7a2b76d87b7c21e2faaa53008ef83533dbcf838f67552c9b2bcfa4454500fac5b3d905dd086add031ed30dce51cf94707cd5f60885343e1f7cb0eafd6adea16aadf98762b2df7d2030eca99febbc99df6e9115ff4c603faa441e688b228886ffffcb3155ab3c"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xdd, 0x0, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f088471fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010105050100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x40) 08:21:33 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2483.155263][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 08:21:33 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x58020000}], 0x0, 0x0) [ 2483.196897][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2483.234581][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2483.255503][T27536] XFS (loop0): SB validate failed with error -117. [ 2483.448102][T17983] XFS (loop0): SB sanity check failed [ 2483.453566][T17983] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2483.482389][T17983] XFS (loop0): Unmount and run xfs_repair [ 2483.495952][T17983] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2483.503447][T17983] 00000000: 58 46 53 42 00 2e 10 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2483.542024][T17983] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2483.555155][T17983] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2483.565154][T17983] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2483.574541][T17983] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2483.584875][T17983] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2483.602738][T17983] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2483.611819][T17983] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2483.623836][T27536] XFS (loop0): SB validate failed with error -117. [ 2483.630398][T27680] XFS (loop5): Invalid superblock magic number 08:21:40 executing program 1: bpf$BPF_PROG_TEST_RUN(0x5, &(0x7f0000000140)={0xffffffffffffffff, 0x1800000000000060, 0x1b, 0x0, &(0x7f0000000100)="000e003f0000007e5bc5795eca0000080000000000000000ffff81", 0x0, 0x100, 0xf2ffffff, 0x7c, 0x0, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", 0x0}, 0x40) 08:21:40 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e8a8a4c9a4e82d8f0c7f659842a20659b3e4a4b5c6e9b52dc2b3dd0ff87b34882d05776ba82b15e3d53d4b708cffc75652f4d4383dc2223c619d1a0f583ea67a0d7a2b76d87b7c21e2faaa53008ef83533dbcf838f67552c9b2bcfa4454500fac5b3d905dd086add031ed30dce51cf94707cd5f60885343e1f7cb0eafd6adea16aadf98762b2df7d2030eca99febbc99df6e9115ff4c603faa441e688b228886ffffcb3155ab3c"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xdd, 0x0, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f088471fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010105050100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x40) 08:21:40 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200381000000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:21:40 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x64030000}], 0x0, 0x0) 08:21:40 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:21:40 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000040), 0x4) 08:21:40 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xdd, 0x0, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f088471fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010105050100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x40) [ 2490.114819][T27728] XFS (loop5): Invalid superblock magic number [ 2490.114888][T31681] XFS (loop0): SB sanity check failed [ 2490.114922][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2490.114946][T31681] XFS (loop0): Unmount and run xfs_repair [ 2490.151490][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2490.158958][T31681] 00000000: 58 46 53 42 00 38 10 00 00 00 00 00 0b 00 10 00 XFSB.8.......... [ 2490.167885][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2490.176913][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2490.188541][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2490.197616][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2490.206791][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 08:21:40 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2490.215803][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2490.224803][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2490.233769][T27727] XFS (loop0): SB validate failed with error -117. 08:21:40 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200481000000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:21:41 executing program 2: clone(0x2000004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace(0x10, r1) ptrace$cont(0x420b, r0, 0x8, 0x807100) [ 2490.376686][T27728] XFS (loop5): Invalid superblock magic number 08:21:41 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x68000000}], 0x0, 0x0) 08:21:41 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x6c000000}], 0x0, 0x0) [ 2490.572355][T27966] XFS (loop0): SB sanity check failed [ 2490.583935][T27966] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2490.598571][T27966] XFS (loop0): Unmount and run xfs_repair [ 2490.605468][T27966] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2490.613018][T27966] 00000000: 58 46 53 42 00 48 10 00 00 00 00 00 0b 00 10 00 XFSB.H.......... [ 2490.622259][T27966] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2490.631527][T27966] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2490.640681][T27966] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2490.651624][T27966] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2490.660829][T27966] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2490.670217][T27966] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2490.679256][T27966] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2490.688629][T27966] XFS (loop0): SB validate failed with error -117. [ 2490.796842][T27982] XFS (loop5): Invalid superblock magic number [ 2490.803245][T17983] XFS (loop0): SB sanity check failed [ 2490.809146][T17983] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2490.832549][T17983] XFS (loop0): Unmount and run xfs_repair [ 2490.840646][T17983] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2490.849993][T17983] 00000000: 58 46 53 42 00 48 10 00 00 00 00 00 0b 00 10 00 XFSB.H.......... [ 2490.861826][T17983] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2490.872439][T17983] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2490.883009][T17983] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2490.895111][T17983] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2490.905486][T17983] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2490.915717][T17983] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2490.926453][T17983] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2490.936945][T27966] XFS (loop0): SB validate failed with error -117. [ 2491.297303][T28004] ptrace attach of "/root/syz-executor.2"[27949] was attempted by "/root/syz-executor.2"[28004] 08:21:53 executing program 1: dup(0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x18309141a47aa1d6, 0x2, 0x0, 0x800e0051f) shutdown(r0, 0x0) 08:21:53 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:21:53 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x74000000}], 0x0, 0x0) 08:21:53 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342004c1000000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:21:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2000000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f00000000c0)=""/42, 0x2a}], 0x1, 0x4000000000) 08:21:54 executing program 3: unshare(0x8020000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x403, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') r1 = socket(0x80000000000000a, 0x2, 0x0) close(r1) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) setns(r0, 0x0) 08:21:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x20, &(0x7f00000002c0)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xdd4ad65, 0x0, 0x0, 0x1, r2}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r0, r2) [ 2503.532917][T28018] XFS (loop0): SB sanity check failed [ 2503.540564][T28018] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2503.559510][T28019] XFS (loop5): Invalid superblock magic number 08:21:54 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x7a000000}], 0x0, 0x0) [ 2503.653922][T28018] XFS (loop0): Unmount and run xfs_repair [ 2503.660428][T28018] XFS (loop0): First 128 bytes of corrupted metadata buffer: 08:21:54 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2503.694622][T28018] 00000000: 58 46 53 42 00 4c 10 00 00 00 00 00 0b 00 10 00 XFSB.L.......... [ 2503.725961][T28018] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2503.774051][T28018] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2503.807091][T28018] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2503.816381][T28018] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2503.833740][T28018] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2503.842682][T28018] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ 08:21:54 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2503.877428][T28150] XFS (loop5): Invalid superblock magic number 08:21:54 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x7e0c0000}], 0x0, 0x0) [ 2503.923849][T28018] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2503.936085][T28018] XFS (loop0): SB validate failed with error -117. 08:21:54 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2504.129684][T17983] XFS (loop0): SB sanity check failed [ 2504.149561][T17983] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2504.199730][T17983] XFS (loop0): Unmount and run xfs_repair [ 2504.205943][T17983] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2504.213406][T17983] 00000000: 58 46 53 42 00 4c 10 00 00 00 00 00 0b 00 10 00 XFSB.L.......... [ 2504.243915][T28192] XFS (loop5): Invalid superblock magic number [ 2504.259194][T17983] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2504.268482][T17983] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2504.281286][T17983] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2504.389745][T28192] XFS (loop5): Invalid superblock magic number [ 2504.406828][T17983] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2504.417720][T17983] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2504.433890][T17983] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2504.443475][T17983] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2504.455233][T28018] XFS (loop0): SB validate failed with error -117. 08:22:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x541d, 0x0) 08:22:07 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:22:07 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x80010000}], 0x0, 0x0) 08:22:07 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ttyS3\x00', 0x40040, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 08:22:07 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200601000000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:22:07 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, "545b7535ed8100000000000000003ed2d04de6bead67df2d1553d2475dc342f100bb20caefd3c5a2bf6d420e7b7d3cc4613ffd90a5d4fa5ca99fcb6d0073d419", "e34fda8e804b1031c087637db455064b181d8cdcdb054df138e20ba7c22ceb22"}) [ 2516.981323][T28409] XFS (loop5): Invalid superblock magic number [ 2517.023288][T28415] XFS (loop0): SB sanity check failed [ 2517.045389][T28415] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2517.075570][T28415] XFS (loop0): Unmount and run xfs_repair [ 2517.091933][T28415] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2517.109899][T28415] 00000000: 58 46 53 42 00 60 10 00 00 00 00 00 0b 00 10 00 XFSB.`.......... 08:22:07 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2517.120657][T28409] XFS (loop5): Invalid superblock magic number [ 2517.121963][T28415] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2517.138820][T28415] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2517.147932][T28415] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2517.157054][T28415] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 08:22:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 2517.173798][T28415] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2517.189639][T28415] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2517.200421][T28415] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 08:22:07 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x8cffffff}], 0x0, 0x0) [ 2517.257215][T28415] XFS (loop0): SB validate failed with error -117. 08:22:07 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:22:08 executing program 2: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x74000000}], 0x0, 0x0) 08:22:08 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200681000000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2517.577297][T28565] XFS (loop5): Invalid superblock magic number [ 2517.597422][T28564] XFS (loop2): Invalid superblock magic number [ 2517.876705][T31681] XFS (loop0): SB sanity check failed [ 2517.882736][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2517.912065][T31681] XFS (loop0): Unmount and run xfs_repair [ 2517.932027][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2517.939701][T31681] 00000000: 58 46 53 42 00 68 10 00 00 00 00 00 0b 00 10 00 XFSB.h.......... [ 2517.948855][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2517.958056][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2517.967035][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2517.979095][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2517.988086][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2517.997041][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2518.006013][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2518.016809][T28692] XFS (loop0): SB validate failed with error -117. [ 2518.117535][T28692] XFS (loop0): SB sanity check failed [ 2518.122962][T28692] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2518.135466][T28692] XFS (loop0): Unmount and run xfs_repair [ 2518.141361][T28692] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2518.152634][T28692] 00000000: 58 46 53 42 00 68 10 00 00 00 00 00 0b 00 10 00 XFSB.h.......... [ 2518.162911][T28692] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2518.183786][T28692] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2518.192691][T28692] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2518.201654][T28692] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2518.210980][T28692] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2518.220003][T28692] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2518.228923][T28692] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2518.238050][T28692] XFS (loop0): SB validate failed with error -117. 08:22:16 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xdd, 0x0, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f088471fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010105050100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x40) 08:22:16 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:22:16 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x8e030000}], 0x0, 0x0) 08:22:16 executing program 2: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200481000000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:22:16 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342006c1000000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2526.117735][T28725] XFS (loop5): Invalid superblock magic number [ 2526.138510][T31681] XFS (loop2): SB sanity check failed [ 2526.147764][T31681] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2526.170894][T31681] XFS (loop2): Unmount and run xfs_repair [ 2526.176794][T31681] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2526.184340][T31681] 00000000: 58 46 53 42 00 48 10 00 00 00 00 00 0b 00 10 00 XFSB.H.......... [ 2526.193227][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2526.202654][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2526.219403][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2526.236992][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2526.246022][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2526.255153][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2526.264167][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2526.273235][T28722] XFS (loop2): SB validate failed with error -117. [ 2526.280218][T31681] XFS (loop0): SB sanity check failed [ 2526.288267][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2526.303147][T31681] XFS (loop0): Unmount and run xfs_repair [ 2526.309712][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: 08:22:16 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200231000000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2526.318285][T31681] 00000000: 58 46 53 42 00 6c 10 00 00 00 00 00 0b 00 10 00 XFSB.l.......... [ 2526.327503][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2526.336953][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2526.351633][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2526.361138][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 08:22:16 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2526.370358][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2526.379469][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2526.388728][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2526.398134][T28726] XFS (loop0): SB validate failed with error -117. [ 2526.403288][T28725] XFS (loop5): Invalid superblock magic number 08:22:17 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x9c000000}], 0x0, 0x0) 08:22:17 executing program 2: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200101000000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:22:17 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2526.706373][T28868] XFS (loop5): Invalid superblock magic number [ 2526.721648][T31681] XFS (loop0): SB sanity check failed [ 2526.727191][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2526.748542][T31681] XFS (loop0): Unmount and run xfs_repair [ 2526.754938][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2526.762703][T31681] 00000000: 58 46 53 42 00 6c 10 00 00 00 00 00 0b 00 10 00 XFSB.l.......... [ 2526.772152][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2526.781199][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2526.790376][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2526.804919][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2526.814136][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2526.823921][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2526.833227][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2526.843445][T28726] XFS (loop0): SB validate failed with error -117. [ 2526.850388][T17983] XFS (loop2): SB sanity check failed 08:22:17 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2526.862067][T17983] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 08:22:17 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x9c030000}], 0x0, 0x0) [ 2526.945256][T17983] XFS (loop2): Unmount and run xfs_repair [ 2526.952131][T17983] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2526.972926][T17983] 00000000: 58 46 53 42 00 10 10 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2526.984797][T17983] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2527.040893][T17983] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2527.068828][T17983] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2527.077764][T17983] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2527.086660][T17983] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2527.095642][T17983] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2527.115794][T17983] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2527.127886][T28881] XFS (loop2): SB validate failed with error -117. [ 2527.251706][T29002] XFS (loop5): Invalid superblock magic number 08:22:30 executing program 2: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342006c1000000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:22:30 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xdd, 0x0, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f088471fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010105050100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x40) 08:22:30 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200741000000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:22:30 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xa0000000}], 0x0, 0x0) 08:22:30 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2539.631202][T31681] XFS (loop0): SB sanity check failed [ 2539.636766][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2539.648892][T31681] XFS (loop0): Unmount and run xfs_repair [ 2539.659155][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2539.679489][T31681] 00000000: 58 46 53 42 00 74 10 00 00 00 00 00 0b 00 10 00 XFSB.t.......... [ 2539.703319][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2539.718482][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2539.727430][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2539.736417][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2539.745390][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2539.754325][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2539.763230][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2539.772344][T29131] XFS (loop0): SB validate failed with error -117. [ 2539.779294][T29128] XFS (loop2): SB sanity check failed [ 2539.783777][T29132] XFS (loop5): Invalid superblock magic number [ 2539.793766][T29128] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2539.806228][T29128] XFS (loop2): Unmount and run xfs_repair [ 2539.813036][T29128] XFS (loop2): First 128 bytes of corrupted metadata buffer: 08:22:30 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200231000000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:22:30 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2539.827034][T29128] 00000000: 58 46 53 42 00 6c 10 00 00 00 00 00 0b 00 10 00 XFSB.l.......... [ 2539.836001][T29128] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2539.845180][T29128] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2539.854306][T29128] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2539.863410][T29128] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2539.872479][T29128] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2539.889840][T29128] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2539.905143][T29128] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2539.914067][T29128] XFS (loop2): SB validate failed with error -117. 08:22:30 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:22:30 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342007a1000000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:22:30 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:22:30 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xaccd0300}], 0x0, 0x0) 08:22:30 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2540.366183][T29488] XFS (loop5): Invalid superblock magic number [ 2540.380978][T29496] XFS (loop0): SB sanity check failed [ 2540.387170][T29496] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2540.427686][T29496] XFS (loop0): Unmount and run xfs_repair [ 2540.433709][T29496] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2540.507989][T29496] 00000000: 58 46 53 42 00 7a 10 00 00 00 00 00 0b 00 10 00 XFSB.z.......... [ 2540.532925][T29496] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2540.622698][T29496] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2540.641303][T29496] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2540.654670][T29496] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2540.667512][T29496] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2540.676977][T29496] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2540.703328][T29496] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2540.715598][T29496] XFS (loop0): SB validate failed with error -117. [ 2540.877710][T17983] XFS (loop0): SB sanity check failed [ 2540.883183][T17983] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2540.903494][T17983] XFS (loop0): Unmount and run xfs_repair [ 2540.909612][T17983] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2540.917430][T17983] 00000000: 58 46 53 42 00 7a 10 00 00 00 00 00 0b 00 10 00 XFSB.z.......... [ 2540.926985][T17983] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2540.943761][T17983] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2540.952708][T17983] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2540.961948][T17983] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2540.971264][T17983] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2540.996953][T17983] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2541.009410][T17983] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2541.021519][T29496] XFS (loop0): SB validate failed with error -117. 08:22:39 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xdd, 0x0, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f088471fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010105050100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x40) 08:22:39 executing program 2: 08:22:39 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xae000000}], 0x0, 0x0) 08:22:39 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:22:39 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200821000000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2548.875144][T29645] XFS (loop0): SB sanity check failed [ 2548.880868][T29645] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2548.893529][T29640] XFS (loop5): Invalid superblock magic number [ 2548.947167][T29645] XFS (loop0): Unmount and run xfs_repair [ 2548.982290][T29645] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2549.025091][T29645] 00000000: 58 46 53 42 00 82 10 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2549.053199][T29645] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2549.065489][T29645] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2549.081182][T29645] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2549.090357][T29645] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2549.099438][T29645] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2549.108476][T29645] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2549.117539][T29645] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2549.126665][T29645] XFS (loop0): SB validate failed with error -117. [ 2549.247162][T31681] XFS (loop0): SB sanity check failed [ 2549.252766][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2549.265005][T31681] XFS (loop0): Unmount and run xfs_repair [ 2549.270729][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2549.278455][T31681] 00000000: 58 46 53 42 00 82 10 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2549.287670][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2549.296903][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2549.305968][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2549.315238][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2549.324243][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2549.333104][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2549.342184][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2549.351110][T29645] XFS (loop0): SB validate failed with error -117. 08:22:41 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200231000000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:22:41 executing program 2: 08:22:41 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xc0030000}], 0x0, 0x0) 08:22:41 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:22:41 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200ae1000000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:22:41 executing program 2: 08:22:42 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2551.538714][T17983] XFS (loop0): SB sanity check failed [ 2551.544273][T17983] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2551.604228][T17983] XFS (loop0): Unmount and run xfs_repair [ 2551.610294][T17983] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2551.618198][T17983] 00000000: 58 46 53 42 00 ae 10 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2551.641767][T17983] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2551.663084][T17983] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2551.672272][T17983] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2551.681394][T17983] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2551.690678][T17983] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2551.699884][T17983] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2551.708788][T17983] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2551.718063][T29784] XFS (loop0): SB validate failed with error -117. [ 2551.718921][T29786] XFS (loop5): Invalid superblock magic number [ 2551.909536][T29786] XFS (loop5): Invalid superblock magic number [ 2551.916371][T29784] XFS (loop0): SB sanity check failed [ 2551.921805][T29784] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2551.935588][T29784] XFS (loop0): Unmount and run xfs_repair [ 2551.941673][T29784] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2551.952672][T29784] 00000000: 58 46 53 42 00 ae 10 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2551.961892][T29784] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2551.971076][T29784] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2551.980126][T29784] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2552.004193][T29784] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2552.013077][T29784] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2552.031645][T29784] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2552.040792][T29784] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2552.049726][T29784] XFS (loop0): SB validate failed with error -117. 08:22:50 executing program 1: 08:22:50 executing program 2: 08:22:50 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 08:22:50 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xc0ed0000}], 0x0, 0x0) 08:22:50 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200c41000000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2560.251101][T31681] XFS (loop0): SB sanity check failed [ 2560.263718][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2560.276078][T30035] XFS (loop5): Invalid superblock magic number [ 2560.306556][T31681] XFS (loop0): Unmount and run xfs_repair [ 2560.329088][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2560.363369][T31681] 00000000: 58 46 53 42 00 c4 10 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2560.388040][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2560.397264][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2560.406534][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2560.415654][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2560.424871][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2560.434025][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2560.443093][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2560.452350][T30039] XFS (loop0): SB validate failed with error -117. [ 2560.548135][T30039] XFS (loop0): SB sanity check failed [ 2560.554853][T30039] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2560.567996][T30039] XFS (loop0): Unmount and run xfs_repair [ 2560.574563][T30039] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2560.582580][T30039] 00000000: 58 46 53 42 00 c4 10 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2560.600604][T30039] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2560.610383][T30039] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2560.619591][T30039] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2560.628847][T30039] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2560.638065][T30039] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2560.647364][T30039] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2560.657256][T30039] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2560.667048][T30039] XFS (loop0): SB validate failed with error -117. [ 2563.839826][T31681] XFS (loop3): SB sanity check failed [ 2563.845545][T31681] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2563.857405][T31681] XFS (loop3): Unmount and run xfs_repair [ 2563.863146][T31681] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2563.870597][T31681] 00000000: 58 46 53 42 00 23 10 00 00 00 00 00 0b 00 10 00 XFSB.#.......... [ 2563.880592][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2563.889499][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2563.898440][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2563.907342][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2563.916358][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2563.925266][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2563.934156][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2563.943031][T30176] XFS (loop3): SB validate failed with error -117. 08:22:55 executing program 3: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@rand_addr="109da91641687186c5093c4a55bd8ef8", 0x5a, r0}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @dev}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 08:22:55 executing program 2: 08:22:55 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xc4000000}], 0x0, 0x0) 08:22:55 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 08:22:55 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200f41000000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:22:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="3e261f09658ac635000002000fc7b6a9000000260f205bb8010000000f01d985030000640f083e0f38f10bb949090000", 0x30}], 0xaaaaaaaaaaaab96, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x231) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:22:55 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2564.888289][T30192] XFS (loop5): Invalid superblock magic number [ 2564.971107][T30196] XFS (loop0): SB sanity check failed [ 2564.997118][T30196] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2565.016197][T30213] kvm: emulating exchange as write [ 2565.212933][T30196] XFS (loop0): Unmount and run xfs_repair [ 2565.236867][T30196] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2565.246900][T30196] 00000000: 58 46 53 42 00 f4 10 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2565.266366][T30196] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2565.338520][T30196] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2565.360821][T30196] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2565.373260][T30196] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2565.382263][T30196] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2565.403766][T30196] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2565.423832][T30196] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2565.432714][T30196] XFS (loop0): SB validate failed with error -117. [ 2565.584448][T30196] XFS (loop0): SB sanity check failed [ 2565.590035][T30196] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2565.620345][T30196] XFS (loop0): Unmount and run xfs_repair [ 2565.635188][T30196] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2565.654738][T30196] 00000000: 58 46 53 42 00 f4 10 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2565.673802][T30196] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2565.682822][T30196] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2565.703750][T30196] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2565.712678][T30196] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2565.733825][T30196] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2565.742703][T30196] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2565.759011][T30196] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2565.769628][T30196] XFS (loop0): SB validate failed with error -117. 08:22:59 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x27f, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 08:22:59 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:22:59 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xda020000}], 0x0, 0x0) 08:22:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="3e261f09658ac635000002000fc7b6a9000000260f205bb8010000000f01d985030000640f083e0f38f10bb949090000", 0x30}], 0xaaaaaaaaaaaab96, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x231) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:22:59 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001400000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2568.698782][T30248] XFS (loop5): Invalid superblock magic number [ 2568.705438][T30252] XFS (loop0): SB sanity check failed [ 2568.711236][T30252] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2568.723356][T30252] XFS (loop0): Unmount and run xfs_repair [ 2568.729246][T30252] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2568.737249][T30252] 00000000: 58 46 53 42 00 00 14 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2568.747019][T30252] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2568.756170][T30252] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2568.765394][T30252] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2568.774774][T30252] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2568.788327][T30252] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2568.803128][T30252] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2568.813466][T30252] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2568.829755][T30252] XFS (loop0): SB validate failed with error -117. [ 2568.852406][T30248] XFS (loop5): Invalid superblock magic number [ 2568.991323][T17983] XFS (loop0): SB sanity check failed [ 2568.996951][T17983] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2569.012518][T17983] XFS (loop0): Unmount and run xfs_repair [ 2569.018668][T17983] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2569.026382][T17983] 00000000: 58 46 53 42 00 00 14 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2569.048253][T17983] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2569.057371][T17983] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2569.066495][T17983] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2569.084003][T17983] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2569.099020][T17983] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2569.108166][T17983] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2569.117281][T17983] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2569.153823][T30252] XFS (loop0): SB validate failed with error -117. 08:23:13 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xae000000}], 0x0, 0x0) 08:23:13 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:23:13 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xe4010000}], 0x0, 0x0) 08:23:13 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200002e00000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:23:13 executing program 2: syz_open_procfs(0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) write$P9_RWALK(r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x1c) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000002c0)={'veth0_to_team\x00'}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x24, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[]}, 0x78) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000380)) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='bbr\x00\xb2\x87\v\x895P\xb6\xb2\xdd\xe1d\xbcp) }\x0e\x9f\x8d\xa9\xc2\x12\xf1\x0e\xc4\xef\x14\f\aA\xf61}\xbb\xd7\x05e\xb9\x81N \xb0\x84t42V|\x0fP\xd1Y>8\xfd9\n\x03U\xbc@K\xdf*\xfc:\ab|\x9d\xfb\xd5iR\n\x19\xd3n', 0x52) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000040)=0x1) shutdown(0xffffffffffffffff, 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x100) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x1) 08:23:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc9b100002400a000000058000f01700d1bd00"/46, 0x2e}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000004c0), &(0x7f0000000500)=0x4) 08:23:13 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2582.574388][T31681] XFS (loop0): SB sanity check failed [ 2582.590012][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2582.618406][T30297] XFS (loop5): Invalid superblock magic number [ 2582.622545][T31681] XFS (loop0): Unmount and run xfs_repair [ 2582.634418][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2582.642038][T31681] 00000000: 58 46 53 42 00 00 2e 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2582.651469][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 08:23:13 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2582.680745][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2582.690548][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2582.700074][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2582.710794][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2582.720214][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ 08:23:13 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2582.729644][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2582.739240][T30299] XFS (loop0): SB validate failed with error -117. 08:23:13 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200002f00000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:23:13 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:23:13 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xf6ffffff}], 0x0, 0x0) [ 2583.018817][T30436] XFS (loop0): SB sanity check failed [ 2583.024422][T30436] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2583.038345][T30436] XFS (loop0): Unmount and run xfs_repair [ 2583.044609][T30436] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2583.052231][T30436] 00000000: 58 46 53 42 00 00 2f 00 00 00 00 00 0b 00 10 00 XFSB../......... [ 2583.061642][T30436] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2583.071599][T30436] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2583.080885][T30436] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2583.090795][T30436] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2583.103125][T30436] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2583.112731][T30436] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2583.122546][T30436] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2583.133219][T30436] XFS (loop0): SB validate failed with error -117. [ 2583.234075][T30550] XFS (loop5): Invalid superblock magic number [ 2583.386976][T30550] XFS (loop5): Invalid superblock magic number 08:23:28 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xae000000}], 0x0, 0x0) 08:23:28 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:23:28 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200003b00000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:23:28 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xf7030000}], 0x0, 0x0) 08:23:28 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:23:28 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='\xabZ\xc9\xaf\x88\xcc\t\xcf\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x100000001, 0x9c3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r2 = gettid() tkill(r2, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x7}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000540)="dc8bc724d06a867df3577d06c01c02145c0c9f09addf8dbf59cf61ac2c9a35261cb98ec0fd1b101e6964c063c3acb3b8929449abcbe459522222fbaf6882a7f6", 0x41395881) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10, 0x0, 0x0, "ad03064d0b090233180173920d2a3836f7d76f992ab41d9fcf9152ba5bd273eea9204e9b0e260d83009a02d5c5097cd5e21de9f73f07d13f44250cf2f92d6466", "7e2bc69a47db702cc8daf96f5e68254ee361331a88dd2965f18d2bee91bd828c9ec7b0c65e30a467c42d17bcaeb953b41590436e8cec4a4a5c7a1bd80aac5025", "b953833c4e60e7cc5d472aed8865f1f4e4ce7123a93bc1cedcd1a16ccf26f3f6", [0x101]}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r7, &(0x7f0000000580)="ca6154a1115ca8eb18b0b019eeb65e1f49581bb39ecfd65976357e8cb6dba824a30c9d0ce57dc1105a52559498cfdbaa5df07b985c1424c0e82b1a63221ca80a4781e9c649dc2cc0c706de24d697dbedf2f76ad339764c7e", 0x58, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000340)=""/173) fcntl$setlease(r0, 0x400, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xffff, 0x81, 0x0, 0x52}, {0x1000, 0x83, 0x0, 0x2}]}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r10 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r10, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r10, 0x40505330, &(0x7f0000000240)={{}, {0x80}, 0x0, 0x5}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r10, 0x40505330, &(0x7f0000000140)={{}, {0x20000000000080}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) fstat(r8, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) setresgid(r11, 0x0, 0x0) getresgid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000400)=0x0) chown(&(0x7f0000000200)='./file0\x00', r9, r12) [ 2598.102543][T30580] XFS (loop5): Invalid superblock magic number [ 2598.112455][T17868] XFS (loop0): SB sanity check failed [ 2598.121839][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2598.134544][T17868] XFS (loop0): Unmount and run xfs_repair [ 2598.140393][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2598.153997][T17868] 00000000: 58 46 53 42 00 00 3b 00 00 00 00 00 0b 00 10 00 XFSB..;......... [ 2598.163421][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2598.175003][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2598.184790][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2598.193628][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2598.205907][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2598.215481][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2598.226411][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2598.235800][T30589] XFS (loop0): SB validate failed with error -117. 