, 0x80000) signalfd4(r6, &(0x7f0000000280)={[0x3]}, 0x8, 0x80000) getsockname$packet(r5, &(0x7f0000000240), &(0x7f00000002c0)=0xfeeb) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={r8, 0x78, &(0x7f0000000440)=[@in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x0, @local}, @in6={0xa, 0x4e24, 0x10000, @remote}, @in6={0xa, 0x0, 0x2, @rand_addr="8649f2a8cebb0c1b628d2993cea0f0b0"}]}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x80000000, 0xffffffff, 0x9, 0x5, 0x4c, 0x40, 0x800, {r8, @in={{0x2, 0x4e24, @empty}}, 0xfffff7bc, 0x3, 0xfffffff7, 0xfff, 0xdd}}, &(0x7f0000000380)=0xb0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={r8, 0xbf}, 0x8) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2768.456737][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2768.474474][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2768.510450][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2768.526590][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2768.536650][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2768.544889][ T7825] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2768.546533][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2768.585824][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2768.731526][ T7903] XFS (loop0): SB sanity check failed [ 2768.757631][ T7903] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2768.786127][ T7903] XFS (loop0): Unmount and run xfs_repair [ 2768.795325][ T7903] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2768.826511][ T7903] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 23 10 00 XFSB.........#.. [ 2768.835924][ T7903] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2768.865066][ T7903] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2768.874260][ T7903] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 01:18:56 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2768.883573][ T7903] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2768.893066][ T7903] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2768.906369][ T7903] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2768.915863][ T7903] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x110) 01:18:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xfb02}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:56 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1", 0xe}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:18:56 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000000e100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:56 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1", 0xe}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2769.095509][ T7982] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:18:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xfb03}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:56 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000032100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000540)='ocfs2_dlmfs\x00', 0x0, &(0x7f0000000580)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x77e76e227b33be30, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f00000002c0), &(0x7f0000000300)=0x4) recvmsg$can_j1939(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000080)=""/110, 0x6e}, {&(0x7f0000000140)=""/121, 0x79}, {&(0x7f00000001c0)=""/76, 0x4c}], 0x4, &(0x7f0000000440)=""/222, 0xde}, 0x2000) 01:18:56 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac", 0xf}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2769.322896][T24031] XFS (loop2): SB sanity check failed [ 2769.329226][T24031] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2769.377119][T24031] XFS (loop2): Unmount and run xfs_repair [ 2769.383170][T24031] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2769.391017][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 0e 10 00 XFSB............ [ 2769.400902][T24031] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2769.410433][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 01:18:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xfc00}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2769.420065][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2769.444132][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2769.459989][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2769.472257][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2769.481813][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2769.525917][ T8110] XFS (loop0): SB sanity check failed [ 2769.533310][ T8110] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2769.578964][ T8110] XFS (loop0): Unmount and run xfs_repair [ 2769.585475][ T8110] XFS (loop0): First 128 bytes of corrupted metadata buffer: 01:18:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000080)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000140)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2769.675274][ T8110] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 32 10 00 XFSB.........2.. [ 2769.806543][ T8110] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2769.910008][ T8110] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2769.931194][ T8110] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2769.944971][ T8110] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2769.968713][ T8110] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2770.003422][ T8110] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 01:18:57 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:18:57 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000000f100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xc0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x3, 0x2}, 0x0, 0x0, &(0x7f0000000200)={0x3, 0x2, 0x9, 0x7fffffff}, &(0x7f0000000240)=0x9088, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x3ff}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r3, r2, 0x0, 0xa, &(0x7f0000000140)='hugetlbfs\x00', r4}, 0x30) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:18:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xfc01}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:57 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac", 0xf}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2770.045474][ T8110] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2770.172142][ T8346] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2770.239758][ T8110] XFS (loop0): SB sanity check failed [ 2770.256174][ T8110] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2770.296322][ T8110] XFS (loop0): Unmount and run xfs_repair [ 2770.302529][ T8110] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2770.331922][ T8362] XFS (loop2): SB sanity check failed [ 2770.339554][ T8110] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 32 10 00 XFSB.........2.. [ 2770.343231][ T8362] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2770.366384][ T8362] XFS (loop2): Unmount and run xfs_repair [ 2770.372959][ T8362] XFS (loop2): First 128 bytes of corrupted metadata buffer: 01:18:57 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac", 0xf}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2770.397486][ T8110] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2770.409979][ T8110] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2770.420170][ T8110] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2770.433249][ T8362] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 0f 10 00 XFSB............ 01:18:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xfc02}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2770.442185][ T8110] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2770.452209][ T8110] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2770.477999][ T8110] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2770.493965][ T8110] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2770.534708][ T8362] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2770.581112][ T8362] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2770.604627][ T8362] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2770.616969][ T8362] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:18:58 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000036100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xfc03}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_tcp_buf(r4, 0x6, 0x0, &(0x7f00000002c0)=""/144, &(0x7f0000000000)=0x90) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='btrfs\x00', 0x0, &(0x7f0000000140)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fHOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xe6\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4X\xc4\xe1\xf6\x01>\x01\xaa\x05\n\xdc\x0f\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xceBU\x97\xcf\x0696P$\xda6\xf0\x15P\x9f\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J\x00\x00\x00') 01:18:58 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2770.627668][ T8362] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2770.643507][ T8362] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2770.659853][ T8362] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xfd00}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2770.951437][ T8606] XFS (loop0): SB sanity check failed [ 2770.958789][ T8606] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2770.975178][ T8606] XFS (loop0): Unmount and run xfs_repair [ 2770.981905][ T8606] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2771.006557][ T8606] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 36 10 00 XFSB.........6.. [ 2771.025155][ T8606] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2771.045134][ T8606] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2771.060194][ T8606] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2771.071851][ T8606] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2771.081342][ T8606] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2771.091697][ T8606] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2771.101658][ T8606] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2771.248550][T24031] XFS (loop0): SB sanity check failed [ 2771.254194][T24031] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2771.270444][T24031] XFS (loop0): Unmount and run xfs_repair [ 2771.285830][T24031] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2771.300428][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 36 10 00 XFSB.........6.. [ 2771.319733][T24031] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2771.330455][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2771.340679][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2771.352140][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2771.370517][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2771.380029][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2771.389610][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:59 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:18:59 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000010100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:18:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xfd01}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:18:59 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:18:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x20) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x250840, 0x0) fanotify_mark(r1, 0x1, 0x4000000a, r6, &(0x7f0000000500)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) r7 = gettid() ptrace$setopts(0x4206, r7, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$inet6_opts(r10, 0x29, 0x39, &(0x7f0000000540)=@routing={0x67, 0xa, 0x0, 0x3a, 0x0, [@dev={0xfe, 0x80, [], 0x22}, @local, @dev={0xfe, 0x80, [], 0x34}, @mcast1, @mcast2]}, 0x58) tkill(r7, 0x20) waitid(0x2, r7, &(0x7f0000000240), 0x2, &(0x7f0000000440)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000140)={{0x1, 0x0, 0x2, 0x0, 0x3}, 0x6, 0x9, 'id0\x00', 'timer0\x00', 0x0, 0x3, 0x5, 0x7, 0x401}) 01:18:59 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000003a100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2771.603593][ T8640] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:18:59 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:18:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xfd02}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2771.772055][T24031] XFS (loop2): SB sanity check failed [ 2771.777793][T24031] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2771.790892][ T8684] XFS (loop0): SB sanity check failed [ 2771.796481][ T8684] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2771.816739][ T8684] XFS (loop0): Unmount and run xfs_repair [ 2771.819287][T24031] XFS (loop2): Unmount and run xfs_repair [ 2771.826649][ T8684] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2771.836360][T24031] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2771.849470][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 10 10 00 XFSB............ [ 2771.855256][ T8684] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 3a 10 00 XFSB.........:.. 01:18:59 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) [ 2771.862933][T24031] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2771.895393][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2771.914714][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2771.939855][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2771.963807][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2771.986865][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 01:18:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xfd03}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2772.001254][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2772.038521][ T8684] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:18:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2772.055792][ T8684] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2772.093689][ T8684] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2772.119518][ T8684] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2772.148870][ T8684] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2772.166525][ T8684] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2772.173119][ T8639] XFS (loop2): SB sanity check failed [ 2772.187695][ T8639] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2772.220371][ T8783] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2772.222117][ T8684] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2772.249108][ T8639] XFS (loop2): Unmount and run xfs_repair 01:18:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) sched_setparam(0x0, &(0x7f0000000000)=0x3) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000080)='ocfs2_dlmfs\x00', 0x0, &(0x7f0000000440)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00r\x9c\xb6&\xe4\xc5)\xa3[\xb8Gr\xac=\xd3\x9cTz\xf8\xa8\xad\xe3V\xb5\x13k\xd1hd\xae^\x86\xd3\xfe\x87\xd8^\xd6\xf5\xeb\xa4\x93\xceaI\'gY\xc3Z_\v\xd5tr\xb0\xf6\xa7\xefy\xf6i,N:\xe0b\xb7pB\xda\xaf,,8\x99\xd4\x93\xdd\xd1\x80\xecP1\x91\x88\xb0\xbbr(z\xf0J\xd2\x19') [ 2772.284035][ T8639] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2772.357363][ T8639] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 10 10 00 XFSB............ [ 2772.404804][ T8639] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2772.436350][ T8639] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2772.458067][ T8684] XFS (loop0): SB sanity check failed [ 2772.470373][ T8684] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2772.489224][ T8684] XFS (loop0): Unmount and run xfs_repair [ 2772.503080][ T8639] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2772.516452][ T8684] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2772.530658][ T8639] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2772.542993][ T8684] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 3a 10 00 XFSB.........:.. [ 2772.553315][ T8639] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2772.563048][ T8684] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2772.572637][ T8639] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2772.583749][ T8684] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2772.648272][ T8639] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2772.691522][ T8684] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2772.733350][ T8684] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2772.746686][ T8684] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:19:00 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:00 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 01:19:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xfe00}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:19:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f0000000280), &(0x7f00000004c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r7 = socket(0x100000000011, 0x2, 0x0) bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000240), &(0x7f00000002c0)=0xfeeb) r8 = socket$inet(0x2, 0x80001, 0x83) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={r9, 0x78, &(0x7f0000000440)=[@in={0x2, 0x0, @local}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x0, @local}, @in6={0xa, 0x4e24, 0x10000, @remote}, @in6={0xa, 0x0, 0x2, @rand_addr="8649f2a8cebb0c1b628d2993cea0f0b0"}]}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x80000000, 0xffffffff, 0x9, 0x5, 0x4c, 0x40, 0x800, {r9, @in={{0x2, 0x4e24, @empty}}, 0xfffff7bc, 0x3, 0xfffffff7, 0xfff, 0xdd}}, &(0x7f0000000380)=0xb0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000500)=ANY=[@ANYRES32=r9, @ANYBLOB="f7d5c94852016b3e93c8cbca4ee9e566721076609355af7dd7de85b30f2f59e09b30ac7c1c53184ffe0756a295d4f651af326cc123d3293ad6630b1828a3a11abca1a08e1e4e025a8f5afc8015456f0fa8d72e08b69b67858e9f20d2fb1ddf6d30b876c6920fc36ad53e2e36e3874c71e2d9caec9ec04c0d4a77c80cb2e63ae6e98e19f2b32b66fa28eb7361936bd96330d3022173dcb586088b9f3750749f7ee0625c0cce6159f2a503066896925d979937489c134f904a47b0b2db1151db5f9c31b5066295a59c763545e11330d5666b143f1af4"], 0xc) r10 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$sock_inet_SIOCDELRT(r10, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x2, 0x4e24, @rand_addr=0xfffffff7}, {0x2, 0x4e22, @local}, 0x3a8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='caif0\x00', 0x6, 0x8}) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:19:00 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000011100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2772.789347][ T8684] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2772.813175][ T8684] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2772.979011][ T9021] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:19:00 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000003b100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:00 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 01:19:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xfe01}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2773.100491][T24031] XFS (loop2): SB sanity check failed [ 2773.106241][T24031] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2773.123370][T24031] XFS (loop2): Unmount and run xfs_repair [ 2773.129770][T24031] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2773.140482][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 11 10 00 XFSB............ [ 2773.150895][T24031] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2773.163511][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2773.172877][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2773.185119][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2773.194743][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2773.204252][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2773.213841][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:19:00 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000012100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:00 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}], 0x1, 0x0, 0x0) [ 2773.341202][ T9151] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:19:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xfe02}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2773.438945][ T9149] XFS (loop0): SB sanity check failed [ 2773.446391][ T9149] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2773.503116][ T9149] XFS (loop0): Unmount and run xfs_repair [ 2773.514323][ T9149] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2773.526463][ T9149] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 3b 10 00 XFSB.........;.. [ 2773.563993][ T9188] XFS (loop2): SB sanity check failed [ 2773.588056][ T9188] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2773.590832][ T9149] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2773.600659][ T9188] XFS (loop2): Unmount and run xfs_repair [ 2773.615473][ T9188] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2773.623025][ T9188] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 12 10 00 XFSB............ [ 2773.642627][ T9188] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2773.654670][ T9188] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2773.674844][ T9188] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2773.684415][ T9188] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2773.694257][ T9188] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2773.703459][ T9188] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2773.712582][ T9188] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2773.736523][ T9149] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2773.764831][ T9149] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2773.812260][ T9149] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2773.845563][ T9149] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2773.855859][ T9149] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2773.879346][ T9149] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2774.105370][ T9149] XFS (loop0): SB sanity check failed [ 2774.111282][ T9149] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2774.129353][ T9149] XFS (loop0): Unmount and run xfs_repair [ 2774.141048][ T9149] XFS (loop0): First 128 bytes of corrupted metadata buffer: 01:19:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000000)=[0xfffffffb, 0xffffffe1]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:19:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xfe03}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:19:01 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}], 0x1, 0x0, 0x0) 01:19:01 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:01 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000013100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2774.216354][ T9149] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 3b 10 00 XFSB.........;.. [ 2774.225274][ T9149] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2774.431227][ T9149] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2774.441232][T24031] XFS (loop2): SB sanity check failed [ 2774.446921][T24031] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2774.476855][T24031] XFS (loop2): Unmount and run xfs_repair [ 2774.482910][T24031] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2774.490708][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 13 10 00 XFSB............ [ 2774.519140][T24031] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2774.526612][ T9149] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2774.534128][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2774.544859][ T9149] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2774.564721][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2774.579225][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2774.588978][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2774.598187][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2774.610916][ T9149] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2774.614174][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2774.632751][ T9149] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2774.666371][ T9149] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:02 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000003f100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:02 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}], 0x1, 0x0, 0x0) 01:19:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xff00}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:19:02 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair(0x0, 0x6, 0x58, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000240)='exfat\x00', 0x0, &(0x7f00000000c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3Cr\'?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xdc\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2774.754662][T24031] XFS (loop2): SB sanity check failed [ 2774.760298][T24031] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2774.831199][T24031] XFS (loop2): Unmount and run xfs_repair [ 2774.865890][T24031] XFS (loop2): First 128 bytes of corrupted metadata buffer: 01:19:02 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) [ 2774.915818][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 13 10 00 XFSB............ 01:19:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xff01}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:19:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x84) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2774.970238][T24031] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2775.000830][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2775.031045][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2775.075420][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2775.103527][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2775.119456][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 01:19:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xff02}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2775.149958][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2775.162185][T24031] XFS (loop0): SB sanity check failed [ 2775.168230][T24031] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2775.181062][T24031] XFS (loop0): Unmount and run xfs_repair [ 2775.187339][T24031] XFS (loop0): First 128 bytes of corrupted metadata buffer: 01:19:02 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000014100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2775.195205][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 3f 10 00 XFSB.........?.. [ 2775.212388][T24031] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2775.236544][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2775.260258][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2775.287557][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:19:02 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) [ 2775.306016][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2775.322215][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2775.385249][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2775.602335][ T9564] XFS (loop2): SB sanity check failed [ 2775.609110][ T9564] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2775.646421][ T9564] XFS (loop2): Unmount and run xfs_repair [ 2775.656372][ T9564] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2775.668355][ T9564] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 14 10 00 XFSB............ [ 2775.677604][ T9564] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2775.687301][ T9564] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2775.696893][ T9564] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2775.705992][ T9564] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2775.715162][ T9564] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2775.724563][ T9564] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2775.733643][ T9564] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:03 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:03 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) 01:19:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0xff03}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:19:03 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 01:19:03 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000040100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:03 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000015100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2776.094154][ T9596] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:19:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2776.181758][T24031] XFS (loop2): SB sanity check failed [ 2776.191644][T24031] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2776.209669][T24031] XFS (loop2): Unmount and run xfs_repair [ 2776.220163][T24031] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2776.234548][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 15 10 00 XFSB............ [ 2776.244361][ T9599] XFS (loop0): SB sanity check failed [ 2776.252642][ T9599] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2776.266568][T24031] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2776.271413][ T9599] XFS (loop0): Unmount and run xfs_repair 01:19:03 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)}}], 0x2, 0x0, 0x0) [ 2776.276804][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2776.290721][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2776.301300][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2776.314717][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2776.332205][ T9599] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2776.335675][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2776.348812][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:03 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x100001, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='btv\x00'], &(0x7f00000004c0)=""/247, 0xf7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000240), &(0x7f00000002c0)=0xfeeb) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={r7, 0x78, &(0x7f0000000440)=[@in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x0, @local}, @in6={0xa, 0x4e24, 0x10000, @remote}, @in6={0xa, 0x0, 0x2, @rand_addr="8649f2a8cebb0c1b628d2993cea0f0b0"}]}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x80000000, 0xffffffff, 0x9, 0x5, 0x4c, 0x40, 0x800, {r7, @in={{0x2, 0x4e24, @empty}}, 0xfffff7bc, 0x3, 0xfffffff7, 0xfff, 0xdd}}, &(0x7f0000000380)=0xb0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={r7, 0x5}, &(0x7f0000000080)=0x8) 01:19:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2776.436304][ T9599] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 40 10 00 XFSB.........@.. [ 2776.445339][ T9599] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2776.496449][ T9599] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2776.513374][ T9599] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 01:19:04 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000016100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2776.565522][ T9599] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:19:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x802) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000080)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x102, 0x0) r12 = dup2(r11, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f00000001c0), &(0x7f0000000180)=0x4) [ 2776.612246][ T9599] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2776.654144][ T9599] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2776.716467][ T9599] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2776.800722][ T9839] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2776.899248][ T3383] XFS (loop2): SB sanity check failed [ 2776.911335][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2776.940540][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2776.956520][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2776.966799][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 16 10 00 XFSB............ [ 2776.975858][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2776.985482][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2776.995263][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2777.004602][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2777.016737][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2777.035739][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2777.047698][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:04 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:04 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)}}], 0x2, 0x0, 0x0) 01:19:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:19:04 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r2, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "91359792231ae4d673fc04b4c5fcbca24fcc61ba8eff38e48234e9af92325e84882bc904d33091829c44b0e80c0893af0bb53042923adf0563dd29d53bf726", 0x24}, 0x60) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_vlan\x00', r3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:19:04 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000080040100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:04 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000017100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2777.562725][ T9982] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2777.591722][ T9973] XFS (loop2): SB sanity check failed [ 2777.609469][ T9973] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2777.625864][ T9973] XFS (loop2): Unmount and run xfs_repair [ 2777.632898][ T3383] XFS (loop0): SB sanity check failed [ 2777.639431][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2777.646353][ T9973] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2777.652432][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2777.665663][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2777.674235][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 08 00 40 10 00 XFSB.........@.. [ 2777.683859][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2777.693614][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2777.703163][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 01:19:05 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000005c0)={@local, 0x0}, &(0x7f0000000600)=0x14) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000640)={0x1d, r2}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2777.712742][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2777.718411][ T9973] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 17 10 00 XFSB............ [ 2777.722490][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2777.740561][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2777.750234][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:19:05 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)}}], 0x2, 0x0, 0x0) [ 2777.829708][ T9973] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2777.839937][ T9973] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2777.864882][ T9973] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2777.896617][ T9973] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2777.905980][ T9970] XFS (loop0): SB sanity check failed [ 2777.911894][ T9970] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2777.916402][ T9973] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2777.925200][ T9970] XFS (loop0): Unmount and run xfs_repair [ 2777.939332][ T9970] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2777.956333][ T9970] 00000000: 58 46 53 42 00 00 10 00 00 00 00 08 00 40 10 00 XFSB.........@.. [ 2777.967309][ T9970] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2777.976526][ T9970] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2777.985684][ T9970] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2777.995571][ T9970] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2778.005102][ T9970] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2778.014372][ T9970] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2778.023683][ T9970] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:05 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2778.060758][T10119] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2778.096825][ T9973] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 01:19:05 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000140100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2778.158904][ T9973] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:19:05 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0) 01:19:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCGETX(r2, 0x5432, &(0x7f0000000000)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x42800, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9a\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00'/345) 01:19:05 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0) 01:19:06 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0) [ 2778.538926][ T3383] XFS (loop0): SB sanity check failed [ 2778.558101][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2778.571284][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2778.580706][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: 01:19:06 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000018100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2778.588622][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 01 40 10 00 XFSB.........@.. [ 2778.597992][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2778.607351][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2778.621174][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2778.635937][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2778.650469][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2778.659803][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2778.669118][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x100000000, 0x800100) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200, 0x0) epoll_wait(r2, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, 0x8) r3 = eventfd(0x3) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r4, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "91359792231ae4d673fc04b4c5fcbca24fcc61ba8eff38e48234e9af92325e84882bc904d33091829c44b0e80c0893af0bb53042923adf0563dd29d53bf726", 0x24}, 0x60) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r5, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "91359792231ae4d673fc04b4c5fcbca24fcc61ba8eff38e48234e9af92325e84882bc904d33091829c44b0e80c0893af0bb53042923adf0563dd29d53bf726", 0x24}, 0x60) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000180)=""/156) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") poll(&(0x7f00000000c0)=[{r3, 0x1000}, {r4, 0x242}, {0xffffffffffffffff, 0x818}, {r5, 0x1}, {0xffffffffffffffff, 0x20}, {r6, 0x100}], 0x6, 0x4) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x904800, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfev\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x89\xf1\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x8du\x9b\x1f_\x04\xedj\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9#\x11\xc1rys^` \x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea\xfabF\xcd\xe9&&\xe0\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\xdf\xf8.\x12fp2P}\x87I\xc8\xbbyc\xa7\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed') [ 2778.809735][ T3383] XFS (loop0): SB sanity check failed [ 2778.815348][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2778.828864][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2778.834693][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2778.842694][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 01 40 10 00 XFSB.........@.. [ 2778.851977][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2778.862110][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2778.871417][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2778.880650][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2778.889921][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2778.900139][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2778.909455][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2778.926599][ T3383] XFS (loop2): SB sanity check failed [ 2778.938147][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2778.952336][ T3383] XFS (loop2): Unmount and run xfs_repair 01:19:06 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x1, 0x0, 0x0) [ 2778.958878][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2778.966856][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 18 10 00 XFSB............ [ 2778.976448][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2778.986094][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2778.995494][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 01:19:06 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000240100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2779.004723][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2779.013869][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2779.023135][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2779.048071][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2779.300667][ T3383] XFS (loop2): SB sanity check failed [ 2779.306481][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2779.350602][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2779.357097][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2779.364792][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 18 10 00 XFSB............ [ 2779.374057][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2779.384100][T10522] XFS (loop0): SB sanity check failed [ 2779.389840][T10522] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2779.402251][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2779.411577][T10522] XFS (loop0): Unmount and run xfs_repair [ 2779.417638][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2779.426548][T10522] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2779.426631][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2779.443313][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2779.452387][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2779.461876][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2779.470958][T10522] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 02 40 10 00 XFSB.........@.. [ 2779.498779][T10522] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2779.586302][T10522] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2779.595567][T10522] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2779.607377][T10522] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2779.619527][T10522] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2779.633166][T10522] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2779.652032][T10522] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2779.804576][T10522] XFS (loop0): SB sanity check failed [ 2779.810714][T10522] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2779.836752][T10522] XFS (loop0): Unmount and run xfs_repair [ 2779.869508][T10522] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2779.884667][T10522] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 02 40 10 00 XFSB.........@.. [ 2779.898841][T10522] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2779.920769][T10522] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2779.934067][T10522] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2779.958411][T10522] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2779.991200][T10522] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2780.005434][T10522] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2780.018755][T10522] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:07 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000000)={0xc0, 0x0, 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:19:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xe}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:19:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x1, 0x0, 0x0) 01:19:07 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000019100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:07 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:07 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000048100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2780.213587][T10564] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:19:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x1, 0x0, 0x0) 01:19:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xf}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2780.377230][T10573] XFS (loop2): SB sanity check failed [ 2780.382810][T10573] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2780.396205][T10573] XFS (loop2): Unmount and run xfs_repair [ 2780.402361][T10573] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2780.410534][T10579] XFS (loop0): SB sanity check failed [ 2780.415985][T10579] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2780.428844][T10573] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 19 10 00 XFSB............ [ 2780.438030][T10573] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2780.447369][T10579] XFS (loop0): Unmount and run xfs_repair [ 2780.453222][T10573] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2780.456308][T10579] XFS (loop0): First 128 bytes of corrupted metadata buffer: 01:19:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000140)='./file0/file0\x00', 0x4040, 0x42) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f0000000080)={0x0, 0x401, 0x9951, [], &(0x7f0000000000)=0x81}) [ 2780.462656][T10573] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2780.479481][T10573] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2780.489440][T10573] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2780.499103][T10573] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2780.508801][T10573] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2780.562103][T10579] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 48 10 00 XFSB.........H.. 01:19:08 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000001a100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x60}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2780.682797][T10707] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2780.686380][T10579] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2780.718525][T10579] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 01:19:08 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2780.757319][T10579] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2780.799722][T10579] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2780.836097][T10579] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2780.860788][T10579] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2780.877372][T10579] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2780.931494][T10712] XFS (loop2): SB sanity check failed [ 2780.986459][T10712] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:19:08 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000040)=0x8, 0x8) accept4$x25(r1, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f00000000c0)={0x39, 0x51}) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000180)) 01:19:08 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:19:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x3, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2781.046406][T10712] XFS (loop2): Unmount and run xfs_repair [ 2781.054877][T10712] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2781.136342][T10712] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 1a 10 00 XFSB............ [ 2781.170746][T10712] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2781.179026][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2781.216477][T10712] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2781.245746][T10712] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 01:19:08 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000034a100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2781.253598][T10832] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2781.280608][T10712] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2781.322973][T10712] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2781.368770][T10712] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2781.402538][T10712] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2781.573378][T10840] XFS (loop0): SB sanity check failed [ 2781.586450][T10840] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2781.599051][T10840] XFS (loop0): Unmount and run xfs_repair [ 2781.604858][T10840] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2781.612280][T10840] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 03 4a 10 00 XFSB.........J.. [ 2781.621193][T10840] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2781.636723][T10840] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2781.645742][T10840] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2781.664074][T10840] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2781.687167][T10840] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2781.696076][T10840] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2781.707753][T10840] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:09 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x8, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:19:09 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:19:09 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000001b100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0x6, 0x6, 0x4, 0x100000, 0x4, {}, {0x4, 0x2, 0x0, 0x5, 0x20, 0x1, "392ed5e1"}, 0x3f, 0x2, @planes=&(0x7f0000000000)={0xfffffc38, 0x0, @userptr=0xffffffffffffff01, 0x9}, 0x401, 0x0, r0}) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:19:09 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000004c100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2782.335920][T10976] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 2782.471902][ T3383] XFS (loop2): SB sanity check failed [ 2782.478165][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2782.491248][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2782.497707][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2782.505556][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 1b 10 00 XFSB............ 01:19:10 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:19:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0xb, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2782.515059][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2782.524539][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 01:19:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="73657c75922e6b00000000f37ac4dce8e34933755088907d9a96c7879186fbdbdabf6b8633bc97b852096fa7"], &(0x7f0000000440)=""/143, 0x8f) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f00000005c0)=0x4) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000540)={0x9b0000, 0x8, 0x9, r2, 0x0, &(0x7f0000000280)={0x9909c9, 0x4, [], @p_u32=&(0x7f0000000200)=0x40000000}}) creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000240)=0x7, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) accept$unix(r6, &(0x7f0000000140), &(0x7f0000000500)=0x6e) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x2, 0x4) [ 2782.574651][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2782.604933][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2782.614108][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2782.623117][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2782.650070][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2782.661758][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2782.682419][ T3383] XFS (loop0): SB sanity check failed [ 2782.693492][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2782.715163][T11105] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2782.734656][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2782.740707][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2782.748261][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 4c 10 00 XFSB.........L.. [ 2782.758741][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2782.768060][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 01:19:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x10, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2782.777567][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2782.786933][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2782.796220][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:19:10 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2782.825842][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2782.838461][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2782.861395][T10980] XFS (loop2): SB sanity check failed [ 2782.869129][T10980] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:19:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='logfs\x00', 0x1a99081, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2782.982155][T10980] XFS (loop2): Unmount and run xfs_repair [ 2782.994884][T10980] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2783.011839][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2783.023493][T10980] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 1b 10 00 XFSB............ [ 2783.073970][T10980] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2783.182697][T10980] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2783.259963][T10980] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2783.269319][T10980] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2783.278749][T10980] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2783.288578][T10980] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2783.302078][T10980] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:11 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:11 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000007365100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x18, 0x5, 0x2}]}, 0x4c}}, 0x0) 01:19:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9551588abb122e10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200025bd7000fedbdf250100000008000100000000000c0006000300000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4081) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:19:11 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:19:11 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000001c100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:11 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2783.739144][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2783.791881][ T3383] XFS (loop0): SB sanity check failed [ 2783.798040][T11353] XFS (loop2): SB sanity check failed [ 2783.803661][T11353] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2783.819304][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2783.832241][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2783.841300][T11353] XFS (loop2): Unmount and run xfs_repair [ 2783.847513][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2783.855143][T11353] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2783.866517][T11353] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 1c 10 00 XFSB............ [ 2783.868317][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 73 65 10 00 XFSB........se.. [ 2783.884811][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2783.891178][T11353] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2783.896020][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2783.920831][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2783.930266][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:19:11 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x100, 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x100000000011, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x402000, 0x0) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000240), &(0x7f00000002c0)=0xfeeb) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={r9, 0x78, &(0x7f0000000440)=[@in={0x2, 0x0, @local}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x0, @local}, @in6={0xa, 0x4e24, 0x10000, @remote}, @in6={0xa, 0x0, 0x2, @rand_addr="8649f2a8cebb0c1b628d2993cea0f0b0"}]}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x80000000, 0xffffffff, 0x9, 0x5, 0x4c, 0x40, 0x800, {r9, @in={{0x2, 0x4e24, @empty}}, 0xfffff7bc, 0x3, 0xfffffff7, 0xfff, 0xdd}}, &(0x7f0000000380)=0xb0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={r9, @in6={{0xa, 0x4e20, 0xfffffffc, @mcast1, 0x2}}, 0x2b3, 0x5, 0x12, 0x87, 0x0, 0x4, 0x3f}, &(0x7f00000000c0)=0x9c) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r10, 0x4) [ 2783.939508][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2783.948633][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2783.961370][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2783.966375][T11353] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 01:19:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x3, 0x2}]}, 0x4c}}, 0x0) [ 2783.989095][T11353] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 01:19:11 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:11 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) [ 2784.013032][T11353] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2784.025047][T11353] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2784.035220][T11353] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2784.045610][T11353] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2784.140245][T11484] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:19:11 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}}], 0x2, 0x0, 0x0) 01:19:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x8, 0x2}]}, 0x4c}}, 0x0) [ 2784.356986][ T3383] XFS (loop2): SB sanity check failed [ 2784.362575][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:19:11 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000068100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x1c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2784.412251][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2784.441366][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: 01:19:12 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r2, 0x0) stat(0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000280)='./file0/file0/../file0\x00', r2, r3) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="ca45c5eb252253299e4e2345cc7f324831fa018b12fbf317df88fc1ba3a6940c6ad8", 0x22, 0xeb8a}, {&(0x7f0000000140)="c738f4848eadb31667edf9ef3262f3cd5f20d60de0be5eee5a558bbbe918a5d84da79c6945205fc1c3436e19d5afc0911298a4976b2e8960d647c57d2401f5a479d208a040cb72c87307666805434ee77eb55473cc01e31a7a27ff4643bdd416d3cae0555236bba0b2f638efe51d526ef8f8336e6c3d861049a10a178d53d4b3f6ef0804440a12db0bfc4ba9358c", 0x8e, 0x4}], 0x20, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r3}}, {@integrity='integrity'}, {@discard_size={'discard', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@quota='quota'}, {@discard_size={'discard', 0x3d, 0x2}}, {@uid={'uid', 0x3d, r4}}, {@usrquota='usrquota'}, {@discard='discard'}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@subj_user={'subj_user', 0x3d, 'wlan0'}}]}) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2784.487820][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 1c 10 00 XFSB............ [ 2784.526801][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2784.576503][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2784.616955][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2784.656742][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:19:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0xb, 0x2}]}, 0x4c}}, 0x0) [ 2784.686333][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2784.695476][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2784.704798][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2784.720840][ T3383] XFS (loop0): SB sanity check failed [ 2784.728937][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2784.756374][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2784.768509][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2784.776130][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 68 10 00 XFSB.........h.. [ 2784.785437][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2784.794731][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2784.803747][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2784.812875][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2784.822041][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:19:12 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000001d100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2784.831094][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2784.840178][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:12 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000080)={{0x2b, @broadcast, 0x4e24, 0x4, 'wlc\x00', 0x2f, 0x10000, 0x52}, {@empty, 0x4e22, 0x1, 0x7, 0x20d9, 0x80000000}}, 0x44) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:19:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000140)=0x1) [ 2784.967240][ T3383] XFS (loop0): SB sanity check failed [ 2784.972872][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2785.006293][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2785.012064][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2785.028429][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 68 10 00 XFSB.........h.. [ 2785.037584][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2785.046753][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2785.055979][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2785.065292][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2785.074349][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2785.083493][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2785.092722][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x10, 0x2}]}, 0x4c}}, 0x0) [ 2785.124064][T11837] XFS (loop2): SB sanity check failed [ 2785.129791][T11847] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2785.143885][T11837] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2785.162735][T11837] XFS (loop2): Unmount and run xfs_repair [ 2785.168547][T11837] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2785.178546][T11837] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 1d 10 00 XFSB............ [ 2785.247290][T11837] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2785.296997][T11837] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2785.343263][T11837] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2785.365804][T11837] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2785.375129][T11837] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2785.386086][T11837] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2785.395469][T11837] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2785.519349][T11837] XFS (loop2): SB sanity check failed [ 2785.529461][T11837] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2785.553020][T11837] XFS (loop2): Unmount and run xfs_repair [ 2785.559050][T11837] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2785.566703][T11837] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 1d 10 00 XFSB............ [ 2785.577505][T11837] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2785.586433][T11837] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2785.595347][T11837] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2785.604332][T11837] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:19:13 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:13 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000006c100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') set_thread_area(&(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x400, 0x0, 0x0, 0x0, 0x1}) 01:19:13 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2785.613265][T11837] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2785.622189][T11837] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2785.631144][T11837] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x18, 0x2}]}, 0x4c}}, 0x0) 01:19:13 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000001e100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2785.788489][T12072] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:19:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x4c}}, 0x0) [ 2785.935634][T12074] XFS (loop0): SB sanity check failed [ 2785.941347][T12074] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2785.966345][T12074] XFS (loop0): Unmount and run xfs_repair [ 2785.974133][T12074] XFS (loop0): First 128 bytes of corrupted metadata buffer: 01:19:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsu\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}}, 0x4000000) write$capi20_data(r4, &(0x7f0000001340)={{0x10, 0x9, 0x82, 0x81, 0x6, 0xffff}, 0x1000, "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"}, 0x1012) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x2000481, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2786.023252][ T3383] XFS (loop2): SB sanity check failed [ 2786.036365][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2786.048975][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2786.054793][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2786.062329][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 1e 10 00 XFSB............ [ 2786.070492][T12074] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 6c 10 00 XFSB.........l.. [ 2786.071271][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2786.089085][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2786.098339][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2786.107323][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2786.116291][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2786.125365][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2786.134323][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2786.145339][T12074] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2786.206692][T12188] XFS (loop2): SB sanity check failed [ 2786.213199][T12188] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2786.225860][T12188] XFS (loop2): Unmount and run xfs_repair [ 2786.231850][T12188] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2786.239649][T12188] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 1e 10 00 XFSB............ [ 2786.239746][T12074] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2786.249293][T12188] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2786.266919][T12188] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2786.276107][T12188] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2786.285275][T12188] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2786.294379][T12188] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:19:13 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2786.303778][T12188] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2786.313100][T12188] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:13 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000021100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x8}]}, 0x4c}}, 0x0) [ 2786.351479][T12074] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2786.390918][T12074] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2786.393396][T12307] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:19:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xb}]}, 0x4c}}, 0x0) [ 2786.461755][T12074] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2786.496576][T12074] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2786.606264][T12074] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:14 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2786.729972][ T3383] XFS (loop2): SB sanity check failed [ 2786.735478][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2786.767078][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2786.772874][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: 01:19:14 executing program 4: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x80, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) r4 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x361900) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0xffffff81}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0004001a", @ANYRES16=r6, @ANYBLOB="000329bd7000fcdbdf250f0000000400e20008000300b62b2165174bae4b8cac4f09724dffbd1fb251b3c5a9b631ed177fd770758cbf16e968c74087d6470a60dfdc39808425e831387bc9efa5f1dbcc9550b7cb6907bb4393f4bb422170f6a21ea4da249720c2af60b0157610939318f2734e13447a8a88738025dcc0bccb8c48d4a4cab5c6cbfd8f62111559227a04f29e3bc7eaa44dc163ef58488861423e3a369d3ce37bf4e3a7922d3ca9d8ef823a0e24773d988d2b7e51824ac631846f30e9699300c07029b68226a3c54c36cf7ffbd283de2d", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x40010) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r11, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = gettid() ptrace$setopts(0x4206, r13, 0x0, 0x0) tkill(r13, 0x20) ptrace$setregset(0x4205, r13, 0x2, &(0x7f0000000280)={&(0x7f0000000240)="18f17bc1ede9493d9eb924fbb9f60c1224df51a160cc2d69e97b9dda21dab8d5693406814ce477197a", 0x29}) ioctl$PPPIOCGCHAN(r12, 0x80047437, &(0x7f0000000080)) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r9, 0x111, 0x4, 0x0, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xfff) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x204041, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$DRM_IOCTL_DROP_MASTER(r16, 0x641f) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) creat(&(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:19:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x10}]}, 0x4c}}, 0x0) 01:19:14 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000074100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2786.782147][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 21 10 00 XFSB.........!.. [ 2786.791062][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2786.799992][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2786.808971][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2786.817881][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2786.826901][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2786.835775][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2786.844918][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2786.986819][T12437] XFS (loop0): SB sanity check failed [ 2786.992551][T12437] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2787.007091][ T3383] XFS (loop2): SB sanity check failed [ 2787.012833][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2787.028193][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2787.046648][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2787.061891][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 21 10 00 XFSB.........!.. 01:19:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x14}]}, 0x4c}}, 0x0) [ 2787.088622][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2787.110282][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2787.119678][T12437] XFS (loop0): Unmount and run xfs_repair [ 2787.124123][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 01:19:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000000)=0x7fff) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2787.154561][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2787.159772][T12437] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2787.176536][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2787.185702][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2787.202480][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2787.246312][T12437] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 74 10 00 XFSB.........t.. [ 2787.255540][T12437] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:14 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000022100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2787.312098][T12437] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2787.326710][T12437] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2787.361535][T12437] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:19:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0xf}}, 0x0) [ 2787.393541][T12464] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2787.410365][T12437] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2787.426329][T12437] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2787.447646][T12437] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2787.665320][ T3383] XFS (loop2): SB sanity check failed [ 2787.671217][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2787.694759][T12437] XFS (loop0): SB sanity check failed [ 2787.706366][T12437] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2787.725028][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2787.750648][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2787.780543][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 22 10 00 XFSB.........".. [ 2787.793264][T12437] XFS (loop0): Unmount and run xfs_repair [ 2787.813093][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2787.852603][T12437] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2787.856003][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2787.906156][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2787.914207][T12437] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 74 10 00 XFSB.........t.. [ 2787.940890][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2787.973690][T12437] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2787.974113][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2787.991991][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2788.001010][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2788.025471][T12437] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2788.046824][T12437] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2788.059863][T12437] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2788.090209][T12437] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2788.113670][T12437] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2788.123683][T12437] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:15 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x19) pipe2(&(0x7f00000000c0), 0x80000) shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffa000/0x3000)=nil) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x141) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x3, @local, 'ipvlan1\x00'}}) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, &(0x7f0000000000)) 01:19:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0xc0}}, 0x0) 01:19:15 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000023100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:15 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:15 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000007a100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2788.424808][T12605] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:19:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0xec0}}, 0x0) [ 2788.527857][ T3383] XFS (loop2): SB sanity check failed [ 2788.543653][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2788.587298][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2788.593089][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2788.615612][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 23 10 00 XFSB.........#.. 01:19:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x33fe0}}, 0x0) [ 2788.633569][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2788.651416][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2788.669828][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 01:19:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x112) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2788.686287][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2788.695186][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2788.723917][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 01:19:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x2000048c}}, 0x0) [ 2788.741892][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2788.759642][ T3383] XFS (loop0): SB sanity check failed [ 2788.765486][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2788.804266][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2788.810479][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2788.819464][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 7a 10 00 XFSB.........z.. [ 2788.828732][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2788.837963][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 01:19:16 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:16 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2788.847137][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2788.856155][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2788.865307][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2788.874476][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2788.883715][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2789.035520][ T3383] XFS (loop0): SB sanity check failed [ 2789.041296][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2789.058691][T12752] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2789.071191][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2789.087334][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2789.106093][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 7a 10 00 XFSB.........z.. 01:19:16 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000024100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x7ffff000}}, 0x0) [ 2789.129942][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2789.139025][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2789.148170][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2789.157730][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2789.170116][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2789.186501][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2789.199925][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0xfffffdef}}, 0x0) 01:19:16 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000180100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x2}, 0x0) 01:19:16 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "91359792231ae4d673fc04b4c5fcbca24fcc61ba8eff38e48234e9af92325e84882bc904d33091829c44b0e80c0893af0bb53042923adf0563dd29d53bf726", 0x24}, 0x60) sendmmsg$nfc_llcp(r0, &(0x7f000000a480)=[{&(0x7f0000000080)={0x27, 0x1, 0x0, 0x1, 0x9, 0x7f, "7cbeb6a8d5b4c2ba2c6a00136a42ac927cf89b04cdb565861e229899b6f2c9d8bc412f4919a6f8301c4880a2bf116aae9fe7db5fa6a492e64aa1b7f5771741", 0x22}, 0x60, &(0x7f00000004c0)=[{&(0x7f0000000140)="bc3fc4d54a1d74702b6641f15103183c59c1d5345b3b349b7d620679daea5821830701f2cbd110760c93ac68070a73e95c7365fc9bf8e3379e06b49185bf177adf43b25c7df19636746a6fef05f638885736052c3b66a6c3fd5cff113fcb860345c7d4a4bbe86f36ac626f6c6325cd0f33c1605cf242575f6ea471f5fa3f8beb31262ab73b7739abd2836ed595c8e53486cb41ffd4d1ca070a6a7e5f6c75c2485775c746b3fc9fe250537c9cfca4f11df7043670bfed416a64ca7e47656e9315f451e2e93c4b53694a700da9ce9558c04232fddc05d3", 0xd6}, {&(0x7f0000000240)="a37c79c75196fa813a3c3ef5e7fe1e9d0854e1560f3619d63309544f0cfd61f52cd5948299883ccfcc51cf8a5a4fe63f97723a8720deecaa27162ef0400341abde91b96921244846124288f89b408b1bc83365a52efcd06ace64f73c6557009867b781f187b7b3897eac6cd8cd3e82259546ddff71", 0x75}, {&(0x7f0000000000)="fa8f44bcd56f117d185ced5546b92b6ff9363ba42d34584689aceefb888e944e78bc503395805f7ed4a9a3af22d44b", 0x2f}, {&(0x7f0000000440)="1fe17c72d89b20d4f8831884d5041fff065b2bda84e0f96b17a800fface5eface4cf8a344cbe4206904c6465f8385609660d58a77a67895f34ee59a1", 0x3c}, {&(0x7f0000000480)="b6c08782fae1cd5a19814077b048c12f9aa1db2b172896826927e9dfea99c13f967901e4cf3af21f16b5b2c3a559ea85d51f7cedd78f1b8735bc", 0x3a}], 0x5, &(0x7f0000000540)={0x78, 0x1, 0x4, "98292c1744d6f5d943fbff6fcf0718068e144b34f4b38adeff1469c3c16d399e467893f6408844bce2fc050c61b4dc6fd5356f2c95c2767c722adfcfa6db4c335f3e0c4a673b296fa90095ee0d510c34b083d01d7131475d65f3cfda6130459b78bf0aae"}, 0x78, 0x4014}, {&(0x7f00000005c0)={0x27, 0x1, 0x2, 0x4, 0x2, 0xa5, "b410df4fb15ab89b936418b67b7df8f2624fee50e8710ee18857e2ea1be84a754e31a9be54465cd367aabf0dfbc44f7c8e53dcd6f6c359bb68d5ca3197a902", 0x18}, 0x60, &(0x7f0000000940)=[{&(0x7f0000000640)="6eece7d61914d7eaac0558feefcf147065023f6a4bcbebdaa4707e822b750bfcceb1cb891c1ccf28e3982332606a6f7ebc4741046eaded0d2f17719186d7ece92a25e53bbb227163769cbe1ac94c74cd10fdf16e97acceae41c2f25b47d782c5f61f3bfbf45fd379782a17c53ccbdc4db07c7e2fdca33d425f35d28ee4f078f93cfacf20485c374bcb23bd583e501df2847c21bf1b6472f07a097974d014b7c92530cd252db764e47aeeb2a8b5d52414df0048a8ed7943a4f5abac2e3964d695ae6c3149a55547d9a6252db1cc59c1c35ea8fb38526804e0684b3d3eb7c70df85019", 0xe2}, {&(0x7f0000000740)="7ecd94bb55ac4fceea67b6227b5d2e59cfdc0d288679", 0x16}, {&(0x7f0000000780)="07c94a0750782575b77c885a37d32d45a167026ef34301f498b8e3171c01feef7bf95f11e70ef57f18aa1cab01", 0x2d}, {&(0x7f00000007c0)="6d4453d717d9e2c39636b143cc128b02743fb97307c887698ebb674999b1093720ad19c5c7c067d24b08e6dfc3a8f9b3e5360ca776f25366e7c0ce5777a51fec306c4bcc3eb7e8cbefee00aee69017c283ed1df5fdeab28408d66c8c4d1764d9c9bbf43b699f276163c6601757b10bc82e1d07ee3fe22d5403b8690dffbafc14d199c52a3c2eda09263a19e91a476b2b", 0x90}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000000880)="3bc78300bcfdab0ae3c7bf34c5a0ca10cf9c1cc8aca568469155ee417361266c752808f90857fbbc305fbf92fe2dd531ed0f73b31f55352d76e955144c4d1a84c6038cd902c63f60df09c7a0f5bb64aa59", 0x51}, {&(0x7f0000000900)="ed2bbb514afd03e234f7e2fdd0ba7171c3466ff34839a396e38c02b955eeb345c9def505deca8e6f4c", 0x29}], 0x7, &(0x7f0000002340)={0x1010, 0x119, 0x2, "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"}, 0x1010, 0x4000011}, {&(0x7f00000009c0)={0x27, 0x0, 0x0, 0x5, 0x4, 0xf0, "b970e53a9f8cad4151c0b9f247604d337acb486c89728f41f484d2418864555d80f70d58f788919000a79b7264c783bfd214eed0726d9142ef4fdd479a525f", 0x1b}, 0x60, &(0x7f0000000c40)=[{&(0x7f0000000a40)}, {&(0x7f0000000a80)="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", 0xfd}, {&(0x7f0000003380)="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", 0x1000}, {&(0x7f0000000b80)="7c353bd11e025c0669199688937d93b946c47292670dee51ca5249cd40e3e1e3eeaad4df346bf937f717dbd21c0f8a6f1e6889338c541a12c7ad329b986d2f60cd52468d428d6cb8dca28bcb91deed476f44b3329196f1802e2c3b3fcbd3d796852006f7117348dffe01e26a00c4ab1699ffa0bdc48d41d94a9c5e82dfd703b3c7b226bc74934b1bd6b6eb1a79b6384628b6850f2d54451b4890aba168cb29888cf768e52d6b6ebd", 0xa8}], 0x4, &(0x7f0000000c80)={0xd8, 0x1, 0x1, "f55112b0ad3ecc35f6d95601e65b82f6dcac5f9ba62aec866e4434c6c9f34c41405726b879047a5db9404888e47069dca72f748578c0b7cedb6f15aed2efbaa557446bd6a7eaa23f4c507a429bdb4d910143267fe2cc979458dd7649e96640328f1adf406dc3e6c97b38392ecb43719074bceaeffdb1b1b55c84180e67a8c2e96db9afee9236ff02cbc6c8eee2d12476a7395c2d17251b3d403d24a2ab448075538eb9f67f072199c78455e8f5505fdf51ed3ff00c179da654231f6acc3a7cb1f00e8b40669fb0"}, 0xd8, 0x804}, {&(0x7f0000000d80)={0x27, 0x1, 0x2, 0x7, 0x4, 0x1, "c69b1f46d9853ee5f4738bd9b19d94e27317f6fc5d6b73601f65e7f845054b44674b2d43349885024b8840ada5dd261e3856152c1895272730825a5b0f104b", 0x2a}, 0x60, &(0x7f0000005380)=[{&(0x7f0000004380)="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", 0x1000}, {&(0x7f0000000e00)="5d3115aaee7d2b53b453a30eae7e51c458ed174674db285d1ffc70dee5600f9683cf28d59c", 0x25}, {&(0x7f0000000e40)="47e2b2277b72ed86d47675b98de6ef592ec060abee2926e0fb6df4c80df8006e0a09d3af7932453d1530e7a52289e7d2598f8e62a0da128073f57283b9b7f7aa8cb24ddd3426bfc6d8a00860133b34c2cd34", 0x52}, {&(0x7f0000000ec0)="9df90611039a3919b9883d1c24ade48b092b6eb843837606dbe05215bad12b731f79e02368552968e09b9c1d08bf0d2eb1758da316579bc713b4830de622efab57bf7070d69d5d45fcec2323a870c8c040975b12398be844f6f777a0d3dfea6e21356b3132e8423526cd888f1c16fc7ae5272f2af7ddbd23193a90e84d2c19c332e3810f43c51e6ed3edb0cce4085b36cb", 0x91}, {&(0x7f0000000f80)="0d81f44a343ee62faa83d5ef3be5b04e60f5aa1367ae3adb80a0c9366a3c6fd716d117f55352891eb689654196bdc267c24fe54dcc3c536df62fe6ff05a1d209af08e1901f3ea3219d4db84cf4ff4f20493e948d4e377473cb30cf80942353dd4b3015641fb2b2c8c33f7a0f70b86a7df68d90db5557a28cf6526723476ab098c6ac53a003ce1306", 0x88}, {&(0x7f0000001040)="908340639527b61207a42478a70dcc93d514540befc81d26575ab46dfaad7f0627af74bf3f1b2a884f243e4d9a59930fcb12877d70b0ae1bac5deb903980dcb0ed986b76e9017113b0caef36eff144b78a3add", 0x53}, {&(0x7f00000010c0)="fd0feedd7339f3b8126b6144aa68e68875500106cc3c39bc955b1c39a1a6d08ab6e16553594850a9e2f2", 0x2a}, {&(0x7f0000001100)="ed1999a8af4a98844596dc1d6233000842cad9fe9d3266212572bc3d94d6b68623caf311c9b06d45733097c1b8129a1f23e09f8b3ced782ac0fa9cad664fd02aff031e5af75ebb73f3f6c4abfc379db8573c3890b26fb5ac5771e3a91630902ba7230620cc524a71fa957bebbbedfdf68ce1f2b01b76caaf8662eda241914928661e8d8fb94ba072d91dd920ba85d6c056947ccdd99bee767d07356f6d6de894c700614cd7dd4e05401f488ab32de6764d5f487c3ec483e70b816be424adc41999810aeac8d4359b07b5e76568b919", 0xcf}, {&(0x7f0000001200)="6c7777ef901c05f0c01cb7d6041a0167ef5465f0897a9041b3c5411cd7d14e7e3e243d63b58ad9235bac41b3dcaa117c6ee7fcde52767cf0c172a33230bee126a482eda6420f241976c78c83696c3975b31b33c4ffefb04188b8b77afee6b01aa8b034e2ebfd2dc05cb085eaf51b2f66a5befa10da28f6a502f8e432823db30c8513a42b9ca2a29e7a9a9a371d4d07b732e2a4191eef87d711ace0806cff02bdf41d1620a4d490b11fe02c51abbf5d4f31d8fde7b31e1c7c91", 0xb9}], 0x9, &(0x7f0000005440)={0xa8, 0x117, 0x3ff, "766b926cae8525e1a0d2105a28d362e9493805f001913c72123177b1f69001ce045fc29a23e651f344edd857941c267402d4d3076c1875b25f2d5e8bcca249a178f53bf5ebfa7c9c4c707e7e1c1408c412bd54f1cc2b0f0aca8515abc0a4f7753dc0baecf091971169a9c67362a1022433b66b77543a5a1ac22b89935ac9e2b0fdcc715f3c9ea6a8e297b832b89679fe155d2e"}, 0xa8}, {&(0x7f0000005500)={0x27, 0x0, 0x0, 0x7, 0x1, 0x6, "9cecb91d87244d6923789f88f59047016f564db5355d3cb0e2387fbbdcce9b3f5f18e1b6d0140a3b43614414a58396078fc9f6cfbdcd836517042773d7f2c7", 0x3b}, 0x60, &(0x7f0000006900)=[{&(0x7f00000012c0)="f8227271311f506f1ecdda4c7e3b582267c90a67dc621931848010d42bd4cdf34e35802c385f7833fec9", 0x2a}, {&(0x7f0000005580)="9649ef1ab097197233e6f4084f2243a28862a4156551947e933feee7aa2c3e7c667b99afc0cbab5111191a491a6d929210fa822ac1da61f3106c165cf3fac5e517bdc873e7d366def75ae5e78bf749ad848f17db183b6ed3db25adf45dc9f6d0979862342b7843c360145a0fa8c2d49b6abf32140556e163cff5b8d9b3938bc87a962e9510f1ce73e50b5d", 0x8b}, {&(0x7f0000005640)="c5894a9296986baa699d195aa01a6676c4e6133a112b28c006e295fbcfa2db9f4cd5fbaf464860370879d5cbfce99414faeb84eafdcc20817db7aa71a603a0b98192d861d8f9c1e8e2a03445bbd57da09e08191bb10f2aa5b0253ea563144a697cee1cb6f2bd", 0x66}, {&(0x7f00000056c0)="6e9495fcd59e9e005c03e57ad3cfa1802ff653954a1e6dd0f73cb52a1c6b5b5777c264bff2f00240601f1a36465c976dc693baae0ec13570d2f2d20d055e46f18cf1e32a7571eed07cdc49ff732c5216d30641e4c85283", 0x57}, {&(0x7f0000005740)="76806297cd245a23e5323d7ba71dbeaf58631f4730b02033098338c0001297498dd3581f26f5e00fd093d82bbccb99ae281323e03065ec2d550a6499578a00053b501a86a289dfdc8fd2d12ffe69e9bc01fe0deda604836045e334742f5975e4dfac7167c667aec42db3025a72194beb58dd980fc29f0edd488e06facc4ddd54d9dd17c945e84af13a6a583e4fe0b97d2f1aa5b84d85cf5952cde023e6c317a7a11142562b150672f3dac151fb4cb56dd892c059df466f4f4b6511e0d9e162a0188bfd6ad6314925c51163ce8485d41fb08d1de3dc29f7749dd284680276591a4a1259b9cdc98c1603d9", 0xea}, {&(0x7f0000005840)="b3ac2a143ad70fc52354a62268", 0xd}, {&(0x7f0000005880)="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", 0x1000}, {&(0x7f0000006880)="d920dd5eff07b66d3f885e20f96d0b7704ba875fa0bd7a6667a80ce2d56baaff90a373b1fa15991106f171d0f420fbb9f6ab1549b611b4e5f1ac3abdcb100a290f09c5cb", 0x44}], 0x8, &(0x7f0000006980)={0x18, 0x0, 0x9, "496bdb"}, 0x18, 0x4000000}, {&(0x7f00000069c0)={0x27, 0x1, 0x2, 0x5, 0x80, 0x81, "63a01dccb82b919b19d95a59713de7a36b7c1df0f6840673c0ba5cdd6f12e0f380167ac5b22c439dc3b11dfc1e345b374ea37976a68e793638abc5dcd57b65", 0x27}, 0x60, &(0x7f0000007cc0)=[{&(0x7f0000006a40)="f5a37ce901d637f869eb08840a6b5d2b74a7c446a4f0f8d68a6e8d185611bb26f3ac8af89a44becfac92be11d3c8d906b482a082314e43de634a4261455b95176108d9067069a8e6e2bb4f7fcac86029356529d0542ac9c35dca43214a1666aaa916990d74c8e16a7bc3a31401c7093ee1cc18eacabc2803c04fbab8f9d5ad76b74a9bbc59c59cbfe43c3210a46f510c77d3c8f8ed15f51a09e8f0c04dc60bed35580d2dd37793e8b8746d906dce5e73f0b770325640ceaa335cd7c57b54e29fd1d1d90f1bde2f938f18b121de171cee474fa9642c71dc6d8178a240e333ed99965d9f92d8fc82606f270ca11b842012ea24dc9246", 0xf5}, {&(0x7f0000006b40)="b186a98e5e7032c8cca69e629d4d7f6a2ad7245a9fd6dcb2d4cf3b0f5d774279ad8aa4722b7dc001f34039acf5e824e65aa7997c7c6e5d22fbdaf7b5645dd2a041a9013ba11eb3a6d991c30d2f77c5c9ad24c75e7e16cf1a1a16c64343a10b6c9c79998bc0a2d65e465b7be449e29cd9f4ef8d23bbed8dc3777c90a8c3f6032f8f4ea86a781685420bb07bb4f9", 0x8d}, {&(0x7f0000006c00)="5a77c0f88b22f3226eab8f75dd37239cc69aaa", 0x13}, {&(0x7f0000006c40)="8f4b", 0x2}, {&(0x7f0000006c80)="ccb3757495d8834e586959a9e059df589ed147298dfd52857482de9e5393eb7167de6b8a84bbe841c971b512aeb0dcfae919e1a9308feeb3fe437ffd3ef190bb8596036a28a1732416711d67662bfcd57042963fb25f126cefc0368606ba05df5b4570e449a2f23217082c63c950ddf50103bb193895bc733d34f9304eefbb73a68c7b6738feb3fe642c875b2f13d434b9c370aed7139d445c2d9a6a7c5757114658ded3792fbae03ae766fa89223f489b6a0385e8a1166b4e0fbf0bc5bd97ffc8197b9a7558a4fda3f61ecd4b050ba21fd542b926478207e4357714817001742aed82c5b0c14d5f7c33521c39c5ac32ad023cf3ee5e9dd906532039552b48b1ffde861e0657151a7439f92cc4b0a253a0f67c38d1601ba5996ecf0352f7f2edcc66b3b1a450a166873c8b1d8020abd63c23066e4ad476a13a9e1e2bc9f84b9954aeb5a08e6cc1ff576d958c7411b989a99a8b1e7310913471dc7d0a9dbf382aa8e7d57ef826cda3d9be1ea976bd2b38359c131a18a67ab7ad6ceacb349a2aec10df334ea85046de515550e8779e991fa01768e9e8b1a0f4e2981a21f18db3660db545d01efe203e60e14eac55a034e95702c36c8400d9493faa192fc62fc0a2e5e8ea6eb0bfc6700a24ec71e095f8a65d405cf447fffc172821b61fc18b3eb89708f92913cde0ff8352929a105b67b7d987c0220659c289009ae7f8f6cb88b96124c705a01326fc571c223a536bf28bf5a1eaf2ba7ff1a1db17105772202c879d8392552dc1ee3f6187fb937bce879bb1c26ae240f2f90cdf9dc1ce28309b60cf50af1ac9c2956e2c5c92419a7588c1778bd151662817339859fce005f75d863d1e0e21f6f75fe99dcb855e637d17d6fcef10627b4aac4225b85d723d622e9217a02798d600e74329627e987c11951305f28863dd97044422d1528ed908591fb6a381908a5cd5b766ff00804dee6223a8a3f5f730306a0ffe976754675b7f902fc7e60d0f7732f0516b0de280a424c1a5a00223036d3303a504543a619b089f32d9a894f3fbfe6144b07ce63395c0f87b07b7d13cb0123d2d1ebd0ff1686cad0fb85b3952c13afc706695711a3613242465aaafa7b67e740c1628e8f8eb6bbaa5703b5f4b5f7c9497f9e55b5d7dc24b5ce03cb99db0c8d274d89b7d037d43b28933881aa48d52753f32bafa93d56348620b439d78669b9cc14c96e76ce227879ffda9d7a97c438c6d9285c191a84bfd7cba57e081129df9576dced855566ae33dafa1b5b31cb1337eb1d5dd92e9386ab51d0e726c4da122e2488e4891c7aae9c2bb9216d09f965bb2b85dc7a0939202ba41c2f5a11b914793e3099d3f86180b0a7d21ed1dfdd344cd1d41de129294b52c43e2ffb4892fe05d3c37427daa9035a1d8efab734a4b8559f5ecccd8fbbba8b79ac2914694efe0f95ed26e73e6fcceaec0d8d5cf5cef731e7bca13af2552c4afd324e0392b0a7aa789965ca0dad8f90d0fd35b6f6e278999f888097df191c8fb0265835f4776a5b54e18a7e79c365a5456094f877eaf4c240773acd86b341c3a49568e7467165210272ab0c51c8fc56d2a11e4b09f63f2b9e487e9525f6e1c2989f064569a1d1ea37de9f8e1bd30e8800f1085a26f51fe80530049a6ddf21ca6a891e1a8ad2990d03f80fe0e2d4908bb6537d83402bcce7e748929bd19882175940df93fe8d22fb4ae9963befd1acf20c962b9ec01042e1219426d1a565d14fb1be09d38c93ff9fc2a907e414125ab5554dbb9009bcd5843dbd4b35312be96272a3ccd42778f6e56ab84c6d4321a714c392b4cee1b4b55dff9de1f5cd609a571a3b70805396bee0b85cf316f2fb6818c96e134576c1c5ce5b56c1600c59c7d990f32d7c8a272cc8eed33eaa48590c4a1a397587e5da8ba5532344b3da894b1620b27450099bbdc6ae2166514451843d59582a850af6487b9a59845e7d941b42b17dab99a2f146f09e2cc7fd5bd19138d65e93bc3d32fb51789d94675a4098cc8bcc8ad356a41c6d71cd104c6e98f7b502ec2366ffa2368c28a3a14d47276ac14ff02b03ecf9e7e1b145cf60be4a1281e1f6bb67583743fc13a6f2a0c09fb978978a9e4cc89fb5c9be1f198c4853a9bc39cd094bae9fdbeaad20823677aacdbc964c64806a2beafa0d124667bfefc8051ba410d6cd9d34126b473245a6634d4b30f2ecd687f63df39e9961ea675e114239391d506d87d390c4c64e1c304e4e3c46e9695bd864c79981df8eac090fb3d5689bba6221427cbc27aba0ce6602e485e6334dded6e3da21828a0a832397642713ae1f6a2f00dd95834f6c68a660ac817f975bcd45b290b114f013920bfd24fc3ff724a27c2b9ad6892eb497066861415f2e848833978e5033030c1e3acff5ee2d20c4f2be4b766ce4ac9a96ffb06c9c4a6bd379d854d3390ed3bff316338e3d625e3b350a2c25762a2feaf557901cbb20f83c25193a117bdab3251e83cf27ba699fd4b531d887bb09c2b9875b6a2e043557e7842e379cdfd2bd11651b1826740013cfb4ac2703c2329fae180042071145eb481f53e0888f0c01831227436559d16c81ace6dad75f87b56b1750389dd2f0331c99f46d17a649dcba522e8b03a37a02896318bdf8f546dd14cfc7e2623689356fd1eb2827e7746408e3f00d27a818ab022f938c31c9bf748fd7f3bdee7e62943e6300edf185f286666f541e8965ff92ecd28f0b70fc17d6501febc3d6c5ff6d73bed998f479b9c7c8fcf012a28b8ac4b67a62cf4ce18387c6d69785d616a0a180de9e6c12249e5afdeef883edb5e474f0ee6010c06d9293322d9721763fab1de7ee36412cb392f22d36c6f8d8e309b4a46958148b9a196f2a8f5f1c9bb386f4732b695e45f9881a0f1820431f20f068ced73654c3c58373fa589c75d966742b27bcae8418b51802006c6222d3f9080152a046a7dcac260ea243b1d0bbfcd47fa94a4c9c94956ea141a37af9e4d7aff98ebb29c047c4d6cc03320cec37a9ffee82f38ef3a7f6179d34c4af9fe78dea9a1c2d7f1f4a933ea6b9bf573d5858aaf5718a25c17fc063216ee726150017b78ff49bfae47eb65c40a296ad924ac05f58eec54756a4f2cb9672692fafa94f51a9cf94f156551c155a962f0fd49898cec8938d5e3ce0cf6b8e1aea7e0bbcf9c4b01bafdf7c01a5740ab3a45f95156d5d4042469100c1e56da6253e2abc1db626dfb06419c117b5d2479923af384a38119e4cd7f0e674bead158d554f44fac8d45bf72176dfcb2aa612b10ed89cef699cd3d2973c098dc2a94377009c1aa34bc4bf6021e8d40a32e502f7680c8eddf4e144267bda6823a75f4b1d2612e99b259cb934eb22c457ae681828ad1da90e1a3f878dacf2c6a01a81f8311e4a236037bdcf932f2a82c5ea95c5b54516b6b13d6922a9701e079e5694b1c8d0f2bc8739c52ca25854fd210785ce48bf1fc3e7f05ac419f8f9129ac8831692d121b145b4d2d8bc0773304bfbcfe0564a4b91d62274c18baacd193dc9702e4e863c278ca143c0f8370990069043eb560ea86c8a1f8df3131c8dd102042bda6a07b2d90b04f03a22d15201fce9bbcdc61101f1820d13aa8e89fd0e3ad17dab44894651b3c4fcc818af973dc7f84663fc14db156bab6a552a959d99045975a401b982c642c3ee8db242a7fc772055db710e32024a5e59bc9d967305879d350249ce50d561e7a995ad8e8055f23d1679da7c42ae9d122a0fd4ae4978cdefc8673058e03cca0e82fe5eb401b69c339e7c50dd842399d462e57c41b33347edec96221767eaafc93ecbc2e017faa3b45546f58ab1beb96bb97e76eef4f9929fb8d771c3b904ab87f9e98f43c940e7719496489fcd695b35a355cc4b0b1b26538904b505ea331fb0cc90fefaca07ac6c7029dd95c3948027a6b54b1df8896069c1a2c28c13b87431af828f1e010c876e44ce6107aa0da95a6deeff6a27f6f4c8703e26f5b0bb30e3b6d33f7fd0421a502c13ca446deefa729d904566dc880d2386515e6a10880f205b75f50a119f3e78543958515ea823a01420d4434379e1d4c68b199bca5fb8712e1a10b7578abb69e4ce35f8f6ab0d8375f66dae7505149f5293df29c14d67617e21315b8e04a37402897608e5df9656d255858abd9f893577058cece8276f5e83d3075515bd662ce0d40e3ea645ef910d65379d483ba2030f727d18644cd45614fe69a9b35c97fab7e1748f6cb72edb1f7796721a696b6969c5a492c32da108f54684e6cdc0f5bc193e49cbbc9b6088d366010cf2585e412e390ad0525ade4554491da01b2990f6380a61e2400ba8df05c97b88209bd51a74e79f92b8efb27c3329f6629a63e2c4a8c688728786edb5b5328e0c991e1b9a7e6a9a067bfa903e4395d75ef6e328510eec5006c69aa79d137e9282db13a36a42be311b2a59ad23ea36f2264530539d929c9c1b9d5c6ccc1bbca41db5925c290539577c4aba600a4b8e9604ec3cfd5b034eb8aa3f3ce8d1b698c6cef4826e1918043308cf389374e484983d8724bfef10f813ceef3275c90b21698a6aad5aab3f3aa26f04082d9926aaf3c7f34a68c87ce9febfb6f16f0e65f99ca312813c6061f83a64cc26b5a1d96e2b9838a6acf9e5caa328b65d0203ee7198382a15aee2524b55b1b65c64af44a6562907961cb38823b3cc8f0bb687b3db381299bdb949cda9ce1ae6eb9392c8950d34c9080d69a0cd875cfc142565c1ff64f18dc0c77bc95dcc72a5a747aa46a42d4804458a8bb45c006d9afc2236e38ea3cfe8675cea03d16873bf4adc471fa28c939f6271e828b3c5eb18c3a41b12e9911a2d39f8c3dbc9824cc6ce3013af5b3c745fdfe2884cdf7dc56b453cfdaa90f5729cf95073bc61b8d9324e5d3457bba2d86e22fab252605581a0f2d8b795b8c7dba76909866a2a93ee1ea7a3a3d32be8c11516074f796523990a119ba38f945968cd17e9cb5c5c03c00d2e62dd2f97551ab7b5f53ee9e8011034528d97f76ef8e927b1dc240f62a78b5025bb95d6f5d6bdf590429fc66079fc0795ed62148c33ae54a9a92c25f53c28095361db761d74fb6f31a8612b32392ad215c6a31a5f1717ae2471773f45605a7a9d1d2aac46e622b2838ce0aa1329791e16202b1047b11fa06286a8c4cf2c52b869418680012ecef9795d84f465b3b87f6829e2009b2aad3f648cf6dfb8468ecacb4fd735095c3b8e0ffea19a643c19d3a483e5463d57c5927b6a60f2e6d5f9bffb83708371fffc55b54a6f500c788f73e9eb70a2fa4e7dfc118d3d70837b7feb4e26c2ee97ef0d1c0b06ac12f636213a8b73cf6077399e63714f1c78c0e17e536a2bd73215a93595ca62fd0a150642fcf6002975f66649ad15df0d332ce0d048d7d7621c9fac801dd7a0ed1c232196bdc5eec6b74080415b403b71ca68cf8e04252f141d084436f8cd62161624b4f3297851c7d512c0877c9b921a6955a6f55197b7a01145f74fbe4b2e5731d27e16a78ca10bac348f00486165ef2bffd4dfd572c574c16660b8b5cd260ecc888bab6e6ef10551c813c87ca2b31b3ec270aa94030ae2771dcff3b54cce2db457053292f02101d699fada0c558bc7ff66d6e1b11b4eca9973856c0b1cf72ebcf34470f5e22266ff3741d853b29f4e30c87037da40310b233f8ddde07df9b5e1466e94438f5939ac8fa20c4704dee265a5430cff6a9f131aacfb996e45f98bebf6964cb38067c6782788362ef64e2f5ec2ee38915a3a67d518ced47c97c8217d88be81c3218f7d2ad46b43f9176e0b07a001403e6179c", 0x1000}, {&(0x7f0000007c80)="19", 0x1}], 0x6, &(0x7f0000007d40)={0x98, 0x6, 0xffffffff, "671114ed288ce7219e4b2218c45816f2a3d783d61ca7bf26a75eb57df2fbf1f1a2f1f019a6f2dc9e95dce4c6312880182e274a08af13c4fa5fbdc65c2d4da010514c5625ef95bf408a0950ed04a7712c6b372fa2513ee5d77fd52b06aa615418e356e2826c40d7314a18fdfb01add58ccccbd6d893625db18dfe4f7e1365f124a9325de91c5c"}, 0x98, 0x4000000}, {&(0x7f0000007e00)={0x27, 0x0, 0x2, 0x5, 0x9, 0x7, "66946a1cf16a1735fe54072628e04d8b6ec62c1e0563836f0fb486823edeb6965ae2bd74262227cdaed522396cae609d548a4f90899dfe9e47e0509d1775ef", 0x19}, 0x60, &(0x7f000000a3c0)=[{&(0x7f0000007e80)="6967f0875c85c5533cb670ac4419c16ebb1df92e3786ce1a821a5cb77c563da8e0c7f0d98d33abeb32f413c4ebb9a3cf6a2877b40fb700b942b29d9d881c43dc4dbfcbba51f23f00194d6f1d2553c0d9", 0x50}, {&(0x7f0000007f00)="f70a8fbca0d60981f89e34e301e8c4f7d44047d4eea781ac76b38ddf3a9468e05dff13b591c80cbb701d7dd051ed3686225bff8b557bd6607c572f348f2f49092447984c46beb3cba7a8bf672ee14cc7", 0x50}, {&(0x7f0000007f80)="f14f2aae6a95f6641920a109b2920737a782980953d283dd2c795980da5d01d837031f03df958c5ee7dab0bf763efb742d6386aadf0328a3087a08ab79666ac0f1cb25377fe1ce0018", 0x49}, {&(0x7f0000008000)="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", 0x1000}, {&(0x7f0000009000)="fa87d4ed445fb92ee9ab77df88011bc0e097872829ddb6d0bd3d7b3250d724cd871c0287c208dd11a38a8064c21507d88119bb545fe61a70e288d294256f891783afb622c9a8b94db7cbc6a677e9cfebf38e08753e1347fde866629efe7610b7d41d4b37182b3bf3b28f538afbd2c36f491971d0f95aa788799b48994d3d72cd89574c51457545e9c6575e4063a7e28a0ac96c70a9ee4833e012b1f57ff5308302d8dd9ace322b130dbb43737381819ff52701af0e57bac0e3361e96acd8d41d0f49d7651ada99fc7353912252b17d38345d7ddd490555b6", 0xd8}, {&(0x7f0000009100)}, {&(0x7f0000009140)="54d474714bdbef1d485b4297ae8aea9489aa499e71170efad01622becc1a2996d6b6ded9667d71a8769d01ee7c3e04899a9bf902ac19093c1aa33b56c0cfde2bfbb7acf6760d9c663903691490b8fa930f6ced1dedd9f70d0eef2f9e660c52b6720b3bf1de90ad4989566445711fa1d6311ef3237ae072e1d37fd09dc274bb5ec5292b7ae6e92112e80d525b044e96cf1871ba0e6560036f10e6dac7b006ba", 0x9f}, {&(0x7f0000009200)="23b82f33c5af6e964c77515b152255af8acb964778c755f58cd6cddbb77edd84fc9b4140ccfe98ee7dd547ce771d57f39b80dabac500fbfe0c34be9b49cbd532490c9d36ab0bf290d81e4186c398204a5e1d38ec786a29137ad8ff0c68554a933eaa9608e2e553240ff30093b353b90d837ec5aa57b726ce8b1e43c606e54f131756bc616f1dcae82af760967bd5c1a9fb2dabfb2c887f1e816021c67c12449d5db9dae9b5934649dd3689a18e849a3941d9a8e1475d", 0xb6}, {&(0x7f00000092c0)="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", 0x1000}, {&(0x7f000000a2c0)="1cc19ee891bfeab0ea989fca67cb20c4183f396d2d6ba4ff7850c9c8725efeb1c1ac6bfbc5fedf4d3d66bba4072289207cb7ef48380dd199eb265eb9c048e04c87d77d80914ff8de0a2582fe9f7b4c2a9aa029c2d658a31fbc64d108c566b2d7fc6bcdc52b6d9f66a6e0636a20ab27c27599de81353b80ceb9d5327a1e5d4bf06a78ebef85fffc7b23b07a9e4e8f289c39cfa2dbc38237e2b1c1ec313af20c518a89ef13658e47735a394bf7b64c0ce28b90942368811ff9fa71a62beea2c7886514e757ce42797c474b2a27d251efab", 0xd0}], 0xa, 0x0, 0x0, 0x8890}], 0x7, 0x40040) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000a40)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2789.469868][ T3383] XFS (loop2): SB sanity check failed [ 2789.475321][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2789.487730][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2789.493781][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2789.504253][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 24 10 00 XFSB.........