08:23:28 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000000180)={'veth0_to_bridge\x00', @ifru_mtu}) 08:23:28 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2598.316552][T30580] XFS (loop5): Invalid superblock magic number [ 2598.421008][T17983] XFS (loop0): SB sanity check failed [ 2598.428134][T17983] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2598.440987][T17983] XFS (loop0): Unmount and run xfs_repair [ 2598.447058][T17983] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2598.454917][T17983] 00000000: 58 46 53 42 00 00 3b 00 00 00 00 00 0b 00 10 00 XFSB..;......... [ 2598.464005][T30727] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 2598.471354][T17983] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2598.480798][T17983] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2598.490366][T17983] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2598.499733][T17983] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2598.509239][T17983] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 08:23:29 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xf9fdffff}], 0x0, 0x0) [ 2598.519563][T17983] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2598.529248][T17983] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2598.538396][T30589] XFS (loop0): SB validate failed with error -117. 08:23:29 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) eventfd2(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000200)={0x0, {'\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdfxr\xc0U?\xde\x86\x00', '\x00', &(0x7f0000000400)=""/1, 0x1}}, 0x120) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a06, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040), 0xb5}], 0x8) 08:23:29 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200005d00000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:23:29 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2598.832639][T17868] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 2598.853218][T17868] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [] on [ 2598.910735][T30844] XFS (loop5): Invalid superblock magic number [ 2598.971456][T17983] XFS (loop0): SB sanity check failed [ 2598.977002][T17983] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2598.989514][T17983] XFS (loop0): Unmount and run xfs_repair [ 2598.995741][T17983] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2599.003277][T17983] 00000000: 58 46 53 42 00 00 5d 00 00 00 00 00 0b 00 10 00 XFSB..]......... [ 2599.012478][T17983] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2599.021913][T17983] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2599.031191][T17983] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2599.040579][T17983] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2599.050027][T17983] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2599.059422][T17983] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2599.068664][T17983] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2599.077883][T30857] XFS (loop0): SB validate failed with error -117. [ 2599.084503][T30844] XFS (loop5): Invalid superblock magic number [ 2599.202495][T30857] XFS (loop0): SB sanity check failed [ 2599.208196][T30857] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2599.233742][T30857] XFS (loop0): Unmount and run xfs_repair [ 2599.239528][T30857] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2599.251533][T30857] 00000000: 58 46 53 42 00 00 5d 00 00 00 00 00 0b 00 10 00 XFSB..]......... [ 2599.260961][T30857] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2599.270066][T30857] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2599.279062][T30857] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2599.288393][T30857] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2599.304532][T30857] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2599.318163][T30857] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2599.327137][T30857] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2599.339842][T30857] XFS (loop0): SB validate failed with error -117. [ 2610.489670][T30890] XFS (loop3): Invalid superblock magic number 08:23:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="3e261f09658ac635000002000fc7b6a9000000260f205bb8010000000f01d985030000640f083e0f38f10bb949090000", 0x30}], 0xaaaaaaaaaaaab96, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x231) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x17, "844168fd0f793506"}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0xfb, 0xc16, 0x0, 0x0, "134ea702ac3486c3b6e6e92f3de5924f", "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"}, 0xc16, 0x0) 08:23:41 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:23:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) ioctl$TIOCCONS(r0, 0x541d) 08:23:41 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xff000000}], 0x0, 0x0) 08:23:41 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200007b00000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:23:41 executing program 1: clone(0x802102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001f40)=@security={'security\x00', 0xe, 0x4, 0x470, 0x2d0, 0x2d0, 0x190, 0x2d0, 0x190, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x4, 0x0, {[{{@ipv6={@local, @dev, [], [], 'veth1_to_bond\x00', 'dummy0\x00'}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}}, @common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, @local}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "3e1f6a4b1736bec9026193a85d6189225791e2dd783d77494e6646b5e20da59e88f20e8eb79e5350efc4a7d14a1c5578beb98a524fb8abce8d341b265a45b0b6"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x625) 08:23:41 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2610.738704][T30903] XFS (loop0): SB sanity check failed [ 2610.750300][T30903] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2610.773770][T30903] XFS (loop0): Unmount and run xfs_repair [ 2610.780144][T30903] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2610.817996][T30911] XFS (loop5): Invalid superblock magic number [ 2610.859954][T30903] 00000000: 58 46 53 42 00 00 7b 00 00 00 00 00 0b 00 10 00 XFSB..{......... [ 2610.932565][T30903] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2610.941985][T30903] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2610.951146][T30903] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2610.960287][T30903] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2610.969685][T30903] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 08:23:41 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe80, 0xfffffffffffffe64, &(0x7f0000000100)="000e003f0000007e5bc5795eca0000080000000000000000ffff81", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) [ 2610.978928][T30911] XFS (loop5): Invalid superblock magic number [ 2610.978959][T30903] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2610.994235][T30903] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2611.004350][T30903] XFS (loop0): SB validate failed with error -117. 08:23:41 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:23:41 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xff070400}], 0x0, 0x0) 08:23:41 executing program 2: 08:23:41 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200008500000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2611.342208][T31159] XFS (loop5): Invalid superblock magic number [ 2611.510915][T25642] XFS (loop0): SB sanity check failed [ 2611.517630][T25642] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2611.539548][T25642] XFS (loop0): Unmount and run xfs_repair [ 2611.545796][T25642] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2611.554091][T25642] 00000000: 58 46 53 42 00 00 85 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2611.563500][T31159] XFS (loop5): Invalid superblock magic number [ 2611.571038][T25642] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2611.580293][T25642] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2611.589244][T25642] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2611.598213][T25642] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2611.617557][T25642] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2611.635904][T25642] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2611.658059][T25642] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2611.670431][T31276] XFS (loop0): SB validate failed with error -117. 08:23:54 executing program 3: 08:23:54 executing program 2: 08:23:54 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:23:54 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xff0f0000}], 0x0, 0x0) 08:23:54 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200028a00000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2624.187476][T31312] XFS (loop5): Invalid superblock magic number [ 2624.208573][T25642] XFS (loop0): SB sanity check failed [ 2624.214510][T25642] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2624.237130][T25642] XFS (loop0): Unmount and run xfs_repair [ 2624.242970][T25642] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2624.252204][T25642] 00000000: 58 46 53 42 00 02 8a 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2624.269273][T25642] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2624.284146][T25642] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2624.301987][T25642] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2624.312229][T25642] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2624.321186][T25642] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 08:23:54 executing program 1: 08:23:54 executing program 2: 08:23:54 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:23:54 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xfffdffff}], 0x0, 0x0) [ 2624.332131][T25642] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2624.354627][T25642] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2624.363724][T31308] XFS (loop0): SB validate failed with error -117. 08:23:55 executing program 2: 08:23:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2624.514586][T31340] XFS (loop5): Invalid superblock magic number 08:23:55 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xfffffdf9}], 0x0, 0x0) [ 2624.590983][T25642] XFS (loop0): SB sanity check failed [ 2624.596659][T25642] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2624.622546][T25642] XFS (loop0): Unmount and run xfs_repair [ 2624.632097][T25642] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2624.649195][T25642] 00000000: 58 46 53 42 00 02 8a 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2624.671621][T25642] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2624.687195][T25642] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2624.708479][T25642] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2624.717420][T25642] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2624.726782][T25642] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2624.735899][T25642] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2624.745356][T25642] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2624.754623][T31308] XFS (loop0): SB validate failed with error -117. [ 2624.814519][T31363] XFS (loop5): Invalid superblock magic number 08:24:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x8}, 0x8) recvfrom$inet(r0, 0x0, 0x10201, 0x0, 0x0, 0x800e0051d) shutdown(r0, 0x0) 08:24:02 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 08:24:02 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420002f000000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:24:02 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4) r1 = socket(0x40000000002, 0x3, 0x2) sendmmsg$inet(r1, &(0x7f0000007300)=[{{&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x1, 0x0) 08:24:02 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xfffffdff}], 0x0, 0x0) [ 2632.413362][T31393] XFS (loop5): Invalid superblock magic number [ 2632.452847][T25642] XFS (loop0): SB sanity check failed [ 2632.458719][T25642] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2632.483763][T25642] XFS (loop0): Unmount and run xfs_repair [ 2632.489557][T25642] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2632.499255][T25642] 00000000: 58 46 53 42 00 02 f0 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2632.509387][T25642] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2632.520607][T25642] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2632.533350][T25642] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2632.545794][T25642] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2632.554755][T25642] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2632.563716][T25642] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2632.572694][T25642] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2632.584076][T31392] XFS (loop0): SB validate failed with error -117. [ 2632.687831][T25642] XFS (loop0): SB sanity check failed [ 2632.693393][T25642] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2632.715052][T25642] XFS (loop0): Unmount and run xfs_repair [ 2632.725218][T25642] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2632.732758][T25642] 00000000: 58 46 53 42 00 02 f0 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2632.741808][T25642] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2632.751096][T25642] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2632.760043][T25642] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2632.769072][T25642] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2632.779043][T25642] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2632.788025][T25642] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2632.796972][T25642] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2632.807118][T31392] XFS (loop0): SB validate failed with error -117. 08:24:10 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) eventfd2(0x0, 0x0) eventfd2(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000200)={0x0, {'\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdfxr\xc0U?\xde\x86\x00', '\x00', &(0x7f0000000400)=""/1, 0x1}}, 0x120) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a06, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040), 0xb5}], 0x8) 08:24:10 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 08:24:10 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x143042, 0x0) ftruncate(r0, 0x2008002) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143042, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x0) 08:24:10 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xffffff7f}], 0x0, 0x0) 08:24:10 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000ff00000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:24:10 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 2639.909525][T25642] XFS (loop0): SB sanity check failed [ 2639.917544][T25642] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2639.945150][T25642] XFS (loop0): Unmount and run xfs_repair [ 2639.958551][T25642] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2639.967031][T31435] XFS (loop5): Invalid superblock magic number [ 2639.985439][T25642] 00000000: 58 46 53 42 00 00 ff 00 00 00 00 00 0b 00 10 00 XFSB............ 08:24:10 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 2640.007833][T25642] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2640.025007][T25642] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2640.039783][T25642] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2640.049039][T25642] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2640.058367][T25642] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2640.067720][T25642] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2640.077042][T25642] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2640.086297][T31431] XFS (loop0): SB validate failed with error -117. [ 2640.101258][T31435] XFS (loop5): Invalid superblock magic number [ 2640.253190][T31431] XFS (loop0): SB sanity check failed [ 2640.259062][T31431] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2640.271289][T31431] XFS (loop0): Unmount and run xfs_repair [ 2640.283803][T31431] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2640.298405][T31431] 00000000: 58 46 53 42 00 00 ff 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2640.322557][T31431] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2640.345097][T31431] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2640.356605][T31431] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2640.366318][T31431] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2640.400201][T31431] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2640.411201][T31431] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2640.421158][T31431] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2640.439155][T31431] XFS (loop0): SB validate failed with error -117. 08:24:12 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xfffffdf9}], 0x0, 0x0) 08:24:12 executing program 2: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420002f000000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:24:12 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 08:24:12 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xffffff8c}], 0x0, 0x0) 08:24:12 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200000120000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2641.689784][T31486] XFS (loop5): Invalid superblock magic number [ 2641.723660][T17868] XFS (loop0): SB sanity check failed [ 2641.729201][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2641.741414][T17868] XFS (loop0): Unmount and run xfs_repair [ 2641.747316][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2641.757816][T17868] 00000000: 58 46 53 42 00 00 01 20 00 00 00 00 0b 00 10 00 XFSB... ........ [ 2641.766928][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2641.776518][T31489] XFS (loop2): SB sanity check failed [ 2641.782240][T31489] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2641.794217][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2641.803404][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2641.812530][T31489] XFS (loop2): Unmount and run xfs_repair [ 2641.818619][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2641.823822][T31489] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2641.838062][T31489] 00000000: 58 46 53 42 00 02 f0 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2641.840097][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2641.848391][T31489] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2641.866618][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2641.875765][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2641.886492][T31488] XFS (loop0): SB validate failed with error -117. [ 2641.893051][T31486] XFS (loop5): Invalid superblock magic number [ 2641.923760][T31489] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2641.932783][T31489] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2641.941885][T31489] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2641.950909][T31489] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2641.959862][T31489] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2641.976853][T31489] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2641.986212][T31489] XFS (loop2): SB validate failed with error -117. [ 2642.064878][T25642] XFS (loop0): SB sanity check failed [ 2642.070859][T25642] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2642.085166][T25642] XFS (loop0): Unmount and run xfs_repair [ 2642.091097][T25642] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2642.113153][T25642] 00000000: 58 46 53 42 00 00 01 20 00 00 00 00 0b 00 10 00 XFSB... ........ [ 2642.145423][T25642] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2642.178184][T25642] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2642.209095][T25642] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2642.221639][T25642] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2642.230982][T25642] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2642.243022][T25642] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2642.251943][T25642] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2642.266601][T31488] XFS (loop0): SB validate failed with error -117. 08:24:23 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:24:23 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 08:24:23 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xfffffff6}], 0x0, 0x0) 08:24:23 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:24:23 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200000000040000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:24:23 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2653.397860][T17868] XFS (loop0): SB sanity check failed [ 2653.403576][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2653.426635][T31546] XFS (loop5): Invalid superblock magic number [ 2653.446798][T17868] XFS (loop0): Unmount and run xfs_repair [ 2653.453545][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2653.461390][T17868] 00000000: 58 46 53 42 00 00 00 00 04 00 00 00 0b 00 10 00 XFSB............ [ 2653.471919][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2653.481138][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 08:24:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x136b, &(0x7f0000002900)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "ba63e6", 0x1335, 0x2c, 0x80, @remote, @mcast1, {[@dstopts={0x4c, 0x19, [], [@pad1, @calipso={0x7, 0x38, {0x20, 0xc, 0xe1, 0x400, [0x5, 0x3, 0xffff, 0x8001, 0x6e2, 0x1]}}, @ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0xe}}, @generic={0x38, 0x79, "ec62af886741808d29bed5b3f1e09f38b07d6e16443d9119cd7f5ec1e3263ac74ca460736546613ec5e4ee0df8a9b74b65528fc81e016eebdaa48cbe421a3da8c9b61f603bb07940676c4672ba905699d6a008128173f915dbfb67de88cbc75f2f9d1c644d70b8029c4fcc9edb2b32b63f6857bac42aad7985"}]}, @fragment={0x3a, 0x0, 0x9, 0x1, 0x0, 0x1a, 0x68}, @hopopts={0x62, 0x214, [], [@enc_lim, @ra={0x5, 0x2, 0x1ff}, @jumbo={0xc2, 0x4, 0x8000}, @generic={0x3, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x8}, @calipso={0x7, 0x38, {0x6, 0xc, 0xfb, 0x0, [0xe5, 0x6, 0x9a5, 0x2, 0x100000001, 0x9]}}, @generic={0x81, 0x4f, "9105555f20dd4abfca87acfd66e65a1e88a46d8d39b0b4032b0da81504670179bd6b85f2ffdc5de8294544f6dba48dc79ec59350ebfc7540c7d84ac2a579c4821547b47fa3581e9c1df329999f4cc3"}]}, @srh={0xb9, 0x4, 0x4, 0x2, 0x7, 0x8, 0xe1ba, [@dev={0xfe, 0x80, [], 0x1b}, @local]}, @hopopts={0xca643987ff6aaa36, 0x0, [], [@pad1]}, @hopopts={0xe3, 0xa, [], [@generic={0x3f, 0x1c, "d339f0382038acefb4dd027e4c9b5864083526089e4bc461cb3dcd75"}, @jumbo={0xc2, 0x4, 0x7ff}, @jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x10, {0x8, 0x2, 0x9, 0x7f, [0x1ff]}}, @calipso={0x7, 0x18, {0x1, 0x4, 0x4, 0x502, [0x4, 0x14]}}]}, @dstopts={0x33, 0x0, [], [@pad1]}, @fragment={0x1d, 0x0, 0x7, 0x0, 0x0, 0x5, 0x65}], @udp={0x4e23, 0x4e21, 0xfd, 0x0, [@guehdr={0x2, 0x0, 0x3, 0x40, 0x380, [0x40]}, @guehdr={0x1, 0x0, 0x1, 0x49, 0x100}, @guehdr={0x1, 0x1, 0x0, 0x0, 0x80}, @guehdr={0x1, 0x1, 0x3, 0x6, 0x100}, @guehdr={0x1, 0x0, 0x2, 0x6, 0x100}, @guehdr={0x2, 0x1, 0x0, 0x1, 0x0, [0xbec736d9151671bd]}, @guehdr={0x2, 0x1, 0x1, 0x5, 0xf9c1ac05b879945b, [0xe843eb0346c40050]}], "fca22b37be01b01c2a5d138052f4ecc842d2f5e2c4512b4d22efe232fe8039f3318059efe0f6d528cb771c349ebb42a2f38c12852736a3cfefce01bdb19d5efdeb3f4c6ff480a9ce42bf5e3ec8e4ce3188e694eed347c133ae190b6b9de4d538583ea28ba8ff9df00ca4f4e1d636a995b5483a8d42a76817f26052f45096873604b43fac24389d2801aa580662b17e83d3bda4f2a228e24e20bdfc7a1145b7ef54350cf56746b1cf97df817dbdb2c2a4c5663d96d6d97ce73e27e90491ae3ba0ca41aeebec17da6873c10923af"}}}}}}, &(0x7f00000001c0)={0x5, 0x4, [0x6a3, 0x323, 0x599, 0xb2e]}) clock_gettime(0x0, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) dup(0xffffffffffffffff) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4c0000001200ef09fffefd956fa283b7270fd917df226c24a6008000200000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f48d947f1e128a02500c57bb79ac313e5a1174c1f5c56141252", 0x65}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x3f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0) [ 2653.490441][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2653.499892][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2653.509603][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2653.519754][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2653.528905][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2653.538058][T31541] XFS (loop0): SB validate failed with error -117. [ 2653.674870][T31541] XFS (loop0): SB sanity check failed [ 2653.680427][T31541] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2653.696565][T31541] XFS (loop0): Unmount and run xfs_repair [ 2653.733048][T31541] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2653.742768][T31688] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2653.757829][T31688] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2653.771722][T31541] 00000000: 58 46 53 42 00 00 00 00 04 00 00 00 0b 00 10 00 XFSB............ [ 2653.797868][T31690] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2653.809545][T31541] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2653.831337][T31541] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2653.841196][T31690] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2653.853560][T31541] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2653.862672][T31541] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2653.875680][T31690] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2653.886787][T31541] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2653.897323][T31690] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2653.908232][T31541] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2653.919161][T31690] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2653.928715][T31541] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2653.930477][T31690] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2653.942378][T31541] XFS (loop0): SB validate failed with error -117. [ 2653.950471][T31690] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2653.963294][T31690] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 08:24:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0xfffffe38) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20042000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000225bd7000fbdbdf25f10000003c0009000800020008000000089e1adaac0000000800020002000000080001000100010008000200f8b2"], 0x3}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = dup2(r0, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f00000014c0)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 08:24:26 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:24:26 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xedc000000000}], 0x0, 0x0) 08:24:26 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200000003100000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:24:26 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x4d, 0x1, 0x7, 0xfe, 0x0, 0x8008, 0x1000, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x12eb, 0x9, 0x1000, 0x2, 0x5c, 0x1f, 0x40}, r2, 0x10, 0xffffffffffffffff, 0x17) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r3, 0x10, 0x0, 0x40) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x6e) write$sndseq(r4, &(0x7f0000000300)=[{0x81, 0x7, 0x7f, 0x1, @time={0x0, 0x989680}, {0x7, 0x5}, {0xd7, 0x4}, @connect={{0x6, 0x6}, {0x80}}}, {0x7, 0x7f, 0xb, 0x0, @tick=0xffffffff, {0x3, 0xc0}, {0x0, 0x78}, @control={0x1, 0x4640}}, {0x16, 0x14, 0x0, 0x0, @tick=0x8, {0x3f, 0x81}, {0x1}, @note={0x7, 0x0, 0x0, 0xd4, 0x1}}, {0x1, 0x0, 0x1, 0x2, @tick=0x80, {0x20, 0x1f}, {0xc, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x8, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x40, 0x46, 0x28, @tick=0x7, {0x8, 0x9}, {0x7f}, @connect={{0x7b, 0x4}, {0x1f}}}, {0x7, 0x0, 0x7, 0x0, @tick, {}, {0x8, 0x14}, @time=@time={0x77359400}}], 0x150) fallocate(r4, 0x0, 0x0, 0x1000f4) ftruncate(r1, 0x8200) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r5, &(0x7f0000007e00), 0x400000000000058, 0x0) [ 2656.086214][T31698] XFS (loop3): Invalid superblock magic number [ 2656.302548][T31710] XFS (loop5): Invalid superblock magic number [ 2656.302617][T17983] XFS (loop0): SB sanity check failed [ 2656.317660][T17983] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2656.329700][T17983] XFS (loop0): Unmount and run xfs_repair [ 2656.337177][T17983] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2656.344913][T17983] 00000000: 58 46 53 42 00 00 00 03 10 00 00 00 0b 00 10 00 XFSB............ [ 2656.370531][T17983] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2656.386621][T17983] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2656.395534][T17983] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2656.404473][T17983] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2656.413440][T17983] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2656.422384][T17983] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2656.431274][T17983] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2656.440372][T31717] XFS (loop0): SB validate failed with error -117. [ 2656.508816][T31710] XFS (loop5): Invalid superblock magic number [ 2656.598114][T17983] XFS (loop0): SB sanity check failed [ 2656.603577][T17983] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2656.649139][T17983] XFS (loop0): Unmount and run xfs_repair [ 2656.663717][T17983] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2656.671139][T17983] 00000000: 58 46 53 42 00 00 00 03 10 00 00 00 0b 00 10 00 XFSB............ [ 2656.681825][T17983] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2656.690711][T17983] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2656.699861][T17983] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2656.708818][T17983] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2656.717876][T17983] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2656.726836][T17983] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2656.735722][T17983] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2656.747755][T31717] XFS (loop0): SB validate failed with error -117. [ 2661.813721][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2661.819509][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2661.893753][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2661.899629][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2661.903708][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2661.911070][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2662.853707][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2662.859481][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2663.183707][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2663.189560][ C1] protocol 88fb is buggy, dev hsr_slave_1 08:24:35 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x4d, 0x1, 0x7, 0xfe, 0x0, 0x8008, 0x1000, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x12eb, 0x9, 0x1000, 0x2, 0x5c, 0x1f, 0x40}, r2, 0x10, 0xffffffffffffffff, 0x17) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r3, 0x10, 0x0, 0x40) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x6e) write$sndseq(r4, &(0x7f0000000300)=[{0x81, 0x7, 0x7f, 0x1, @time={0x0, 0x989680}, {0x7, 0x5}, {0xd7, 0x4}, @connect={{0x6, 0x6}, {0x80}}}, {0x7, 0x7f, 0xb, 0x0, @tick=0xffffffff, {0x3, 0xc0}, {0x0, 0x78}, @control={0x1, 0x4640}}, {0x16, 0x14, 0x0, 0x0, @tick=0x8, {0x3f, 0x81}, {0x1}, @note={0x7, 0x0, 0x0, 0xd4, 0x1}}, {0x1, 0x0, 0x1, 0x2, @tick=0x80, {0x20, 0x1f}, {0xc, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x8, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x40, 0x46, 0x28, @tick=0x7, {0x8, 0x9}, {0x7f}, @connect={{0x7b, 0x4}, {0x1f}}}, {0x7, 0x0, 0x7, 0x0, @tick, {}, {0x8, 0x14}, @time=@time={0x77359400}}], 0x150) fallocate(r4, 0x0, 0x0, 0x1000f4) ftruncate(r1, 0x8200) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r5, &(0x7f0000007e00), 0x400000000000058, 0x0) 08:24:35 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:24:35 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x1000000000000}], 0x0, 0x0) 08:24:35 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x4d, 0x1, 0x7, 0xfe, 0x0, 0x8008, 0x1000, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x12eb, 0x9, 0x1000, 0x2, 0x5c, 0x1f, 0x40}, r2, 0x10, 0xffffffffffffffff, 0x17) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r3, 0x10, 0x0, 0x40) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x6e) write$sndseq(r4, &(0x7f0000000300)=[{0x81, 0x7, 0x7f, 0x1, @time={0x0, 0x989680}, {0x7, 0x5}, {0xd7, 0x4}, @connect={{0x6, 0x6}, {0x80}}}, {0x7, 0x7f, 0xb, 0x0, @tick=0xffffffff, {0x3, 0xc0}, {0x0, 0x78}, @control={0x1, 0x4640}}, {0x16, 0x14, 0x0, 0x0, @tick=0x8, {0x3f, 0x81}, {0x1}, @note={0x7, 0x0, 0x0, 0xd4, 0x1}}, {0x1, 0x0, 0x1, 0x2, @tick=0x80, {0x20, 0x1f}, {0xc, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x8, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x40, 0x46, 0x28, @tick=0x7, {0x8, 0x9}, {0x7f}, @connect={{0x7b, 0x4}, {0x1f}}}, {0x7, 0x0, 0x7, 0x0, @tick, {}, {0x8, 0x14}, @time=@time={0x77359400}}], 0x150) fallocate(r4, 0x0, 0x0, 0x1000f4) ftruncate(r1, 0x8200) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r5, &(0x7f0000007e00), 0x400000000000058, 0x0) 08:24:35 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200000200000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2664.861273][T17983] XFS (loop0): SB sanity check failed [ 2664.867087][T17983] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2664.896130][T17983] XFS (loop0): Unmount and run xfs_repair [ 2664.914195][T31873] XFS (loop5): Invalid superblock magic number [ 2664.944232][T17983] XFS (loop0): First 128 bytes of corrupted metadata buffer: 08:24:35 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2664.974325][T17983] 00000000: 58 46 53 42 00 00 02 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2664.995885][T17983] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2665.023957][T17983] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2665.032892][T17983] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2665.041909][T17983] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2665.050799][T17983] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2665.059772][T17983] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2665.068670][T17983] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2665.077729][T31876] XFS (loop0): SB validate failed with error -117. 08:24:35 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200000a00000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2665.261603][T32008] XFS (loop0): SB sanity check failed [ 2665.267738][T32008] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2665.283614][T32008] XFS (loop0): Unmount and run xfs_repair [ 2665.289645][T32008] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2665.297214][T32008] 00000000: 58 46 53 42 00 00 0a 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2665.307118][T32008] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2665.316181][T32008] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2665.325273][T32008] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2665.334522][T32008] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2665.343694][T32008] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2665.352797][T32008] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2665.361924][T32008] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2665.371138][T32008] XFS (loop0): SB validate failed with error -117. 08:24:38 executing program 3: pipe(&(0x7f0000001500)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) dup(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) poll(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 08:24:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = dup2(r0, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f00000014c0)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 08:24:38 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x2000000000000}], 0x0, 0x0) 08:24:38 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:24:38 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200000f00000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2667.636740][T32141] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 2667.721744][T32130] XFS (loop5): Invalid superblock magic number [ 2667.737327][T17983] XFS (loop0): SB sanity check failed [ 2667.742862][T17983] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2667.793783][T17983] XFS (loop0): Unmount and run xfs_repair [ 2667.799661][T17983] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2667.810858][T17983] 00000000: 58 46 53 42 00 00 0f 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2667.819954][T17983] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2667.828941][T17983] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2667.838316][T17983] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2667.847616][T17983] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2667.856612][T17983] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2667.866418][T17983] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2667.875443][T17983] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2667.885002][T32131] XFS (loop0): SB validate failed with error -117. [ 2668.027591][T17983] XFS (loop0): SB sanity check failed [ 2668.033194][T17983] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2668.045363][T17983] XFS (loop0): Unmount and run xfs_repair [ 2668.051113][T17983] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2668.064037][T17983] 00000000: 58 46 53 42 00 00 0f 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2668.073305][T17983] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2668.082454][T17983] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2668.091658][T17983] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2668.100750][T17983] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2668.109987][T17983] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2668.119228][T17983] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2668.128450][T17983] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2668.140384][T32131] XFS (loop0): SB validate failed with error -117. 08:24:46 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x4000000000000}], 0x0, 0x0) 08:24:46 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x4d, 0x1, 0x7, 0xfe, 0x0, 0x8008, 0x1000, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x12eb, 0x9, 0x1000, 0x2, 0x5c, 0x1f, 0x40}, r2, 0x10, 0xffffffffffffffff, 0x17) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r3, 0x10, 0x0, 0x40) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x6e) write$sndseq(r4, &(0x7f0000000300)=[{0x81, 0x7, 0x7f, 0x1, @time={0x0, 0x989680}, {0x7, 0x5}, {0xd7, 0x4}, @connect={{0x6, 0x6}, {0x80}}}, {0x7, 0x7f, 0xb, 0x0, @tick=0xffffffff, {0x3, 0xc0}, {0x0, 0x78}, @control={0x1, 0x4640}}, {0x16, 0x14, 0x0, 0x0, @tick=0x8, {0x3f, 0x81}, {0x1}, @note={0x7, 0x0, 0x0, 0xd4, 0x1}}, {0x1, 0x0, 0x1, 0x2, @tick=0x80, {0x20, 0x1f}, {0xc, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x8, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x40, 0x46, 0x28, @tick=0x7, {0x8, 0x9}, {0x7f}, @connect={{0x7b, 0x4}, {0x1f}}}, {0x7, 0x0, 0x7, 0x0, @tick, {}, {0x8, 0x14}, @time=@time={0x77359400}}], 0x150) fallocate(r4, 0x0, 0x0, 0x1000f4) ftruncate(r1, 0x8200) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r5, &(0x7f0000007e00), 0x400000000000058, 0x0) 08:24:46 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:24:46 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001400000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:24:46 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = dup2(r0, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f00000014c0)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 2676.371851][T32274] XFS (loop0): SB sanity check failed [ 2676.385733][T32277] XFS (loop5): Invalid superblock magic number [ 2676.393905][T32274] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2676.412257][T32274] XFS (loop0): Unmount and run xfs_repair [ 2676.418705][T32274] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2676.427595][T32274] 00000000: 58 46 53 42 00 00 14 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2676.437411][T32274] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2676.447362][T32274] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2676.457230][T32274] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ 08:24:47 executing program 4: ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2676.467262][T32274] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2676.476854][T32274] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2676.486211][T32274] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2676.495708][T32274] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2676.505423][T32274] XFS (loop0): SB validate failed with error -117. 08:24:47 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xe000000000000}], 0x0, 0x0) [ 2676.803349][T32401] XFS (loop5): Invalid superblock magic number 08:24:47 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getgid() ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYRES64, @ANYBLOB='\b', @ANYBLOB="080004", @ANYRES32], 0xa, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x5) open(0x0, 0x0, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000009600007400000000a4000000000000000000", 0xffffffe5}], 0x2) 08:24:47 executing program 2: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xd893fb02dee7a5c3, &(0x7f0000000000)={&(0x7f0000005b40)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x4) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492579, 0x0) 08:24:47 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200002e00000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:24:47 executing program 4: ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2677.021548][T17983] XFS (loop0): SB sanity check failed [ 2677.027709][T17983] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2677.040531][T17983] XFS (loop0): Unmount and run xfs_repair [ 2677.047076][T17983] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2677.055547][T17983] 00000000: 58 46 53 42 00 00 2e 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2677.064959][T17983] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2677.074471][T17983] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2677.083886][T17983] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2677.092944][T17983] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2677.102913][T17983] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2677.112454][T17983] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ 08:24:47 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x100000000000000}], 0x0, 0x0) [ 2677.121861][T17983] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2677.133941][T32528] XFS (loop0): SB validate failed with error -117. [ 2677.357401][T32546] XFS (loop5): Invalid superblock magic number [ 2677.482690][T32546] XFS (loop5): Invalid superblock magic number 08:25:02 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x4d, 0x1, 0x7, 0xfe, 0x0, 0x8008, 0x1000, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x12eb, 0x9, 0x1000, 0x2, 0x5c, 0x1f, 0x40}, r2, 0x10, 0xffffffffffffffff, 0x17) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r3, 0x10, 0x0, 0x40) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x6e) write$sndseq(r4, &(0x7f0000000300)=[{0x81, 0x7, 0x7f, 0x1, @time={0x0, 0x989680}, {0x7, 0x5}, {0xd7, 0x4}, @connect={{0x6, 0x6}, {0x80}}}, {0x7, 0x7f, 0xb, 0x0, @tick=0xffffffff, {0x3, 0xc0}, {0x0, 0x78}, @control={0x1, 0x4640}}, {0x16, 0x14, 0x0, 0x0, @tick=0x8, {0x3f, 0x81}, {0x1}, @note={0x7, 0x0, 0x0, 0xd4, 0x1}}, {0x1, 0x0, 0x1, 0x2, @tick=0x80, {0x20, 0x1f}, {0xc, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x8, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x40, 0x46, 0x28, @tick=0x7, {0x8, 0x9}, {0x7f}, @connect={{0x7b, 0x4}, {0x1f}}}, {0x7, 0x0, 0x7, 0x0, @tick, {}, {0x8, 0x14}, @time=@time={0x77359400}}], 0x150) fallocate(r4, 0x0, 0x0, 0x1000f4) ftruncate(r1, 0x8200) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) r5 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r5, &(0x7f0000007e00), 0x400000000000058, 0x0) 08:25:02 executing program 4: ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:25:02 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r1, &(0x7f0000001940)={&(0x7f0000000540)=@in6={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x80, 0x0}, 0xfe80) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="06", 0x1}], 0x1}, 0x4000000) 08:25:02 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200002f00000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:25:02 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x200000000000000}], 0x0, 0x0) 08:25:02 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:25:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="3e261f09658ac635000002000fc7b6a9000000260f205bb8010000000f01d985030000640f083e0f38f10bb949090000", 0x30}], 0xaaaaaaaaaaaab96, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x231) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 2691.950895][T17983] XFS (loop0): SB sanity check failed [ 2691.956876][T17983] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2692.055633][T17983] XFS (loop0): Unmount and run xfs_repair [ 2692.061452][T17983] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2692.068879][T17983] 00000000: 58 46 53 42 00 00 2f 00 00 00 00 00 0b 00 10 00 XFSB../......... [ 2692.111217][T17983] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2692.168717][T17983] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2692.203906][T17983] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2692.219567][T17983] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2692.228498][T17983] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2692.237823][T17983] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2692.246855][T17983] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2692.255914][T32585] XFS (loop0): SB validate failed with error -117. [ 2692.262549][T32581] XFS (loop5): Invalid superblock magic number [ 2692.408834][T32585] XFS (loop0): SB sanity check failed [ 2692.414828][T32585] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2692.428025][T32581] XFS (loop5): Invalid superblock magic number [ 2692.444119][T32585] XFS (loop0): Unmount and run xfs_repair [ 2692.450222][T32585] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2692.484599][T32585] 00000000: 58 46 53 42 00 00 2f 00 00 00 00 00 0b 00 10 00 XFSB../......... [ 2692.493486][T32585] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2692.502423][T32585] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2692.511380][T32585] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2692.571335][T32585] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2692.614028][T32585] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2692.653813][T32585] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2692.662725][T32585] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2692.704412][T32585] XFS (loop0): SB validate failed with error -117. 08:25:03 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x10, 0x0, 0x40) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x6e) write$sndseq(r3, &(0x7f0000000300)=[{0x81, 0x7, 0x7f, 0x1, @time={0x0, 0x989680}, {0x7, 0x5}, {0xd7, 0x4}, @connect={{0x6}, {0x80}}}, {0x7, 0x7f, 0xb, 0x9, @tick=0xffffffff, {0x3, 0xc0}, {0x0, 0x78}, @control={0x1, 0x4640}}, {0x16, 0x14, 0x0, 0x0, @tick=0x8, {0x3f, 0x81}, {0x1}, @note={0x7, 0x0, 0x0, 0xd4, 0x1}}, {0x1, 0x0, 0x1, 0x2, @tick=0x80, {0x20, 0x1f}, {0xc, 0xfa}, @result}, {0x6, 0x0, 0x6, 0x8, @time, {0x0, 0xde}, {}, @result={0x3}}, {0x0, 0x40, 0x46, 0x28, @tick=0x7, {0x8, 0x9}, {0x7f}, @connect={{0x7b, 0x4}, {0x1f}}}, {0x7, 0x0, 0x7, 0x0, @tick, {}, {0x8, 0x14}, @time=@time={0x77359400}}], 0x150) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) ftruncate(r1, 0x8200) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) 08:25:03 executing program 2: r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$sock_ifreq(r0, 0x8993, &(0x7f0000000280)={'ip6_vti0\x00', @ifru_addrs=@xdp}) 08:25:03 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:25:03 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x300000000000000}], 0x0, 0x0) 08:25:03 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200003b00000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2692.931776][ T379] XFS (loop5): Invalid superblock magic number [ 2693.080102][ T491] XFS (loop0): SB sanity check failed [ 2693.085773][ T491] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2693.099010][ T491] XFS (loop0): Unmount and run xfs_repair [ 2693.109090][ T491] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2693.111584][ T379] XFS (loop5): Invalid superblock magic number [ 2693.116837][ T491] 00000000: 58 46 53 42 00 00 3b 00 00 00 00 00 0b 00 10 00 XFSB..;......... [ 2693.141406][ T491] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2693.150760][ T491] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2693.159976][ T491] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2693.169071][ T491] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2693.178253][ T491] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2693.187483][ T491] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2693.196379][ T491] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2693.206068][ T491] XFS (loop0): SB validate failed with error -117. [ 2693.327435][T17868] XFS (loop0): SB sanity check failed [ 2693.332913][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2693.344852][T17868] XFS (loop0): Unmount and run xfs_repair [ 2693.350672][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2693.358259][T17868] 00000000: 58 46 53 42 00 00 3b 00 00 00 00 00 0b 00 10 00 XFSB..;......... [ 2693.367220][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2693.376137][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2693.385022][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2693.393952][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2693.402807][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2693.411698][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2693.420603][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2693.433779][ T491] XFS (loop0): SB validate failed with error -117. 08:25:17 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200000000040000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:25:17 executing program 2: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200002e00000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:25:17 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:25:17 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x400000000000000}], 0x0, 0x0) 08:25:17 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200005d00000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2707.441851][T17868] XFS (loop2): SB sanity check failed [ 2707.447923][T17868] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2707.461214][T17868] XFS (loop2): Unmount and run xfs_repair [ 2707.467635][T17868] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2707.475543][T17868] 00000000: 58 46 53 42 00 00 2e 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2707.485066][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2707.494480][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2707.505263][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2707.514579][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2707.524191][ T533] XFS (loop0): SB sanity check failed [ 2707.529874][ T533] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2707.541958][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2707.551237][ T533] XFS (loop0): Unmount and run xfs_repair [ 2707.557294][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2707.566716][ T533] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2707.574488][ T533] 00000000: 58 46 53 42 00 00 5d 00 00 00 00 00 0b 00 10 00 XFSB..]......... [ 2707.583866][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2707.593311][ T534] XFS (loop2): SB validate failed with error -117. [ 2707.593989][ T533] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2707.599984][ T530] XFS (loop5): Invalid superblock magic number [ 2707.609033][ T533] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2707.624367][ T533] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2707.634382][ T533] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2707.644478][ T533] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2707.653890][ T533] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2707.663029][ T533] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2707.688747][ T533] XFS (loop0): SB validate failed with error -117. 08:25:18 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:25:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000900)=""/4096, 0xfd42, 0x0, 0x0, 0x112) [ 2707.781592][ T530] XFS (loop5): Invalid superblock magic number 08:25:18 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0xa200, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x0, 0x0) 08:25:18 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200007b00000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:25:18 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x46a000800000000}], 0x0, 0x0) 08:25:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(0xffffffffffffffff, &(0x7f0000000180), 0xfeed, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000900)=""/4096, 0xfd42, 0x0, 0x0, 0x112) 08:25:18 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2708.369847][ T784] XFS (loop0): SB sanity check failed [ 2708.375449][ T784] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2708.399361][ T784] XFS (loop0): Unmount and run xfs_repair [ 2708.411299][ T784] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2708.454748][ T784] 00000000: 58 46 53 42 00 00 7b 00 00 00 00 00 0b 00 10 00 XFSB..{......... [ 2708.468164][ T784] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2708.470010][ T795] XFS (loop5): Invalid superblock magic number [ 2708.477413][ T784] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2708.496546][ T784] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2708.506278][ T784] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2708.518842][ T784] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2708.547516][ T784] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2708.569357][ T784] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2708.620522][ T795] XFS (loop5): Invalid superblock magic number [ 2708.628112][ T784] XFS (loop0): SB validate failed with error -117. [ 2708.765292][ T784] XFS (loop0): SB sanity check failed [ 2708.771925][ T784] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2708.784943][ T784] XFS (loop0): Unmount and run xfs_repair [ 2708.791334][ T784] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2708.799164][ T784] 00000000: 58 46 53 42 00 00 7b 00 00 00 00 00 0b 00 10 00 XFSB..{......... [ 2708.808370][ T784] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2708.817834][ T784] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2708.826966][ T784] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2708.836006][ T784] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2708.846182][ T784] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2708.855135][ T784] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2708.864372][ T784] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2708.873634][ T784] XFS (loop0): SB validate failed with error -117. 08:25:29 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200000000040000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:25:29 executing program 2: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x9700, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x0, 0x0) 08:25:29 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:25:29 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x500000000000000}], 0x0, 0x0) 08:25:29 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200008500000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2718.846436][ T939] XFS (loop5): Invalid superblock magic number [ 2718.871875][T31681] XFS (loop0): SB sanity check failed [ 2718.877704][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2718.912902][T31681] XFS (loop0): Unmount and run xfs_repair [ 2718.926510][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2718.934103][T31681] 00000000: 58 46 53 42 00 00 85 00 00 00 00 00 0b 00 10 00 XFSB............ [ 2718.943218][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2718.952381][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 08:25:29 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x600000000000000}], 0x0, 0x0) 08:25:29 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2718.961415][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2718.970480][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2718.979531][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2718.988602][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2718.997590][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2719.006841][ T937] XFS (loop0): SB validate failed with error -117. [ 2719.258064][ T1064] XFS (loop5): Invalid superblock magic number [ 2719.484052][ T938] XFS (loop2): Invalid superblock magic number 08:25:32 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0xa200, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x0, 0x0) 08:25:32 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:25:32 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x700000000000000}], 0x0, 0x0) 08:25:32 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200008a02000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:25:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x67, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001380)={0x0}}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2721.857404][ T1202] XFS (loop0): SB sanity check failed [ 2721.878342][ T1202] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2721.930440][ T1202] XFS (loop0): Unmount and run xfs_repair [ 2721.941255][ T1202] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2721.954539][ T1204] XFS (loop5): Invalid superblock magic number [ 2721.977470][ T1202] 00000000: 58 46 53 42 00 00 8a 02 00 00 00 00 0b 00 10 00 XFSB............ [ 2722.012354][ T1202] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2722.031717][ T1202] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2722.048939][ T1202] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2722.060290][ T1202] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2722.075697][ T1202] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2722.101869][ T1202] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2722.121983][ T1202] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2722.132156][ T1202] XFS (loop0): SB validate failed with error -117. [ 2722.141626][ T1204] XFS (loop5): Invalid superblock magic number 08:25:40 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200000000040000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:25:40 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x800000000000000}], 0x0, 0x0) 08:25:40 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000f002000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:25:40 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:25:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x67, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001380)={0x0}}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:25:40 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2730.105099][T31681] XFS (loop0): SB sanity check failed [ 2730.110553][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2730.136134][T31681] XFS (loop0): Unmount and run xfs_repair [ 2730.148649][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2730.163382][T31681] 00000000: 58 46 53 42 00 00 f0 02 00 00 00 00 0b 00 10 00 XFSB............ [ 2730.172613][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2730.181878][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2730.191089][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2730.200216][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2730.212411][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2730.221701][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2730.231028][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2730.240963][ T1260] XFS (loop0): SB validate failed with error -117. [ 2730.247904][ T1255] XFS (loop5): Invalid superblock magic number 08:25:40 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:25:43 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0xa200, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x0, 0x0) 08:25:43 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x900000000000000}], 0x0, 0x0) 08:25:43 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000000b000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:25:43 executing program 2: clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) io_setup(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f00000008c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 08:25:43 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2733.246898][ T1406] XFS (loop5): Invalid superblock magic number [ 2733.253622][ T1404] XFS (loop0): SB sanity check failed [ 2733.259200][ T1404] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2733.295286][ T1404] XFS (loop0): Unmount and run xfs_repair [ 2733.321415][ T1404] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2733.343819][ T1404] 00000000: 58 46 53 42 00 00 00 0b 00 00 00 00 0b 00 10 00 XFSB............ [ 2733.367471][ T1404] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2733.376683][ T1404] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2733.385827][ T1404] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2733.395266][ T1404] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2733.414512][ T1404] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2733.430528][ T1404] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2733.439703][ T1404] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2733.448591][ T1404] XFS (loop0): SB validate failed with error -117. [ 2733.537979][T31681] XFS (loop0): SB sanity check failed [ 2733.543527][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2733.558721][T31681] XFS (loop0): Unmount and run xfs_repair [ 2733.564836][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2733.572213][T31681] 00000000: 58 46 53 42 00 00 00 0b 00 00 00 00 0b 00 10 00 XFSB............ [ 2733.584646][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2733.593532][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2733.605312][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2733.615371][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2733.626586][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2733.636490][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2733.647557][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2733.657713][ T1404] XFS (loop0): SB validate failed with error -117. 08:25:51 executing program 1: syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000009cb0000000000000a4000000000000000000", 0xffffffe5}], 0x2) 08:25:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x13b}}, 0x0) 08:25:51 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:25:51 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xa00000000000000}], 0x0, 0x0) 08:25:51 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001002000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:25:52 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x0, 0x0) [ 2741.494344][T17868] XFS (loop0): SB sanity check failed [ 2741.499865][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2741.525156][T17868] XFS (loop0): Unmount and run xfs_repair [ 2741.532468][ T1678] 9pnet_virtio: no channels available for device ./bus 08:25:52 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2741.539812][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2741.551263][ T1680] 9pnet_virtio: no channels available for device ./bus [ 2741.595946][T17868] 00000000: 58 46 53 42 00 00 10 02 00 00 00 00 0b 00 10 00 XFSB............ [ 2741.625634][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2741.647244][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2741.656601][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2741.669360][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2741.693737][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2741.702675][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2741.715196][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2741.726720][ T1558] XFS (loop0): SB validate failed with error -117. [ 2741.733407][ T1555] XFS (loop5): Invalid superblock magic number [ 2741.904626][ T1555] XFS (loop5): Invalid superblock magic number 08:26:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x15555895, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001380)={0x0}}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1b5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:26:01 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:26:01 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001003000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:26:01 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x0, 0x0) 08:26:01 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xc00000000000000}], 0x0, 0x0) [ 2750.789477][ T1915] 9pnet_virtio: no channels available for device ./bus [ 2750.820459][ T1829] XFS (loop0): SB sanity check failed [ 2750.826029][ T1829] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2750.857920][ T1927] XFS (loop5): Invalid superblock magic number [ 2750.873820][ T1829] XFS (loop0): Unmount and run xfs_repair [ 2750.883045][ T1829] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2750.890668][ T1829] 00000000: 58 46 53 42 00 00 10 03 00 00 00 00 0b 00 10 00 XFSB............ [ 2750.900547][ T1829] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2750.909623][ T1829] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2750.918705][ T1829] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2750.927790][ T1829] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2750.937033][ T1829] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2750.956995][ T1829] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2750.978068][ T1829] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2750.989003][ T1829] XFS (loop0): SB validate failed with error -117. [ 2751.122595][ T1829] XFS (loop0): SB sanity check failed [ 2751.130903][ T1829] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2751.143812][ T1829] XFS (loop0): Unmount and run xfs_repair [ 2751.149616][ T1829] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2751.157476][ T1829] 00000000: 58 46 53 42 00 00 10 03 00 00 00 00 0b 00 10 00 XFSB............ [ 2751.166414][ T1829] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2751.175426][ T1829] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2751.187559][ T1829] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2751.196580][ T1829] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2751.205494][ T1829] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2751.215088][ T1829] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2751.223997][ T1829] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2751.232861][ T1829] XFS (loop0): SB validate failed with error -117. 08:26:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x8b7fbc5e) 08:26:05 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x0, 0x0) 08:26:05 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:26:05 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xd00000000000000}], 0x0, 0x0) 08:26:05 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001004000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2754.974974][ T1971] XFS (loop0): SB sanity check failed [ 2754.980803][ T1974] XFS (loop5): Invalid superblock magic number [ 2754.987181][ T1971] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2754.989777][ T1980] 9pnet_virtio: no channels available for device ./bus 08:26:05 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x0, 0x0) 08:26:05 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2755.059126][ T1971] XFS (loop0): Unmount and run xfs_repair [ 2755.090477][ T1971] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2755.122034][ T2096] 9pnet_virtio: no channels available for device ./bus [ 2755.123715][ T1971] 00000000: 58 46 53 42 00 00 10 04 00 00 00 00 0b 00 10 00 XFSB............ [ 2755.141823][ T1971] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2755.151021][ T1971] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2755.163590][ T1971] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2755.200687][ T1971] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2755.209697][ T1971] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2755.218768][ T1971] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2755.228154][ T1971] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2755.275348][ T1971] XFS (loop0): SB validate failed with error -117. [ 2755.384704][ T1971] XFS (loop0): SB sanity check failed [ 2755.390176][ T1971] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2755.405425][ T1971] XFS (loop0): Unmount and run xfs_repair [ 2755.411207][ T1971] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2755.420420][ T1971] 00000000: 58 46 53 42 00 00 10 04 00 00 00 00 0b 00 10 00 XFSB............ [ 2755.429661][ T1971] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2755.438726][ T1971] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2755.447899][ T1971] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2755.457088][ T1971] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2755.466280][ T1971] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2755.475565][ T1971] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2755.487664][ T1971] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2755.497907][ T1971] XFS (loop0): SB validate failed with error -117. 08:26:14 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x1000000000000000}], 0x0, 0x0) 08:26:14 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x0, 0x0) 08:26:14 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001005000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:26:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000e4", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cc], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:26:14 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:26:14 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) socket$kcm(0x2c, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.mems\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$kcm(r2, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) [ 2764.193778][ T2132] 9pnet_virtio: no channels available for device ./bus [ 2764.232398][T31681] XFS (loop0): SB sanity check failed 08:26:14 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x0, 0x0) 08:26:14 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2764.237981][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2764.278664][ T2131] XFS (loop5): Invalid superblock magic number [ 2764.305898][T31681] XFS (loop0): Unmount and run xfs_repair [ 2764.311683][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2764.341865][T31681] 00000000: 58 46 53 42 00 00 10 05 00 00 00 00 0b 00 10 00 XFSB............ 08:26:14 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x1600000000000000}], 0x0, 0x0) [ 2764.365986][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2764.400604][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 08:26:15 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2764.422126][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2764.425428][ T2153] 9pnet_virtio: no channels available for device ./bus [ 2764.439288][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2764.460052][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 08:26:15 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 08:26:15 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x0, 0x0) [ 2764.478980][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2764.503412][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2764.521532][ T2128] XFS (loop0): SB validate failed with error -117. [ 2764.662821][ T2155] XFS (loop5): Invalid superblock magic number [ 2764.687266][ T2176] 9pnet_virtio: no channels available for device ./bus 08:26:15 executing program 2: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x0, 0x0) 08:26:15 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 2764.818416][ T2155] XFS (loop5): Invalid superblock magic number 08:26:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) ioctl$int_out(r0, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8cT', 0x2761, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = dup2(r0, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f00000014c0)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 08:26:28 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001006000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:26:28 executing program 2: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x0, 0x0) 08:26:28 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 08:26:28 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x2000000000000000}], 0x0, 0x0) 08:26:28 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x34b, 0x0, 0x0, 0x0) 08:26:28 executing program 2: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x0, 0x0) [ 2777.788735][ T2213] XFS (loop0): SB sanity check failed [ 2777.794724][ T2219] XFS (loop5): Invalid superblock magic number [ 2777.810316][ T2213] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2777.823938][ T2213] XFS (loop0): Unmount and run xfs_repair [ 2777.829858][ T2213] XFS (loop0): First 128 bytes of corrupted metadata buffer: 08:26:28 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2777.837990][ T2213] 00000000: 58 46 53 42 00 00 10 06 00 00 00 00 0b 00 10 00 XFSB............ [ 2777.847650][ T2213] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2777.856843][ T2213] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2777.866567][ T2213] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2777.875753][ T2213] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 08:26:28 executing program 2: mkdir(0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x0, 0x0) [ 2777.888188][ T2213] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2777.901991][ T2213] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2777.911342][ T2213] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2777.920690][ T2213] XFS (loop0): SB validate failed with error -117. [ 2777.968030][ T2219] XFS (loop5): Invalid superblock magic number 08:26:28 executing program 2: mkdir(0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x0, 0x0) 08:26:28 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x2010000000000000}], 0x0, 0x0) 08:26:28 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2778.452868][ T2371] XFS (loop5): Invalid superblock magic number [ 2778.583509][ T2371] XFS (loop5): Invalid superblock magic number 08:26:37 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:26:37 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="1ebca274769e620a2725fa0095e0612687ecb86a5c8802b5dba45372943afd874e2f98b579a708728a146d0e0206e73ba8c63cd7dcc6760253ef801b5aa200005e31518aad0923f2813ab922cc576403b5c362bbf87e494135fcfe28f22a5301ca", 0x61, 0x400}], 0x0, 0x0) 08:26:37 executing program 2: mkdir(0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x0, 0x0) 08:26:37 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x2300000000000000}], 0x0, 0x0) 08:26:37 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001007000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:26:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x0) shutdown(r1, 0x0) recvfrom$inet(r0, 0x0, 0xd997, 0x0, 0x0, 0x800e00636) shutdown(r0, 0x0) 08:26:37 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x0, 0x0) [ 2787.165113][ T2402] XFS (loop5): Invalid superblock magic number [ 2787.192495][ T2439] 9pnet_virtio: no channels available for device ./bus [ 2787.213345][ T1668] XFS (loop0): SB sanity check failed [ 2787.219004][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2787.242712][ T1668] XFS (loop0): Unmount and run xfs_repair 08:26:37 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x0, 0x0) [ 2787.262114][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2787.271629][ T1668] 00000000: 58 46 53 42 00 00 10 07 00 00 00 00 0b 00 10 00 XFSB............ [ 2787.280898][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2787.290056][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2787.299268][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ 08:26:37 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2787.308268][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2787.317611][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2787.317845][ T2402] XFS (loop5): Invalid superblock magic number [ 2787.326660][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2787.341836][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2787.350992][ T2410] XFS (loop0): SB validate failed with error -117. 08:26:38 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x0, 0x0) [ 2787.463547][ T2548] 9pnet_virtio: no channels available for device ./bus 08:26:38 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:26:38 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x2600000000000000}], 0x0, 0x0) 08:26:38 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001008000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2787.721067][ T2674] 9pnet_virtio: no channels available for device ./bus [ 2787.758649][ T2584] XFS (loop5): Invalid superblock magic number [ 2788.029380][ T1668] XFS (loop0): SB sanity check failed [ 2788.034892][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2788.046739][ T1668] XFS (loop0): Unmount and run xfs_repair [ 2788.052476][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2788.059870][ T1668] 00000000: 58 46 53 42 00 00 10 08 00 00 00 00 0b 00 10 00 XFSB............ [ 2788.068740][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2788.077708][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2788.086611][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2788.095734][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2788.104746][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2788.113768][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2788.122734][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2788.132270][ T2691] XFS (loop0): SB validate failed with error -117. 08:26:46 executing program 3: 08:26:46 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:26:46 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x0, 0x0) 08:26:46 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x2c01000000000000}], 0x0, 0x0) 08:26:46 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001009000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:26:46 executing program 1: 08:26:46 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x0, 0x0) 08:26:47 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x0, 0x0) [ 2796.439637][ T2722] XFS (loop5): Invalid superblock magic number [ 2796.446779][ T1668] XFS (loop0): SB sanity check failed [ 2796.452249][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2796.492437][ T1668] XFS (loop0): Unmount and run xfs_repair [ 2796.514380][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2796.534116][ T1668] 00000000: 58 46 53 42 00 00 10 09 00 00 00 00 0b 00 10 00 XFSB............ [ 2796.544071][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2796.552988][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2796.562036][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2796.571147][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 08:26:47 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x0, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:26:47 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x3f00000000000000}], 0x0, 0x0) [ 2796.585768][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2796.594861][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2796.605636][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2796.623807][ T2713] XFS (loop0): SB validate failed with error -117. 08:26:47 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000340)='./bus\x00', 0x0, &(0x7f0000000480)='9p\x00', 0x0, 0x0) 08:26:47 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x0, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2796.808107][ T2856] XFS (loop5): Invalid superblock magic number [ 2796.839299][ T1668] XFS (loop0): SB sanity check failed [ 2796.844883][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2796.872598][ T1668] XFS (loop0): Unmount and run xfs_repair [ 2796.878575][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2796.893804][ T1668] 00000000: 58 46 53 42 00 00 10 09 00 00 00 00 0b 00 10 00 XFSB............ [ 2796.903971][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2796.912930][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2796.921900][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2796.930830][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2796.939751][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2796.948676][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2796.957678][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2796.966724][ T2713] XFS (loop0): SB validate failed with error -117. 08:26:55 executing program 3: 08:26:55 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000340)='./bus\x00', 0x0, &(0x7f0000000480)='9p\x00', 0x0, 0x0) 08:26:55 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100a000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:26:55 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x4000000000000000}], 0x0, 0x0) 08:26:55 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x0, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2804.768216][ T2905] XFS (loop5): Invalid superblock magic number [ 2804.787587][ T2901] XFS (loop0): SB sanity check failed [ 2804.797544][ T2901] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2804.847097][ T2901] XFS (loop0): Unmount and run xfs_repair [ 2804.852910][ T2901] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2804.860713][ T2901] 00000000: 58 46 53 42 00 00 10 0a 00 00 00 00 0b 00 10 00 XFSB............ [ 2804.921081][ T2901] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2804.937807][ T2901] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2804.965223][ T2901] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2804.977039][ T2901] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2804.987456][ T2901] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2804.998921][ T2901] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2805.007923][ T2901] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2805.016893][ T2901] XFS (loop0): SB validate failed with error -117. 08:26:58 executing program 1: 08:26:58 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000340)='./bus\x00', 0x0, &(0x7f0000000480)='9p\x00', 0x0, 0x0) 08:26:58 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x0, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:26:58 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x4001000000000000}], 0x0, 0x0) 08:26:58 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100c000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:26:58 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0) [ 2807.671757][ T3049] XFS (loop5): Invalid superblock magic number [ 2807.700813][ T3051] XFS (loop0): SB sanity check failed [ 2807.724102][ T3051] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2807.763772][ T3051] XFS (loop0): Unmount and run xfs_repair [ 2807.769700][ T3051] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2807.777563][ T3051] 00000000: 58 46 53 42 00 00 10 0c 00 00 00 00 0b 00 10 00 XFSB............ [ 2807.787142][ T3051] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2807.803195][ T3051] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2807.812732][ T3051] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ 08:26:58 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x0, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2807.833464][ T3051] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2807.852140][ T3051] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2807.873793][ T3051] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2807.890681][ T3051] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2807.916336][ T3049] XFS (loop5): Invalid superblock magic number [ 2807.923143][ T3051] XFS (loop0): SB validate failed with error -117. [ 2808.133183][ T1668] XFS (loop0): SB sanity check failed [ 2808.138617][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2808.150441][ T1668] XFS (loop0): Unmount and run xfs_repair [ 2808.156255][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2808.163731][ T1668] 00000000: 58 46 53 42 00 00 10 0c 00 00 00 00 0b 00 10 00 XFSB............ [ 2808.172756][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2808.182011][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2808.191007][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2808.199884][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2808.208758][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2808.217660][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2808.226646][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2808.236593][ T3051] XFS (loop0): SB validate failed with error -117. 08:27:09 executing program 3: 08:27:09 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0) 08:27:09 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x4800000000000000}], 0x0, 0x0) 08:27:09 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x0, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:27:09 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100d000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2819.317341][ T3351] XFS (loop0): SB sanity check failed [ 2819.330107][ T3351] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2819.346930][ T3341] XFS (loop5): Invalid superblock magic number [ 2819.387149][ T3351] XFS (loop0): Unmount and run xfs_repair [ 2819.393069][ T3351] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2819.400906][ T3351] 00000000: 58 46 53 42 00 00 10 0d 00 00 00 00 0b 00 10 00 XFSB............ [ 2819.410145][ T3351] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2819.420719][ T3351] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2819.477008][ T3351] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2819.486586][ T3351] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2819.512452][ T3351] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2819.521818][ T3351] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2819.531305][ T3341] XFS (loop5): Invalid superblock magic number [ 2819.540993][ T3351] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2819.557783][ T3351] XFS (loop0): SB validate failed with error -117. [ 2819.736275][ T1668] XFS (loop0): SB sanity check failed [ 2819.741776][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2819.759117][ T1668] XFS (loop0): Unmount and run xfs_repair [ 2819.765437][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2819.772965][ T1668] 00000000: 58 46 53 42 00 00 10 0d 00 00 00 00 0b 00 10 00 XFSB............ [ 2819.785420][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2819.796072][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2819.822217][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2819.833287][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2819.842411][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2819.851520][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2819.860652][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2819.869783][ T3351] XFS (loop0): SB validate failed with error -117. 08:27:11 executing program 1: 08:27:11 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0) 08:27:11 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x0, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:27:11 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x4c00000000000000}], 0x0, 0x0) 08:27:11 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100e000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:27:11 executing program 2: pipe(&(0x7f0000001500)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) dup(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 08:27:11 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x0, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2821.173446][T31681] XFS (loop0): SB sanity check failed [ 2821.179160][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2821.191292][T31681] XFS (loop0): Unmount and run xfs_repair [ 2821.197230][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2821.205715][T31681] 00000000: 58 46 53 42 00 00 10 0e 00 00 00 00 0b 00 10 00 XFSB............ [ 2821.215028][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2821.224154][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2821.233351][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2821.242475][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2821.251717][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2821.262445][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2821.271625][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2821.280851][ T3414] XFS (loop0): SB validate failed with error -117. [ 2821.287458][ T3406] XFS (loop5): Invalid superblock magic number 08:27:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x32315559}}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) 08:27:18 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x0, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:27:18 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x5003000000000000}], 0x0, 0x0) 08:27:18 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001010000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:27:18 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 2827.671584][ T3479] XFS (loop0): SB sanity check failed [ 2827.688556][ T3479] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2827.700860][ T3479] XFS (loop0): Unmount and run xfs_repair [ 2827.704109][ T3483] XFS (loop5): Invalid superblock magic number [ 2827.706781][ T3479] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2827.721598][ T3479] 00000000: 58 46 53 42 00 00 10 10 00 00 00 00 0b 00 10 00 XFSB............ [ 2827.731180][ T3479] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2827.740293][ T3479] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2827.749365][ T3479] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2827.758613][ T3479] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2827.768146][ T3479] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2827.777217][ T3479] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2827.786345][ T3479] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2827.795462][ T3479] XFS (loop0): SB validate failed with error -117. [ 2827.947444][ T1668] XFS (loop0): SB sanity check failed [ 2827.953170][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2827.968101][ T1668] XFS (loop0): Unmount and run xfs_repair [ 2827.974759][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2827.982284][ T1668] 00000000: 58 46 53 42 00 00 10 10 00 00 00 00 0b 00 10 00 XFSB............ [ 2827.994293][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2828.003359][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2828.012553][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2828.021618][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2828.030532][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2828.039646][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2828.048533][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2828.057424][ T3479] XFS (loop0): SB validate failed with error -117. 08:27:19 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) eventfd2(0x0, 0x0) eventfd2(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000200)={0x0, {'\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdfxr\xc0U?\xde\x86\x00', '\x00', &(0x7f0000000400)=""/1, 0x1}}, 0x120) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a06, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040), 0xb5}], 0x8) 08:27:19 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:27:19 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x5802000000000000}], 0x0, 0x0) 08:27:19 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001023000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2829.409055][ T3626] XFS (loop5): Invalid superblock magic number [ 2829.428254][ T3622] XFS (loop0): SB sanity check failed [ 2829.446829][ T3622] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 08:27:20 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:27:20 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x6403000000000000}], 0x0, 0x0) [ 2829.540537][ T3622] XFS (loop0): Unmount and run xfs_repair [ 2829.559681][ T3622] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2829.567353][ T3622] 00000000: 58 46 53 42 00 00 10 23 00 00 00 00 0b 00 10 00 XFSB...#........ [ 2829.579720][ T3622] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 08:27:20 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2829.609509][ T3622] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2829.669624][ T3622] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2829.687667][ T3825] XFS (loop5): Invalid superblock magic number [ 2829.710154][ T3622] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2829.719356][ T3622] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2829.753812][ T3622] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2829.778567][ T3622] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2829.802709][ T3622] XFS (loop0): SB validate failed with error -117. [ 2829.818175][ T3825] XFS (loop5): Invalid superblock magic number 08:27:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r2, &(0x7f00000017c0), 0x1b4, 0x500000000000000) 08:27:27 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:27:27 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x6800000000000000}], 0x0, 0x0) 08:27:27 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000102e000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:27:27 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:27:27 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 2836.987707][T31681] XFS (loop0): SB sanity check failed [ 2836.993334][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2837.007043][ T4006] XFS (loop5): Invalid superblock magic number [ 2837.032386][T31681] XFS (loop0): Unmount and run xfs_repair 08:27:27 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2837.056081][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2837.063529][T31681] 00000000: 58 46 53 42 00 00 10 2e 00 00 00 00 0b 00 10 00 XFSB............ [ 2837.072641][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2837.081652][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2837.090548][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2837.099530][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2837.117368][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2837.126717][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2837.135725][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2837.146349][ T4008] XFS (loop0): SB validate failed with error -117. 08:27:27 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x6c00000000000000}], 0x0, 0x0) 08:27:27 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2837.363861][ T1668] XFS (loop0): SB sanity check failed [ 2837.372328][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2837.387403][ T1668] XFS (loop0): Unmount and run xfs_repair [ 2837.393165][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2837.400887][ T1668] 00000000: 58 46 53 42 00 00 10 2e 00 00 00 00 0b 00 10 00 XFSB............ [ 2837.409836][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2837.418715][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2837.427609][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2837.436654][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2837.445604][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2837.454597][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2837.463477][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2837.475583][ T4008] XFS (loop0): SB validate failed with error -117. 08:27:28 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:27:28 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001038000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2837.622962][ T4245] XFS (loop5): Invalid superblock magic number 08:27:28 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2837.864897][ T4245] XFS (loop5): Invalid superblock magic number [ 2837.898065][ T1668] XFS (loop0): SB sanity check failed [ 2837.903781][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2837.915808][ T1668] XFS (loop0): Unmount and run xfs_repair [ 2837.921629][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2837.929118][ T1668] 00000000: 58 46 53 42 00 00 10 38 00 00 00 00 0b 00 10 00 XFSB...8........ [ 2837.938751][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2837.947646][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2837.956597][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2837.965486][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2837.974373][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2837.983229][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2837.992145][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2838.001064][ T4266] XFS (loop0): SB validate failed with error -117. 08:27:36 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:27:36 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x7400000000000000}], 0x0, 0x0) 08:27:36 executing program 3: clone(0x28b84900, 0x0, 0x0, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) 08:27:36 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001048000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:27:36 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 2846.260778][ T4310] XFS (loop5): Invalid superblock magic number [ 2846.267213][ T4313] XFS (loop0): SB sanity check failed [ 2846.272959][ T4313] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2846.308742][ T4313] XFS (loop0): Unmount and run xfs_repair [ 2846.314960][ T4313] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2846.322538][ T4313] 00000000: 58 46 53 42 00 00 10 48 00 00 00 00 0b 00 10 00 XFSB...H........ [ 2846.335387][ T4313] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2846.346488][ T4313] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2846.355515][ T4313] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2846.364893][ T4313] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2846.374549][ T4313] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2846.383603][ T4313] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2846.396801][ T4313] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2846.405985][ T4313] XFS (loop0): SB validate failed with error -117. [ 2846.427229][ T4310] XFS (loop5): Invalid superblock magic number [ 2846.472647][T31681] XFS (loop0): SB sanity check failed [ 2846.478312][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2846.490449][T31681] XFS (loop0): Unmount and run xfs_repair [ 2846.497090][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2846.504910][T31681] 00000000: 58 46 53 42 00 00 10 48 00 00 00 00 0b 00 10 00 XFSB...H........ [ 2846.513979][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2846.523058][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2846.536654][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2846.546611][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2846.555845][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2846.565037][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2846.574036][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2846.583451][ T4313] XFS (loop0): SB validate failed with error -117. 08:27:38 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:27:38 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:27:38 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x7a00000000000000}], 0x0, 0x0) 08:27:38 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000104c000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2847.862349][ T1668] XFS (loop0): SB sanity check failed [ 2847.868351][ T4460] XFS (loop5): Invalid superblock magic number [ 2847.868436][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2847.887025][ T1668] XFS (loop0): Unmount and run xfs_repair [ 2847.892887][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2847.900618][ T1668] 00000000: 58 46 53 42 00 00 10 4c 00 00 00 00 0b 00 10 00 XFSB...L........ 08:27:38 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2847.912714][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2847.923722][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2847.932645][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2847.945086][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2847.956124][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2847.965282][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2847.974599][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2847.983596][ T4457] XFS (loop0): SB validate failed with error -117. [ 2848.101198][ T4460] XFS (loop5): Invalid superblock magic number 08:27:38 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2848.158179][ T4457] XFS (loop0): SB sanity check failed [ 2848.177919][ T4457] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 08:27:38 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x7e0c000000000000}], 0x0, 0x0) [ 2848.233740][ T4457] XFS (loop0): Unmount and run xfs_repair [ 2848.241002][ T4457] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2848.251169][ T4457] 00000000: 58 46 53 42 00 00 10 4c 00 00 00 00 0b 00 10 00 XFSB...L........ [ 2848.260222][ T4457] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2848.269197][ T4457] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2848.278445][ T4457] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2848.287457][ T4457] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2848.296615][ T4457] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2848.305894][ T4457] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2848.314876][ T4457] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2848.323868][ T4457] XFS (loop0): SB validate failed with error -117. 08:27:39 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:27:39 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001060000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2848.510565][ T4706] XFS (loop5): Invalid superblock magic number [ 2848.772821][ T1668] XFS (loop0): SB sanity check failed [ 2848.778376][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2848.790349][ T1668] XFS (loop0): Unmount and run xfs_repair [ 2848.796202][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2848.803742][ T1668] 00000000: 58 46 53 42 00 00 10 60 00 00 00 00 0b 00 10 00 XFSB...`........ [ 2848.812726][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2848.821826][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2848.830863][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2848.839823][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2848.848696][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2848.857633][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2848.866549][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2848.875615][ T4818] XFS (loop0): SB validate failed with error -117. [ 2848.951241][T31681] XFS (loop0): SB sanity check failed [ 2848.958946][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2848.971315][T31681] XFS (loop0): Unmount and run xfs_repair [ 2848.977459][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2848.985153][T31681] 00000000: 58 46 53 42 00 00 10 60 00 00 00 00 0b 00 10 00 XFSB...`........ [ 2848.994235][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2849.003092][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2849.012451][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2849.021590][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2849.033822][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2849.042726][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2849.051967][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2849.061217][ T4818] XFS (loop0): SB validate failed with error -117. 08:27:48 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x0, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @remote}, 0x24a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:27:48 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:27:48 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x8001000000000000}], 0x0, 0x0) [ 2857.609685][ T4846] XFS (loop5): Invalid superblock magic number [ 2857.688669][ T4846] XFS (loop5): Invalid superblock magic number 08:27:49 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:27:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:27:49 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001068000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:27:49 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:27:49 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x8cffffff00000000}], 0x0, 0x0) [ 2859.227293][ T4880] XFS (loop5): Invalid superblock magic number [ 2859.234363][ T4871] XFS (loop0): SB sanity check failed [ 2859.239866][ T4871] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2859.256159][ T4871] XFS (loop0): Unmount and run xfs_repair [ 2859.262007][ T4871] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2859.270815][ T4871] 00000000: 58 46 53 42 00 00 10 68 00 00 00 00 0b 00 10 00 XFSB...h........ 08:27:49 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2859.310463][ T4871] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2859.349681][ T4871] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2859.363869][ T4871] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2859.377730][ T4871] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2859.377991][ T4880] XFS (loop5): Invalid superblock magic number [ 2859.387205][ T4871] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2859.402365][ T4871] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2859.412497][ T4871] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2859.422270][ T4871] XFS (loop0): SB validate failed with error -117. 08:27:50 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:27:50 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x8e03000000000000}], 0x0, 0x0) [ 2859.568892][ T1668] XFS (loop0): SB sanity check failed [ 2859.575108][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2859.623955][ T1668] XFS (loop0): Unmount and run xfs_repair [ 2859.636345][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2859.644765][ T1668] 00000000: 58 46 53 42 00 00 10 68 00 00 00 00 0b 00 10 00 XFSB...h........ [ 2859.654015][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2859.662959][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2859.672206][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2859.681345][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2859.690602][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2859.703843][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2859.712791][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2859.722767][ T4871] XFS (loop0): SB validate failed with error -117. 08:27:50 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000106c000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2859.801286][ T5029] XFS (loop5): Invalid superblock magic number [ 2860.071587][T31681] XFS (loop0): SB sanity check failed [ 2860.077152][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2860.089006][T31681] XFS (loop0): Unmount and run xfs_repair [ 2860.094737][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2860.102091][T31681] 00000000: 58 46 53 42 00 00 10 6c 00 00 00 00 0b 00 10 00 XFSB...l........ [ 2860.111062][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2860.120029][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2860.128966][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2860.137826][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2860.146803][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2860.155672][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2860.164610][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2860.173488][ T5134] XFS (loop0): SB validate failed with error -117. [ 2860.283345][ T1668] XFS (loop0): SB sanity check failed [ 2860.291963][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2860.304241][ T1668] XFS (loop0): Unmount and run xfs_repair [ 2860.310057][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2860.317582][ T1668] 00000000: 58 46 53 42 00 00 10 6c 00 00 00 00 0b 00 10 00 XFSB...l........ [ 2860.326662][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2860.335635][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2860.344801][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2860.353785][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2860.362830][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2860.371848][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2860.380940][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2860.390084][ T5134] XFS (loop0): SB validate failed with error -117. 08:27:53 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\'', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x807a00, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000004c0), 0x12) 08:27:53 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:27:53 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x9c00000000000000}], 0x0, 0x0) [ 2862.741752][ T5159] XFS (loop5): Invalid superblock magic number [ 2862.860797][ T5159] XFS (loop5): Invalid superblock magic number 08:28:01 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:28:01 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{}, "018000da7d469c04", "02a839a6c7986edc3f8a6200c88e37de79b97525cedefaa0bded32e7d887ec99", "0000ef00", "00943f4aece800"}, 0x38) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)="0a99b3e3930870dcd4c6d68e6abe088af4ccdbe6dc85ed63bcee4834cd53f8a19cfad53574230c17377bd7b3eb23d9008f0c69b08db538753bcf550f05d219f8c6ca03228dd8d293261ba079190f47d70c95a97fe5d4cb7511e180f73e8ef5e2f7ee4f47c1a036e37e87414e615396eeb918828e", 0x74}, {&(0x7f0000000840)="b5252522629f34a16eef84ce1b0063a44d2793e337dc2c6bb2d88107b89a1516610f2003d59c73b5c7e008a287d2a1d473414b1adeb4ca87742298b064ae974e919c80525175804799682d67fca4f9defe5754c03f", 0x55}], 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f0000000740)="81", 0x1, 0x0, 0x0, 0x0) r1 = getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x4000000000015, 0x0) ptrace(0x10, r1) ptrace$getsig(0x18, 0x0, 0x0, 0x0) pipe(&(0x7f0000000680)) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 08:28:01 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001074000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:28:01 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x9c03000000000000}], 0x0, 0x0) 08:28:01 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) tkill(r0, 0x2) 08:28:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xd997, 0x0, 0x0, 0x800e00636) shutdown(r0, 0x0) [ 2870.579618][ T5188] XFS (loop0): SB sanity check failed [ 2870.585747][ T5184] XFS (loop5): Invalid superblock magic number [ 2870.599225][ T5188] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 08:28:01 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2870.626643][ T5188] XFS (loop0): Unmount and run xfs_repair [ 2870.632452][ T5188] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2870.641981][ T5188] 00000000: 58 46 53 42 00 00 10 74 00 00 00 00 0b 00 10 00 XFSB...t........ [ 2870.651227][ T5188] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2870.663425][ T5188] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2870.672515][ T5188] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2870.686010][ T5188] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2870.700569][ T5188] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2870.711457][ T5188] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2870.722191][ T5188] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2870.732903][ T5188] XFS (loop0): SB validate failed with error -117. [ 2870.742615][ T5184] XFS (loop5): Invalid superblock magic number 08:28:01 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xa000000000000000}], 0x0, 0x0) 08:28:01 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2870.900649][T31681] XFS (loop0): SB sanity check failed [ 2870.906409][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2870.918627][T31681] XFS (loop0): Unmount and run xfs_repair [ 2870.924570][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2870.932025][T31681] 00000000: 58 46 53 42 00 00 10 74 00 00 00 00 0b 00 10 00 XFSB...t........ [ 2870.941128][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2870.950253][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2870.968913][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2870.977973][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2870.998806][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2871.012276][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2871.021547][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2871.030778][ T5188] XFS (loop0): SB validate failed with error -117. 08:28:01 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000107a000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:28:01 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2871.208461][ T5434] XFS (loop5): Invalid superblock magic number [ 2871.284974][ T5446] XFS (loop0): SB sanity check failed [ 2871.290488][ T5446] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2871.302887][ T5446] XFS (loop0): Unmount and run xfs_repair [ 2871.309086][ T5446] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2871.316614][ T5446] 00000000: 58 46 53 42 00 00 10 7a 00 00 00 00 0b 00 10 00 XFSB...z........ [ 2871.325623][ T5446] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2871.334763][ T5446] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2871.343967][ T5446] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2871.353133][ T5446] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2871.362509][ T5446] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2871.372467][ T5446] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2871.381667][ T5446] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2871.391010][ T5446] XFS (loop0): SB validate failed with error -117. [ 2871.398816][ T5434] XFS (loop5): Invalid superblock magic number 08:28:02 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:28:10 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x5003000000000000}], 0x0, 0x0) 08:28:10 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xaccd030000000000}], 0x0, 0x0) 08:28:10 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000107e000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:28:10 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:28:10 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) tkill(r0, 0x2) 08:28:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/40, 0x28}, {0x0}, {0x0}], 0x3}, 0x80142) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x893f, 0x0, 0x0, 0x800e00519) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x50, &(0x7f0000000140)={0x0, {{0x10, 0x2}}}, 0x90) recvfrom$inet(r1, 0x0, 0x10201, 0x0, 0x0, 0x800e0051d) shutdown(r1, 0x0) [ 2879.828898][ T5595] XFS (loop5): Invalid superblock magic number [ 2879.837979][T25642] XFS (loop0): SB sanity check failed [ 2879.843523][T25642] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2879.862493][T25642] XFS (loop0): Unmount and run xfs_repair [ 2879.868401][T25642] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2879.876134][T25642] 00000000: 58 46 53 42 00 00 10 7e 00 00 00 00 0b 00 10 00 XFSB...~........ [ 2879.885348][T25642] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2879.894406][T25642] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2879.903330][T25642] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2879.912368][T25642] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 08:28:10 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:28:10 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001082000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2879.921689][T25642] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2879.931024][T25642] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2879.940048][T25642] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2879.949129][ T5599] XFS (loop0): SB validate failed with error -117. [ 2880.067797][ T5595] XFS (loop5): Invalid superblock magic number 08:28:10 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:28:10 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xae00000000000000}], 0x0, 0x0) [ 2880.361371][ T5726] XFS (loop0): SB sanity check failed [ 2880.368047][ T5726] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2880.397407][ T5726] XFS (loop0): Unmount and run xfs_repair 08:28:11 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2880.418240][ T5726] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2880.444836][ T5839] XFS (loop5): Invalid superblock magic number [ 2880.450315][ T5726] 00000000: 58 46 53 42 00 00 10 82 00 00 00 00 0b 00 10 00 XFSB............ [ 2880.471469][ T5726] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2880.481224][ T5726] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2880.490275][ T5726] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2880.500372][ T5726] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2880.548250][ T5726] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2880.564472][ T5726] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2880.573603][ T5726] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2880.585457][ T5726] XFS (loop0): SB validate failed with error -117. [ 2880.612486][ T5839] XFS (loop5): Invalid superblock magic number 08:28:11 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:28:21 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x5003000000000000}], 0x0, 0x0) 08:28:21 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xc003000000000000}], 0x0, 0x0) 08:28:21 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010ae000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:28:21 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:28:21 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) tkill(r0, 0x2) 08:28:21 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001082000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:28:21 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2891.217933][T31681] XFS (loop0): SB sanity check failed [ 2891.223427][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2891.254206][ T6084] XFS (loop5): Invalid superblock magic number [ 2891.270029][T31681] XFS (loop0): Unmount and run xfs_repair [ 2891.276025][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2891.283564][T31681] 00000000: 58 46 53 42 00 00 10 ae 00 00 00 00 0b 00 10 00 XFSB............ [ 2891.292581][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2891.301625][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2891.310694][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2891.319648][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2891.328543][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2891.337445][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2891.346327][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2891.355465][ T6089] XFS (loop0): SB validate failed with error -117. 08:28:22 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xc400000000000000}], 0x0, 0x0) 08:28:22 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2891.527146][T31681] XFS (loop0): SB sanity check failed [ 2891.532649][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2891.547514][T31681] XFS (loop0): Unmount and run xfs_repair [ 2891.562091][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2891.570270][T31681] 00000000: 58 46 53 42 00 00 10 ae 00 00 00 00 0b 00 10 00 XFSB............ [ 2891.579187][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2891.588041][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2891.597037][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2891.605967][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2891.614868][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2891.623796][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2891.632652][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2891.641813][ T6089] XFS (loop0): SB validate failed with error -117. 08:28:22 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010c4000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2891.867714][ T1668] XFS (loop0): SB sanity check failed [ 2891.873250][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2891.884088][ T6133] XFS (loop5): Invalid superblock magic number [ 2891.917176][ T1668] XFS (loop0): Unmount and run xfs_repair [ 2891.922955][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2891.933152][ T1668] 00000000: 58 46 53 42 00 00 10 c4 00 00 00 00 0b 00 10 00 XFSB............ [ 2891.942095][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2891.950998][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 08:28:22 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2891.960017][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2891.969075][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2891.978082][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2891.986983][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2891.995844][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2892.004729][ T6218] XFS (loop0): SB validate failed with error -117. 08:28:22 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010f4000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2892.083071][ T6133] XFS (loop5): Invalid superblock magic number [ 2892.298708][T31681] XFS (loop0): SB sanity check failed [ 2892.304251][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2892.316348][T31681] XFS (loop0): Unmount and run xfs_repair [ 2892.322171][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2892.329662][T31681] 00000000: 58 46 53 42 00 00 10 f4 00 00 00 00 0b 00 10 00 XFSB............ [ 2892.338810][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2892.347879][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2892.357067][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2892.366177][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2892.375231][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2892.384373][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2892.393510][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2892.402719][ T6363] XFS (loop0): SB validate failed with error -117. 08:28:33 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0x5003000000000000}], 0x0, 0x0) 08:28:33 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xda02000000000000}], 0x0, 0x0) 08:28:33 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:28:33 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000102c010000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:28:33 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 2902.565113][ T6382] XFS (loop0): SB sanity check failed [ 2902.570713][ T6382] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2902.592534][ T6382] XFS (loop0): Unmount and run xfs_repair [ 2902.610590][ T6382] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2902.620553][ T6382] 00000000: 58 46 53 42 00 00 10 2c 01 00 00 00 0b 00 10 00 XFSB...,........ [ 2902.629964][ T6382] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2902.639439][ T6382] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2902.643868][ T6394] XFS (loop5): Invalid superblock magic number [ 2902.649438][ T6382] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2902.663755][ T6382] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2902.674847][ T6382] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2902.684062][ T6382] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2902.692951][ T6382] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2902.702148][ T6382] XFS (loop0): SB validate failed with error -117. [ 2902.809720][ T6394] XFS (loop5): Invalid superblock magic number [ 2902.821242][T31681] XFS (loop0): SB sanity check failed [ 2902.827050][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2902.876923][T31681] XFS (loop0): Unmount and run xfs_repair [ 2902.883482][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2902.892234][T31681] 00000000: 58 46 53 42 00 00 10 2c 01 00 00 00 0b 00 10 00 XFSB...,........ [ 2902.913495][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2902.945992][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2902.955497][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2902.967029][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2902.976474][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2902.988108][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2902.997429][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2903.008816][ T6382] XFS (loop0): SB validate failed with error -117. 08:28:34 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001082000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:28:34 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:28:34 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xe401000000000000}], 0x0, 0x0) 08:28:34 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001080010000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2903.746491][ T6431] XFS (loop5): Invalid superblock magic number [ 2903.755093][T31681] XFS (loop0): SB sanity check failed [ 2903.760604][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2903.786754][T31681] XFS (loop0): Unmount and run xfs_repair [ 2903.792579][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2903.800095][T31681] 00000000: 58 46 53 42 00 00 10 80 01 00 00 00 0b 00 10 00 XFSB............ [ 2903.809020][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2903.818102][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2903.830462][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ 08:28:34 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2903.839422][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2903.851709][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2903.860646][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2903.869584][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2903.878496][ T6434] XFS (loop0): SB validate failed with error -117. 08:28:34 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001040020000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2903.943607][ T6431] XFS (loop5): Invalid superblock magic number 08:28:34 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2904.139741][ T1668] XFS (loop0): SB sanity check failed [ 2904.145339][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2904.165471][ T1668] XFS (loop0): Unmount and run xfs_repair [ 2904.174366][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2904.182086][ T1668] 00000000: 58 46 53 42 00 00 10 40 02 00 00 00 0b 00 10 00 XFSB...@........ [ 2904.191221][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2904.200933][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2904.210275][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2904.219272][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2904.259346][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2904.268603][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2904.281446][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2904.290935][ T6562] XFS (loop0): SB validate failed with error -117. [ 2904.397537][ T6562] XFS (loop0): SB sanity check failed [ 2904.403089][ T6562] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2904.415496][ T6562] XFS (loop0): Unmount and run xfs_repair [ 2904.421272][ T6562] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2904.436122][ T6562] 00000000: 58 46 53 42 00 00 10 40 02 00 00 00 0b 00 10 00 XFSB...@........ [ 2904.445489][ T6562] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2904.454562][ T6562] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2904.463457][ T6562] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2904.472609][ T6562] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2904.481611][ T6562] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2904.490591][ T6562] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2904.499572][ T6562] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2904.508601][ T6562] XFS (loop0): SB validate failed with error -117. 08:28:46 executing program 1: prctl$PR_MCE_KILL(0x21, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffe57f00002005ffffa6fffff7", @ANYRES32, @ANYBLOB="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"], 0x3}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) fcntl$getown(r1, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000100)=0x2) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000780)={{{@in=@loopback, @in=@multicast1}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000b80)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008000d000300000008a2726f81ae403c753a1bde0835e0ce7cae6024c7283420d3ccf9bb5eab"], 0x30}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) r10 = epoll_create1(0x0) r11 = epoll_create1(0x0) r12 = epoll_create1(0x0) r13 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f0000000040)={0x11}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f0000000200)) r14 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r14, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r11, &(0x7f00000001c0)) fcntl$dupfd(r11, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_ADDRESS={0xc, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x34}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x2a00, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002800ffcd"], 0x1}}, 0x30008051) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0xffffffffffffffdd) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:28:46 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xf6ffffff00000000}], 0x0, 0x0) 08:28:46 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:28:46 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001058020000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:28:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 2916.049894][ T6702] XFS (loop5): Invalid superblock magic number [ 2916.061403][ T6699] XFS (loop0): SB sanity check failed [ 2916.090413][ T6699] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2916.103087][ T6699] XFS (loop0): Unmount and run xfs_repair [ 2916.114866][ T6699] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2916.122440][ T6699] 00000000: 58 46 53 42 00 00 10 58 02 00 00 00 0b 00 10 00 XFSB...X........ [ 2916.144388][ T6699] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2916.154838][ T6699] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2916.172310][ T6699] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2916.181505][ T6699] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2916.190554][ T6699] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2916.199543][ T6699] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2916.208651][ T6699] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2916.217230][ T6702] XFS (loop5): Invalid superblock magic number [ 2916.217658][ T6699] XFS (loop0): SB validate failed with error -117. [ 2916.457824][ T1668] XFS (loop0): SB sanity check failed [ 2916.463434][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2916.486512][ T1668] XFS (loop0): Unmount and run xfs_repair [ 2916.492377][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2916.500057][ T1668] 00000000: 58 46 53 42 00 00 10 58 02 00 00 00 0b 00 10 00 XFSB...X........ [ 2916.509014][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2916.517928][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2916.526817][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2916.535692][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2916.544584][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2916.553472][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2916.562350][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2916.571252][ T6699] XFS (loop0): SB validate failed with error -117. 08:28:49 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001082000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:28:49 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:28:49 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xf703000000000000}], 0x0, 0x0) 08:28:49 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000030000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:28:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:28:49 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2919.336388][ T6850] XFS (loop5): Invalid superblock magic number [ 2919.354014][ T6847] XFS (loop0): SB sanity check failed [ 2919.359540][ T6847] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2919.372120][ T6847] XFS (loop0): Unmount and run xfs_repair [ 2919.379353][ T6847] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2919.391674][ T6847] 00000000: 58 46 53 42 00 00 10 00 03 00 00 00 0b 00 10 00 XFSB............ [ 2919.403417][ T6847] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2919.414788][ T6847] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2919.424016][ T6847] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2919.434041][ T6847] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2919.443092][ T6847] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2919.452529][ T6847] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2919.461968][ T6847] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2919.471322][ T6847] XFS (loop0): SB validate failed with error -117. 08:28:50 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xf9fdffff00000000}], 0x0, 0x0) [ 2919.783478][ T6985] XFS (loop5): Invalid superblock magic number 08:29:01 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000000)) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000340)) r4 = fcntl$dupfd(r0, 0x406, r2) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000040)={0x4, 0x0, 0xffffffff, 0x6}) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) syz_open_dev$cec(0x0, 0x3, 0x2) openat$autofs(0xffffffffffffff9c, 0x0, 0x800, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x3, &(0x7f0000000000)={@loopback, @local}, 0x19b) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x102200, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}], 0x20) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x2d, &(0x7f0000000200)={0x3, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x2f6) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) write$P9_RRENAME(r8, &(0x7f0000000140)={0x7, 0x15, 0x2}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x20000000000000) pipe(&(0x7f0000000280)) socket$inet_udp(0x2, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ubi_ctrl\x00', 0x484180, 0x0) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = getpid() r10 = getpid() rt_tgsigqueueinfo(r10, r10, 0x13, &(0x7f0000000180)) ptrace(0x10, r10) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r11, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ptrace(0x8, r9) 08:29:01 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:29:01 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000103a030000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:29:01 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xff00000000000000}], 0x0, 0x0) 08:29:01 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 2931.475871][ T7006] XFS (loop5): Invalid superblock magic number [ 2931.558324][ T7017] XFS (loop0): SB sanity check failed [ 2931.588108][ T7017] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2931.623757][ T7017] XFS (loop0): Unmount and run xfs_repair [ 2931.637459][ T7017] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2931.676706][ T7017] 00000000: 58 46 53 42 00 00 10 3a 03 00 00 00 0b 00 10 00 XFSB...:........ [ 2931.686331][ T7017] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2931.707091][ T7017] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2931.718115][ T7017] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2931.727553][ T7017] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2931.736719][ T7017] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2931.745942][ T7017] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2931.755436][ T7017] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2931.770741][ T7017] XFS (loop0): SB validate failed with error -117. [ 2931.941079][T17868] XFS (loop0): SB sanity check failed [ 2931.959556][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2931.998704][T17868] XFS (loop0): Unmount and run xfs_repair [ 2932.005965][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2932.013417][T17868] 00000000: 58 46 53 42 00 00 10 3a 03 00 00 00 0b 00 10 00 XFSB...:........ [ 2932.022468][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2932.031456][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2932.040386][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2932.050913][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2932.061619][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2932.071921][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2932.082550][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2932.092992][ T7017] XFS (loop0): SB validate failed with error -117. 08:29:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0x76bd}, 0x10) write(0xffffffffffffffff, 0x0, 0xfffffffffffffdc5) recvfrom$inet(r0, 0x0, 0x378ac47d209fa366, 0x0, 0x0, 0x800e00660) shutdown(r0, 0x0) 08:29:03 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:29:03 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xff07040000000000}], 0x0, 0x0) 08:29:03 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001040030000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:29:03 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2932.739952][ T7155] XFS (loop0): SB sanity check failed [ 2932.753298][ T7155] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2932.768679][ T7155] XFS (loop0): Unmount and run xfs_repair [ 2932.772050][ T7162] XFS (loop5): Invalid superblock magic number [ 2932.774807][ T7155] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2932.793577][ T7155] 00000000: 58 46 53 42 00 00 10 40 03 00 00 00 0b 00 10 00 XFSB...@........ [ 2932.802674][ T7155] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2932.814771][ T7155] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2932.823653][ T7155] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2932.833868][ T7155] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2932.842855][ T7155] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2932.852302][ T7155] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2932.870574][ T7155] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2932.889408][ T7155] XFS (loop0): SB validate failed with error -117. [ 2932.975465][ T7162] XFS (loop5): Invalid superblock magic number 08:29:03 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2933.050269][ T1668] XFS (loop0): SB sanity check failed [ 2933.056427][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2933.074469][ T1668] XFS (loop0): Unmount and run xfs_repair [ 2933.087081][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: 08:29:03 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4, 0xff0f000000000000}], 0x0, 0x0) [ 2933.103622][ T1668] 00000000: 58 46 53 42 00 00 10 40 03 00 00 00 0b 00 10 00 XFSB...@........ [ 2933.125739][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2933.149133][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2933.163716][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2933.183776][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2933.193140][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2933.204869][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2933.213987][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2933.223309][ T7155] XFS (loop0): SB validate failed with error -117. [ 2933.403535][ T7300] XFS (loop5): Invalid superblock magic number 08:29:17 executing program 1: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x2081fc) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x143042, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap(&(0x7f0000001000/0xd000)=nil, 0xd000, 0x1800003, 0x11, r3, 0x0) read(r1, &(0x7f0000000000)=""/250, 0x128b9372) mprotect(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000000040)=[{r3}], 0x1, 0xffbffff6) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRES32], 0x4) recvmsg(r4, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) tkill(r1, 0x16) 08:29:38 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x3, 0x0) 08:29:38 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:29:38 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000060000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:29:38 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2967.716154][ T7992] XFS (loop5): device supports 512 byte sectors (not 0) [ 2967.724883][ T7993] XFS (loop0): SB sanity check failed [ 2967.742204][ T7993] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2967.767992][ T7993] XFS (loop0): Unmount and run xfs_repair [ 2967.783139][ T7993] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2967.793997][ T7993] 00000000: 58 46 53 42 00 00 10 00 06 00 00 00 0b 00 10 00 XFSB............ [ 2967.803098][ T7993] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2967.816652][ T7993] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2967.845298][ T7993] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2967.859263][ T7993] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2967.869955][ T7993] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2967.882941][ T7993] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2967.899954][ T7993] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2967.908961][ T7993] XFS (loop0): SB validate failed with error -117. [ 2968.020110][ T7993] XFS (loop0): SB sanity check failed [ 2968.025626][ T7993] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2968.038513][ T7993] XFS (loop0): Unmount and run xfs_repair [ 2968.044317][ T7993] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2968.052095][ T7993] 00000000: 58 46 53 42 00 00 10 00 06 00 00 00 0b 00 10 00 XFSB............ [ 2968.061078][ T7993] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2968.070731][ T7993] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2968.079844][ T7993] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2968.088803][ T7993] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2968.097767][ T7993] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2968.106897][ T7993] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2968.116061][ T7993] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2968.125009][ T7993] XFS (loop0): SB validate failed with error -117. 08:29:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180), 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100)=0x6, 0x4) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x6, 0x4) accept4(0xffffffffffffffff, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x80, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r1, 0x0, 0x10000000000009, &(0x7f0000000180), 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, 0x0) getsockopt$bt_hci(r1, 0x0, 0x0, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$unix(r6, &(0x7f0000004080)=[{0x0, 0x0, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000000500)="8b", 0x1}], 0x3}], 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)=0x1014) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) writev(r7, &(0x7f00000023c0), 0x1000000000000252) 08:29:51 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x4, 0x0) 08:29:51 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000070000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:29:51 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:29:51 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x20000880, 0x200008b0, 0x200008e0], 0x0, 0x0, &(0x7f0000000880)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x40000000}]}, 0x108) 08:29:51 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2981.393280][ T8140] XFS (loop5): device supports 512 byte sectors (not 0) [ 2981.403078][ T8143] XFS (loop0): SB sanity check failed [ 2981.424625][ T8143] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 08:29:52 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:29:52 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x5, 0x0) [ 2981.453718][ T8143] XFS (loop0): Unmount and run xfs_repair [ 2981.471514][ T8143] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2981.492587][ T8143] 00000000: 58 46 53 42 00 00 10 00 07 00 00 00 0b 00 10 00 XFSB............ [ 2981.505397][ T8143] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2981.536981][ T8143] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2981.569256][ T8143] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2981.582250][ T8143] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2981.617567][ T8143] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2981.626648][ T8143] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2981.635844][ T8143] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2981.645352][ T8143] XFS (loop0): SB validate failed with error -117. 08:29:52 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:29:52 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x6, 0x0) [ 2981.704823][ T8269] XFS (loop5): device supports 512 byte sectors (not 0) [ 2981.786171][ T1668] XFS (loop0): SB sanity check failed [ 2981.791629][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2981.810371][ T1668] XFS (loop0): Unmount and run xfs_repair [ 2981.816444][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2981.823966][ T1668] 00000000: 58 46 53 42 00 00 10 00 07 00 00 00 0b 00 10 00 XFSB............ [ 2981.832866][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2981.841753][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2981.870561][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2981.886840][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2981.895822][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2981.908117][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2981.927082][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 08:29:52 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000090000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2981.938719][ T8143] XFS (loop0): SB validate failed with error -117. 08:29:52 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2982.001320][ T8424] XFS (loop5): device supports 512 byte sectors (not 0) [ 2982.225888][ T8525] XFS (loop0): SB sanity check failed [ 2982.231370][ T8525] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2982.246027][ T8525] XFS (loop0): Unmount and run xfs_repair [ 2982.251772][ T8525] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2982.259773][ T8525] 00000000: 58 46 53 42 00 00 10 00 09 00 00 00 0b 00 10 00 XFSB............ [ 2982.279900][ T8525] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2982.318514][ T8525] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2982.330246][ T8525] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2982.339844][ T8525] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2982.349410][ T8525] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2982.358978][ T8525] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2982.368273][ T8525] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2982.378591][ T8525] XFS (loop0): SB validate failed with error -117. [ 2982.459559][ T8525] XFS (loop0): SB sanity check failed [ 2982.468296][ T8525] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2982.480357][ T8525] XFS (loop0): Unmount and run xfs_repair [ 2982.489186][ T8525] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2982.496663][ T8525] 00000000: 58 46 53 42 00 00 10 00 09 00 00 00 0b 00 10 00 XFSB............ [ 2982.508596][ T8525] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2982.517668][ T8525] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2982.530587][ T8525] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2982.539767][ T8525] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2982.551539][ T8525] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2982.560674][ T8525] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2982.571838][ T8525] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2982.580733][ T8525] XFS (loop0): SB validate failed with error -117. 08:30:03 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3cb3670c, 0x44a100) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x9) r3 = perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x6, @perf_config_ext={0x59}, 0x0, 0x0, 0xfffffffc, 0x8, 0xfffffffffffffffe, 0x4, 0x40}, 0x0, 0xfffffffffffffffc, r1, 0x0) clock_gettime(0x3, &(0x7f0000000300)) utimes(&(0x7f0000000480)='./file0\x00', &(0x7f0000000440)={{0x0, 0x7530}, {0x77359400}}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffefffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0x1, r3, 0x2) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x20) r5 = inotify_init1(0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x8) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f00000003c0)=0x10000000004053a, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000005c0)=0xc) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x800, 0x0) setsockopt$sock_int(r7, 0x1, 0x1b, 0x0, 0x2924) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r11, 0x0, 0x3, 0x2, 0x0, {0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}}, 0x80) connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) signalfd4(r8, &(0x7f0000000200)={0xffffffffffffff81}, 0x8, 0x80000) r12 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$inet6(r12, 0x0, 0xffffffffffffff69) r13 = dup(r12) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffffffffffc}, 0x1c) sendto$inet6(r12, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0xd84161b7992131a) write$cgroup_type(r13, &(0x7f0000000100)='threaded\x00', 0xffea) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=r5], 0x1}}, 0x1) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, 0x0, 0x0) write$cgroup_type(r13, &(0x7f0000000080)='threaded\x00', 0x163) 08:30:03 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x7, 0x0) 08:30:03 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:30:03 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010000a0000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:30:03 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 2992.760509][ T8641] XFS (loop5): device supports 512 byte sectors (not 0) [ 2992.780553][ T1668] XFS (loop0): SB sanity check failed [ 2992.796375][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2992.822357][ T1668] XFS (loop0): Unmount and run xfs_repair [ 2992.828557][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2992.836817][ T1668] 00000000: 58 46 53 42 00 00 10 00 0a 00 00 00 0b 00 10 00 XFSB............ [ 2992.847813][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2992.856932][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2992.866403][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2992.875645][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2992.884857][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2992.894050][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2992.903490][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2992.912961][ T8649] XFS (loop0): SB validate failed with error -117. [ 2992.934621][ T8641] XFS (loop5): device supports 512 byte sectors (not 0) [ 2993.039070][ T8649] XFS (loop0): SB sanity check failed [ 2993.044767][ T8649] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2993.067551][ T8649] XFS (loop0): Unmount and run xfs_repair [ 2993.073445][ T8649] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2993.080947][ T8649] 00000000: 58 46 53 42 00 00 10 00 0a 00 00 00 0b 00 10 00 XFSB............ [ 2993.103736][ T8649] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2993.112740][ T8649] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2993.124884][ T8649] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2993.147916][ T8649] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2993.159261][ T8649] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2993.169595][ T8649] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2993.180913][ T8649] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2993.205322][ T8649] XFS (loop0): SB validate failed with error -117. 08:30:05 executing program 1: unshare(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @vbi}) socket$nl_route(0x10, 0x3, 0x0) 08:30:05 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:30:05 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x8, 0x0) 08:30:05 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010200a0000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 2994.679665][ T8692] XFS (loop5): device supports 512 byte sectors (not 0) 08:30:05 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2994.720265][ T8693] XFS (loop0): SB sanity check failed [ 2994.727171][ T8693] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2994.753323][ T8693] XFS (loop0): Unmount and run xfs_repair [ 2994.759307][ T8693] XFS (loop0): First 128 bytes of corrupted metadata buffer: 08:30:05 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x9, 0x0) [ 2994.766797][ T8693] 00000000: 58 46 53 42 00 00 10 20 0a 00 00 00 0b 00 10 00 XFSB... ........ [ 2994.775851][ T8693] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2994.785010][ T8693] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2994.796395][ T8693] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2994.806182][ T8693] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2994.815178][ T8693] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2994.824213][ T8693] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 2994.833241][ T8693] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2994.842248][ T8693] XFS (loop0): SB validate failed with error -117. [ 2994.972614][ T8814] XFS (loop5): device supports 512 byte sectors (not 0) [ 2994.982767][ T8693] XFS (loop0): SB sanity check failed [ 2994.997509][ T8693] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 2995.038433][ T8693] XFS (loop0): Unmount and run xfs_repair [ 2995.063749][ T8693] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 2995.071679][ T8693] 00000000: 58 46 53 42 00 00 10 20 0a 00 00 00 0b 00 10 00 XFSB... ........ [ 2995.080826][ T8693] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2995.089852][ T8693] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2995.098944][ T8693] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 2995.108053][ T8693] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2995.117021][ T8693] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2995.126077][ T8693] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ 08:30:05 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2995.135841][ T8693] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2995.145087][ T8693] XFS (loop0): SB validate failed with error -117. 08:30:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 08:30:14 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xa, 0x0) 08:30:14 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010210a0000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:30:14 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 08:30:14 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:30:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) close(r0) [ 3004.089860][ T8968] XFS (loop5): device supports 512 byte sectors (not 0) 08:30:14 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xc, 0x0) [ 3004.138719][ T8971] XFS (loop0): SB sanity check failed [ 3004.150193][ T8971] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3004.167158][ T8971] XFS (loop0): Unmount and run xfs_repair [ 3004.173144][ T8971] XFS (loop0): First 128 bytes of corrupted metadata buffer: 08:30:14 executing program 4: open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000005ac0)='/dev/vcsa\x00', 0x381000, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002240)=[{0x0}, {&(0x7f0000003900)=""/4096, 0x1000}, {0x0}, {0x0}], 0x4, &(0x7f0000002280)=""/8, 0x8}, 0xffff7efc}], 0x2, 0x0, &(0x7f0000002880)={0x77359400}) preadv(r0, &(0x7f00000017c0), 0x315, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) tkill(0x0, 0x0) syz_open_procfs(0x0, 0x0) [ 3004.233836][ T8971] 00000000: 58 46 53 42 00 00 10 21 0a 00 00 00 0b 00 10 00 XFSB...!........ [ 3004.243055][ T8971] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3004.252065][ T8971] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3004.262321][ T8971] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3004.271579][ T8971] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3004.280799][ T8971] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3004.289909][ T8971] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3004.298990][ T8971] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3004.308334][ T9087] XFS (loop5): device supports 512 byte sectors (not 0) [ 3004.316599][ T8971] XFS (loop0): SB validate failed with error -117. 08:30:15 executing program 4: unshare(0x0) clock_adjtime(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x32315559}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)}, 0x0) [ 3004.467024][ T8971] XFS (loop0): SB sanity check failed [ 3004.472790][ T8971] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3004.493540][ T8971] XFS (loop0): Unmount and run xfs_repair [ 3004.502768][ T8971] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3004.510504][ T8971] 00000000: 58 46 53 42 00 00 10 21 0a 00 00 00 0b 00 10 00 XFSB...!........ [ 3004.534942][ T8971] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3004.547630][ T8971] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3004.556675][ T8971] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ 08:30:15 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xd, 0x0) [ 3004.565799][ T8971] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3004.574862][ T8971] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3004.583899][ T8971] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3004.593074][ T8971] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3004.606662][ T8971] XFS (loop0): SB validate failed with error -117. 08:30:15 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010000c0000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:30:15 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, 0x0, 0x18040000) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0xfffffffffffffffd, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000bc0)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x142) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x8401, &(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRESHEX]) [ 3004.837952][T17868] XFS (loop0): SB sanity check failed [ 3004.853091][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3004.868471][T17868] XFS (loop0): Unmount and run xfs_repair [ 3004.874745][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3004.882924][ T9311] XFS (loop5): device supports 512 byte sectors (not 0) [ 3004.893919][T17868] 00000000: 58 46 53 42 00 00 10 00 0c 00 00 00 0b 00 10 00 XFSB............ [ 3004.904478][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3004.913586][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3004.926347][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3004.936923][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3004.949168][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3004.958734][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3004.975680][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3004.984902][ T9327] XFS (loop0): SB validate failed with error -117. [ 3005.059376][ T9311] XFS (loop5): device supports 512 byte sectors (not 0) 08:30:23 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010000d0000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:30:23 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) sendto$inet(r3, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcbe}, 0x2001) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000040)) setsockopt$inet_buf(r3, 0x0, 0x0, &(0x7f0000000400)="30369b396234671fe7a52068fd1b44f08edb231d0b6811fa52b042e1aa6ed5d157cfce21037871634298ca37bb300a1abea5bd06c6023b9e4edae3a29d21da40b15361eb21fe8f581cabc4c14dfd0df5aa2f2d4dd50415bf45694f1a4ceb80746c94eb05943b0244e3249c6cc176758ac997eef20e4f9a377ef0fd85e5fb373dde08f2b42f058d8eecf92273204a193236fbe944aa78d0aafac67f17d073b6752ddb285cccda5bafa28ce37be91812159ee768130cc17bc929097bbd57", 0xbd) r4 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @dev}, {0x0, @local}, 0x0, {0x2, 0x0, @dev}, 'lo\x00'}) 08:30:23 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xe, 0x0) 08:30:23 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010200a0000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:30:23 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3013.419322][ T9477] XFS (loop0): SB sanity check failed [ 3013.425739][ T9482] XFS (loop5): device supports 512 byte sectors (not 0) [ 3013.432979][ T9477] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 08:30:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) close(r0) 08:30:24 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:30:24 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000090000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 3013.511116][ T9477] XFS (loop0): Unmount and run xfs_repair [ 3013.519659][ T9477] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3013.527482][ T9477] 00000000: 58 46 53 42 00 00 10 00 0d 00 00 00 0b 00 10 00 XFSB............ 08:30:24 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:30:24 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x10, 0x0) [ 3013.590845][ T9477] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3013.610884][ T9477] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3013.620111][ T9477] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3013.629266][ T9477] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3013.638707][ T9477] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3013.647796][ T9477] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3013.657362][ T9477] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3013.666653][ T9477] XFS (loop0): SB validate failed with error -117. [ 3013.684602][T17868] XFS (loop4): SB sanity check failed [ 3013.693264][T17868] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3013.721098][T17868] XFS (loop4): Unmount and run xfs_repair [ 3013.728622][T17868] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 3013.736290][T17868] 00000000: 58 46 53 42 00 00 10 00 09 00 00 00 0b 00 10 00 XFSB............ [ 3013.745366][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3013.754333][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3013.763322][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3013.772312][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3013.781227][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3013.790997][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3013.799920][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3013.808816][ T9615] XFS (loop4): SB validate failed with error -117. 08:30:24 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3013.920588][ T9626] XFS (loop5): device supports 512 byte sectors (not 0) 08:30:24 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x16, 0x0) [ 3013.975784][T17868] XFS (loop0): SB sanity check failed [ 3013.981375][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3014.032822][T17868] XFS (loop0): Unmount and run xfs_repair [ 3014.038758][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3014.049008][T17868] 00000000: 58 46 53 42 00 00 10 00 0d 00 00 00 0b 00 10 00 XFSB............ [ 3014.057942][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3014.070900][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3014.079846][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3014.088850][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3014.097728][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3014.106704][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3014.123940][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3014.136359][ T9477] XFS (loop0): SB validate failed with error -117. 08:30:24 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010000e0000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:30:24 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xe, 0x0) 08:30:24 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x23, 0x0) [ 3014.214008][ T9655] XFS (loop5): device supports 512 byte sectors (not 0) [ 3014.408920][ T9667] XFS (loop4): device supports 512 byte sectors (not 0) [ 3014.457830][ T9679] XFS (loop0): SB sanity check failed [ 3014.468704][ T9679] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3014.480772][ T9679] XFS (loop0): Unmount and run xfs_repair [ 3014.486613][ T9679] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3014.494177][ T9679] 00000000: 58 46 53 42 00 00 10 00 0e 00 00 00 0b 00 10 00 XFSB............ [ 3014.509794][ T9679] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3014.539409][ T9679] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3014.574047][ T9679] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3014.593769][ T9679] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3014.610110][ T9679] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3014.624186][ T9679] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3014.641503][ T9679] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3014.650544][ T9679] XFS (loop0): SB validate failed with error -117. [ 3014.758081][T17868] XFS (loop0): SB sanity check failed [ 3014.763578][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3014.793794][T17868] XFS (loop0): Unmount and run xfs_repair [ 3014.799882][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3014.807505][T17868] 00000000: 58 46 53 42 00 00 10 00 0e 00 00 00 0b 00 10 00 XFSB............ [ 3014.816925][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3014.825887][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3014.834879][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3014.843812][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3014.852772][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3014.861749][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3014.870711][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3014.880012][ T9679] XFS (loop0): SB validate failed with error -117. 08:30:33 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010200a0000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:30:33 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x26, 0x0) 08:30:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) close(r0) 08:30:35 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x6, 0x0) 08:30:35 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001020100000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:30:35 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:30:35 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x48, 0x0) [ 3025.022125][ T9735] XFS (loop5): device supports 512 byte sectors (not 0) [ 3025.069898][ T9746] XFS (loop4): device supports 512 byte sectors (not 0) [ 3025.082466][T17868] XFS (loop0): SB sanity check failed [ 3025.101946][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 08:30:35 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 3025.149238][T17868] XFS (loop0): Unmount and run xfs_repair [ 3025.163850][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3025.181725][T17868] 00000000: 58 46 53 42 00 00 10 20 10 00 00 00 0b 00 10 00 XFSB... ........ [ 3025.182105][ T9735] XFS (loop5): device supports 512 byte sectors (not 0) [ 3025.229584][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3025.238661][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3025.247853][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3025.256825][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3025.265907][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 08:30:35 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x4c, 0x0) [ 3025.283887][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3025.292835][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3025.302114][ T9743] XFS (loop0): SB validate failed with error -117. 08:30:36 executing program 4: [ 3025.489192][ T9743] XFS (loop0): SB sanity check failed [ 3025.494787][ T9743] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3025.532283][ T9743] XFS (loop0): Unmount and run xfs_repair [ 3025.560007][ T9743] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3025.574132][ T9900] XFS (loop5): device supports 512 byte sectors (not 0) 08:30:36 executing program 4: [ 3025.587786][ T9743] 00000000: 58 46 53 42 00 00 10 20 10 00 00 00 0b 00 10 00 XFSB... ........ [ 3025.597514][ T9743] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3025.623078][ T9743] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3025.632379][ T9743] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3025.643620][ T9743] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3025.653545][ T9743] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3025.666813][ T9743] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3025.675783][ T9743] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3025.688040][ T9743] XFS (loop0): SB validate failed with error -117. 08:30:36 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000200000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 3025.809668][ T9900] XFS (loop5): device supports 512 byte sectors (not 0) [ 3025.983315][T17868] XFS (loop0): SB sanity check failed [ 3025.988794][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3026.023777][T17868] XFS (loop0): Unmount and run xfs_repair [ 3026.029533][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3026.040706][T17868] 00000000: 58 46 53 42 00 00 10 00 20 00 00 00 0b 00 10 00 XFSB.... ....... [ 3026.049710][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3026.058718][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3026.067594][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3026.077117][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3026.086080][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3026.094985][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3026.103914][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3026.112957][ T9926] XFS (loop0): SB validate failed with error -117. [ 3026.178720][T17868] XFS (loop0): SB sanity check failed [ 3026.184246][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3026.196394][T17868] XFS (loop0): Unmount and run xfs_repair [ 3026.202121][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3026.209765][T17868] 00000000: 58 46 53 42 00 00 10 00 20 00 00 00 0b 00 10 00 XFSB.... ....... [ 3026.218972][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3026.231079][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3026.240209][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3026.252425][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3026.266899][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3026.276188][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3026.288971][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3026.298255][ T9926] XFS (loop0): SB validate failed with error -117. 08:30:44 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010200a0000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:30:44 executing program 4: 08:30:46 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100a200000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:30:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:30:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) close(r0) 08:30:46 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x68, 0x0) 08:30:46 executing program 4: 08:30:47 executing program 4: [ 3036.486266][T25642] XFS (loop0): SB sanity check failed [ 3036.491997][T25642] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 08:30:47 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x6c, 0x0) [ 3036.532135][T25642] XFS (loop0): Unmount and run xfs_repair [ 3036.550755][T25642] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3036.568648][T25642] 00000000: 58 46 53 42 00 00 10 0a 20 00 00 00 0b 00 10 00 XFSB.... ....... [ 3036.594386][T25642] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3036.628868][T25642] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 08:30:47 executing program 4: [ 3036.642642][T25642] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3036.663536][T25642] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3036.682815][T25642] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 08:30:47 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x74, 0x0) [ 3036.692123][T25642] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3036.701508][T25642] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3036.716760][ T9961] XFS (loop0): SB validate failed with error -117. 08:30:47 executing program 4: perf_event_open(&(0x7f0000000300)={0x0, 0x12, 0x4b, 0x1, 0x0, 0xcf, 0x0, 0x7fffffffffffff7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x20}, 0x0, 0x13, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x400000000100) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x2f8, 0x2f8, 0x2f8, 0x110, 0x2f8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, &(0x7f0000000040), {[{{@ip={@rand_addr=0x3, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00', {}, {}, 0x84, 0x1}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet, @inet]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0xf8}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xd}, @multicast1, 0xffffffff, 0x8c7483bf1003c283, 'nlmon0\x00', 'rose0\x00', {}, {0xff}, 0x6, 0xdebf9ae95b6bde99, 0x49}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x3}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x0, 'team_slave_0\x00', 'batadv0\x00', {}, {0xff}, 0xc, 0xd0f6ed433114b501, 0x40}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x5, @local, 0x4e23}}}, {{@uncond, 0x0, 0x98, 0xc0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc8, 0x1}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)={0x0, 0x9, 0x40}) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r2, &(0x7f0000003c80), 0x38e, 0x62, 0x0) [ 3036.852296][T25642] XFS (loop0): SB sanity check failed [ 3036.857955][T25642] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3036.869958][T25642] XFS (loop0): Unmount and run xfs_repair [ 3036.892812][T25642] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3036.917517][T25642] 00000000: 58 46 53 42 00 00 10 0a 20 00 00 00 0b 00 10 00 XFSB.... ....... [ 3036.938851][T25642] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3036.947952][T25642] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3036.956955][T25642] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3036.966002][T25642] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3036.974964][T25642] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3036.983946][T25642] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3036.995246][T25642] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3037.004148][ T9961] XFS (loop0): SB validate failed with error -117. 08:30:49 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x29cb5a25, &(0x7f0000000340), 0x0, 0x0, 0xffbe}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f000086fff4)) getpgrp(0xffffffffffffffff) getpid() getdents(r0, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) getpriority(0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000340)="82d2", 0x2}], 0x1}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000100)="fec8", 0x6}], 0x1}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0x0, 0x0, 0x1, r2, 0x0, &(0x7f00000000c0)={0xa00905, 0x7, [], @p_u32=&(0x7f0000000000)=0x3}}) ioctl$UI_DEV_DESTROY(r3, 0x5502) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 08:30:49 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x7a, 0x0) 08:30:58 executing program 1: creat(&(0x7f0000000300)='./bus\x00', 0x0) syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000140)={0x1b0}, &(0x7f0000000200), 0x0) 08:30:58 executing program 4: perf_event_open(&(0x7f0000000300)={0x0, 0x12, 0x4b, 0x1, 0x0, 0xcf, 0x0, 0x7fffffffffffff7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x20}, 0x0, 0x13, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000304, 0x400000000100) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x2f8, 0x2f8, 0x2f8, 0x110, 0x2f8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, &(0x7f0000000040), {[{{@ip={@rand_addr=0x3, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00', {}, {}, 0x84, 0x1}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet, @inet]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0xf8}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xd}, @multicast1, 0xffffffff, 0x8c7483bf1003c283, 'nlmon0\x00', 'rose0\x00', {}, {0xff}, 0x6, 0xdebf9ae95b6bde99, 0x49}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x3}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x0, 'team_slave_0\x00', 'batadv0\x00', {}, {0xff}, 0xc, 0xd0f6ed433114b501, 0x40}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x5, @local, 0x4e23}}}, {{@uncond, 0x0, 0x98, 0xc0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc8, 0x1}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)={0x0, 0x9, 0x40}) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r2, &(0x7f0000003c80), 0x38e, 0x62, 0x0) 08:30:58 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001010200000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:30:58 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x9c, 0x0) 08:30:58 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:30:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1}, 0x14) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x0, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) [ 3047.862775][T10134] XFS (loop5): device supports 512 byte sectors (not 0) [ 3047.894855][T10140] XFS (loop0): SB sanity check failed [ 3047.900844][T10140] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3047.913321][T10140] XFS (loop0): Unmount and run xfs_repair [ 3047.919410][T10140] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3047.927990][T10140] 00000000: 58 46 53 42 00 00 10 10 20 00 00 00 0b 00 10 00 XFSB.... ....... 08:30:58 executing program 4: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2212020, &(0x7f0000000140)=ANY=[@ANYBLOB='j']) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 3047.956162][T10140] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3047.975285][T10140] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3047.988501][T10140] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3048.021386][T10134] XFS (loop5): device supports 512 byte sectors (not 0) [ 3048.028199][T10140] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3048.043755][T10140] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3048.056579][T10140] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3048.071197][T10140] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3048.080686][T10140] XFS (loop0): SB validate failed with error -117. 08:30:58 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xa0, 0x0) [ 3048.157533][T10163] EXT4-fs (sda1): Unrecognized mount option "j" or missing value [ 3048.282627][T10140] XFS (loop0): SB sanity check failed [ 3048.288202][T10140] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3048.313264][T10140] XFS (loop0): Unmount and run xfs_repair 08:30:58 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3048.327022][T10140] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3048.342350][T10140] 00000000: 58 46 53 42 00 00 10 10 20 00 00 00 0b 00 10 00 XFSB.... ....... [ 3048.354622][T10140] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3048.364113][T10140] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3048.373022][T10140] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3048.382201][T10140] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3048.391203][T10140] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3048.400165][T10140] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3048.409092][T10140] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3048.418079][T10140] XFS (loop0): SB validate failed with error -117. 08:30:59 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xae, 0x0) 08:30:59 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100a210000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:30:59 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3048.723611][T10297] XFS (loop0): SB sanity check failed [ 3048.732470][T10297] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3048.744830][T10297] XFS (loop0): Unmount and run xfs_repair [ 3048.751157][T10297] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3048.758889][T10297] 00000000: 58 46 53 42 00 00 10 0a 21 00 00 00 0b 00 10 00 XFSB....!....... [ 3048.768105][T10297] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3048.777353][T10297] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3048.790915][T10297] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3048.808178][T10297] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3048.817433][T10297] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3048.826581][T10297] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3048.835997][T10297] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3048.845187][T10297] XFS (loop0): SB validate failed with error -117. [ 3048.923952][T10297] XFS (loop0): SB sanity check failed [ 3048.929488][T10297] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3048.976381][T10297] XFS (loop0): Unmount and run xfs_repair [ 3048.982262][T10297] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3048.992879][T10297] 00000000: 58 46 53 42 00 00 10 0a 21 00 00 00 0b 00 10 00 XFSB....!....... [ 3049.001931][T10297] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3049.014280][T10297] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3049.023213][T10297] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3049.035821][T10297] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3049.044954][T10297] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3049.056273][T10297] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3049.065267][T10297] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3049.074296][T10297] XFS (loop0): SB validate failed with error -117. 