$.. [ 2789.513223][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2789.522302][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2789.556290][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2789.574453][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2789.583822][T12876] XFS (loop0): SB sanity check failed [ 2789.596130][T12876] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2789.608801][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2789.616346][T12876] XFS (loop0): Unmount and run xfs_repair 01:19:17 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2789.617763][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2789.632521][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2789.638145][T12876] XFS (loop0): First 128 bytes of corrupted metadata buffer: 01:19:17 executing program 3: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000023100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2789.692941][T12876] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 01 80 10 00 XFSB............ [ 2789.752776][T12889] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2789.761365][T12876] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2789.786513][T12876] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 01:19:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x3}, 0x0) [ 2789.858245][T12876] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2789.867607][T12876] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2789.880109][T12900] XFS (loop3): SB sanity check failed [ 2789.903209][T12876] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2789.916247][T12900] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:19:17 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000025100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2789.957763][T12900] XFS (loop3): Unmount and run xfs_repair [ 2789.968598][T12876] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2789.992765][T12900] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2790.014761][T12900] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 23 10 00 XFSB.........#.. [ 2790.034815][T12876] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2790.045154][T12900] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x4}, 0x0) 01:19:17 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2790.064165][T12900] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2790.083546][T12900] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2790.180703][T12900] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2790.226482][T12900] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2790.234587][T13002] XFS (loop2): SB sanity check failed [ 2790.241411][T12876] XFS (loop0): SB sanity check failed [ 2790.248218][T13002] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2790.261598][T12876] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:19:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x5}, 0x0) 01:19:17 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2790.262014][T12900] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2790.284192][T13002] XFS (loop2): Unmount and run xfs_repair [ 2790.305166][T12876] XFS (loop0): Unmount and run xfs_repair [ 2790.313453][T13002] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2790.359838][T12876] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2790.368603][T13002] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 25 10 00 XFSB.........%.. [ 2790.396132][T13002] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x6}, 0x0) [ 2790.396309][T12876] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 01 80 10 00 XFSB............ [ 2790.414131][T13002] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2790.414154][T13002] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2790.440025][T13002] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2790.456456][T13002] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2790.466363][T13002] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2790.504089][T12900] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2790.526322][T12876] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2790.550726][T13040] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2790.560583][T12876] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2790.575492][T13002] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2790.678583][T12876] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2790.751365][T12876] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2790.761000][T13002] XFS (loop2): SB sanity check failed [ 2790.767043][T13002] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2790.816879][T13002] XFS (loop2): Unmount and run xfs_repair [ 2790.822798][T12876] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2790.834274][T13002] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2790.843079][T13002] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 25 10 00 XFSB.........%.. [ 2790.852148][T12876] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2790.869844][T13002] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2790.881521][T12876] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2790.895309][T13002] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2790.923965][T13002] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2790.936404][T13002] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2790.945637][T13002] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2790.958118][T13002] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 01:19:18 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000008080100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x8}, 0x0) 01:19:18 executing program 3: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000024100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@exit_looper], 0xc9, 0x0, &(0x7f0000000140)="bb919274c02837ded46f177be32e1eb03220c63653c4fa79648527ec4a9c481851457e8d48769804f0039f6a328cd64713600073b8278d53e29e9f8bb518885477dfb724f1cb7ddee6ada8d3a6c84268d5fae8bb33d492d5afa8b7871c99db2c221f37d87e7aa39fbd9ddec7f7690e6920fbca8324c1e56952a13ec28d58f8b357dc0537d7e1189a5e45b021f89747ac69e47eba9e04f8d15d3891b1e8564a7803ff933857ade0dc536630949ebc55f88d8de6b87d1102710f4766edc7261f9234b1f4bd8ac37896fe"}) setsockopt(r0, 0xff, 0xffffff7c, &(0x7f0000000000)="9ff73faff23bb962fe25113d404f48bbb8", 0x11) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') prctl$PR_GET_FP_MODE(0x2e) 01:19:18 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2790.968436][T13002] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2791.084930][T13169] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:19:18 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000026100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x9}, 0x0) [ 2791.209406][ T3383] XFS (loop3): SB sanity check failed [ 2791.219173][ T3383] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:19:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000000)=0x200, 0x4) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2791.253917][ T3383] XFS (loop3): Unmount and run xfs_repair [ 2791.260070][ T3383] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2791.267778][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 24 10 00 XFSB.........$.. [ 2791.276995][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2791.285921][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2791.295354][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 01:19:18 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2791.307860][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2791.318288][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2791.327545][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2791.337281][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0xa}, 0x0) [ 2791.419945][ T7889] XFS (loop0): SB sanity check failed [ 2791.463854][ T7889] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2791.469901][T13301] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:19:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000080)='./file0\x00', 0x1ba) [ 2791.619802][T13302] XFS (loop2): SB sanity check failed [ 2791.625696][ T7889] XFS (loop0): Unmount and run xfs_repair [ 2791.638442][T13302] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:19:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x9}, 0x0) [ 2791.684619][ T7889] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2791.748998][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 80 80 10 00 XFSB............ [ 2791.794233][T13302] XFS (loop2): Unmount and run xfs_repair [ 2791.800445][T13302] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2791.808434][T13302] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 26 10 00 XFSB.........&.. [ 2791.818050][T13302] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2791.818942][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2791.827443][T13302] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2791.845489][T13302] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2791.854964][T13302] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2791.864460][T13302] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2791.871945][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2791.873855][T13302] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2791.891877][T13302] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2791.915282][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2791.942997][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2791.953637][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2791.964666][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2791.986286][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:19 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000989680100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:19 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0xb}, 0x0) 01:19:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @any, 0x3}, 0xa) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:19:19 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:19 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000027100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2792.333168][T13549] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:19:20 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x10}, 0x0) [ 2792.501354][T13555] XFS (loop0): SB sanity check failed [ 2792.516450][T13555] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2792.560596][T13555] XFS (loop0): Unmount and run xfs_repair [ 2792.574679][T13555] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2792.598274][T13555] 00000000: 58 46 53 42 00 00 10 00 00 00 00 98 96 80 10 00 XFSB............ 01:19:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x11}, 0x0) [ 2792.608197][T13555] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2792.618453][T13555] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2792.627847][T13555] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2792.637120][T13555] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2792.646091][T13555] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2792.655383][T13555] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2792.664846][T13555] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2792.675867][ T3383] XFS (loop2): SB sanity check failed [ 2792.681773][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2792.694848][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2792.701017][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2792.708736][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 27 10 00 XFSB.........'.. [ 2792.719079][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2792.728752][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2792.738675][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2792.748151][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:19:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000140)=""/140, 0x8c}], 0x1, 0x7) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2792.757495][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2792.770270][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2792.779770][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x12}, 0x0) 01:19:20 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000028100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:20 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000ffffff8c100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2792.984573][T13689] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:19:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x13}, 0x0) [ 2793.179411][T24031] XFS (loop2): SB sanity check failed [ 2793.185082][T24031] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2793.206142][T24031] XFS (loop2): Unmount and run xfs_repair [ 2793.212796][T13702] XFS (loop0): SB sanity check failed [ 2793.227254][T13702] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2793.242313][T24031] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2793.253118][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 28 10 00 XFSB.........(.. [ 2793.266495][T13702] XFS (loop0): Unmount and run xfs_repair 01:19:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2793.267860][T24031] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2793.276918][T13702] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2793.291900][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2793.312673][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 01:19:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x14}, 0x0) [ 2793.340258][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2793.355658][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2793.361929][T13702] 00000000: 58 46 53 42 00 00 10 00 00 00 ff ff ff 8c 10 00 XFSB............ [ 2793.375287][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2793.391017][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2793.474670][T13725] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2793.496647][T13702] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2793.510995][T13702] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2793.521887][T13702] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2793.531265][T13702] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2793.541330][T13702] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2793.551235][T13702] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2793.561446][T13702] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2793.583096][T13697] XFS (loop2): SB sanity check failed [ 2793.589325][T13697] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2793.602435][T13697] XFS (loop2): Unmount and run xfs_repair [ 2793.608825][T13697] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2793.617956][T13697] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 28 10 00 XFSB.........(.. [ 2793.627948][T13697] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2793.639808][T13697] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2793.649287][T13697] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2793.658853][T13697] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2793.668556][T13697] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2793.677874][T13697] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2793.687367][T13697] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:21 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400204) prctl$PR_GET_SECCOMP(0x15) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2793.882660][T13851] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:19:21 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x300}, 0x0) 01:19:21 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000039100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:21 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000ffffff97100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x140002, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|2\xb8C\x896\xdb\x89\r\xe0})\\\xee\x7f\x92\xf2\x04#_\xb0\xc1\x10\xeey\xb3\x06\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5h\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x01He\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf2%|-\xe4\x8c\x907\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\x00\x00\x00\x00\x00\x00') 01:19:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x2}, 0x0) [ 2794.192159][T13966] XFS (loop2): SB sanity check failed [ 2794.197740][T13966] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2794.221283][T13966] XFS (loop2): Unmount and run xfs_repair [ 2794.227303][T13966] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2794.235101][T13966] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 39 10 00 XFSB.........9.. [ 2794.248650][T13966] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2794.264486][T13966] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2794.274335][T13966] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2794.288951][T13966] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2794.300519][T13966] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2794.309979][T13966] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2794.319362][T13966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2794.370161][T13982] XFS (loop0): SB sanity check failed [ 2794.382998][T13982] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:19:21 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "91359792231ae4d673fc04b4c5fcbca24fcc61ba8eff38e48234e9af92325e84882bc904d33091829c44b0e80c0893af0bb53042923adf0563dd29d53bf726", 0x24}, 0x60) fcntl$notify(r0, 0x402, 0x22) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f0000000000)={0x1}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='configfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2794.416337][T13982] XFS (loop0): Unmount and run xfs_repair [ 2794.463035][T13982] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2794.465913][T13966] XFS (loop2): SB sanity check failed [ 2794.476667][T13966] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2794.490296][T13966] XFS (loop2): Unmount and run xfs_repair [ 2794.496156][T13966] XFS (loop2): First 128 bytes of corrupted metadata buffer: 01:19:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x3}, 0x0) [ 2794.511395][T13966] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 39 10 00 XFSB.........9.. [ 2794.525359][T13982] 00000000: 58 46 53 42 00 00 10 00 00 00 ff ff ff 97 10 00 XFSB............ [ 2794.541833][T13966] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2794.567839][T13966] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2794.572113][T13982] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2794.593917][T13966] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2794.618253][T13966] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2794.636518][T13966] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2794.646444][T13966] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 01:19:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x4}, 0x0) [ 2794.662946][T14104] configfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2794.686369][T13982] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2794.687569][T13966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2794.701222][T13982] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2794.752289][T13982] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2794.761731][T13982] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2794.770974][T13982] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2794.780165][T13982] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:22 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r2 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r2, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r5 = getpid() r6 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r6) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r6) syz_open_procfs(r5, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r7) 01:19:22 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r2, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "91359792231ae4d673fc04b4c5fcbca24fcc61ba8eff38e48234e9af92325e84882bc904d33091829c44b0e80c0893af0bb53042923adf0563dd29d53bf726", 0x24}, 0x60) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x20) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000001c0)=r3) creat(&(0x7f0000000100)='./file0\x00', 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa021004}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x7c, 0x9, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa43}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x100}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, [], 0x42}}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008010}, 0x60022005) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:19:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x7}, 0x0) [ 2795.005471][T14221] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:19:22 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r2 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r2, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r5 = getpid() r6 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r6) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r6) syz_open_procfs(r5, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r7) 01:19:22 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000003a100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0xa}, 0x0) 01:19:22 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000f9a100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:22 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x8, 0xfffffff7, 0x100, 0x1, 0x2, 0x10001, 0x0, 0xfffe, 0x1], 0x9, 0x80800, r5, r1}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000140)={r6, 0x16}) 01:19:22 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r2 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r2, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r5 = getpid() r6 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r6) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r6) syz_open_procfs(r5, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r7) [ 2795.485817][T14338] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2795.612782][ T3383] XFS (loop2): SB sanity check failed [ 2795.622931][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2795.652905][T14344] XFS (loop0): SB sanity check failed 01:19:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0xe}, 0x0) [ 2795.665295][T14344] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2795.683899][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2795.690016][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2795.700425][T14344] XFS (loop0): Unmount and run xfs_repair [ 2795.716324][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 3a 10 00 XFSB.........:.. [ 2795.725262][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2795.726547][T14344] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2795.742179][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2795.756857][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2795.766038][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2795.794142][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2795.802144][T14344] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 0f 9a 10 00 XFSB............ 01:19:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0xf}, 0x0) 01:19:23 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000040)='./file0\x00', 0x81, 0x1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000480)='trusted.overlay.origin\x00', &(0x7f00000004c0)='y\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x101, 0x8, 0x4, 0xe000, 0x5, {0x0, 0x2710}, {0x4, 0x8, 0x9, 0x7, 0x5, 0x2, "c3f947a9"}, 0x3ff, 0x3, @offset=0x7f, 0xffffff80, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup2(r14, r13) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r10, 0xc0585609, &(0x7f0000000200)={0xfffffffb, 0xb, 0x4, 0x100, 0x8, {r11, r12/1000+10000}, {0x1, 0x0, 0x1, 0x1f, 0x2, 0x6, "fb6c418d"}, 0x80000000, 0x2, @fd=r15, 0x4, 0x0, 0xffffffffffffffff}) r17 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x616200, 0x0) r18 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x4200, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012abd7000fbdbdf25010000000c000800200000000000000008000100000000000c00080005000000000000001400078008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYRES16=r2, @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="0800010084a904bd228cb7c1fee33e4d185d403631129b93ce8961b038d8085c58ade00fc16d2b6faab7b8d2cbd8ab571e8aff5ac777d4bc52ea2b0218f80f755efc39afc7b74489a955bbabc27d42cbf016da1ecb92494e6c3376aaed24c6c9dfe96b71381afbec80c8fd0c0aa7a093033e8ef4f54cbc50933c2ab647ba4c27a5c75b4deda96db0ab5737fc9938c5d6c3daa718519ea4c6b7858d6f0ef8fa6cdd9594cdafe2009dddac39bc", @ANYRES32=r18, @ANYBLOB="0a7038183ce126d458b0783668b826fd69ec09fdcc910a3b93390c250146b6eeab0596810831f6a106b0d592e56e8feb0c0db3efe3"], 0xd}, 0x1, 0x0, 0x0, 0x4040094}, 0x40000) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x800, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2795.810114][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2795.836284][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2795.855943][T14344] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x60}, 0x0) [ 2795.963878][T14344] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2795.982029][T14472] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2796.100209][T14344] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 01:19:23 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000000110000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x300}, 0x0) [ 2796.167829][T14344] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2796.201478][T14344] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2796.222248][T14344] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2796.231416][T14344] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2796.420015][T14691] XFS (loop2): SB sanity check failed [ 2796.425788][T14691] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2796.441789][T14691] XFS (loop2): Unmount and run xfs_repair [ 2796.447760][T14691] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2796.455629][T14691] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 11 00 XFSB............ [ 2796.477567][T14691] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2796.494254][T14691] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2796.505665][T14691] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2796.517142][T14691] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:19:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x700}, 0x0) 01:19:24 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) creat(&(0x7f0000000100)='./file0\x00', 0x0) statx(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x6000, 0x800, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xfa3, 0xa, &(0x7f0000000880)=[{&(0x7f0000000140)="24e9bc62d54ec6eca202496fd62d9cfe113ab45acd3f89ddd20b385a92d57c5fb91183c605a5b9cdeb462206256bbef3e9b3baf95e485dd3c66a58e52b42ad61730479aed1955e2582d5e25cf4ae80cff4192dd36bbf44272d496bb6e779b08a4631b04ef8bd4ebed95168e29d732ffcd2278514a6e21d9b0dfc1c7e670e89a90d55e7d215d2625e4430ac307a88e2bf363fb3ae57d7e28f4b4957f2366535ece5d98432bad1ba237cf11c599a577562a6edc4d99413682c85ace4629f21cc9994e65f6fd366a1d7bb49e42d", 0xcc, 0x7f}, {&(0x7f0000000440)="6f3c4acf3b98088c405de55a0e585206d290a300783c588ab9076aca5c4ebeb73e6ff70b283c5a94fc75aaa0f6fa753b1a21f0220576e4f22afd09d480426943e50f341711ac0128a9f875a969593f59270600b28e5d228694ee746e2e707f00b56c701275ef77c2d12d3b35b5a3d1d47d13ef1d14d78b5bd52fd2283de3621943ce79206f55ab5a01b9286f881c6c625fb590e37ddca8e09dc16bd66ed777a945abf82b8afcbf1a9a0d68c2a8eb5fbcbe34bb40d3b4a10bd71d81a379327d66e381445ee10e596a364fd5aa452ffe0e4f5781ae18faf4ece64c0826e88af2c9749f5f6d44e8e0630b8f8e9f8813993244", 0xf1, 0x4}, {&(0x7f0000000540)="8c2bca6525f09a030c72c7c2091b221eb11fccbe0216a21073776e40713647de1f26cb75451a6505f6b51372620a47d8f9042c063cb054839081ed1596facabacf25a671c4c2ec86aba24da38837970b017266817779b681ad5aa4aac28ba92abbd77c8859ec1ed592f4f6e6385664163e3e7adadf2b8d6a4dbbd789e0522aee8933d61d4cb087c1b103859779a6514f8ca154bce4a0b9b0e030707b69df2cd8f700ca6223e2eaabeb3d879c1cd86e7e5dfd7a7d5935dc1d6213963e4d91222ad88df71b7ca24aa71992fa", 0xcb, 0x4}, {&(0x7f0000000240)="90861c270412c5080419413d0308ea0544eed7189abe527784ca1acee16d9d709339d63682b0183279b1d5278653930861b6249cb97b4fe0", 0x38, 0x4}, {&(0x7f0000000640)="35381f4df7066c656ab6f86f3995ab0071560c72b16d79f202c3b898646dac140c0ba4f978d537bf1a32058fbca59e4e5baa19ca154468ecbc0699faf999eb8668b98cd033955328825e9687b6a5b5920986d11ef0", 0x55, 0x2}, {&(0x7f00000006c0)="cb17ea87a1328be1acf3f06635f56f2290e01d1da908d6299de3ccda45c7ffc63be7266333d3cc17c1eba2e2a2258b0d5d997c4c9676d4fe4ee39ec0144882276a08", 0x42, 0x10001}, {&(0x7f0000000280)="b2ecef16fa3e5e036dd16ca9edd835918a", 0x11, 0x89}, {&(0x7f0000000740)="c2acbf4d76c7bb09af0ffd2413b5148b61cd6a7f", 0x14}, {&(0x7f0000000780)="ec9704c11274cd0b447afa73e35b02a6c3af7f2e094602114ee0c85b115d04ad94422060fcca0aa1835978af0b206b5053c7120dd7d8b252ca5ee9eeaac99806c8a3cbfad51b9b3c71bfbdd173b1dcb38d5153f91c32f42fec4249d71f8777ee6f20b02eddfb322c644889f38c5244", 0x6f, 0xdf9}, {&(0x7f0000000800)="37a2c6ef4567b1aad456d55ec888e7c101de9d2b389c1789a93710521678a647b1e9a679a858796a69da2249af44877d21734ec75a5ef990f5b64b09a5978f044897452f45aec2a5699aefb317ed4eb4cf90f964be0a0dd195c3ae4ef50421da37ce06a9d2276c5e549d", 0x6a, 0x1}], 0x40, &(0x7f0000000ac0)={[{@utf8='utf8=1'}, {@nonumtail='nnonumtail=1'}, {@utf8='utf8=1'}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@shortname_mixed='shortname=mixed'}, {@shortname_mixed='shortname=mixed'}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@utf8no='utf8=0'}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlateno='uni_xlate=0'}], [{@euid_eq={'euid', 0x3d, r1}}]}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x200081) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0)='nl80211\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/dlm_plock\x00', 0x10000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001080)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000001180)=0xe8) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x30, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r15}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6gre0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x4000084) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:19:24 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r2 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r2, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r5 = getpid() r6 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r6) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r6) syz_open_procfs(r5, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r7) 01:19:24 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000000001c0100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:24 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r2 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r2, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r5 = getpid() r6 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r6) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r6) syz_open_procfs(r5, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r7) [ 2796.526213][T14691] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2796.538629][T14691] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2796.549844][T14691] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0xa00}, 0x0) [ 2796.725531][T14714] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 2796.766341][ T3383] XFS (loop0): SB sanity check failed [ 2796.772098][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2796.785002][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2796.791469][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2796.822439][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 01 c0 10 00 XFSB............ [ 2796.843340][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:24 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0x80184132, &(0x7f0000000000)) r6 = dup2(r2, r1) ioctl$VFIO_CHECK_EXTENSION(r6, 0x3b65, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x18000) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2796.864948][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2796.885448][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2796.901503][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2796.937812][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2796.963851][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2796.973129][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2796.991507][ T3383] XFS (loop2): SB sanity check failed [ 2797.000668][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2797.037103][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2797.043048][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2797.051140][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 11 00 XFSB............ [ 2797.060716][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2797.070386][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 01:19:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0xe00}, 0x0) [ 2797.079989][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2797.089781][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2797.099203][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2797.109134][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2797.118593][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2797.128764][T14710] XFS (loop0): SB sanity check failed [ 2797.136798][T14710] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2797.149700][T14710] XFS (loop0): Unmount and run xfs_repair [ 2797.155565][T14710] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2797.163637][T14710] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 01 c0 10 00 XFSB............ [ 2797.173059][T14710] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2797.182652][T14710] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2797.192234][T14710] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2797.201964][T14710] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2797.211565][T14710] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2797.221130][T14710] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 01:19:24 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000000003c0100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:24 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000000140000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2797.230774][T14710] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:24 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000140)={0x5, @raw_data="6305b7878fe8564ace4e1676fe99f6c715333ae9df5577785d73cdbf13fd5c9177fc291bb37c9e5701707318df31387927bce8edbaace4ac32b7b427b33a0baacfc9ba58905757ad086e9f82ad4b71527709814ebbf753b442546f363588630ecce7122211253897522adbf65c52735a42cac4a59b7c8b0414b210ed1be99c54442c5e8739d08162007ed4d7ec4f736ecb0fe2c88b20367182aa56a7f7fe699c22a4f660aa32c95230b209262f5cbb2d59dc0b2a17a10abe2535c59be6400b566cf9a4ef5ba63350"}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x404, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xc2\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:19:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0xf00}, 0x0) [ 2797.510517][T14949] XFS (loop2): SB sanity check failed [ 2797.523201][T14949] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2797.529050][T14968] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:19:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x30b8}, 0x0) [ 2797.568519][T14949] XFS (loop2): Unmount and run xfs_repair [ 2797.604394][T14949] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2797.622830][T14949] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 14 00 XFSB............ [ 2797.657552][ T3383] XFS (loop0): SB sanity check failed [ 2797.666609][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2797.698521][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2797.701330][T14949] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2797.704821][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2797.721276][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 03 c0 10 00 XFSB............ [ 2797.730783][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2797.740134][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2797.749698][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2797.759126][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2797.768812][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2797.770584][T14949] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2797.778343][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2797.796451][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x6000}, 0x0) [ 2797.819742][T14949] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2797.846292][T14949] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2797.855194][T14949] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2797.901167][T14949] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2797.911280][T14949] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:25 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r2 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r2, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r5 = getpid() r6 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r6) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r6) syz_open_procfs(r5, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r7) 01:19:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$media(&(0x7f0000000700)='/dev/media#\x00', 0xe5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780)='nl80211\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="88000000f5337c6611330fad8e69cb2d9c9d7c5efa68b978c95aabc155bc4d364880fa176ba00253a1a203993e3c86ec60a242b7a1e1cd21a9fd74cc95ac4d6e0d1b2c90d950ad3522bf115173b296cec3237da6bbd38daaa3577bbb4c5f09259c0de7aceafdb47530b5d258dd5e494e61b64a7b8f1a930ce388cec283c5966353db68f31752198569b54f2b4ef80e0201d6e048f374fadc4e5635", @ANYRES16=r2, @ANYBLOB="00022abd7000fddbdf25080000000c009900030000000300000014000400697036746e6c3000000000000000000008000300", @ANYRES32=r3, @ANYBLOB="080005000400000014000400677265746170000000000000000000001400040076657468305f6d616376746170000000140004006261746164765f736c6176655f3100000800050009000000"], 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") recvmsg(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/97, 0x61}, {&(0x7f0000000140)=""/157, 0x9d}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000440)=""/239, 0xef}, {&(0x7f0000000200)=""/103, 0x67}, {&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f0000000280)=""/31, 0x1f}], 0x7, &(0x7f00000005c0)=""/251, 0xfb}, 0x23) dup(r0) mount(0x0, &(0x7f0000001300)='./file1\x00', &(0x7f0000000800)='hugetlbfs\x00', 0x1000, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:19:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0xb830}, 0x0) 01:19:25 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000edc0100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:25 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2798.102384][ T3383] XFS (loop2): SB sanity check failed [ 2798.107958][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2798.121218][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2798.139807][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2798.156135][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 14 00 XFSB............ [ 2798.178550][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2798.187885][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2798.197037][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2798.205984][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2798.215373][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2798.224704][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2798.234233][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:25 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000000000002f0000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000080)={0x5, 0x800, {0x53, 0x20, 0x1000, {0x101, 0x7a}, {0x2, 0x1}, @rumble={0x7, 0x9}}, {0x3, 0x3, 0x1, {0x2, 0xfffe}, {0x6, 0x4}, @ramp={0x8, 0x4ae, {0x8, 0x2, 0x7, 0x2}}}}) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:19:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x34000}, 0x0) [ 2798.445144][T15117] XFS (loop0): SB sanity check failed [ 2798.450883][T15117] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2798.472329][T15117] XFS (loop0): Unmount and run xfs_repair [ 2798.496474][T15117] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2798.503918][T15117] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 ed c0 10 00 XFSB............ [ 2798.637505][T15225] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2798.646486][T15117] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2798.693935][T15117] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2798.707080][T15117] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2798.721612][ T3383] XFS (loop2): SB sanity check failed [ 2798.726705][T15117] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2798.727637][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2798.760682][T15117] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2798.778102][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2798.784158][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: 01:19:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x400300}, 0x0) [ 2798.792347][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 2f 00 XFSB........../. [ 2798.801747][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2798.807308][T15117] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2798.811310][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2798.829225][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 01:19:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2798.838936][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2798.848395][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2798.870800][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2798.882460][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2798.909432][T15117] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2799.061925][ T3383] XFS (loop2): SB sanity check failed [ 2799.067734][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:19:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x1000000}, 0x0) [ 2799.105414][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2799.122401][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: 01:19:26 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2799.156331][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 2f 00 XFSB........../. [ 2799.166935][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2799.175945][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2799.185479][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2799.224553][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2799.233770][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2799.243887][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2799.268838][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2799.282728][ T3383] XFS (loop0): SB sanity check failed [ 2799.288362][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2799.301255][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2799.307372][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2799.315192][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 ed c0 10 00 XFSB............ [ 2799.324597][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2799.334424][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2799.344681][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2799.380734][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2799.431438][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2799.461503][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2799.472098][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:27 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:27 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='nfs4\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00'/345) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) 01:19:27 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000000000003d0000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x2000000}, 0x0) 01:19:27 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000000000c4100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:27 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2799.901382][ T3383] XFS (loop0): SB sanity check failed [ 2799.906955][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2799.930934][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2799.943958][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2799.966217][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 c4 10 00 XFSB............ [ 2799.986053][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x3000000}, 0x0) [ 2800.010185][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2800.019633][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2800.028854][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2800.038435][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2800.056588][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 01:19:27 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sysfs$1(0x1, &(0x7f0000000140)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r2, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "91359792231ae4d673fc04b4c5fcbca24fcc61ba8eff38e48234e9af92325e84882bc904d33091829c44b0e80c0893af0bb53042923adf0563dd29d53bf726", 0x24}, 0x60) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000000)={'wg1\x00', {0x2, 0x4e21, @multicast2}}) [ 2800.089139][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2800.125841][ T3383] XFS (loop2): SB sanity check failed 01:19:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x4000000}, 0x0) [ 2800.150056][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2800.189730][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2800.209369][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2800.244735][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 3d 00 XFSB..........=. [ 2800.254194][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2800.270926][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2800.296289][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2800.305186][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2800.324491][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2800.339666][T15620] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:19:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x7000000}, 0x0) 01:19:27 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000fffffff5100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2800.362616][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2800.371859][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2800.507016][T15483] XFS (loop2): SB sanity check failed [ 2800.512633][T15483] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:19:28 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2800.560803][T15483] XFS (loop2): Unmount and run xfs_repair [ 2800.572517][T15483] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2800.672810][T15483] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 3d 00 XFSB..........=. [ 2800.734558][T15483] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:28 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r2, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "91359792231ae4d673fc04b4c5fcbca24fcc61ba8eff38e48234e9af92325e84882bc904d33091829c44b0e80c0893af0bb53042923adf0563dd29d53bf726", 0x24}, 0x60) dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCATMARK(r8, 0x8905, &(0x7f0000000000)) stat(0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000280)='./file0/file0/../file0\x00', r5, r9) fchown(r2, r4, r9) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2800.802028][ T3383] XFS (loop0): SB sanity check failed [ 2800.805990][T15483] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2800.807602][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2800.807697][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2800.854046][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2800.861849][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 ff ff ff f5 10 00 XFSB............ [ 2800.871062][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2800.880360][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2800.889498][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2800.898477][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2800.907423][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2800.916308][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2800.925323][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2800.931001][T15483] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2800.976387][T15483] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2800.985732][T15483] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2800.995023][T15483] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2801.010824][T15483] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2801.044603][T15851] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2801.072224][T15754] XFS (loop0): SB sanity check failed 01:19:28 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000000000003f0000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0xa000000}, 0x0) [ 2801.084714][T15754] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2801.112976][T15754] XFS (loop0): Unmount and run xfs_repair [ 2801.120900][T15754] XFS (loop0): First 128 bytes of corrupted metadata buffer: 01:19:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000)={0x80, 0x676, 0xff, 0x3, 0x1}, 0x14) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x800) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x80002, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2801.136497][T15754] 00000000: 58 46 53 42 00 00 10 00 00 00 ff ff ff f5 10 00 XFSB............ [ 2801.164233][T15754] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2801.184942][T15754] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 01:19:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0xe000000}, 0x0) [ 2801.230988][T15754] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2801.240119][T15754] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2801.249334][T15754] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2801.258422][T15754] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2801.295108][T15754] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2801.414512][ T7889] XFS (loop2): SB sanity check failed [ 2801.449863][ T7889] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:19:29 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000fffffff6100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:29 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x1, 0x4) [ 2801.534804][ T7889] XFS (loop2): Unmount and run xfs_repair [ 2801.590841][ T7889] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2801.633847][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 3f 00 XFSB..........?. [ 2801.650375][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2801.662297][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 01:19:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0xf000000}, 0x0) [ 2801.671992][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2801.831345][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2801.916897][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2801.931627][T16189] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:19:29 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2801.970760][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2801.995350][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2802.039819][ T3383] XFS (loop0): SB sanity check failed [ 2802.045594][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2802.066711][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2802.072604][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2802.080311][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 ff ff ff f6 10 00 XFSB............ [ 2802.089649][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2802.098868][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2802.121058][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 01:19:29 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2802.133875][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2802.143012][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2802.160359][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2802.173045][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:29 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000000000005d0000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x60000000}, 0x0) 01:19:29 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000fffffdf9100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:29 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000000)) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x2) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2802.598367][T16315] XFS (loop2): SB sanity check failed [ 2802.603980][T16315] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2802.646378][T16315] XFS (loop2): Unmount and run xfs_repair [ 2802.655189][T16315] XFS (loop2): First 128 bytes of corrupted metadata buffer: 01:19:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x9effffff}, 0x0) [ 2802.738873][T16315] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 5d 00 XFSB..........]. 01:19:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0xb8300000}, 0x0) [ 2802.834320][T16315] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0xff, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2802.896387][T16315] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2802.905768][T16315] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2802.915076][T16315] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2802.924482][ T3383] XFS (loop0): SB sanity check failed [ 2802.939991][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2802.965971][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2802.966472][T16315] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2803.002237][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2803.029852][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 ff ff fd f9 10 00 XFSB............ [ 2803.057192][T16315] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2803.058160][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2803.078971][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2803.088615][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2803.098335][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:19:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0xf0ffffff}, 0x0) [ 2803.107599][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2803.118317][T16315] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2803.120970][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2803.136125][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2803.151321][T16449] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:19:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') 01:19:30 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0xffffff7f}, 0x0) 01:19:31 executing program 3: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000fffffff6100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2803.433369][T16670] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' 01:19:31 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000080800000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:31 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000fffffffb100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0xffffff9e}, 0x0) 01:19:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r5, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "91359792231ae4d673fc04b4c5fcbca24fcc61ba8eff38e48234e9af92325e84882bc904d33091829c44b0e80c0893af0bb53042923adf0563dd29d53bf726", 0x24}, 0x60) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000080)='hugetlbfs\x00', 0x0, r5) creat(&(0x7f0000000100)='./file0\x00', 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000140)=""/71, &(0x7f00000001c0)=0x47) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') chroot(&(0x7f0000000000)='./file1\x00') [ 2803.768757][T16782] XFS (loop0): SB sanity check failed [ 2803.775337][T16780] XFS (loop3): SB sanity check failed [ 2803.784184][T16782] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2803.786431][T16780] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2803.799554][T16782] XFS (loop0): Unmount and run xfs_repair [ 2803.815577][T16782] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2803.824368][T16792] XFS (loop2): SB sanity check failed [ 2803.829925][T16792] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2803.842912][T16782] 00000000: 58 46 53 42 00 00 10 00 00 00 ff ff ff fb 10 00 XFSB............ [ 2803.852324][T16782] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2803.860978][T16792] XFS (loop2): Unmount and run xfs_repair [ 2803.862061][T16782] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2803.876477][T16782] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2803.879507][T16792] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2803.885616][T16782] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2803.902256][T16782] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2803.912167][T16782] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2803.922560][T16782] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2803.949760][T16792] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 80 80 00 XFSB............ [ 2803.958803][T16780] XFS (loop3): Unmount and run xfs_repair 01:19:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0xfffffff0}, 0x0) [ 2803.986475][T16780] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2804.024760][T16792] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2804.037118][T16780] 00000000: 58 46 53 42 00 00 10 00 00 00 ff ff ff f6 10 00 XFSB............ [ 2804.075638][T16780] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2804.089394][T16792] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2804.111883][T16780] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 01:19:31 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000fffffdfc100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2804.139708][T16792] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2804.148856][T16792] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2804.161164][T16792] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2804.178388][T16780] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2804.181902][T16792] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 01:19:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x40030000000000}, 0x0) [ 2804.243373][T16780] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2804.254875][T16792] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2804.315080][T16780] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2804.324565][T16780] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 01:19:31 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', 0x0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2804.387198][T16780] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2804.417004][ T3383] XFS (loop0): SB sanity check failed [ 2804.422512][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2804.471239][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2804.486896][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2804.508746][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 ff ff fd fc 10 00 XFSB............ 01:19:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x100000000000000}, 0x0) [ 2804.517811][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2804.526930][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2804.539694][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2804.564933][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2804.574169][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2804.583226][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2804.594115][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2804.605482][ T3383] XFS (loop2): SB sanity check failed [ 2804.611394][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2804.624024][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2804.630075][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2804.637727][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 80 80 00 XFSB............ [ 2804.647021][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2804.656323][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2804.665460][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2804.675227][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2804.684540][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2804.693657][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2804.702932][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x200000000000000}, 0x0) 01:19:32 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000001b30000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2804.836308][T16926] XFS (loop0): SB sanity check failed [ 2804.844865][T16926] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2804.870859][T16926] XFS (loop0): Unmount and run xfs_repair 01:19:32 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2804.883653][T16926] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2804.891992][T16926] 00000000: 58 46 53 42 00 00 10 00 00 00 ff ff fd fc 10 00 XFSB............ [ 2804.901462][T16926] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2804.910617][T16926] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2804.927399][T16926] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2804.938726][T16926] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2804.960852][T16926] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2804.970042][T16926] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 01:19:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000080)={0x2a, 0x29, 0x2, {0x5, [{{0x10, 0x1, 0x2}, 0x8, 0x9, 0x7, './file0'}]}}, 0x2a) [ 2804.991197][T16926] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2805.064325][T16965] XFS (loop2): SB sanity check failed [ 2805.070038][T16965] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:19:32 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000fffffdfd100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2805.096731][T16977] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2805.110864][T16965] XFS (loop2): Unmount and run xfs_repair [ 2805.149601][T16965] XFS (loop2): First 128 bytes of corrupted metadata buffer: 01:19:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x140400c4}, 0x4000) 01:19:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x300000000000000}, 0x0) [ 2805.200000][T16965] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 01 b3 00 XFSB............ [ 2805.295420][T17087] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2805.309365][T16965] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:32 executing program 4: syz_open_dev$dri(&(0x7f0000000f40)='/dev/dri/card#\x00', 0x200, 0x10120) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") sendmsg$nl_crypto(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@del={0xe8, 0x11, 0x4, 0x70bd29, 0x25dfdbff, {{'sha512-avx\x00'}, [], [], 0x6400}, [{0x8, 0x1, 0x9}]}, 0xe8}}, 0x40) r2 = dup(r0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) fspick(r7, &(0x7f0000000f00)='./file0\x00', 0x0) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000ec0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000480)={0x9e0, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x9bc, 0x8, 0x0, 0x1, [{0x604, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ALLOWEDIPS={0x578, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0xf}}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @local}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x13}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="364755084ce5b42b9d545e3b168a510f"}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x29}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x27}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x15}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x401}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast2}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @loopback, 0x400}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "18c87f90c0a0dd28424ada590cb7fe4e2b6608f55c9cfbb8d83481883c65cf24"}]}, {0x330, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x30c, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0xd}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="7bebc85136c51b66c8ac616d573e0c3c"}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="5cdfee5fccd556c96b19ed949858f5f1"}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x829a, @empty, 0x5e68}}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @rand_addr="970f490a299b6ff615f86219e2bc4d8c", 0x4000}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4041d54ecea906d6cecec02e551046acf4ce9ed0f681b3b06f456194aaa17b24"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b2e795bce816862b97c8a6184c3cac48db8b61352e68cd88f05bd7200f095706"}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x9e0}}, 0x8c0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) [ 2805.366647][T17083] XFS (loop0): SB sanity check failed [ 2805.372442][T17083] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2805.413681][T17083] XFS (loop0): Unmount and run xfs_repair [ 2805.434181][T17083] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2805.446587][T17083] 00000000: 58 46 53 42 00 00 10 00 00 00 ff ff fd fd 10 00 XFSB............ 01:19:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000080)={0x6, 0x7, 0x4, 0x100000, 0x0, {0x0, 0x2710}, {0x1, 0x1, 0x8c, 0x80, 0x6b, 0x3, "5f81541d"}, 0x1, 0x4, @planes=&(0x7f0000000000)={0x8, 0x0, @userptr=0x6c0dc2d6, 0xcd9}, 0x3, 0x0, r5}) ioctl$KVM_GET_API_VERSION(r6, 0xae00, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000002c0)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo`\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1b@\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xec@\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4\xc5\xd6[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xec\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00\x00\x00') [ 2805.470210][T16965] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2805.471258][T17098] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2805.489833][T17083] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2805.569331][T16965] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2805.584761][T17103] hugetlbfs: Unknown parameter 'e%/}iR @Z 懓a6ZAO%$Qw.HOo`_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~@qHm34Ih!(.x㝟}'s $O' [ 2805.605245][T17083] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 01:19:33 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2805.620085][T16965] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2805.707668][T17083] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2805.726405][T16965] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2805.765401][T17083] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2805.776038][T16965] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2805.825611][T17083] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2805.845606][T16965] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2805.879464][T17083] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2805.902166][T17083] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:33 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', 0x0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x400000000000000}, 0x0) 01:19:33 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2806.072414][ T3383] XFS (loop0): SB sanity check failed [ 2806.077972][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2806.135560][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2806.144969][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2806.163817][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 ff ff fd fd 10 00 XFSB............ 01:19:33 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000000ff0000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2806.183189][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2806.203407][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2806.226197][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 01:19:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x700000000000000}, 0x0) [ 2806.265973][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2806.275386][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2806.284464][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2806.293867][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0xa00000000000000}, 0x0) 01:19:34 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000fffffffd100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2806.510601][ T3383] XFS (loop2): SB sanity check failed [ 2806.516619][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2806.536639][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2806.550268][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2806.567092][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 ff 00 XFSB............ [ 2806.576794][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2806.586116][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2806.596042][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2806.605378][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:19:34 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0xe00000000000000}, 0x0) [ 2806.615014][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2806.628966][T17404] XFS (loop0): SB sanity check failed [ 2806.640293][T17404] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2806.661891][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2806.676661][T17404] XFS (loop0): Unmount and run xfs_repair [ 2806.686737][T17404] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2806.687107][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0xf00000000000000}, 0x0) [ 2806.722894][T17404] 00000000: 58 46 53 42 00 00 10 00 00 00 ff ff ff fd 10 00 XFSB............ [ 2806.788443][T17404] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:34 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2806.904805][ T3383] XFS (loop2): SB sanity check failed [ 2806.910490][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2806.910672][T17404] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 01:19:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x6000000000000000}, 0x0) [ 2806.951137][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2806.973372][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2807.003907][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 ff 00 XFSB............ [ 2807.013174][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2807.022437][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2807.031662][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2807.041070][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2807.050270][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2807.059479][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2807.068648][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2807.167446][T17404] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2807.189657][T17404] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2807.201805][T17404] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2807.211267][T17404] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 01:19:34 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', 0x0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:34 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000000003d000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x9effffff00000000}, 0x0) [ 2807.269755][T17404] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0xb830000000000000}, 0x0) 01:19:35 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000000000ff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2807.531453][T17625] XFS (loop2): SB sanity check failed [ 2807.537489][T17625] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2807.550694][T17625] XFS (loop2): Unmount and run xfs_repair [ 2807.557206][T17625] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2807.565268][T17625] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 03 d0 XFSB............ 01:19:35 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', 0x0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2807.574549][T17625] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2807.594685][T17625] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2807.616463][T17625] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2807.693049][T17625] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2807.703393][T17625] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2807.712554][T17625] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2807.721978][T17625] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2807.742238][T17711] XFS (loop0): SB sanity check failed [ 2807.752650][T17711] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2807.780382][T17711] XFS (loop0): Unmount and run xfs_repair 01:19:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0xf0ffffff00000000}, 0x0) [ 2807.786680][T17711] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2807.794263][T17711] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 ff 10 00 XFSB............ [ 2807.804323][T17711] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2807.813932][T17711] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2807.823710][T17711] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2807.833153][T17711] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2807.842493][T17711] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2807.852075][T17711] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2807.861486][T17711] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2807.985329][T17711] XFS (loop0): SB sanity check failed [ 2807.990979][T17711] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:19:35 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000000000004000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2808.026097][T17711] XFS (loop0): Unmount and run xfs_repair [ 2808.047934][T17711] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2808.066527][T17711] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 ff 10 00 XFSB............ [ 2808.075497][T17711] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:35 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', 0x0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2808.162106][T17711] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2808.317719][T17711] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2808.327297][T17711] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2808.336702][T17711] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2808.345759][T17711] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2808.356400][T17711] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0xffffff7f00000000}, 0x0) [ 2808.378284][ T3383] XFS (loop2): SB sanity check failed [ 2808.383884][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2808.444997][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2808.451108][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2808.458774][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 00 00 XFSB............ [ 2808.469690][ T3383] 00000010: 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2808.486362][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2808.495296][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2808.504561][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2808.532127][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:19:36 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:36 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000fff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2808.541564][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2808.551074][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:36 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x2}, 0x0) 01:19:36 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', 0x0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:36 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000000000310000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x3}, 0x0) [ 2808.982159][T18052] XFS (loop0): SB sanity check failed 01:19:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x4}, 0x0) [ 2809.046315][T18052] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:19:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x7}, 0x0) 01:19:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0xa}, 0x0) [ 2809.242933][T18052] XFS (loop0): Unmount and run xfs_repair [ 2809.307929][T18052] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2809.318105][T18052] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 0f ff 10 00 XFSB............ [ 2809.342450][T18052] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0xe}, 0x0) [ 2809.361555][T18052] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2809.371906][T18052] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2809.389734][T18052] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2809.404570][T18052] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2809.414283][T18096] XFS (loop2): SB sanity check failed [ 2809.421372][T18096] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2809.439027][T18096] XFS (loop2): Unmount and run xfs_repair [ 2809.445015][T18052] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2809.454606][T18096] XFS (loop2): First 128 bytes of corrupted metadata buffer: 01:19:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0xf}, 0x0) [ 2809.509286][T18052] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2809.529335][T18096] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 00 03 XFSB............ [ 2809.660549][T18096] 00000010: 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2809.741817][T18096] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2809.784214][T18096] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2809.793901][T18096] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2809.803600][T18096] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2809.813064][T18096] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 01:19:37 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', 0x0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:37 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000fffffdff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2809.866736][T18096] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2810.155911][T18442] XFS (loop0): SB sanity check failed [ 2810.162693][T18442] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2810.175605][T18442] XFS (loop0): Unmount and run xfs_repair [ 2810.182111][T18442] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2810.193188][T18442] 00000000: 58 46 53 42 00 00 10 00 00 00 ff ff fd ff 10 00 XFSB............ [ 2810.202841][T18442] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2810.212188][T18442] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2810.221571][T18442] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2810.230916][T18442] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2810.240218][T18442] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2810.249580][T18442] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2810.259132][T18442] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x60}, 0x0) 01:19:37 executing program 3: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000000003d000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:37 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:37 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000000004048c000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2810.410170][T18442] XFS (loop0): SB sanity check failed [ 2810.415908][T18442] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2810.459064][T18442] XFS (loop0): Unmount and run xfs_repair [ 2810.466399][T18442] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2810.493070][T18442] 00000000: 58 46 53 42 00 00 10 00 00 00 ff ff fd ff 10 00 XFSB............ [ 2810.497124][T18567] XFS (loop2): SB sanity check failed [ 2810.516922][T18567] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2810.534272][ T3383] XFS (loop3): SB sanity check failed [ 2810.536356][T18567] XFS (loop2): Unmount and run xfs_repair [ 2810.540257][ T3383] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2810.559075][ T3383] XFS (loop3): Unmount and run xfs_repair [ 2810.565105][ T3383] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2810.573440][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 03 d0 XFSB............ [ 2810.576103][T18567] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2810.582971][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2810.595605][T18442] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2810.599602][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 01:19:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x300}, 0x0) [ 2810.617161][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2810.626301][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2810.635880][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2810.645225][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2810.654463][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2810.704317][T18442] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2810.714106][T18567] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 04 04 XFSB............ 01:19:38 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', 0x0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:38 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2810.856688][T18567] 00000010: 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2810.866170][T18442] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2810.892754][T18442] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2810.909353][T18567] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2810.941117][T18442] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2810.949048][T18567] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2810.976059][T18442] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 01:19:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x700}, 0x0) [ 2811.023952][T18442] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2811.086441][T18567] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2811.095344][T18567] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:19:38 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000f9fdffff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0xa00}, 0x0) [ 2811.330296][T18567] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2811.427665][T18567] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2811.549734][ T3383] XFS (loop0): SB sanity check failed [ 2811.555347][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2811.611994][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2811.632410][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: 01:19:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0xe00}, 0x0) [ 2811.657952][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 f9 fd ff ff 10 00 XFSB............ [ 2811.667468][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2811.686891][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2811.695951][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2811.708568][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2811.723327][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2811.740117][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 01:19:39 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000000040490000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0xf00}, 0x0) [ 2811.760137][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x30b8}, 0x0) [ 2812.108764][ T3383] XFS (loop2): SB sanity check failed [ 2812.114420][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2812.154419][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2812.169561][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2812.177549][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 04 04 XFSB............ [ 2812.186712][ T3383] 00000010: 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2812.195595][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2812.205029][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2812.214371][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2812.223681][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2812.232946][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2812.242227][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2812.403830][T18721] XFS (loop2): SB sanity check failed [ 2812.414885][T18721] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:19:40 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:40 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000fcfdffff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x6000}, 0x0) [ 2812.491895][T18721] XFS (loop2): Unmount and run xfs_repair 01:19:40 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', 0x0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:40 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2812.611102][T18721] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2812.611416][T18866] XFS (loop0): SB sanity check failed [ 2812.639759][T18866] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2812.671093][T18721] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 04 04 XFSB............ [ 2812.673802][T18866] XFS (loop0): Unmount and run xfs_repair [ 2812.680430][T18721] 00000010: 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2812.692951][T18866] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2812.695182][T18721] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2812.711710][T18721] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 01:19:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0xb830}, 0x0) [ 2812.720791][T18721] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2812.729852][T18721] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2812.735168][T18866] 00000000: 58 46 53 42 00 00 10 00 00 00 fc fd ff ff 10 00 XFSB............ [ 2812.738990][T18721] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2812.757155][T18721] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2812.791130][T18866] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2812.806167][T18866] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2812.815949][T18866] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2812.825598][T18866] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:19:40 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000000040494000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2812.837177][T18866] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2812.852513][T18866] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2812.870493][T18866] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x34000}, 0x0) [ 2813.090190][ T3383] XFS (loop0): SB sanity check failed [ 2813.095921][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2813.144623][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2813.168841][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2813.184707][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 fc fd ff ff 10 00 XFSB............ [ 2813.231089][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2813.267733][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2813.280024][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2813.334396][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2813.372805][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:19:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x400300}, 0x0) [ 2813.396504][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2813.405512][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2813.416438][ T3383] XFS (loop2): SB sanity check failed [ 2813.422088][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2813.434730][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2813.440835][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2813.448615][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 04 04 XFSB............ [ 2813.457855][ T3383] 00000010: 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2813.467206][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2813.476661][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2813.485712][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2813.495162][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2813.504507][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2813.513840][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:41 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000fdfdffff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:41 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x1000000}, 0x0) [ 2813.634345][T24031] XFS (loop2): SB sanity check failed [ 2813.639929][T24031] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2813.652904][T24031] XFS (loop2): Unmount and run xfs_repair [ 2813.658823][T24031] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2813.666519][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 04 04 XFSB............ [ 2813.692070][T24031] 00000010: 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2813.721562][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2813.775540][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2813.797084][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2813.817902][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2813.837103][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2813.847711][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2813.919517][T24031] XFS (loop0): SB sanity check failed [ 2813.925222][T24031] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2813.956561][T24031] XFS (loop0): Unmount and run xfs_repair [ 2813.970480][T24031] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2813.987434][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 fd fd ff ff 10 00 XFSB............ [ 2814.006681][T24031] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2814.026139][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2814.045602][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2814.057817][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2814.068100][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2814.077297][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2814.086733][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:41 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:41 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000000040498000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x2000000}, 0x0) [ 2814.292156][T19027] XFS (loop0): SB sanity check failed [ 2814.298333][T19027] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2814.315745][T19027] XFS (loop0): Unmount and run xfs_repair [ 2814.326021][T19027] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2814.336684][T19027] 00000000: 58 46 53 42 00 00 10 00 00 00 fd fd ff ff 10 00 XFSB............ [ 2814.345794][T19027] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2814.358528][T19027] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2814.368523][T19027] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2814.379874][T19027] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2814.390257][T19027] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2814.399542][T19027] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2814.408664][T19027] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:42 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000fffdffff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2814.480061][T24031] XFS (loop2): SB sanity check failed [ 2814.485617][T24031] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2814.513797][T24031] XFS (loop2): Unmount and run xfs_repair [ 2814.526434][T24031] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2814.542892][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 04 04 XFSB............ [ 2814.553407][T24031] 00000010: 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2814.562662][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2814.571729][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2814.597997][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:19:42 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2814.625949][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2814.643076][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2814.652485][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2814.706885][T19165] XFS (loop0): SB sanity check failed [ 2814.713098][T19165] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2814.726085][T19165] XFS (loop0): Unmount and run xfs_repair [ 2814.732334][T19165] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2814.740263][T19165] 00000000: 58 46 53 42 00 00 10 00 00 00 ff fd ff ff 10 00 XFSB............ 01:19:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x3000000}, 0x0) [ 2814.749479][T19165] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2814.758668][T19165] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2814.768634][T19165] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2814.777882][T19165] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2814.787481][T19165] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:19:42 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000000004049c000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2814.808268][T19165] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2814.820420][T19165] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:42 executing program 4: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000fdfdffff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2814.944294][ T3383] XFS (loop0): SB sanity check failed [ 2814.949996][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:19:42 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2815.102917][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2815.129443][T19214] XFS (loop4): SB sanity check failed [ 2815.135215][T19214] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2815.180148][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2815.186902][T19214] XFS (loop4): Unmount and run xfs_repair [ 2815.193914][ T7889] XFS (loop2): SB sanity check failed [ 2815.200030][ T7889] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2815.206375][T19214] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2815.213043][ T7889] XFS (loop2): Unmount and run xfs_repair [ 2815.230702][ T7889] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2815.250757][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 04 04 XFSB............ [ 2815.273921][ T7889] 00000010: 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2815.291388][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 ff fd ff ff 10 00 XFSB............ [ 2815.302978][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2815.318941][T19214] 00000000: 58 46 53 42 00 00 10 00 00 00 fd fd ff ff 10 00 XFSB............ [ 2815.323197][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2815.346538][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2815.355790][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2815.365442][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 01:19:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x4000000}, 0x0) [ 2815.371168][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2815.375168][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:43 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000000000000404a0000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2815.446736][T19214] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2815.455988][T19214] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2815.520870][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2815.532077][T19214] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 01:19:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x7000000}, 0x0) [ 2815.586396][T19214] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2815.590425][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2815.604005][T19214] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2815.649008][T19214] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2815.666736][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2815.683979][T19214] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:43 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2815.720259][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2815.720281][ T7889] XFS (loop2): SB sanity check failed [ 2815.747637][ T7889] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2815.766578][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2815.798212][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2815.805311][ T7889] XFS (loop2): Unmount and run xfs_repair [ 2815.813753][ T7889] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2815.830067][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 04 04 XFSB............ 01:19:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0xa000000}, 0x0) [ 2815.842494][ T7889] 00000010: a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2815.852420][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2815.864545][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2815.874463][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2815.883752][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2815.893026][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2815.902611][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:43 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:43 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000007fffffff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:43 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000000000404b46eae77f00000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0xe000000}, 0x0) [ 2816.385206][T19350] XFS (loop0): SB sanity check failed [ 2816.395222][T19350] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2816.426357][T19350] XFS (loop0): Unmount and run xfs_repair [ 2816.432269][T19350] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2816.433886][T19348] XFS (loop2): SB sanity check failed [ 2816.446454][T19348] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2816.473782][T19348] XFS (loop2): Unmount and run xfs_repair [ 2816.481272][T19350] 00000000: 58 46 53 42 00 00 10 00 00 00 7f ff ff ff 10 00 XFSB............ [ 2816.492449][T19348] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2816.500471][T19350] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2816.512099][T19348] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 40 4b 46 XFSB.........@KF 01:19:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0xf000000}, 0x0) [ 2816.542289][T19348] 00000010: ea e7 7f 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2816.586378][T19350] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2816.603862][T19350] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2816.613106][T19348] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2816.655187][T19348] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2816.675016][T19350] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2816.707824][T19348] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2816.739597][T19350] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:19:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x60000000}, 0x0) [ 2816.759743][T19348] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2816.782395][T19350] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2816.802569][T19348] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2816.831031][T19350] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2816.859754][T19348] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:44 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x9effffff}, 0x0) [ 2816.991873][ T7889] XFS (loop0): SB sanity check failed [ 2817.001014][ T7889] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2817.029242][ T7889] XFS (loop0): Unmount and run xfs_repair [ 2817.037510][ T7889] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2817.045457][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 7f ff ff ff 10 00 XFSB............ [ 2817.082285][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2817.105587][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2817.129539][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2817.145547][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2817.171534][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:19:44 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000000020000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2817.181032][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2817.190749][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0xb8300000}, 0x0) [ 2817.487225][T19399] XFS (loop2): SB sanity check failed [ 2817.492981][T19399] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2817.552590][T19399] XFS (loop2): Unmount and run xfs_repair [ 2817.576609][T19399] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2817.584976][T19399] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 02 00 XFSB............ [ 2817.594754][T19399] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2817.612082][T19399] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2817.633967][T19399] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2817.648285][T19399] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2817.657741][T19399] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2817.667110][T19399] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2817.676743][T19399] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2817.862138][T19399] XFS (loop2): SB sanity check failed [ 2817.868584][T19399] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2817.909379][T19399] XFS (loop2): Unmount and run xfs_repair [ 2817.919114][T19399] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2817.929828][T19399] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 02 00 XFSB............ [ 2817.939224][T19399] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2817.951067][T19399] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2817.960550][T19399] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2817.969787][T19399] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2817.979720][T19399] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2817.989097][T19399] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2817.998210][T19399] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:45 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:45 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000008cffffff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:45 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0xf0ffffff}, 0x0) 01:19:45 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x20000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:45 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000000000000a0000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 2818.386039][ T7889] XFS (loop2): SB sanity check failed [ 2818.393012][ T7889] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2818.406056][ T7889] XFS (loop2): Unmount and run xfs_repair [ 2818.420654][ T7889] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2818.436500][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 0a 00 XFSB............ [ 2818.456571][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2818.478055][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 01:19:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0xffffff9e}, 0x0) [ 2818.499672][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2818.520174][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2818.541646][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2818.563323][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2818.583356][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2818.598377][ T7889] XFS (loop0): SB sanity check failed [ 2818.604076][ T7889] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2818.617643][ T7889] XFS (loop0): Unmount and run xfs_repair [ 2818.623664][ T7889] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2818.631609][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 8c ff ff ff 10 00 XFSB............ [ 2818.641008][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2818.650493][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2818.660053][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2818.669495][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2818.678929][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2818.688325][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 01:19:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0xfffffff0}, 0x0) [ 2818.697859][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:46 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000000000000f0000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:46 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000097ffffff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x40030000000000}, 0x0) [ 2819.095816][ T7889] XFS (loop2): SB sanity check failed [ 2819.101756][ T7889] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2819.136622][ T7889] XFS (loop2): Unmount and run xfs_repair [ 2819.143928][ T7889] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2819.166344][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 0f 00 XFSB............ [ 2819.188319][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2819.207220][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2819.217285][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2819.226464][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2819.236428][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2819.245579][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2819.254985][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2819.277238][T19492] XFS (loop0): SB sanity check failed [ 2819.305944][T19492] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2819.370854][T19492] XFS (loop0): Unmount and run xfs_repair [ 2819.377688][T19492] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2819.385352][T19492] 00000000: 58 46 53 42 00 00 10 00 00 00 97 ff ff ff 10 00 XFSB............ [ 2819.395989][T19492] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2819.417511][T19492] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2819.436680][T19492] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2819.451504][T19492] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2819.470753][T19492] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2819.509170][T19492] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2819.538324][T19492] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2819.709790][ T7889] XFS (loop0): SB sanity check failed [ 2819.715336][ T7889] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2819.753315][ T7889] XFS (loop0): Unmount and run xfs_repair [ 2819.760651][ T7889] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2819.770628][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 97 ff ff ff 10 00 XFSB............ [ 2819.779691][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2819.792922][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2819.801988][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2819.813563][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2819.822694][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2819.834522][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2819.843721][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:47 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x100000000000000}, 0x0) 01:19:47 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:47 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000000110000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:47 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000f5ffffff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:47 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x20000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x200000000000000}, 0x0) [ 2820.403058][T19528] XFS (loop2): SB sanity check failed [ 2820.409444][T19528] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2820.422061][ T7889] XFS (loop0): SB sanity check failed [ 2820.432048][ T7889] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:19:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x300000000000000}, 0x0) [ 2820.459919][ T7889] XFS (loop0): Unmount and run xfs_repair [ 2820.466443][T19528] XFS (loop2): Unmount and run xfs_repair [ 2820.471438][ T7889] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2820.484926][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 f5 ff ff ff 10 00 XFSB............ [ 2820.490474][T19528] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2820.499523][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2820.518516][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2820.538788][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2820.547921][T19528] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 11 00 XFSB............ 01:19:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x400000000000000}, 0x0) [ 2820.561649][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2820.578492][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2820.592932][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2820.602320][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2820.623290][T19528] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2820.639372][T19528] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2820.666929][T19528] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2820.729048][T19528] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2820.746783][T19530] XFS (loop0): SB sanity check failed [ 2820.752245][T19530] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2820.757683][T19528] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:19:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x700000000000000}, 0x0) [ 2820.786519][T19528] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2820.812448][T19528] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2820.837113][T19530] XFS (loop0): Unmount and run xfs_repair [ 2820.842905][T19530] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2820.876492][T19530] 00000000: 58 46 53 42 00 00 10 00 00 00 f5 ff ff ff 10 00 XFSB............ [ 2820.899008][T19530] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2820.938861][T19530] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 01:19:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0xa00000000000000}, 0x0) [ 2820.959402][T19530] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2820.981573][T19530] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2820.993906][T19530] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2821.034408][T19528] XFS (loop2): SB sanity check failed [ 2821.049294][T19528] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2821.069206][T19528] XFS (loop2): Unmount and run xfs_repair [ 2821.084289][T19528] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2821.113611][T19530] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2821.124255][T19528] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 11 00 XFSB............ 01:19:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0xe00000000000000}, 0x0) [ 2821.188596][T19530] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2821.201712][T19528] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2821.227630][T19528] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2821.262894][T19528] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2821.282474][T19528] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2821.291721][T19528] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:19:48 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x20000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0xf00000000000000}, 0x0) [ 2821.380458][T19528] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2821.418519][T19528] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:49 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x20000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:49 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000f6ffffff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x6000000000000000}, 0x0) 01:19:49 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000000140000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:49 executing program 3: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000097ffffff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:49 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x20000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2822.319289][ T7889] XFS (loop3): SB sanity check failed [ 2822.325134][ T7889] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2822.361938][ T7889] XFS (loop3): Unmount and run xfs_repair [ 2822.368487][ T7889] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2822.376575][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 97 ff ff ff 10 00 XFSB............ [ 2822.385744][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2822.395191][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 01:19:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x9effffff00000000}, 0x0) [ 2822.404821][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2822.414091][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2822.424305][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2822.433787][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2822.443446][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2822.454906][ T7889] XFS (loop0): SB sanity check failed [ 2822.466764][ T7889] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2822.482926][ T7889] XFS (loop0): Unmount and run xfs_repair [ 2822.489146][ T7889] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2822.496926][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 f6 ff ff ff 10 00 XFSB............ [ 2822.506056][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2822.515502][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2822.524765][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2822.534111][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2822.543622][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2822.553399][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2822.562915][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2822.572115][ T7889] XFS (loop2): SB sanity check failed [ 2822.578889][ T7889] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2822.592607][ T7889] XFS (loop2): Unmount and run xfs_repair [ 2822.599099][ T7889] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2822.606958][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 14 00 XFSB............ [ 2822.618095][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2822.627700][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2822.637066][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2822.646606][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2822.655767][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2822.665331][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2822.674828][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0xb830000000000000}, 0x0) 01:19:50 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x20000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 01:19:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) [ 2822.977832][ T7889] XFS (loop2): SB sanity check failed [ 2822.983548][ T7889] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2822.997021][ T7889] XFS (loop2): Unmount and run xfs_repair [ 2823.003469][ T7889] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2823.011675][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 14 00 XFSB............ [ 2823.021297][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2823.030991][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2823.061700][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 01:19:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) [ 2823.082348][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2823.103071][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2823.122943][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2823.139666][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:51 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x20000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 01:19:51 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000fbffffff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:51 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000000000002f0000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:51 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x0, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:51 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x20000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x3}, 0x0) [ 2824.103082][T19683] XFS (loop2): SB sanity check failed [ 2824.109122][T19684] XFS (loop0): SB sanity check failed [ 2824.115050][T19684] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2824.128085][T19683] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2824.139021][T19684] XFS (loop0): Unmount and run xfs_repair [ 2824.140809][T19683] XFS (loop2): Unmount and run xfs_repair [ 2824.153264][T19683] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2824.161227][T19683] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 2f 00 XFSB........../. [ 2824.171183][T19684] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2824.180706][T19683] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2824.190318][T19683] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2824.199727][T19683] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2824.209583][T19683] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2824.219654][T19683] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2824.229491][T19683] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2824.239622][T19683] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 01:19:51 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000000000003d0000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2824.253182][T19684] 00000000: 58 46 53 42 00 00 10 00 00 00 fb ff ff ff 10 00 XFSB............ [ 2824.307158][T19684] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2824.331230][T19684] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2824.349751][T19684] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2824.367888][T19684] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2824.412948][T19684] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2824.438202][ T7889] XFS (loop2): SB sanity check failed [ 2824.443733][ T7889] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2824.471109][ T7889] XFS (loop2): Unmount and run xfs_repair [ 2824.483583][ T7889] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2824.491372][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 3d 00 XFSB..........=. [ 2824.503784][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2824.524071][T19684] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2824.525168][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2824.554199][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2824.563862][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2824.573367][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2824.582827][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2824.592207][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2824.626521][T19684] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x7}, 0x0) 01:19:52 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000000000005d0000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2824.837007][ T7889] XFS (loop0): SB sanity check failed [ 2824.842460][ T7889] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2824.899088][ T7889] XFS (loop0): Unmount and run xfs_repair [ 2824.910161][ T7889] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2824.922040][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 fb ff ff ff 10 00 XFSB............ [ 2824.931984][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2824.941800][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2824.951274][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2824.961160][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2824.971432][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2824.980890][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2824.990581][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2825.029726][T19730] XFS (loop2): SB sanity check failed [ 2825.035482][T19730] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:19:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xa}, 0x0) [ 2825.072194][T19730] XFS (loop2): Unmount and run xfs_repair [ 2825.131473][T19730] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2825.154042][T19730] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 5d 00 XFSB..........]. [ 2825.165669][T19730] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2825.201694][T19730] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2825.285215][T19730] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2825.365549][T19730] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2825.424433][T19730] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2825.485501][T19730] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2825.500446][T19730] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:53 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x0, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:53 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000fdffffff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xe}, 0x0) 01:19:53 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x0, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2825.666863][T19730] XFS (loop2): SB sanity check failed [ 2825.676782][T19730] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2825.692472][T19730] XFS (loop2): Unmount and run xfs_repair [ 2825.824116][T19730] XFS (loop2): First 128 bytes of corrupted metadata buffer: 01:19:53 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x20000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2825.879795][T19730] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 5d 00 XFSB..........]. [ 2825.895820][T19768] XFS (loop0): SB sanity check failed [ 2825.919638][T19768] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:19:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xf}, 0x0) [ 2826.005714][T19730] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2826.011980][T19768] XFS (loop0): Unmount and run xfs_repair [ 2826.041914][T19768] XFS (loop0): First 128 bytes of corrupted metadata buffer: 01:19:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60}, 0x0) [ 2826.059220][T19768] 00000000: 58 46 53 42 00 00 10 00 00 00 fd ff ff ff 10 00 XFSB............ [ 2826.094036][T19768] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2826.136331][T19730] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2826.148722][T19730] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2826.159205][T19768] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2826.170016][T19730] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2826.189268][T19730] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2826.204732][T19768] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2826.212849][T19730] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2826.217409][T19768] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:19:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x300}, 0x0) [ 2826.231854][T19730] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2826.245261][T19768] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2826.256192][T19768] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2826.268754][T19768] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x700}, 0x0) 01:19:53 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x0, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:53 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000000b30100000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xa00}, 0x0) 01:19:54 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="584653420000100000000000004c010000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2826.736474][T24031] XFS (loop2): SB sanity check failed [ 2826.742219][T24031] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2826.767794][T24031] XFS (loop2): Unmount and run xfs_repair [ 2826.773726][T24031] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2826.821802][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 b3 01 XFSB............ [ 2826.859468][T24031] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xe00}, 0x0) [ 2826.947421][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2827.007691][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2827.069814][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2827.091669][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2827.122231][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2827.140686][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2827.151503][T24031] XFS (loop0): SB sanity check failed [ 2827.157771][T24031] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2827.170733][T24031] XFS (loop0): Unmount and run xfs_repair [ 2827.176885][T24031] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2827.184627][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 4c 01 00 XFSB.........L.. [ 2827.193820][T24031] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2827.203214][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2827.213758][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ 01:19:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 2827.222876][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2827.231961][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2827.241037][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2827.252637][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2827.354750][T24031] XFS (loop0): SB sanity check failed [ 2827.360469][T24031] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2827.382542][T24031] XFS (loop0): Unmount and run xfs_repair [ 2827.392092][T24031] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2827.399698][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 4c 01 00 XFSB.........L.. [ 2827.411697][T24031] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2827.421410][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2827.433330][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2827.442494][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2827.453919][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2827.463541][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2827.475332][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2827.489254][T24031] XFS (loop2): SB sanity check failed [ 2827.494837][T24031] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2827.509985][T24031] XFS (loop2): Unmount and run xfs_repair [ 2827.515887][T24031] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2827.523462][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 b3 01 XFSB............ [ 2827.535196][T24031] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2827.549134][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2827.558417][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2827.569985][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2827.579099][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2827.590620][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 01:19:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x30b8}, 0x0) [ 2827.600064][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:55 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x20000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:55 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x0, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 01:19:55 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000000000b00000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:55 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000000000000a0000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2827.966627][T24031] XFS (loop0): SB sanity check failed [ 2827.980866][T24031] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2828.020806][T24031] XFS (loop0): Unmount and run xfs_repair [ 2828.033276][T24031] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2828.058568][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 0a 00 XFSB............ [ 2828.077607][T24031] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2828.103743][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2828.125713][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2828.135044][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2828.144390][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2828.153728][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2828.162915][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2828.174528][T24031] XFS (loop2): SB sanity check failed [ 2828.180555][T24031] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2828.193483][T24031] XFS (loop2): Unmount and run xfs_repair [ 2828.199785][T24031] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2828.207451][T24031] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 00 0b XFSB............ [ 2828.216972][T24031] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2828.226349][T24031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2828.235608][T24031] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2828.244624][T24031] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2828.254087][T24031] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2828.263115][T24031] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2828.272491][T24031] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2828.334533][T19957] XFS (loop0): SB sanity check failed [ 2828.345190][T19957] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2828.358788][T19957] XFS (loop0): Unmount and run xfs_repair [ 2828.364792][T19957] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2828.372673][T19957] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 0a 00 XFSB............ [ 2828.382367][T19957] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2828.391851][T19957] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2828.401232][T19957] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2828.420176][T19957] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2828.430416][T19957] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2828.439905][T19957] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2828.456497][T19957] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:56 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x0, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xb830}, 0x0) 01:19:56 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000000014c00000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:56 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000000000000f0000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:56 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2828.990469][ T3383] XFS (loop2): SB sanity check failed [ 2828.996060][ T3383] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2829.011662][ T3383] XFS (loop2): Unmount and run xfs_repair [ 2829.026614][ T3383] XFS (loop2): First 128 bytes of corrupted metadata buffer: 01:19:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x34000}, 0x0) [ 2829.035460][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 01 4c XFSB...........L [ 2829.061539][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2829.074924][T20012] XFS (loop0): SB sanity check failed [ 2829.081710][T20012] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2829.094969][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2829.104205][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2829.113462][T20012] XFS (loop0): Unmount and run xfs_repair [ 2829.119799][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2829.129116][T20012] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2829.137104][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2829.146074][T20012] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 0f 00 XFSB............ [ 2829.155373][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2829.164810][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2829.174226][T20012] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2829.185068][T20012] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2829.194436][T20012] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2829.203689][T20012] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2829.213139][T20012] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2829.223034][T20012] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2829.232353][T20012] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 01:19:57 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:57 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000000808000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:57 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000020000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 01:19:57 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2830.045640][ T3383] XFS (loop0): SB sanity check failed [ 2830.054413][T20060] XFS (loop2): SB sanity check failed [ 2830.060196][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2830.074402][T20060] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2830.087466][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2830.093970][T20060] XFS (loop2): Unmount and run xfs_repair [ 2830.100389][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2830.108465][T20060] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2830.117325][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 02 00 00 10 00 XFSB............ [ 2830.126961][T20060] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 80 80 XFSB............ [ 2830.136322][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2830.145774][T20060] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2830.155233][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2830.164758][T20060] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2830.174428][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2830.183992][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2830.193391][T20060] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2830.202773][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2830.212057][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2830.214665][T20060] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2830.221325][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2830.261048][T20060] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2830.292971][T20060] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2830.310347][ T3383] XFS (loop0): SB sanity check failed [ 2830.314011][T20060] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2830.316190][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2830.339777][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2830.345962][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2830.354155][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 02 00 00 10 00 XFSB............ [ 2830.363725][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2830.373287][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2830.382871][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2830.392297][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2830.401975][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2830.411398][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2830.420921][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2830.576494][T20060] XFS (loop2): SB sanity check failed [ 2830.586495][T20060] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2830.622887][T20060] XFS (loop2): Unmount and run xfs_repair [ 2830.628868][T20060] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2830.636437][T20060] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 80 80 XFSB............ [ 2830.645497][T20060] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2830.654528][T20060] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2830.673164][T20060] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2830.682928][T20060] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2830.691984][T20060] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2830.701249][T20060] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2830.711046][T20060] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:58 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 01:19:58 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000030000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:58 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000000ffffffffffffffff00000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:19:58 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:19:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) [ 2831.311886][ T7889] XFS (loop0): SB sanity check failed [ 2831.324709][ T7889] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2831.355614][ T7889] XFS (loop0): Unmount and run xfs_repair [ 2831.368811][ T7889] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2831.385835][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 03 00 00 10 00 XFSB............ 01:19:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 2831.405254][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2831.415974][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2831.444731][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2831.465949][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2831.488291][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2831.508932][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2831.528796][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2831.549011][ T7889] XFS (loop2): SB sanity check failed [ 2831.555928][ T7889] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2831.568641][ T7889] XFS (loop2): Unmount and run xfs_repair [ 2831.574579][ T7889] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2831.582345][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 ff ff XFSB............ [ 2831.591535][ T7889] 00000010: ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 ................ [ 2831.600933][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2831.610196][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2831.621916][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2831.631416][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2831.640751][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2831.650104][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2831.664521][ T7889] XFS (loop0): SB sanity check failed [ 2831.670300][ T7889] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2831.682983][ T7889] XFS (loop0): Unmount and run xfs_repair [ 2831.689298][ T7889] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2831.697032][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 03 00 00 10 00 XFSB............ [ 2831.706578][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2831.715779][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2831.725160][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2831.734470][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2831.743687][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2831.752922][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2831.762110][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 01:19:59 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2831.884445][ T7889] XFS (loop2): SB sanity check failed [ 2831.890027][ T7889] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2831.918981][ T7889] XFS (loop2): Unmount and run xfs_repair [ 2831.924900][ T7889] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2831.932716][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 ff ff XFSB............ [ 2831.941808][ T7889] 00000010: ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 ................ [ 2831.952380][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2831.961494][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2831.970843][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:19:59 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000040000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2831.979941][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2831.989022][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2831.998237][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:19:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) 01:19:59 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000000100200000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2832.240129][T20165] XFS (loop0): SB sanity check failed [ 2832.249624][T20165] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2832.265248][T20165] XFS (loop0): Unmount and run xfs_repair [ 2832.281350][T20165] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2832.289160][T20165] 00000000: 58 46 53 42 00 00 10 00 00 00 00 04 00 00 10 00 XFSB............ [ 2832.301765][T20165] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2832.316497][T20165] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2832.325719][T20165] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2832.335322][T20165] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2832.345044][T20165] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2832.354413][T20165] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2832.364179][T20165] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2832.375594][T20175] XFS (loop2): SB sanity check failed [ 2832.382653][T20175] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2832.395999][T20175] XFS (loop2): Unmount and run xfs_repair [ 2832.413160][T20175] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2832.428629][T20175] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 02 XFSB............ [ 2832.444605][T20175] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2832.454530][T20175] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2832.463794][T20175] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2832.473322][T20175] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2832.482517][T20175] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2832.491713][T20175] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2832.500955][T20175] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:20:00 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:20:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 01:20:00 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000050000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:20:00 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000000100300000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:20:00 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2833.138961][T20207] XFS (loop2): SB sanity check failed [ 2833.146198][ T7889] XFS (loop0): SB sanity check failed [ 2833.151970][ T7889] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2833.168760][T20207] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2833.173021][ T7889] XFS (loop0): Unmount and run xfs_repair [ 2833.187413][ T7889] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2833.195051][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 05 00 00 10 00 XFSB............ [ 2833.204252][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2833.224699][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2833.234023][T20207] XFS (loop2): Unmount and run xfs_repair [ 2833.242160][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2833.251398][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2833.261011][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2833.270523][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2833.279816][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:20:00 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2833.283149][T20207] XFS (loop2): First 128 bytes of corrupted metadata buffer: 01:20:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) [ 2833.411053][ T7889] XFS (loop0): SB sanity check failed [ 2833.416741][ T7889] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2833.441548][T20207] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 03 XFSB............ [ 2833.469347][ T7889] XFS (loop0): Unmount and run xfs_repair [ 2833.475579][T20207] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2833.483180][ T7889] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2833.507446][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 05 00 00 10 00 XFSB............ [ 2833.526869][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2833.547218][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2833.562797][T20207] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 01:20:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) [ 2833.567514][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2833.594148][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2833.603384][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2833.612508][T20207] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2833.612603][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2833.630581][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2833.663059][T20207] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:20:01 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000060000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2833.675117][T20207] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 01:20:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) [ 2833.728886][T20207] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2833.753249][T20207] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2833.889519][ T7889] XFS (loop0): SB sanity check failed [ 2833.895328][ T7889] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff 01:20:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xb8300000}, 0x0) [ 2833.947423][ T7889] XFS (loop0): Unmount and run xfs_repair [ 2833.959886][ T7889] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2833.969643][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 06 00 00 10 00 XFSB............ [ 2833.988598][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2834.007538][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2834.026874][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2834.046050][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:20:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) [ 2834.065481][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2834.079500][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2834.103144][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:20:01 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:20:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 01:20:01 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000000100400000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:20:01 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) [ 2834.532590][T20289] XFS (loop2): SB sanity check failed [ 2834.538546][T20289] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2834.554563][T20289] XFS (loop2): Unmount and run xfs_repair [ 2834.561442][T20289] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2834.569082][T20289] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 04 XFSB............ [ 2834.582688][T20289] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2834.603196][T20289] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2834.613661][T20289] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2834.622712][T20289] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2834.641133][T20289] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2834.650368][T20289] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2834.659373][T20289] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:20:02 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:20:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 01:20:02 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000070000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2834.761375][T20289] XFS (loop2): SB sanity check failed [ 2834.768188][T20289] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2834.795899][T20289] XFS (loop2): Unmount and run xfs_repair [ 2834.849883][T20289] XFS (loop2): First 128 bytes of corrupted metadata buffer: 01:20:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) [ 2834.949240][T20289] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 04 XFSB............ [ 2834.985809][T20289] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:20:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x2) [ 2835.048742][T20289] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2835.074061][ T3383] XFS (loop0): SB sanity check failed [ 2835.079614][ T3383] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2835.115171][ T3383] XFS (loop0): Unmount and run xfs_repair [ 2835.128123][T20289] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2835.137581][ T3383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2835.165458][ T3383] 00000000: 58 46 53 42 00 00 10 00 00 00 00 07 00 00 10 00 XFSB............ [ 2835.179777][ T3383] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2835.188307][T20289] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2835.188924][ T3383] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2835.206887][ T3383] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2835.216341][ T3383] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2835.225576][ T3383] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2835.234970][ T3383] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2835.244539][ T3383] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2835.287771][T20289] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2835.358638][T20289] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2835.406335][T20289] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:20:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x3) 01:20:03 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:20:03 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000080000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:20:03 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000000100500000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:20:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x4) 01:20:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x7) [ 2835.852713][T20349] XFS (loop0): SB sanity check failed [ 2835.859712][T20349] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2835.880378][T20349] XFS (loop0): Unmount and run xfs_repair [ 2835.886389][T20349] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2835.957687][T20349] 00000000: 58 46 53 42 00 00 10 00 00 00 00 08 00 00 10 00 XFSB............ [ 2835.962918][T20361] XFS (loop2): SB sanity check failed [ 2835.974756][T20361] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2835.993329][T20361] XFS (loop2): Unmount and run xfs_repair [ 2835.995698][T20349] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2836.013276][T20361] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2836.021709][T20361] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 05 XFSB............ [ 2836.036405][T20349] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2836.045559][T20361] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2836.045765][T20349] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2836.058222][T20361] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2836.064847][T20349] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2836.073855][T20361] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2836.083484][T20349] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2836.093423][T20361] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2836.101047][T20349] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2836.114580][T20361] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2836.118828][T20349] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2836.129973][T20361] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2836.144793][T20361] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:20:03 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:20:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0xa) 01:20:04 executing program 2: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0xffff80d6, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000000000100600000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:20:04 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="5846534200001000000000090000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) 01:20:04 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:20:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0xe) [ 2836.722910][T20392] XFS (loop2): SB sanity check failed [ 2836.728581][T20392] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2836.749667][T20392] XFS (loop2): Unmount and run xfs_repair [ 2836.755897][T20392] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2836.755959][ T7889] XFS (loop0): SB sanity check failed [ 2836.769143][T20392] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 06 XFSB............ [ 2836.778293][ T7889] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2836.791274][T20392] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2836.800525][T20392] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2836.810787][ T7889] XFS (loop0): Unmount and run xfs_repair 01:20:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0xf) [ 2836.816819][ T7889] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2836.824669][T20392] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2836.834281][ T7889] 00000000: 58 46 53 42 00 00 10 00 00 00 00 09 00 00 10 00 XFSB............ [ 2836.843873][T20392] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2836.853635][ T7889] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2836.863085][T20392] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2836.872423][ T7889] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2836.881737][T20392] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2836.890989][ T7889] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2836.900336][T20392] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2836.909597][ T7889] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2836.918776][ T7889] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2836.937175][ T7889] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2836.954218][ T7889] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2837.116954][T20401] XFS (loop0): SB sanity check failed [ 2837.122635][T20401] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2837.140693][T20401] XFS (loop0): Unmount and run xfs_repair [ 2837.149848][T20392] XFS (loop2): SB sanity check failed [ 2837.156466][T20392] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2837.169807][T20401] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2837.194372][T20401] 00000000: 58 46 53 42 00 00 10 00 00 00 00 09 00 00 10 00 XFSB............ 01:20:04 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x143000, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) socket$netlink(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000001640)=""/86, 0x56}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x7, &(0x7f00000003c0)=""/33, 0x21}, 0x12000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, &(0x7f0000000280)) r6 = getpid() r7 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, r7) pkey_mprotect(&(0x7f0000733000/0x2000)=nil, 0x2000, 0x8, r7) syz_open_procfs(r6, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') r8 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f00007d5000/0x3000)=nil, 0x3000, 0xa, r8) 01:20:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x60) [ 2837.249001][T20392] XFS (loop2): Unmount and run xfs_repair [ 2837.254883][T20392] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2837.276639][T20401] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2837.285815][T20401] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2837.326854][T20392] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 06 XFSB............ 01:20:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x300) [ 2837.466395][T20401] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2837.475464][T20401] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2837.497820][T20392] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2837.517218][T20401] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2837.544683][T20401] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... 01:20:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x700) [ 2837.564735][T20401] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2837.580083][T20392] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2837.634088][T20392] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2837.670165][T20392] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ 01:20:05 executing program 0: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="58465342000010000000000a0000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a402", 0x67}], 0x8080, 0x0) [ 2837.758686][T20392] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2837.826581][T20392] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2837.843639][T20392] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2838.090205][T20454] XFS (loop0): SB sanity check failed [ 2838.095906][T20454] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb_quiet block 0xffffffffffffffff [ 2838.119394][T20454] XFS (loop0): Unmount and run xfs_repair [ 2838.125227][T20454] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2838.132958][T20454] 00000000: 58 46 53 42 00 00 10 00 00 00 00 0a 00 00 10 00 XFSB............ [ 2838.143057][T20454] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2838.152389][T20454] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2838.161532][T20454] 00000030: 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ................ [ 2838.180775][T20454] 00000040: 00 00 f9 ff ff ff ff 80 00 00 00 00 00 00 00 82 ................ [ 2838.200662][T20454] 00000050: 1c 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2838.227194][T20454] 00000060: 00 00 06 c0 34 a4 02 00 00 00 00 00 00 00 00 00 ....4........... [ 2838.236105][T20454] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2838.305191][T22513] ================================================================== [ 2838.313339][T22513] BUG: KCSAN: data-race in atime_needs_update / shmem_unlink [ 2838.320707][T22513] [ 2838.323044][T22513] read to 0xffff888075f81db8 of 8 bytes by task 3995 on cpu 1: [ 2838.330840][T22513] atime_needs_update+0x264/0x360 [ 2838.335893][T22513] touch_atime+0x63/0x190 [ 2838.340249][T22513] do_readlinkat+0x1d8/0x220 [ 2838.344845][T22513] __x64_sys_readlink+0x51/0x70 [ 2838.349715][T22513] do_syscall_64+0xcc/0x3a0 [ 2838.354367][T22513] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2838.360385][T22513] [ 2838.362854][T22513] write to 0xffff888075f81db8 of 16 bytes by task 22513 on cpu 0: [ 2838.370755][T22513] shmem_unlink+0xe8/0x150 [ 2838.375299][T22513] vfs_unlink+0x225/0x3e0 [ 2838.379788][T22513] do_unlinkat+0x32b/0x530 [ 2838.384476][T22513] __x64_sys_unlink+0x3b/0x50 [ 2838.389178][T22513] do_syscall_64+0xcc/0x3a0 [ 2838.393699][T22513] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2838.399584][T22513] [ 2838.401912][T22513] Reported by Kernel Concurrency Sanitizer on: [ 2838.408079][T22513] CPU: 0 PID: 22513 Comm: udevd Not tainted 5.5.0-rc1-syzkaller #0 [ 2838.415976][T22513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2838.426280][T22513] ================================================================== [ 2838.435054][T22513] Kernel panic - not syncing: panic_on_warn set ... [ 2838.441976][T22513] CPU: 0 PID: 22513 Comm: udevd Not tainted 5.5.0-rc1-syzkaller #0 [ 2838.450856][T22513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2838.461135][T22513] Call Trace: [ 2838.465630][T22513] dump_stack+0x11d/0x181 [ 2838.470079][T22513] panic+0x210/0x640 [ 2838.474057][T22513] ? vprintk_func+0x8d/0x140 [ 2838.478851][T22513] kcsan_report.cold+0xc/0x15 [ 2838.484346][T22513] kcsan_setup_watchpoint+0x2e2/0x380 [ 2838.490699][T22513] __tsan_unaligned_write16+0xc7/0x110 [ 2838.497559][T22513] shmem_unlink+0xe8/0x150 [ 2838.502625][T22513] vfs_unlink+0x225/0x3e0 [ 2838.507245][T22513] ? apparmor_path_unlink+0x36/0x40 [ 2838.512467][T22513] do_unlinkat+0x32b/0x530 [ 2838.517143][T22513] __x64_sys_unlink+0x3b/0x50 [ 2838.522053][T22513] do_syscall_64+0xcc/0x3a0 [ 2838.526642][T22513] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2838.532572][T22513] RIP: 0033:0x7f84f1e845d7 [ 2838.537008][T22513] Code: 48 3d 00 f0 ff ff 77 03 48 98 c3 48 8b 15 59 38 2b 00 f7 d8 64 89 02 48 83 c8 ff c3 90 90 90 90 90 90 90 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 38 2b 00 31 d2 48 29 c2 64 [ 2838.556735][T22513] RSP: 002b:00007ffd0ad55ad8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 2838.565156][T22513] RAX: ffffffffffffffda RBX: 000000000069e520 RCX: 00007f84f1e845d7 [ 2838.573148][T22513] RDX: 00007ffd0ad55b05 RSI: 000000000041cce6 RDI: 00007ffd0ad55af0 [ 2838.581239][T22513] RBP: 0000000000685250 R08: 0000000000000000 R09: 0000000000000001 [ 2838.589244][T22513] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000099af [ 2838.597326][T22513] R13: 0000000000625500 R14: 0000000000685250 R15: 000000000000000b [ 2838.607380][T22513] Kernel Offset: disabled [ 2838.611721][T22513] Rebooting in 86400 seconds..