08:31:03 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100a210000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:31:03 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xc4, 0x0) 08:31:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:31:03 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000230000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:31:03 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3052.929942][T10340] XFS (loop5): device supports 512 byte sectors (not 0) [ 3052.937414][T10335] XFS (loop0): SB sanity check failed [ 3052.942985][T10335] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3052.961896][T10335] XFS (loop0): Unmount and run xfs_repair [ 3052.977086][T10335] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3052.996900][T10335] 00000000: 58 46 53 42 00 00 10 00 23 00 00 00 0b 00 10 00 XFSB....#....... [ 3053.010129][T10335] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3053.022506][T10335] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3053.031680][T10335] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3053.067983][T10335] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3053.080495][T10335] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3053.090049][T10335] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3053.100402][T10335] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3053.109547][T10335] XFS (loop0): SB validate failed with error -117. [ 3053.223865][T10335] XFS (loop0): SB sanity check failed [ 3053.229349][T10335] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3053.244492][T10335] XFS (loop0): Unmount and run xfs_repair [ 3053.250448][T10335] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3053.258586][T10335] 00000000: 58 46 53 42 00 00 10 00 23 00 00 00 0b 00 10 00 XFSB....#....... [ 3053.267764][T10335] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3053.276894][T10335] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3053.286136][T10335] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3053.295257][T10335] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3053.304730][T10335] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3053.313770][T10335] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3053.322706][T10335] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3053.331668][T10335] XFS (loop0): SB validate failed with error -117. [ 3061.173704][ C1] net_ratelimit: 7 callbacks suppressed [ 3061.173717][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3061.185060][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3061.242332][T17868] XFS (loop1): SB sanity check failed [ 3061.247806][T17868] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3061.259704][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3061.259741][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3061.263705][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3061.265556][T17868] XFS (loop1): Unmount and run xfs_repair [ 3061.271264][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3061.277053][T17868] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 3061.295967][T17868] 00000000: 58 46 53 42 00 00 10 0a 21 00 00 00 0b 00 10 00 XFSB....!....... [ 3061.305196][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3061.314106][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3061.323176][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3061.332054][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3061.341156][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3061.350142][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3061.359016][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3061.367974][T10372] XFS (loop1): SB validate failed with error -117. 08:31:12 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000050000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:31:12 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000060000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:31:12 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x12c, 0x0) 08:31:12 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010012c0000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:31:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:31:12 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x3, 0x0) [ 3062.081332][T17868] XFS (loop4): SB sanity check failed [ 3062.086901][T17868] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3062.098892][T17868] XFS (loop4): Unmount and run xfs_repair [ 3062.104905][T17868] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 3062.112330][T17868] 00000000: 58 46 53 42 00 00 10 00 06 00 00 00 0b 00 10 00 XFSB............ [ 3062.121217][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3062.130593][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3062.137716][T10387] XFS (loop0): SB sanity check failed [ 3062.139782][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3062.153931][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3062.162844][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3062.171970][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3062.179821][T10387] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3062.181010][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3062.202024][T10391] XFS (loop4): SB validate failed with error -117. 08:31:12 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x140, 0x0) [ 3062.250417][T10387] XFS (loop0): Unmount and run xfs_repair [ 3062.269617][T10387] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3062.277489][T10387] 00000000: 58 46 53 42 00 00 10 01 2c 00 00 00 0b 00 10 00 XFSB....,....... [ 3062.287496][T10387] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 08:31:12 executing program 4: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000103a030000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 3062.296828][T10387] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3062.305787][T10387] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3062.336447][T10387] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3062.362565][T10387] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3062.380469][T10387] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3062.407289][T10387] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3062.427999][T10387] XFS (loop0): SB validate failed with error -117. [ 3062.597776][T10413] XFS (loop5): device supports 512 byte sectors (not 0) [ 3062.620304][T10271] XFS (loop4): SB sanity check failed [ 3062.625797][T10271] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3062.637660][T10271] XFS (loop4): Unmount and run xfs_repair [ 3062.643381][T10271] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 3062.650779][T10271] 00000000: 58 46 53 42 00 00 10 3a 03 00 00 00 0b 00 10 00 XFSB...:........ [ 3062.659651][T10271] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3062.668517][T10271] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3062.677444][T10271] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3062.686330][T10271] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 08:31:13 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010002e0000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 3062.695283][T10271] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3062.704229][T10271] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3062.713138][T10271] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3062.722406][T10416] XFS (loop4): SB validate failed with error -117. 08:31:13 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3062.889889][T10413] XFS (loop5): device supports 512 byte sectors (not 0) 08:31:13 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x180, 0x0) [ 3062.990625][T10271] XFS (loop0): SB sanity check failed [ 3062.996112][T10271] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3063.007973][T10271] XFS (loop0): Unmount and run xfs_repair [ 3063.013859][T10271] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3063.021235][T10271] 00000000: 58 46 53 42 00 00 10 00 2e 00 00 00 0b 00 10 00 XFSB............ [ 3063.030174][T10271] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3063.067488][T10271] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3063.076655][T10271] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3063.090470][T10271] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3063.134180][T10271] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3063.155756][T10271] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3063.164745][T10271] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3063.173888][T10449] XFS (loop0): SB validate failed with error -117. 08:31:13 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000380000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 3063.246393][T10458] XFS (loop5): device supports 512 byte sectors (not 0) [ 3063.337401][T31681] XFS (loop0): SB sanity check failed [ 3063.343044][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3063.367849][T31681] XFS (loop0): Unmount and run xfs_repair [ 3063.373840][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3063.382076][T31681] 00000000: 58 46 53 42 00 00 10 00 38 00 00 00 0b 00 10 00 XFSB....8....... [ 3063.413754][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3063.422640][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3063.433069][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3063.441996][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3063.451002][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3063.459983][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3063.468884][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3063.477795][T10564] XFS (loop0): SB validate failed with error -117. [ 3063.484627][T10458] XFS (loop5): device supports 512 byte sectors (not 0) [ 3063.580198][T10271] XFS (loop0): SB sanity check failed [ 3063.585734][T10271] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3063.598825][T10271] XFS (loop0): Unmount and run xfs_repair [ 3063.605034][T10271] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3063.612724][T10271] 00000000: 58 46 53 42 00 00 10 00 38 00 00 00 0b 00 10 00 XFSB....8....... [ 3063.628237][T10271] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3063.637582][T10271] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3063.648418][T10271] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3063.675121][T10271] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3063.693451][T10271] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3063.702389][T10271] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3063.711346][T10271] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3063.720527][T10564] XFS (loop0): SB validate failed with error -117. [ 3072.400009][T31681] XFS (loop3): SB sanity check failed [ 3072.405871][T31681] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3072.418356][T31681] XFS (loop3): Unmount and run xfs_repair [ 3072.424279][T31681] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 3072.431844][T31681] 00000000: 58 46 53 42 00 00 10 00 05 00 00 00 0b 00 10 00 XFSB............ [ 3072.440864][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3072.449880][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3072.459000][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3072.468043][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3072.477095][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3072.486002][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3072.495105][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3072.504208][T10607] XFS (loop3): SB validate failed with error -117. 08:31:25 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000050000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:31:25 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:31:25 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x1e4, 0x0) 08:31:25 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010033a0000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:31:25 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:31:25 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x3, 0x0) 08:31:26 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:31:26 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3075.544079][T10626] XFS (loop0): SB sanity check failed [ 3075.558587][T10626] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3075.573759][T10626] XFS (loop0): Unmount and run xfs_repair [ 3075.579634][T10626] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3075.655609][T10626] 00000000: 58 46 53 42 00 00 10 03 3a 00 00 00 0b 00 10 00 XFSB....:....... [ 3075.665045][T10626] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3075.674408][T10626] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3075.683471][T10626] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3075.693724][T10626] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 08:31:26 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x258, 0x0) 08:31:26 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3075.703175][T10626] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3075.762200][T10626] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ 08:31:26 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) tkill(0x0, 0x2) [ 3075.821452][T10626] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3075.831680][T10626] XFS (loop0): SB validate failed with error -117. 08:31:26 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) tkill(0x0, 0x2) [ 3075.957727][T10753] XFS (loop5): device supports 512 byte sectors (not 0) [ 3075.981165][T10271] XFS (loop0): SB sanity check failed [ 3075.986855][T10271] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3076.010016][T10271] XFS (loop0): Unmount and run xfs_repair [ 3076.030161][T10271] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3076.037676][T10271] 00000000: 58 46 53 42 00 00 10 03 3a 00 00 00 0b 00 10 00 XFSB....:....... [ 3076.046785][T10271] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3076.055727][T10271] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3076.064778][T10271] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3076.074126][T10271] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3076.083170][T10271] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3076.092373][T10271] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3076.101347][T10271] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3076.110561][T10626] XFS (loop0): SB validate failed with error -117. [ 3076.269495][T10753] XFS (loop5): device supports 512 byte sectors (not 0) 08:31:35 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000050000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:31:35 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:31:35 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) tkill(0x0, 0x2) 08:31:35 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010003f0000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:31:35 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x2da, 0x0) 08:31:35 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x3, 0x0) 08:31:35 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3084.829873][T31681] XFS (loop0): SB sanity check failed [ 3084.835703][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3084.861993][T10799] XFS (loop5): device supports 512 byte sectors (not 0) [ 3084.877968][T31681] XFS (loop0): Unmount and run xfs_repair [ 3084.883926][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3084.891305][T31681] 00000000: 58 46 53 42 00 00 10 00 3f 00 00 00 0b 00 10 00 XFSB....?....... [ 3084.900216][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3084.909159][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3084.918170][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ 08:31:35 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:31:35 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3084.927101][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3084.936057][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3084.960765][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3084.969694][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3084.978629][T10804] XFS (loop0): SB validate failed with error -117. 08:31:35 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:31:35 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x300, 0x0) [ 3085.202960][T10804] XFS (loop0): SB sanity check failed 08:31:35 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3085.243746][T10804] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3085.263740][T10804] XFS (loop0): Unmount and run xfs_repair [ 3085.280919][T10804] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3085.317358][T10804] 00000000: 58 46 53 42 00 00 10 00 3f 00 00 00 0b 00 10 00 XFSB....?....... [ 3085.333816][T10804] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3085.383860][T10804] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3085.399432][T10804] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3085.410118][T10804] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3085.444662][T10804] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3085.453640][T10804] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3085.462676][T10804] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3085.471724][T10804] XFS (loop0): SB validate failed with error -117. [ 3085.523754][T11050] XFS (loop5): device supports 512 byte sectors (not 0) [ 3085.669481][T11050] XFS (loop5): device supports 512 byte sectors (not 0) [ 3095.149827][T17868] XFS (loop3): SB sanity check failed [ 3095.155304][T17868] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3095.167304][T17868] XFS (loop3): Unmount and run xfs_repair [ 3095.173018][T17868] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 3095.180414][T17868] 00000000: 58 46 53 42 00 00 10 00 05 00 00 00 0b 00 10 00 XFSB............ [ 3095.189278][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3095.198146][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3095.207145][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3095.216089][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3095.224967][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3095.233870][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3095.242877][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3095.252146][T11180] XFS (loop3): SB validate failed with error -117. 08:31:45 executing program 3: 08:31:45 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:31:45 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000400000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:31:45 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:31:45 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x350, 0x0) 08:31:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="a50106009c47637545a817bd79382988853c4d478150666ff9bb272f6f5d1b74a6268a655408b8178d6d035e504268cbded1b1664bd89871d5263d94a9ed7726884325e49eb0d16d283208e3de2563ec3940eb1b530bcba691806d09a5489a78b4e62ca18b5afe70e702cceb04b6201f1dc978de5f7d2b"], 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.usage\xaf\xf5_al\xb5s\xd1+H\x9a\xbd2>\x86\x02\x00\x00\x00', 0xf0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) gettid() ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'teql0\x00', 0x400}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00\f\x7f\xd9\xfa;\x8b\x88gb\xefi\x16\x91\xbb\xc4\xd5Jk\tU~ \xa4\vR\\\x8a\xdb\xcel\xe0\xa3[\xae\x9d\xac\x84\x9f\v\x9e\x9f\r\x10\x1f\xd3\x80\xc1\xccq\xab\x01y\xed\xfc\x96)\xf6_>+\xa03\xf4\xcc0\xbbE\xb0\xc3\x94\xd53\x87\xd6\xc4\\\xc7\x82\xe9\xaf\xb5\xb6\x15\xf4K2\x17\f\x98\x1c\xebq/\xf5\x81#\x85\xc5\xa0\xfd\xfac\xd9\xf2c`\xe9[c\a\x12\x1bb\x82\x83\x86d\xf0k\xa8\x90\x06\xa8\x1cK\xea\x19\x91\a1z)\xde_r`\xee\xb6\x9e\xcb\x05\x00\x00\x82\xa1\t\xc9\x05\xcc^', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000200)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r3, 0x0, 0x0) 08:31:45 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3095.361014][T11194] ptrace attach of "/root/syz-executor.2"[11193] was attempted by "/root/syz-executor.2"[11194] 08:31:46 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3095.510978][T11268] ptrace attach of "/root/syz-executor.2"[11261] was attempted by "/root/syz-executor.2"[11268] [ 3095.576367][T11200] XFS (loop0): SB sanity check failed [ 3095.582395][T11199] XFS (loop5): device supports 512 byte sectors (not 0) [ 3095.591909][T11200] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 08:31:46 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3095.628484][T11200] XFS (loop0): Unmount and run xfs_repair [ 3095.635322][T11200] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3095.642832][T11200] 00000000: 58 46 53 42 00 00 10 00 40 00 00 00 0b 00 10 00 XFSB....@....... [ 3095.654735][T11200] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 08:31:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3095.702811][T11331] ptrace attach of "/root/syz-executor.2"[11330] was attempted by "/root/syz-executor.2"[11331] [ 3095.724024][T11200] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3095.736809][T11199] XFS (loop5): device supports 512 byte sectors (not 0) [ 3095.745212][T11200] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3095.757269][T11200] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3095.767565][T11200] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3095.778919][T11200] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3095.789307][T11200] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3095.805027][T11200] XFS (loop0): SB validate failed with error -117. 08:31:46 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x364, 0x0) 08:31:46 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:31:54 executing program 3: 08:31:54 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001002400000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:31:54 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:31:54 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x38e, 0x0) 08:31:54 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3103.901427][T11475] XFS (loop5): device supports 512 byte sectors (not 0) [ 3103.913376][T11472] XFS (loop0): SB sanity check failed [ 3103.919328][T11472] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3103.977630][T11472] XFS (loop0): Unmount and run xfs_repair [ 3103.992379][T11472] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3104.008160][T11472] 00000000: 58 46 53 42 00 00 10 02 40 00 00 00 0b 00 10 00 XFSB....@....... [ 3104.044261][T11472] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3104.059325][T11472] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3104.069012][T11472] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3104.078174][T11472] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3104.087474][T11472] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3104.105983][T11472] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3104.115089][T11472] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3104.124326][T11472] XFS (loop0): SB validate failed with error -117. [ 3104.189245][T17868] XFS (loop0): SB sanity check failed [ 3104.194787][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3104.207093][T17868] XFS (loop0): Unmount and run xfs_repair [ 3104.212942][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3104.220801][T17868] 00000000: 58 46 53 42 00 00 10 02 40 00 00 00 0b 00 10 00 XFSB....@....... [ 3104.229994][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3104.239016][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3104.248045][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3104.257068][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3104.266065][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3104.275047][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3104.283941][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3104.292815][T11472] XFS (loop0): SB validate failed with error -117. 08:31:55 executing program 1: 08:31:55 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:31:55 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:31:55 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x39c, 0x0) 08:31:55 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001003400000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 3104.672004][T11608] XFS (loop5): device supports 512 byte sectors (not 0) 08:31:55 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3104.733612][T11613] XFS (loop0): SB sanity check failed [ 3104.763804][T11613] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 08:31:55 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3104.833743][T11613] XFS (loop0): Unmount and run xfs_repair [ 3104.839663][T11613] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3104.880492][T11613] 00000000: 58 46 53 42 00 00 10 03 40 00 00 00 0b 00 10 00 XFSB....@....... [ 3104.900494][T11613] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3104.913762][T11613] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3104.973735][T11613] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3104.985789][T11613] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3105.008183][T11613] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3105.018644][T11613] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3105.029248][T11613] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3105.039287][T11613] XFS (loop0): SB validate failed with error -117. [ 3105.170452][T17868] XFS (loop0): SB sanity check failed [ 3105.176007][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3105.187910][T17868] XFS (loop0): Unmount and run xfs_repair [ 3105.193621][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3105.201104][T17868] 00000000: 58 46 53 42 00 00 10 03 40 00 00 00 0b 00 10 00 XFSB....@....... [ 3105.210494][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3105.219408][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3105.228305][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3105.237201][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3105.246540][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3105.255448][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3105.264322][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3105.273243][T11613] XFS (loop0): SB validate failed with error -117. 08:32:02 executing program 3: 08:32:02 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:32:02 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:32:02 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000480000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:32:02 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x3c0, 0x0) [ 3112.169889][T11676] XFS (loop0): SB sanity check failed [ 3112.175654][T11676] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3112.194315][T11676] XFS (loop0): Unmount and run xfs_repair [ 3112.208850][T11676] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3112.232252][T11676] 00000000: 58 46 53 42 00 00 10 00 48 00 00 00 0b 00 10 00 XFSB....H....... [ 3112.246860][T11673] XFS (loop5): device supports 512 byte sectors (not 0) [ 3112.247038][T11676] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3112.267805][T11676] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3112.297784][T11676] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3112.307460][T11676] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3112.316367][T11676] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3112.325310][T11676] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3112.387814][T11676] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3112.398909][T11676] XFS (loop0): SB validate failed with error -117. [ 3112.406211][T11673] XFS (loop5): device supports 512 byte sectors (not 0) [ 3112.533339][T11676] XFS (loop0): SB sanity check failed [ 3112.543195][T11676] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3112.563168][T11676] XFS (loop0): Unmount and run xfs_repair [ 3112.569234][T11676] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3112.580219][T11676] 00000000: 58 46 53 42 00 00 10 00 48 00 00 00 0b 00 10 00 XFSB....H....... [ 3112.589257][T11676] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3112.598172][T11676] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3112.607086][T11676] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3112.616206][T11676] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3112.625191][T11676] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3112.634156][T11676] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3112.649028][T11676] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3112.663153][T11676] XFS (loop0): SB validate failed with error -117. 08:32:04 executing program 1: 08:32:04 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:32:04 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:32:04 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x3f7, 0x0) 08:32:04 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010004c0000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:32:04 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3114.007788][T17868] XFS (loop0): SB sanity check failed [ 3114.013278][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3114.043109][T17868] XFS (loop0): Unmount and run xfs_repair [ 3114.052919][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3114.060610][T17868] 00000000: 58 46 53 42 00 00 10 00 4c 00 00 00 0b 00 10 00 XFSB....L....... [ 3114.081059][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3114.091309][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 08:32:04 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3114.100421][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3114.109387][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3114.118373][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3114.127318][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3114.136259][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3114.145212][T11823] XFS (loop0): SB validate failed with error -117. [ 3114.311664][T11823] XFS (loop0): SB sanity check failed [ 3114.318114][T11823] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3114.330131][T11823] XFS (loop0): Unmount and run xfs_repair [ 3114.336046][T11823] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3114.343497][T11823] 00000000: 58 46 53 42 00 00 10 00 4c 00 00 00 0b 00 10 00 XFSB....L....... [ 3114.356400][T11823] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3114.365905][T11823] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3114.375046][T11823] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3114.384144][T11823] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3114.393308][T11823] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3114.403218][T11823] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3114.412883][T11823] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3114.422201][T11823] XFS (loop0): SB validate failed with error -117. 08:32:13 executing program 3: 08:32:13 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x500, 0x0) 08:32:13 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:32:13 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:32:13 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001002580000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 3123.540990][T11969] XFS (loop5): device supports 512 byte sectors (not 0) [ 3123.554013][T11978] XFS (loop0): SB sanity check failed [ 3123.578349][T11978] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3123.620264][T11978] XFS (loop0): Unmount and run xfs_repair [ 3123.629462][T11978] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3123.647636][T11978] 00000000: 58 46 53 42 00 00 10 02 58 00 00 00 0b 00 10 00 XFSB....X....... [ 3123.657447][T11978] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3123.670810][T11978] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3123.680273][T11978] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3123.693166][T11978] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3123.702605][T11978] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3123.711828][T11978] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3123.721129][T11978] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3123.730578][T11978] XFS (loop0): SB validate failed with error -117. [ 3123.759741][T11969] XFS (loop5): device supports 512 byte sectors (not 0) [ 3123.872208][T10271] XFS (loop0): SB sanity check failed [ 3123.877763][T10271] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3123.890003][T10271] XFS (loop0): Unmount and run xfs_repair [ 3123.896304][T10271] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3123.904029][T10271] 00000000: 58 46 53 42 00 00 10 02 58 00 00 00 0b 00 10 00 XFSB....X....... [ 3123.915144][T10271] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3123.939848][T10271] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3123.957824][T10271] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3123.967018][T10271] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3123.976207][T10271] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3123.985367][T10271] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3123.994607][T10271] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3124.003551][T11978] XFS (loop0): SB validate failed with error -117. 08:32:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) 08:32:15 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:32:15 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:32:15 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x600, 0x0) 08:32:15 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000600000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:32:15 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3125.375440][T12143] XFS (loop5): device supports 512 byte sectors (not 0) [ 3125.375470][T10271] XFS (loop0): SB sanity check failed [ 3125.388897][T10271] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3125.401516][T10271] XFS (loop0): Unmount and run xfs_repair [ 3125.408210][T10271] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3125.416399][T10271] 00000000: 58 46 53 42 00 00 10 00 60 00 00 00 0b 00 10 00 XFSB....`....... [ 3125.426618][T10271] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3125.436458][T10271] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3125.446261][T10271] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3125.455923][T10271] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3125.465628][T10271] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 08:32:16 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3125.475393][T10271] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3125.484905][T10271] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3125.494693][T12141] XFS (loop0): SB validate failed with error -117. 08:32:22 executing program 3: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1b) 08:32:22 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x700, 0x0) 08:32:22 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:32:22 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001003640000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:32:22 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:32:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 08:32:22 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3131.781523][T12298] XFS (loop0): SB sanity check failed [ 3131.795544][T12298] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3131.811968][T12298] XFS (loop0): Unmount and run xfs_repair [ 3131.818190][T12298] XFS (loop0): First 128 bytes of corrupted metadata buffer: 08:32:22 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:32:22 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3131.838149][T12298] 00000000: 58 46 53 42 00 00 10 03 64 00 00 00 0b 00 10 00 XFSB....d....... [ 3131.847841][T12304] XFS (loop5): device supports 512 byte sectors (not 0) [ 3131.872139][T12298] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3131.893790][T12298] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3131.905528][T12298] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3131.915269][T12298] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3131.924350][T12298] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3131.942169][T12298] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3131.957380][T12298] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3131.966734][T12298] XFS (loop0): SB validate failed with error -117. 08:32:22 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:32:22 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:32:22 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000680000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 3132.449763][T17868] XFS (loop0): SB sanity check failed [ 3132.455585][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3132.485883][T17868] XFS (loop0): Unmount and run xfs_repair [ 3132.491630][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3132.515241][T17868] 00000000: 58 46 53 42 00 00 10 00 68 00 00 00 0b 00 10 00 XFSB....h....... [ 3132.524441][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3132.533336][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3132.542570][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3132.551812][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3132.560922][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3132.570056][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3132.578955][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3132.587905][T12646] XFS (loop0): SB validate failed with error -117. [ 3132.658036][T17868] XFS (loop0): SB sanity check failed [ 3132.663491][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3132.675735][T17868] XFS (loop0): Unmount and run xfs_repair [ 3132.681458][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3132.689276][T17868] 00000000: 58 46 53 42 00 00 10 00 68 00 00 00 0b 00 10 00 XFSB....h....... [ 3132.698561][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3132.707655][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3132.716833][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3132.726057][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3132.735312][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3132.744929][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3132.754087][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3132.762954][T12646] XFS (loop0): SB validate failed with error -117. 08:32:33 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000440)=0xffffffffffffffde) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:32:33 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x900, 0x0) 08:32:33 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:32:33 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:32:33 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001003680000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:32:33 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/tty63\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x0, 0xc7}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376) write$apparmor_exec(r1, &(0x7f0000000600)={'\\C\x1b]0\b\x06C\xc3MY\x1d\x9b9c\xc3\x16\xb1\x9b=ny\xeaU\x0e3\\C6\x9bmwH_\xcb\xaa\xc7\xa6\x10&\xb0A\tim\x9bB\xd21\xd2\xbe\xddEf \xa0\xa6v\xf7\xe7\x89\xec\xbf\xc8\x97\xb37\xf0\x10\xcd\xd9\xaf;\xec\xccT\x9e\xe0\xbaw3\xc4K\v\x0e\xca\xdb\xa5\xe6\x91\xdc\x8d3\xf8\xec/\xa4U\x87\x02g\x06k\x9fW[.c\xb1\xd4y\xd4\xca=\f\xd8Q[\xacb\xa3f4\x9el\x90\x878[\x00\xd9\x04\x1a\xa6\xa4\x17\xa6(\x05tl\x17\xef\x1bU\xfbD\xec\x88\xd4\xa0&\xdb\x95wp\xfb\x01[\x8c\xc4(\xbb)\xf3\xa9\x1b\tt\xd3W\x11t\x1f\xa4n\xfd:\x90${\xc5\x16\xa5\x96\x88\xc78\xc0g\xb9\xbe\xbd1\x11}\x8d\'\x15+\xfe\x91\xed\x1e\xeb]\xfa\x9dS\xe6\x12\x9f\r\xc8\x81\xca\xd9\f\xfd\xc8/\xb99\xaa\x1a\r\x92\xae\xb6\xd2\xb8\xb7\f[\xd8y\xc6O\xcfE\xb4\xe6\x16\x1fT\x1e\x9b\x9c\f\x8d\xed1\x96\"\x83\x98\xb1S`\xc7\'\xc2\xbf\xb7', 'fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x9b3J\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'}, 0x50f) [ 3143.179634][T17868] XFS (loop0): SB sanity check failed [ 3143.187098][T12699] XFS (loop5): device supports 512 byte sectors (not 0) [ 3143.202858][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 08:32:33 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3143.224510][T17868] XFS (loop0): Unmount and run xfs_repair [ 3143.230639][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3143.241840][T17868] 00000000: 58 46 53 42 00 00 10 03 68 00 00 00 0b 00 10 00 XFSB....h....... [ 3143.250902][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3143.262481][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3143.271464][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3143.280408][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3143.289515][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3143.298417][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3143.307296][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3143.316237][T12696] XFS (loop0): SB validate failed with error -117. 08:32:33 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:32:33 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:32:34 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xa00, 0x0) 08:32:34 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3143.519646][T12696] XFS (loop0): SB sanity check failed [ 3143.533796][T12696] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3143.591292][T12696] XFS (loop0): Unmount and run xfs_repair 08:32:34 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3143.633867][T12696] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3143.671996][T12696] 00000000: 58 46 53 42 00 00 10 03 68 00 00 00 0b 00 10 00 XFSB....h....... [ 3143.682223][T12696] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3143.691609][T12696] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3143.701136][T12696] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3143.707141][T12937] XFS (loop5): device supports 512 byte sectors (not 0) [ 3143.710688][T12696] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3143.726282][T12696] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3143.744732][T12696] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3143.761575][T12696] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3143.773760][T12696] XFS (loop0): SB validate failed with error -117. 08:32:40 executing program 3: 08:32:40 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:32:40 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xc00, 0x0) 08:32:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:32:40 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010006c0000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:32:40 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = socket$inet6(0xa, 0x80003, 0x80) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) 08:32:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:32:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3150.364216][T12990] XFS (loop5): device supports 512 byte sectors (not 0) [ 3150.439231][T10271] XFS (loop0): SB sanity check failed [ 3150.444787][T10271] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3150.467076][T10271] XFS (loop0): Unmount and run xfs_repair [ 3150.484379][T10271] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3150.502218][T10271] 00000000: 58 46 53 42 00 00 10 00 6c 00 00 00 0b 00 10 00 XFSB....l....... [ 3150.516994][T12990] XFS (loop5): device supports 512 byte sectors (not 0) [ 3150.517802][T10271] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 08:32:41 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3150.552578][T10271] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3150.566714][T10271] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3150.578660][T10271] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3150.589782][T10271] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 08:32:41 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 08:32:41 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xc7e, 0x0) [ 3150.600660][T10271] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3150.611681][T10271] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3150.622990][T13006] XFS (loop0): SB validate failed with error -117. 08:32:41 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:32:51 executing program 3: 08:32:51 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 08:32:51 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:32:51 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000740000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:32:51 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xd00, 0x0) 08:32:51 executing program 1: 08:32:51 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:32:51 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 3160.770600][T13274] XFS (loop5): device supports 512 byte sectors (not 0) [ 3160.829751][T13283] XFS (loop0): SB sanity check failed [ 3160.835744][T13283] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3160.858784][T13283] XFS (loop0): Unmount and run xfs_repair [ 3160.869721][T13283] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3160.877366][T13283] 00000000: 58 46 53 42 00 00 10 00 74 00 00 00 0b 00 10 00 XFSB....t....... [ 3160.886466][T13283] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3160.895770][T13283] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3160.905060][T13283] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3160.913994][T13283] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3160.923370][T13283] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3160.932704][T13283] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3160.941898][T13283] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3160.942375][T13274] XFS (loop5): device supports 512 byte sectors (not 0) [ 3160.957947][T13283] XFS (loop0): SB validate failed with error -117. 08:32:51 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:32:51 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xe00, 0x0) 08:32:51 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:32:51 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001003780000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 3161.431479][T13423] XFS (loop5): device supports 512 byte sectors (not 0) [ 3161.448485][T31681] XFS (loop0): SB sanity check failed [ 3161.456465][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3161.469252][T31681] XFS (loop0): Unmount and run xfs_repair [ 3161.488694][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3161.496969][T31681] 00000000: 58 46 53 42 00 00 10 03 78 00 00 00 0b 00 10 00 XFSB....x....... [ 3161.505980][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3161.514971][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3161.523892][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3161.532730][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3161.541664][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3161.550714][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3161.559594][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3161.568580][T13435] XFS (loop0): SB validate failed with error -117. [ 3161.660964][T13423] XFS (loop5): device supports 512 byte sectors (not 0) [ 3161.682562][T31681] XFS (loop0): SB sanity check failed [ 3161.688233][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3161.700996][T31681] XFS (loop0): Unmount and run xfs_repair [ 3161.707113][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3161.731127][T31681] 00000000: 58 46 53 42 00 00 10 03 78 00 00 00 0b 00 10 00 XFSB....x....... [ 3161.742664][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3161.751621][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3161.763320][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3161.772235][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3161.781626][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3161.806749][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3161.834181][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3161.851828][T13435] XFS (loop0): SB validate failed with error -117. 08:32:57 executing program 3: 08:32:57 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:32:57 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:32:57 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x1020, 0x0) 08:32:57 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010007a0000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:32:57 executing program 1: 08:32:57 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:32:57 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3167.041806][T31681] XFS (loop0): SB sanity check failed [ 3167.050304][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3167.062950][T31681] XFS (loop0): Unmount and run xfs_repair [ 3167.071606][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3167.079223][T31681] 00000000: 58 46 53 42 00 00 10 00 7a 00 00 00 0b 00 10 00 XFSB....z....... 08:32:57 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x1600, 0x0) [ 3167.163782][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3167.172756][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 08:32:57 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3167.204891][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3167.218303][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3167.278338][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3167.287288][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3167.296173][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3167.305077][T13474] XFS (loop0): SB validate failed with error -117. 08:32:57 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:32:58 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x2000, 0x0) [ 3167.464162][T13474] XFS (loop0): SB sanity check failed [ 3167.469732][T13474] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3167.482074][T13474] XFS (loop0): Unmount and run xfs_repair [ 3167.542912][T13474] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3167.563351][T13474] 00000000: 58 46 53 42 00 00 10 00 7a 00 00 00 0b 00 10 00 XFSB....z....... [ 3167.584356][T13474] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3167.607023][T13474] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3167.619021][T13474] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3167.628062][T13474] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3167.644208][T13474] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3167.695551][T13474] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3167.723755][T13474] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3167.752679][T13474] XFS (loop0): SB validate failed with error -117. 08:33:03 executing program 3: 08:33:03 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:33:03 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x2010, 0x0) 08:33:03 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010007e0000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:33:03 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3173.381053][T13754] XFS (loop0): SB sanity check failed [ 3173.388612][T13754] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3173.416104][T13754] XFS (loop0): Unmount and run xfs_repair [ 3173.421904][T13754] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3173.429530][T13754] 00000000: 58 46 53 42 00 00 10 00 7e 00 00 00 0b 00 10 00 XFSB....~....... [ 3173.442093][T13754] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3173.451250][T13754] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3173.460290][T13754] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3173.469545][T13754] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3173.478606][T13754] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3173.487589][T13754] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3173.496582][T13754] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3173.505629][T13754] XFS (loop0): SB validate failed with error -117. [ 3173.612916][T13754] XFS (loop0): SB sanity check failed [ 3173.618549][T13754] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3173.637127][T13754] XFS (loop0): Unmount and run xfs_repair [ 3173.652403][T13754] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3173.671313][T13754] 00000000: 58 46 53 42 00 00 10 00 7e 00 00 00 0b 00 10 00 XFSB....~....... [ 3173.680590][T13754] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3173.690771][T13754] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3173.699862][T13754] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3173.708867][T13754] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3173.717781][T13754] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3173.726753][T13754] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3173.735679][T13754] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3173.749537][T13754] XFS (loop0): SB validate failed with error -117. 08:33:08 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{}, "018000da7d469c04", "02a839a6c7986edc3f8a6200c88e37de79b97525cedefaa0bded32e7d887ec99", "0000ef00", "00943f4aece800"}, 0x38) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)="0a99b3e3930870dcd4c6d68e6abe088af4ccdbe6dc85ed63bcee4834cd53f8a19cfad53574230c17377bd7b3eb23d9008f0c69b08db538753bcf550f05d219f8c6ca03228dd8d293261ba079190f47d70c95a9", 0x53}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f0000000740)="81838ea59a01f3def2f74b864fabdfd6d9016709aa568a1dd2af7e570c81431e0fe705be1de9535af1e1520ec38fce0389a39b", 0x33, 0x0, 0x0, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x4000000000015, &(0x7f0000000100)) ptrace$getsig(0x18, r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)='bbr\x00'}, 0x30) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 08:33:08 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:33:08 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:33:08 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x2300, 0x0) 08:33:08 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000810000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:33:08 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3177.590584][T13891] XFS (loop0): SB sanity check failed [ 3177.619626][T13891] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 08:33:08 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3177.637142][T13891] XFS (loop0): Unmount and run xfs_repair [ 3177.657658][T13891] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3177.735405][T13891] 00000000: 58 46 53 42 00 00 10 00 81 00 00 00 0b 00 10 00 XFSB............ [ 3177.744443][T13891] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3177.763784][T13891] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3177.778625][T13891] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3177.787623][T13891] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3177.796759][T13891] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3177.805801][T13891] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3177.823807][T13891] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3177.842766][T13891] XFS (loop0): SB validate failed with error -117. [ 3177.931764][T31681] XFS (loop0): SB sanity check failed [ 3177.937255][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3177.967517][T31681] XFS (loop0): Unmount and run xfs_repair [ 3177.973270][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3177.980842][T31681] 00000000: 58 46 53 42 00 00 10 00 81 00 00 00 0b 00 10 00 XFSB............ [ 3177.990148][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3177.999059][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3178.008062][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3178.016968][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3178.025974][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3178.034870][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3178.043759][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3178.052816][T13891] XFS (loop0): SB validate failed with error -117. 08:33:10 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000280)={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3424af3c"}, 0x0, 0x1}) 08:33:10 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:33:10 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:33:10 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x2600, 0x0) 08:33:10 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000820000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 3179.705839][T14033] XFS (loop0): SB sanity check failed [ 3179.711359][T14033] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3179.767534][T14033] XFS (loop0): Unmount and run xfs_repair [ 3179.785270][T14033] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3179.797505][T14033] 00000000: 58 46 53 42 00 00 10 00 82 00 00 00 0b 00 10 00 XFSB............ [ 3179.807066][T14033] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3179.828392][T14033] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3179.837631][T14033] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3179.846859][T14033] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3179.856064][T14033] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3179.865279][T14033] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3179.874458][T14033] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3179.890790][T14033] XFS (loop0): SB validate failed with error -117. [ 3179.997729][T31681] XFS (loop0): SB sanity check failed [ 3180.003269][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3180.017972][T31681] XFS (loop0): Unmount and run xfs_repair [ 3180.023766][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3180.031166][T31681] 00000000: 58 46 53 42 00 00 10 00 82 00 00 00 0b 00 10 00 XFSB............ [ 3180.043241][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3180.052187][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3180.061206][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3180.070483][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3180.079579][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3180.091466][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3180.100549][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3180.112261][T14033] XFS (loop0): SB validate failed with error -117. 08:33:19 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x2c01, 0x0) 08:33:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000740)) 08:33:19 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:33:19 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:33:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 08:33:19 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000ae0000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:33:19 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:33:19 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3188.939388][T31681] XFS (loop0): SB sanity check failed [ 3188.952586][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3188.973721][T31681] XFS (loop0): Unmount and run xfs_repair [ 3188.979577][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3188.994118][T31681] 00000000: 58 46 53 42 00 00 10 00 ae 00 00 00 0b 00 10 00 XFSB............ [ 3189.006135][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3189.015322][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3189.024545][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3189.033501][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 08:33:19 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x3f00, 0x0) [ 3189.042654][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3189.052197][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3189.064023][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3189.073116][T14189] XFS (loop0): SB validate failed with error -117. 08:33:19 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3189.210041][ T1668] XFS (loop0): SB sanity check failed [ 3189.215649][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3189.256935][ T1668] XFS (loop0): Unmount and run xfs_repair [ 3189.267256][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3189.281653][ T1668] 00000000: 58 46 53 42 00 00 10 00 ae 00 00 00 0b 00 10 00 XFSB............ 08:33:19 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3189.320735][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3189.352896][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3189.393014][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3189.403488][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3189.412681][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3189.421949][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3189.431212][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 08:33:20 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3189.443763][T14189] XFS (loop0): SB validate failed with error -117. 08:33:20 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:33:26 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3b6, 0x0, 0x2212020, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0xffffffffffffffff}}]}) 08:33:26 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001003c00000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:33:26 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/62, 0x3e}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3196.145461][T14566] XFS (loop0): SB sanity check failed [ 3196.150953][T14566] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3196.173727][T14566] XFS (loop0): Unmount and run xfs_repair [ 3196.179609][T14566] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3196.187103][T14566] 00000000: 58 46 53 42 00 00 10 03 c0 00 00 00 0b 00 10 00 XFSB............ [ 3196.195991][T14566] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3196.204891][T14566] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3196.213776][T14566] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3196.222645][T14566] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3196.231567][T14566] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3196.240452][T14566] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3196.249340][T14566] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3196.259052][T14566] XFS (loop0): SB validate failed with error -117. [ 3196.366019][T31681] XFS (loop0): SB sanity check failed [ 3196.371578][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3196.384757][T31681] XFS (loop0): Unmount and run xfs_repair [ 3196.390543][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3196.398376][T31681] 00000000: 58 46 53 42 00 00 10 03 c0 00 00 00 0b 00 10 00 XFSB............ [ 3196.407534][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3196.416755][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3196.425968][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3196.435092][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3196.444206][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3196.453116][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3196.462483][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3196.471630][T14566] XFS (loop0): SB validate failed with error -117. 08:33:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept$alg(r0, 0x0, 0x0) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b2c5e96c64a8a607d07c94e467388877c071d13f35e870c9b164605291fbc149d21d2815b3bab86bb0d21b4e0079158271a076fa1e1cb34942b7f882aa8c222ebc98fff07a5e24051d8c9054485f5ed8ef4c3b40ae069828ea4c7e8dbc534d23a5155ef7a0b646392bb795917d69191ff91804701a262a2c1f5bdaf21628081ad3dade6534281df504", 0x89}, {&(0x7f00000011c0)="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", 0xa7e}], 0x2}, 0x0) 08:33:28 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x4000, 0x0) 08:33:28 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 08:33:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/62, 0x3e}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:33:28 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000c40000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:33:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/62, 0x3e}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:33:28 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 3198.146628][T31681] XFS (loop0): SB sanity check failed [ 3198.152193][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3198.208573][T31681] XFS (loop0): Unmount and run xfs_repair [ 3198.223753][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3198.246044][T31681] 00000000: 58 46 53 42 00 00 10 00 c4 00 00 00 0b 00 10 00 XFSB............ 08:33:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/62, 0x3e}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3198.268351][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3198.284847][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3198.303723][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3198.321472][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3198.340397][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3198.349403][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3198.360643][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 08:33:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/62, 0x3e}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3198.383760][T14598] XFS (loop5): device supports 512 byte sectors (not 0) [ 3198.389405][T14597] XFS (loop0): SB validate failed with error -117. [ 3198.533695][T14598] XFS (loop5): device supports 512 byte sectors (not 0) [ 3198.571662][T31681] XFS (loop0): SB sanity check failed [ 3198.577309][T31681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3198.601491][T31681] XFS (loop0): Unmount and run xfs_repair [ 3198.610242][T31681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3198.636017][T31681] 00000000: 58 46 53 42 00 00 10 00 c4 00 00 00 0b 00 10 00 XFSB............ [ 3198.646497][T31681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3198.667290][T31681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3198.677703][T31681] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3198.686867][T31681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3198.704645][T31681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3198.722506][T31681] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3198.731576][T31681] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3198.743358][T14597] XFS (loop0): SB validate failed with error -117. 08:33:31 executing program 1: 08:33:31 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 08:33:31 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)=""/62, 0x3e}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:33:35 executing program 3: 08:33:35 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x4001, 0x0) 08:33:35 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010c0ed0000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:33:35 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 08:33:35 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:33:35 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 08:33:35 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3205.380839][T14671] XFS (loop0): SB sanity check failed [ 3205.397253][T14671] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3205.417487][T14670] XFS (loop5): device supports 512 byte sectors (not 0) [ 3205.431063][T14671] XFS (loop0): Unmount and run xfs_repair [ 3205.450696][T14671] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3205.477138][T14671] 00000000: 58 46 53 42 00 00 10 c0 ed 00 00 00 0b 00 10 00 XFSB............ [ 3205.486118][T14671] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3205.495162][T14671] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3205.504584][T14671] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3205.515006][T14671] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 08:33:36 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x4800, 0x0) 08:33:36 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3205.524000][T14671] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3205.532971][T14671] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3205.559146][T14671] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3205.577055][T14671] XFS (loop0): SB validate failed with error -117. [ 3205.710786][T14699] XFS (loop5): device supports 512 byte sectors (not 0) 08:33:41 executing program 1: 08:33:41 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 08:33:41 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:33:42 executing program 3: ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x0) close(r2) 08:33:42 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000f40000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:33:42 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x4c00, 0x0) 08:33:42 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:33:42 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:33:42 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:33:42 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3211.690125][T14735] XFS (loop5): device supports 512 byte sectors (not 0) [ 3211.748352][T17868] XFS (loop0): SB sanity check failed [ 3211.769075][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 08:33:42 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:33:42 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3211.796397][T17868] XFS (loop0): Unmount and run xfs_repair [ 3211.803170][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3211.856619][T14735] XFS (loop5): device supports 512 byte sectors (not 0) [ 3211.866242][T17868] 00000000: 58 46 53 42 00 00 10 00 f4 00 00 00 0b 00 10 00 XFSB............ [ 3211.912592][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3211.948610][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3211.981810][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3211.991732][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3212.015468][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3212.026396][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3212.038374][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3212.047317][T14746] XFS (loop0): SB validate failed with error -117. [ 3212.184593][ T1668] XFS (loop0): SB sanity check failed [ 3212.190225][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3212.202427][ T1668] XFS (loop0): Unmount and run xfs_repair [ 3212.208537][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3212.216295][ T1668] 00000000: 58 46 53 42 00 00 10 00 f4 00 00 00 0b 00 10 00 XFSB............ [ 3212.225851][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3212.234989][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3212.253690][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3212.262586][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3212.271790][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3212.280838][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3212.289936][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3212.299303][T14746] XFS (loop0): SB validate failed with error -117. 08:33:49 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='\xabZ\xc9\xaf\x88\xcc\t\xcf\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x100000001, 0x9c3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000340)=""/173) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x4000) r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000240)={{}, {0x80}, 0x0, 0x5}) fstat(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r3, 0x0, 0x0) 08:33:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:33:49 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x5003, 0x0) 08:33:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) ioctl(r2, 0x0, &(0x7f0000000280)="b0df546fb1d104916bd232724053c5ec77b11046820c8df813fc67446e25696df1ea966b80b6deae9a523e86faa97d180081cfee17bfe59af737adf3738b3b837e7863773ac54ed8577f23c4cd36d3c2f9e7f5bae36a369599c2f5b0eb8b286474ec2b8231d43e0711f43fa7bf733f8babb4c7057f966c82a17351435fd6a33ec64abfb77dc5ab51cd3e64be66c83148cb5f51823687f15cc1494e9f0c152754ab2216df46e0d5191241f63f98cc0e78cebf37feda067f3ee2973a639bbceec3ac704f5a0af872f31bcde85f56938630369318d3bc6373643306c663693ccea8772f836ce467") 08:33:53 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:33:53 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000ff0000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:33:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:33:53 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x5802, 0x0) 08:33:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3222.980317][ T1668] XFS (loop0): SB sanity check failed [ 3222.985963][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3223.008599][ T1668] XFS (loop0): Unmount and run xfs_repair [ 3223.022810][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3223.031470][ T1668] 00000000: 58 46 53 42 00 00 10 00 ff 00 00 00 0b 00 10 00 XFSB............ [ 3223.040786][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3223.050441][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3223.059857][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3223.069404][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 08:33:53 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3223.078726][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3223.088219][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3223.097532][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3223.107118][T14925] XFS (loop0): SB validate failed with error -117. 08:33:53 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x6403, 0x0) 08:33:53 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3223.369614][T14925] XFS (loop0): SB sanity check failed [ 3223.384265][T14925] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3223.403287][T14925] XFS (loop0): Unmount and run xfs_repair [ 3223.409177][T14925] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3223.420249][T14925] 00000000: 58 46 53 42 00 00 10 00 ff 00 00 00 0b 00 10 00 XFSB............ [ 3223.443762][T14925] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3223.503952][T14925] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3223.512879][T14925] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3223.531306][T14925] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3223.540527][T14925] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3223.552804][T14925] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3223.586607][T14925] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3223.601699][T14925] XFS (loop0): SB validate failed with error -117. 08:33:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x264040) r2 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r1, r2, 0x0) 08:33:58 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:33:58 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x6800, 0x0) 08:34:04 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) shutdown(r0, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000000)=0x80000000002, 0xe3) recvmmsg(r0, &(0x7f00000001c0), 0x460, 0xea225aec34b1dd0e, 0x0) socket$inet6(0xa, 0x0, 0x0) 08:34:04 executing program 4: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:34:04 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100fff0000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:34:04 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:34:04 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x6c00, 0x0) 08:34:04 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) 08:34:04 executing program 4: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:34:05 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3234.441060][T17868] XFS (loop0): SB sanity check failed [ 3234.447113][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 08:34:05 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x7400, 0x0) [ 3234.488487][T17868] XFS (loop0): Unmount and run xfs_repair [ 3234.519884][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3234.534195][T17868] 00000000: 58 46 53 42 00 00 10 0f ff 00 00 00 0b 00 10 00 XFSB............ [ 3234.551834][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3234.560851][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3234.574317][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3234.583179][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3234.592155][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3234.601051][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3234.609943][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3234.618921][T15309] XFS (loop0): SB validate failed with error -117. 08:34:09 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1001004, 0x0) open(&(0x7f00000003c0)='./bus/file0\x00', 0x0, 0x44) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) r0 = creat(&(0x7f0000001c00)='./bus\x00', 0xa1) syz_open_procfs(0x0, 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) socket$rxrpc(0x21, 0x2, 0xa) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) r2 = dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x800fe) sendfile(r2, r3, 0x0, 0x8000fffffffe) 08:34:09 executing program 4: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:34:09 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x2) 08:34:16 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='\xabZ\xc9\xaf\x88\xcc\t\xcf\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x100000001, 0x9c3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r2 = gettid() tkill(r2, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000540)="dc8bc724d06a867df3577d06c01c02145c0c9f09addf8dbf59cf61ac2c9a35261cb98ec0fd1b101e6964c063c3acb3b8929449abcbe459522222fbaf6882a7f6", 0x41395881) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10, 0x0, 0x0, "ad03064d0b090233180173920d2a3836f7d76f992ab41d9fcf9152ba5bd273eea9204e9b0e260d83009a02d5c5097cd5e21de9f73f07d13f44250cf2f92d6466", "7e2bc69a47db702cc8daf96f5e68254ee361331a88dd2965f18d2bee91bd828c9ec7b0c65e30a467c42d17bcaeb953b41590436e8cec4a4a5c7a1bd80aac5025", "b953833c4e60e7cc5d472aed8865f1f4e4ce7123a93bc1cedcd1a16ccf26f3f6", [0x101]}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r7, &(0x7f0000000580)="ca6154a1115ca8eb18b0b019eeb65e1f49581bb39ecfd65976357e8cb6dba824a30c9d0ce57dc1105a52559498cfdbaa5df07b985c1424c0e82b1a63221ca80a4781e9c649dc2cc0c706de24d697dbedf2f76ad339764c7e3de10a9117ec35032baa41a9ed5d2720e6e71c5c0096e31f62e595408b1e369efecd560f8468bbac0a9532b1365a6330608201686ff42ca874f4a545cc7a676399dfb15ebbf20e8f5a0dd07547b9873c106712882dcaa186", 0xb0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000340)=""/173) fcntl$setlease(r0, 0x400, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xffff, 0x81, 0x0, 0x52}, {0x1000, 0x83, 0x0, 0x2}]}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x4000) r10 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r10, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r10, 0x40505330, &(0x7f0000000240)={{}, {0x80}}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r10, 0x40505330, &(0x7f0000000140)={{}, {0x20000000000080}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) fstat(r8, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r11, 0x0, r13) chown(&(0x7f0000000200)='./file0\x00', r9, 0x0) 08:34:16 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x7a00, 0x0) 08:34:16 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000300000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:34:16 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x2) 08:34:16 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:34:16 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:34:16 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x2) [ 3245.724243][T15674] XFS (loop0): SB sanity check failed [ 3245.730627][T15674] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3245.780191][T15674] XFS (loop0): Unmount and run xfs_repair [ 3245.799507][T15674] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3245.816459][T15674] 00000000: 58 46 53 42 00 00 10 00 00 03 00 00 0b 00 10 00 XFSB............ 08:34:16 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x7e0c, 0x0) [ 3245.825557][T15674] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3245.834927][T15674] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3245.843952][T15674] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3245.852897][T15674] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3245.882206][T15674] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3245.892657][T15674] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3245.902402][T15674] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3245.946099][T15674] XFS (loop0): SB validate failed with error -117. 08:34:16 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) tkill(r0, 0x2) [ 3246.171981][T15674] XFS (loop0): SB sanity check failed [ 3246.198654][T15674] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3246.256838][T15674] XFS (loop0): Unmount and run xfs_repair [ 3246.262621][T15674] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3246.272600][T15674] 00000000: 58 46 53 42 00 00 10 00 00 03 00 00 0b 00 10 00 XFSB............ [ 3246.281546][T15674] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3246.290474][T15674] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3246.299463][T15674] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3246.308448][T15674] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3246.317426][T15674] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3246.326351][T15674] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3246.335309][T15674] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3246.344558][T15674] XFS (loop0): SB validate failed with error -117. 08:34:21 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000240)={{}, {0x80}}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x20000000000080}, 0x0, 0x1, 0x0, [], [0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:34:21 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:34:21 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) tkill(r0, 0x2) 08:34:29 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001003c00000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:34:29 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x8e03, 0x0) 08:34:29 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001098360300000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:34:29 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) tkill(r0, 0x2) 08:34:29 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3259.120016][ T1668] XFS (loop0): SB sanity check failed [ 3259.129909][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 08:34:29 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x9c00, 0x0) 08:34:29 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(0x0, 0x2) [ 3259.191183][ T1668] XFS (loop0): Unmount and run xfs_repair [ 3259.209109][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3259.225581][ T1668] 00000000: 58 46 53 42 00 00 10 98 36 03 00 00 0b 00 10 00 XFSB....6....... 08:34:29 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(0x0, 0x2) [ 3259.290490][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3259.309823][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3259.333465][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3259.359032][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3259.371190][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3259.381121][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ 08:34:29 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3259.392876][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3259.402797][T16039] XFS (loop0): SB validate failed with error -117. 08:34:34 executing program 1: 08:34:34 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(0x0, 0x2) 08:34:34 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x9c03, 0x0) 08:34:40 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001003c00000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:34:40 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:34:40 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010d0360300000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:34:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x0) 08:34:40 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xa000, 0x0) 08:34:41 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x0) [ 3270.475007][T17868] XFS (loop0): SB sanity check failed [ 3270.480784][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3270.497933][T17868] XFS (loop0): Unmount and run xfs_repair [ 3270.506876][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3270.514770][T17868] 00000000: 58 46 53 42 00 00 10 d0 36 03 00 00 0b 00 10 00 XFSB....6....... [ 3270.523696][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3270.532673][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3270.541644][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3270.551467][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3270.565126][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 08:34:41 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xae00, 0x0) [ 3270.574226][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3270.587660][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3270.597089][T16324] XFS (loop0): SB validate failed with error -117. 08:34:41 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:34:41 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@loopback, 0x135}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xa1}, {0x0}, {&(0x7f0000000140)=""/62, 0x3b}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) tkill(r0, 0x0) 08:34:42 executing program 1: 08:34:42 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:34:42 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xc003, 0x0) 08:34:52 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001003c00000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:34:52 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000400000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:34:52 executing program 2: 08:34:52 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xc400, 0x0) 08:34:52 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:34:52 executing program 2: 08:34:52 executing program 2: [ 3281.900436][T17868] XFS (loop0): SB sanity check failed [ 3281.906057][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 08:34:52 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3281.963536][T17868] XFS (loop0): Unmount and run xfs_repair [ 3281.983908][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3282.010253][T17868] 00000000: 58 46 53 42 00 00 10 00 00 04 00 00 0b 00 10 00 XFSB............ [ 3282.027460][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3282.053562][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3282.062653][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3282.074840][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3282.084200][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3282.093230][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3282.102431][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 08:34:52 executing program 2: [ 3282.111766][T16604] XFS (loop0): SB validate failed with error -117. 08:34:53 executing program 1: 08:34:53 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010ff070400000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:34:53 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3282.904262][T16750] XFS (loop0): SB sanity check failed [ 3282.909810][T16750] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3282.922017][T16750] XFS (loop0): Unmount and run xfs_repair [ 3282.928093][T16750] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3282.935826][T16750] 00000000: 58 46 53 42 00 00 10 ff 07 04 00 00 0b 00 10 00 XFSB............ [ 3282.945058][T16750] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3282.954258][T16750] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3282.963200][T16750] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3282.972381][T16750] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3282.981655][T16750] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3282.990865][T16750] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3283.000028][T16750] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3283.009189][T16750] XFS (loop0): SB validate failed with error -117. [ 3283.140497][T17868] XFS (loop0): SB sanity check failed [ 3283.145983][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3283.158270][T17868] XFS (loop0): Unmount and run xfs_repair [ 3283.164216][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3283.171592][T17868] 00000000: 58 46 53 42 00 00 10 ff 07 04 00 00 0b 00 10 00 XFSB............ [ 3283.181218][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3283.200357][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3283.209294][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3283.218205][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3283.227149][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3283.236063][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3283.244971][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3283.253970][T16750] XFS (loop0): SB validate failed with error -117. [ 3296.329363][ T1668] XFS (loop3): SB sanity check failed [ 3296.334958][ T1668] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3296.347212][ T1668] XFS (loop3): Unmount and run xfs_repair [ 3296.353051][ T1668] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 3296.360544][ T1668] 00000000: 58 46 53 42 00 00 10 03 c0 00 00 00 0b 00 10 00 XFSB............ [ 3296.369457][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3296.378473][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3296.387481][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3296.396460][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3296.405361][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3296.414271][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3296.423144][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3296.432147][T16774] XFS (loop3): SB validate failed with error -117. 08:35:07 executing program 3: 08:35:07 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xda02, 0x0) 08:35:07 executing program 2: 08:35:07 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:35:07 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000e00000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:35:07 executing program 1: 08:35:07 executing program 2: [ 3296.597304][T16787] XFS (loop0): SB sanity check failed [ 3296.602890][T16787] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3296.615491][T16787] XFS (loop0): Unmount and run xfs_repair [ 3296.621562][T16787] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3296.629273][T16787] 00000000: 58 46 53 42 00 00 10 00 00 0e 00 00 0b 00 10 00 XFSB............ [ 3296.638490][T16787] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3296.647601][T16787] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3296.677804][T16787] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3296.741027][T16787] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 08:35:07 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:35:07 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xe401, 0x0) 08:35:07 executing program 2: [ 3296.804202][T16787] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3296.813087][T16787] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3296.831705][T16787] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3296.841783][T16787] XFS (loop0): SB validate failed with error -117. 08:35:07 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3297.036397][ T1668] XFS (loop0): SB sanity check failed [ 3297.041935][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3297.062572][ T1668] XFS (loop0): Unmount and run xfs_repair [ 3297.068953][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3297.097118][ T1668] 00000000: 58 46 53 42 00 00 10 00 00 0e 00 00 0b 00 10 00 XFSB............ [ 3297.117073][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3297.132619][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 08:35:07 executing program 2: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010d0360300000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 3297.148199][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3297.169186][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3297.203581][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3297.219730][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3297.243731][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3297.257962][T16787] XFS (loop0): SB validate failed with error -117. [ 3297.297244][T16933] XFS (loop2): SB sanity check failed [ 3297.302767][T16933] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3297.314680][T16933] XFS (loop2): Unmount and run xfs_repair [ 3297.320483][T16933] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 3297.328161][T16933] 00000000: 58 46 53 42 00 00 10 d0 36 03 00 00 0b 00 10 00 XFSB....6....... [ 3297.346427][T16933] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3297.371421][T16933] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3297.380567][T16933] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3297.401506][T16933] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3297.410508][T16933] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3297.426745][T16933] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3297.435743][T16933] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3297.450748][T16933] XFS (loop2): SB validate failed with error -117. 08:35:15 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xd00, 0x0) 08:35:15 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xedc0, 0x0) 08:35:15 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:35:15 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000007e00000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:35:15 executing program 2: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x8e03, 0x0) 08:35:15 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x2600, 0x0) 08:35:15 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 3305.029316][T17868] XFS (loop0): SB sanity check failed [ 3305.043860][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 08:35:15 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 3305.091285][T17868] XFS (loop0): Unmount and run xfs_repair [ 3305.101406][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3305.111309][T17868] 00000000: 58 46 53 42 00 00 10 00 00 7e 00 00 0b 00 10 00 XFSB.....~...... [ 3305.122645][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3305.131834][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3305.140747][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3305.149790][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3305.158756][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3305.167637][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3305.176521][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3305.185451][T16955] XFS (loop0): SB validate failed with error -117. 08:35:15 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xf703, 0x0) 08:35:15 executing program 2: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x900, 0x0) 08:35:15 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 3305.414379][T16955] XFS (loop0): SB sanity check failed [ 3305.429353][T16955] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3305.451751][T16955] XFS (loop0): Unmount and run xfs_repair [ 3305.461974][T16955] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3305.479425][T16955] 00000000: 58 46 53 42 00 00 10 00 00 7e 00 00 0b 00 10 00 XFSB.....~...... [ 3305.502697][T16955] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3305.512641][T16955] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3305.521862][T16955] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3305.538255][T16955] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3305.547527][T16955] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 08:35:16 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3305.556726][T16955] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3305.565895][T16955] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3305.583224][T16955] XFS (loop0): SB validate failed with error -117. [ 3305.703491][T17006] XFS (loop2): device supports 512 byte sectors (not 0) [ 3311.150427][T17036] XFS (loop3): device supports 512 byte sectors (not 0) 08:35:23 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001040020000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:35:23 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001080969800000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:35:23 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xff00, 0x0) 08:35:23 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:35:23 executing program 2: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001002400000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:35:23 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001058020000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 3313.417467][T17058] XFS (loop0): SB sanity check failed [ 3313.426362][T17058] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3313.473826][T17055] XFS (loop2): SB sanity check failed [ 3313.479394][T17055] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3313.523708][T17058] XFS (loop0): Unmount and run xfs_repair [ 3313.529697][T17058] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3313.537265][T17058] 00000000: 58 46 53 42 00 00 10 80 96 98 00 00 0b 00 10 00 XFSB............ [ 3313.546471][T17058] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3313.555576][T17058] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3313.564657][T17058] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3313.573788][T17058] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3313.582844][T17058] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3313.592205][T17055] XFS (loop2): Unmount and run xfs_repair [ 3313.603868][T17058] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ 08:35:24 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xff0f, 0x0) 08:35:24 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3313.625389][T17058] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3313.643809][T17055] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 3313.673740][T17055] 00000000: 58 46 53 42 00 00 10 02 40 00 00 00 0b 00 10 00 XFSB....@....... [ 3313.689403][T17055] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3313.706878][T17058] XFS (loop0): SB validate failed with error -117. [ 3313.718248][T17055] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3313.733123][T17055] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3313.742409][T17055] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3313.751513][T17055] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3313.760512][T17055] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3313.769806][T17055] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3313.782135][T17055] XFS (loop2): SB validate failed with error -117. 08:35:24 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:35:24 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xffdc) 08:35:24 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x20000, 0x0) 08:35:24 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000001000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 3314.348725][ T1668] XFS (loop0): SB sanity check failed [ 3314.357695][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3314.369627][ T1668] XFS (loop0): Unmount and run xfs_repair [ 3314.375574][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3314.383018][ T1668] 00000000: 58 46 53 42 00 00 10 00 00 00 01 00 0b 00 10 00 XFSB............ [ 3314.407742][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3314.426833][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3314.436193][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3314.445172][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3314.455497][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3314.464582][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3314.473554][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3314.482843][T17505] XFS (loop0): SB validate failed with error -117. [ 3314.605670][T17505] XFS (loop0): SB sanity check failed [ 3314.611287][T17505] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3314.636593][T17505] XFS (loop0): Unmount and run xfs_repair [ 3314.655149][T17505] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3314.667037][T17505] 00000000: 58 46 53 42 00 00 10 00 00 00 01 00 0b 00 10 00 XFSB............ [ 3314.697536][T17505] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3314.713722][T17505] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3314.722769][T17505] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3314.731813][T17505] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3314.740870][T17505] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3314.749891][T17505] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3314.758945][T17505] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3314.767982][T17505] XFS (loop0): SB validate failed with error -117. 08:35:31 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001040020000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:35:31 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x189) syz_genetlink_get_family_id$nbd(0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000002c0)={0x332}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) sendmsg$NBD_CMD_CONNECT(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000008580)=[{{0x0, 0x0, &(0x7f0000000c00)}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000c40)=""/4099, 0x1003}], 0x1, &(0x7f0000002d40)=""/217, 0xd9}}, {{0x0, 0x0, &(0x7f0000006f80)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000007200)=[{0x0}], 0x1, &(0x7f0000007240)=""/1, 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x3}], 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') preadv(r2, &(0x7f00000017c0), 0x1a2, 0x0) 08:35:31 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:35:31 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x3cdac, 0x0) 08:35:31 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000002000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:35:31 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001058020000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:35:31 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3320.622547][ T1668] XFS (loop0): SB sanity check failed [ 3320.628386][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3320.668427][ T1668] XFS (loop0): Unmount and run xfs_repair [ 3320.674228][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3320.681704][ T1668] 00000000: 58 46 53 42 00 00 10 00 00 00 02 00 0b 00 10 00 XFSB............ [ 3320.690598][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3320.699484][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3320.708395][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3320.717272][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3320.733736][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3320.742827][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3320.752002][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3320.761068][T17542] XFS (loop0): SB validate failed with error -117. 08:35:31 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x40000, 0x0) 08:35:31 executing program 2: futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xf, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 3320.948614][T17542] XFS (loop0): SB sanity check failed [ 3320.956146][T17542] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3320.991530][T17542] XFS (loop0): Unmount and run xfs_repair [ 3320.997811][T17542] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3321.005597][T17542] 00000000: 58 46 53 42 00 00 10 00 00 00 02 00 0b 00 10 00 XFSB............ [ 3321.015179][T17542] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3321.024390][T17542] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3321.033621][T17542] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3321.042804][T17542] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3321.052261][T17542] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3321.061683][T17542] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3321.078093][T17542] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 08:35:31 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x0, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:35:31 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) shutdown(r0, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000000)=0x80000000002, 0xe3) recvmmsg(r0, &(0x7f00000001c0), 0x460, 0xea225aec34b1dd0e, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e21, 0x0, @mcast1}}, 0x0, 0x9}, 0xd8) 08:35:31 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x407ff, 0x0) [ 3321.093870][T17542] XFS (loop0): SB validate failed with error -117. [ 3328.817940][T18212] XFS (loop3): SB sanity check failed [ 3328.823502][T18212] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3328.837866][T18212] XFS (loop3): Unmount and run xfs_repair [ 3328.844113][T18212] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 3328.851515][T18212] 00000000: 58 46 53 42 00 00 10 40 02 00 00 00 0b 00 10 00 XFSB...@........ [ 3328.863401][T18212] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3328.872335][T18212] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3328.881265][T18212] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3328.890178][T18212] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3328.899111][T18212] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3328.908026][T18212] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3328.917004][T18212] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3328.926141][T18212] XFS (loop3): SB validate failed with error -117. 08:35:40 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001040020000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:35:40 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000101c008002000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:35:40 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xe0000, 0x0) 08:35:40 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x0, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:35:40 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) shutdown(r0, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000000)=0x80000000002, 0xe3) recvmmsg(r0, &(0x7f00000001c0), 0x460, 0xea225aec34b1dd0e, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e21, 0x0, @mcast1}}, 0x0, 0x9}, 0xd8) 08:35:40 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001058020000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:35:40 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) [ 3329.858114][T18228] XFS (loop0): SB sanity check failed [ 3329.867249][T18228] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3329.907248][T18228] XFS (loop0): Unmount and run xfs_repair [ 3329.913036][T18228] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3329.920822][T18228] 00000000: 58 46 53 42 00 00 10 1c 00 80 02 00 0b 00 10 00 XFSB............ [ 3329.929983][T18228] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 08:35:40 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x0, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3329.949908][T18228] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 08:35:40 executing program 2: pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents(r0, &(0x7f0000001140)=""/4096, 0x1000) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) 08:35:40 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x1000000, 0x0) [ 3330.062014][T18228] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3330.147920][T18228] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 08:35:40 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x0, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:35:40 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x2000000, 0x0) [ 3330.219426][T18228] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3330.227614][T18454] XFS (loop5): device supports 512 byte sectors (not 0) [ 3330.242572][T18228] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3330.260259][T18228] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3330.327935][T18228] XFS (loop0): SB validate failed with error -117. [ 3330.482087][T18570] XFS (loop5): device supports 512 byte sectors (not 0) [ 3330.683274][T18570] XFS (loop5): device supports 512 byte sectors (not 0) [ 3338.121586][ T1668] XFS (loop3): SB sanity check failed [ 3338.127062][ T1668] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3338.139000][ T1668] XFS (loop3): Unmount and run xfs_repair [ 3338.144785][ T1668] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 3338.152159][ T1668] 00000000: 58 46 53 42 00 00 10 40 02 00 00 00 0b 00 10 00 XFSB...@........ [ 3338.161117][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3338.170010][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3338.178933][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3338.187826][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3338.196728][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3338.205626][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3338.214599][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3338.223480][T18602] XFS (loop3): SB validate failed with error -117. 08:35:49 executing program 3: 08:35:49 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x0, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:35:49 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000003000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:35:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x25f) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001080)=ANY=[@ANYRESHEX, @ANYBLOB="0e0c000022dd7392d0f23f1ee16b363fda1cc6929ca64288403be7d38b01a3f3379c0f18e55b549760c258b275ee862fedb523f039283234eb8fd040a634120c3dceb1f7fe2fd24f2fd063b1"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:35:49 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x3000000, 0x0) 08:35:49 executing program 1: [ 3339.110354][T18618] XFS (loop5): device supports 512 byte sectors (not 0) [ 3339.134638][ T1668] XFS (loop0): SB sanity check failed [ 3339.140171][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3339.199554][ T1668] XFS (loop0): Unmount and run xfs_repair [ 3339.208356][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3339.216260][ T1668] 00000000: 58 46 53 42 00 00 10 00 00 00 03 00 0b 00 10 00 XFSB............ [ 3339.242848][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3339.255379][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3339.266218][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3339.284495][T18618] XFS (loop5): device supports 512 byte sectors (not 0) 08:35:49 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x4000000, 0x0) [ 3339.296133][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3339.306793][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3339.317108][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3339.327952][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3339.338647][T18624] XFS (loop0): SB validate failed with error -117. 08:35:49 executing program 2: 08:35:50 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x0, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:35:50 executing program 2: 08:35:50 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000004000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:35:50 executing program 2: [ 3339.664373][T18866] XFS (loop5): device supports 512 byte sectors (not 0) [ 3339.854611][T18878] XFS (loop0): SB sanity check failed [ 3339.860415][T18878] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3339.877073][T18878] XFS (loop0): Unmount and run xfs_repair [ 3339.882875][T18878] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3339.890592][T18878] 00000000: 58 46 53 42 00 00 10 00 00 00 04 00 0b 00 10 00 XFSB............ [ 3339.899618][T18878] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3339.908626][T18878] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3339.917686][T18878] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3339.926710][T18878] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3339.936116][T18878] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3339.945414][T18878] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3339.954506][T18878] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3339.963364][T18878] XFS (loop0): SB validate failed with error -117. [ 3340.032587][T17868] XFS (loop0): SB sanity check failed [ 3340.038207][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3340.050228][T17868] XFS (loop0): Unmount and run xfs_repair [ 3340.056175][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3340.063551][T17868] 00000000: 58 46 53 42 00 00 10 00 00 00 04 00 0b 00 10 00 XFSB............ [ 3340.072678][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3340.081695][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3340.090658][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3340.099638][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3340.108603][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3340.117560][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3340.126536][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3340.137266][T18878] XFS (loop0): SB validate failed with error -117. 08:35:53 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff40, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000001a00810fa00f80ecdb4cb9040a4865160b000000d4036efb12001900020a000040d819a9ffe200000000", 0x2e}], 0x1}, 0x0) 08:35:53 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x0, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:35:53 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x46a0008, 0x0) 08:35:53 executing program 2: 08:35:53 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000005000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:35:53 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="440f20c0663503000000440f22c0baf80cf30f01bf9e4766efbafc0c66ed2e0f210e0f01c20f41f7660fc775d80f0094d1bbba4100b035ee440f20c066f922350d000000000022c0baa1000f20d86635200000000f22d866ef", 0x59}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:35:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x63a99b43c74ff6ce}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00', @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x57}], 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) 08:35:54 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x5000000, 0x0) [ 3343.434633][T18908] XFS (loop0): SB sanity check failed [ 3343.443554][T18908] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3343.457955][T18908] XFS (loop0): Unmount and run xfs_repair [ 3343.463976][T18908] XFS (loop0): First 128 bytes of corrupted metadata buffer: 08:35:54 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x0, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3343.485954][T18908] 00000000: 58 46 53 42 00 00 10 00 00 00 05 00 0b 00 10 00 XFSB............ [ 3343.495293][T18908] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3343.504849][T18908] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3343.514155][T18908] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3343.533877][T18908] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3343.573773][T18908] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 08:35:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x63a99b43c74ff6ce}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00', @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x57}], 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) [ 3343.582661][T18908] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3343.593858][T18908] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3343.615079][T18908] XFS (loop0): SB validate failed with error -117. 08:35:54 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x0, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3343.730681][T19137] XFS (loop5): device supports 512 byte sectors (not 0) [ 3343.811213][ T1668] XFS (loop0): SB sanity check failed [ 3343.820739][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3343.843130][ T1668] XFS (loop0): Unmount and run xfs_repair 08:35:54 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x6000000, 0x0) [ 3343.865748][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3343.885003][ T1668] 00000000: 58 46 53 42 00 00 10 00 00 00 05 00 0b 00 10 00 XFSB............ [ 3343.926799][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3343.956304][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3343.973787][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3343.983378][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3344.000492][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3344.010347][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3344.022656][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3344.032397][T18908] XFS (loop0): SB validate failed with error -117. [ 3344.053531][T19452] XFS (loop5): device supports 512 byte sectors (not 0) 08:36:01 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:36:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) move_pages(0x0, 0x4, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil], 0x0, &(0x7f0000000180), 0x0) 08:36:01 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000006000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:36:01 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x7000000, 0x0) 08:36:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x63a99b43c74ff6ce}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = gettid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00', @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x57}], 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) 08:36:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) clone(0x3106001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$sock_SIOCGIFBR(r3, 0x8940, 0x0) dup2(r1, r0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 08:36:01 executing program 2: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x6000000, 0x0) [ 3350.646575][T19486] XFS (loop5): device supports 512 byte sectors (not 0) 08:36:01 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3350.712793][T19495] XFS (loop0): SB sanity check failed [ 3350.730494][T19495] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3350.780709][T19613] XFS (loop2): device supports 512 byte sectors (not 0) [ 3350.813759][T19486] XFS (loop5): device supports 512 byte sectors (not 0) [ 3350.825959][T19495] XFS (loop0): Unmount and run xfs_repair [ 3350.848421][T19495] XFS (loop0): First 128 bytes of corrupted metadata buffer: 08:36:01 executing program 2: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001080969800000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 3350.898827][T19495] 00000000: 58 46 53 42 00 00 10 00 00 00 06 00 0b 00 10 00 XFSB............ [ 3350.973769][T19495] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3350.996949][T19495] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 08:36:01 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:36:01 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x8000000, 0x0) [ 3351.022139][T19495] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3351.092070][T19495] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3351.105360][T19495] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3351.115409][T19495] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3351.124748][T19495] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3351.155543][T19495] XFS (loop0): SB validate failed with error -117. [ 3351.215054][ T1668] XFS (loop2): SB sanity check failed [ 3351.220508][ T1668] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3351.243545][ T1668] XFS (loop2): Unmount and run xfs_repair [ 3351.249584][ T1668] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 3351.257265][ T1668] 00000000: 58 46 53 42 00 00 10 80 96 98 00 00 0b 00 10 00 XFSB............ [ 3351.266486][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3351.275773][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3351.284972][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3351.294124][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3351.303289][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 08:36:01 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3351.312485][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3351.321751][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3351.331087][T19634] XFS (loop2): SB validate failed with error -117. 08:36:02 executing program 2: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001080010000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 3351.481741][T19646] XFS (loop5): device supports 512 byte sectors (not 0) [ 3351.702362][T19773] XFS (loop2): SB sanity check failed [ 3351.723814][T19773] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3351.754848][T19773] XFS (loop2): Unmount and run xfs_repair [ 3351.760677][T19773] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 3351.769288][T19773] 00000000: 58 46 53 42 00 00 10 80 01 00 00 00 0b 00 10 00 XFSB............ [ 3351.778450][T19773] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3351.787706][T19773] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3351.796871][T19773] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3351.806081][T19773] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3351.823746][T19773] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3351.832750][T19773] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3351.842005][T19773] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3351.851202][T19773] XFS (loop2): SB validate failed with error -117. 08:36:08 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000107e000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:36:08 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000007000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:36:08 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:36:08 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x8006a04, 0x0) 08:36:08 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0) 08:36:08 executing program 2: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010ae000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 3357.871069][ T1668] XFS (loop0): SB sanity check failed [ 3357.881892][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 08:36:08 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3357.976532][T17868] XFS (loop2): SB sanity check failed [ 3357.982054][T17868] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3357.989846][ T1668] XFS (loop0): Unmount and run xfs_repair [ 3358.014176][T17868] XFS (loop2): Unmount and run xfs_repair [ 3358.020190][T17868] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 3358.027718][T17868] 00000000: 58 46 53 42 00 00 10 ae 00 00 00 00 0b 00 10 00 XFSB............ [ 3358.036733][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3358.043980][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3358.045767][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3358.062472][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3358.063726][ T1668] 00000000: 58 46 53 42 00 00 10 00 00 00 07 00 0b 00 10 00 XFSB............ [ 3358.080349][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3358.080427][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3358.101017][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3358.113513][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 08:36:08 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x9000000, 0x0) [ 3358.122638][T19824] XFS (loop2): SB validate failed with error -117. [ 3358.161285][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3358.170484][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 08:36:08 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3358.237276][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3358.260823][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 08:36:08 executing program 2: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100c000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 3358.286262][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3358.307198][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3358.327057][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3358.368427][T19807] XFS (loop0): SB validate failed with error -117. [ 3358.409326][T19942] XFS (loop5): device supports 512 byte sectors (not 0) 08:36:09 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3358.564095][T17868] XFS (loop0): SB sanity check failed [ 3358.569963][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3358.611993][T17868] XFS (loop0): Unmount and run xfs_repair [ 3358.618147][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3358.628697][T17868] 00000000: 58 46 53 42 00 00 10 00 00 00 07 00 0b 00 10 00 XFSB............ [ 3358.638168][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3358.650807][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3358.659933][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3358.672592][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3358.672744][ T1668] XFS (loop2): SB sanity check failed [ 3358.681618][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3358.700404][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3358.709496][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3358.721685][T19807] XFS (loop0): SB validate failed with error -117. [ 3358.728497][T19942] XFS (loop5): device supports 512 byte sectors (not 0) [ 3358.743131][ T1668] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3358.755047][ T1668] XFS (loop2): Unmount and run xfs_repair [ 3358.760872][ T1668] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 3358.768281][ T1668] 00000000: 58 46 53 42 00 00 10 0c 00 00 00 00 0b 00 10 00 XFSB............ [ 3358.777195][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3358.786160][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3358.795024][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3358.803972][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3358.812844][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3358.821803][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ 08:36:09 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3358.869570][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3358.882469][T19994] XFS (loop2): SB validate failed with error -117. [ 3364.078406][ T1668] XFS (loop3): SB sanity check failed [ 3364.083944][ T1668] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3364.095785][ T1668] XFS (loop3): Unmount and run xfs_repair [ 3364.101530][ T1668] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 3364.108963][ T1668] 00000000: 58 46 53 42 00 00 10 7e 00 00 00 00 0b 00 10 00 XFSB...~........ [ 3364.117962][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3364.126859][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3364.135818][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3364.144697][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3364.153563][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3364.162502][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3364.171440][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3364.180412][T20198] XFS (loop3): SB validate failed with error -117. 08:36:17 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000107e000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:36:17 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xa000000, 0x0) 08:36:17 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000008000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:36:17 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:36:17 executing program 2: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:36:17 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0) [ 3367.173304][T20211] XFS (loop5): device supports 512 byte sectors (not 0) [ 3367.209836][T17868] XFS (loop0): SB sanity check failed [ 3367.215835][T17868] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3367.228911][T20215] XFS (loop2): SB sanity check failed [ 3367.237298][T20215] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3367.257443][T20215] XFS (loop2): Unmount and run xfs_repair [ 3367.269996][T17868] XFS (loop0): Unmount and run xfs_repair [ 3367.277705][T20215] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 3367.287460][T17868] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3367.315621][T17868] 00000000: 58 46 53 42 00 00 10 00 00 00 08 00 0b 00 10 00 XFSB............ [ 3367.319311][T20215] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 0b 00 10 00 XFSB............ [ 3367.328093][T17868] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3367.342689][T17868] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3367.345579][T20215] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 08:36:17 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xc000000, 0x0) [ 3367.360202][T17868] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3367.375689][T17868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3367.391538][T17868] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3367.395919][T20215] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 08:36:18 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3367.406199][T17868] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3367.430149][T17868] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3367.439463][T20220] XFS (loop0): SB validate failed with error -117. [ 3367.451203][T20215] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3367.467488][T20215] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3367.484924][T20215] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3367.493934][T20215] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3367.503307][T20215] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3367.508237][T20343] XFS (loop5): device supports 512 byte sectors (not 0) [ 3367.512974][T20215] XFS (loop2): SB validate failed with error -117. 08:36:18 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3367.739313][ T1668] XFS (loop0): SB sanity check failed [ 3367.772507][ T1668] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 08:36:18 executing program 2: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:36:18 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0xd000000, 0x0) [ 3367.818221][ T1668] XFS (loop0): Unmount and run xfs_repair [ 3367.827711][ T1668] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3367.835490][ T1668] 00000000: 58 46 53 42 00 00 10 00 00 00 08 00 0b 00 10 00 XFSB............ [ 3367.848010][ T1668] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3367.877504][ T1668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3367.889277][ T1668] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3367.898667][ T1668] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3367.910361][ T1668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3367.941523][ T1668] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3367.991881][ T1668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3368.019678][T20220] XFS (loop0): SB validate failed with error -117. 08:36:18 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3368.045057][T20479] XFS (loop2): SB sanity check failed [ 3368.054911][T20479] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3368.069383][T20459] XFS (loop5): device supports 512 byte sectors (not 0) [ 3368.072901][T20479] XFS (loop2): Unmount and run xfs_repair [ 3368.103273][T20479] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 3368.160338][T20479] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 0b 00 10 00 XFSB............ [ 3368.183733][T20479] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3368.248847][T20479] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3368.267309][T20479] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3368.283919][T20479] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3368.296863][T20479] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3368.306003][T20479] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3368.324069][T20479] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3368.337844][T20479] XFS (loop2): SB validate failed with error -117. 08:36:28 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000107e000000000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:36:28 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x10000000, 0x0) 08:36:28 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000009000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:36:28 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:36:28 executing program 2: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0xa, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x0, 0x0) [ 3378.531698][T20618] XFS (loop0): SB sanity check failed [ 3378.538635][T20617] XFS (loop5): device supports 512 byte sectors (not 0) [ 3378.550202][T20618] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3378.605577][T20618] XFS (loop0): Unmount and run xfs_repair [ 3378.611594][T20629] XFS (loop2): device supports 512 byte sectors (not 0) [ 3378.620869][T20618] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3378.674047][T20618] 00000000: 58 46 53 42 00 00 10 00 00 00 09 00 0b 00 10 00 XFSB............ [ 3378.698378][T20618] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3378.719190][T20618] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3378.728615][T20618] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3378.738009][T20618] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3378.750341][T20618] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3378.799902][T20618] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3378.824859][T20618] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3378.835631][T20618] XFS (loop0): SB validate failed with error -117. [ 3378.895896][T20618] XFS (loop0): SB sanity check failed [ 3378.901435][T20618] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3378.913846][T20618] XFS (loop0): Unmount and run xfs_repair [ 3378.919644][T20618] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3378.927296][T20618] 00000000: 58 46 53 42 00 00 10 00 00 00 09 00 0b 00 10 00 XFSB............ [ 3378.936236][T20618] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3378.947122][T20618] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3378.956033][T20618] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3378.967840][T20618] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3378.978173][T20618] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3378.989684][T20618] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3378.999322][T20618] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3379.011209][T20618] XFS (loop0): SB validate failed with error -117. 08:36:30 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0) 08:36:30 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:36:30 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x16000000, 0x0) 08:36:30 executing program 2: open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000003900)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f0000002280)=""/8, 0x8}, 0xffff7efc}], 0x2, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x315, 0xf0ffffff7f0000) 08:36:30 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100000000a000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 3379.719564][T10271] XFS (loop0): SB sanity check failed [ 3379.725590][T10271] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3379.741388][T10271] XFS (loop0): Unmount and run xfs_repair [ 3379.747736][T10271] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3379.755896][T20768] XFS (loop5): device supports 512 byte sectors (not 0) 08:36:30 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3379.755906][T10271] 00000000: 58 46 53 42 00 00 10 00 00 00 0a 00 0b 00 10 00 XFSB............ [ 3379.755985][T10271] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3379.781437][T10271] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3379.790844][T10271] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3379.801730][T10271] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3379.811660][T10271] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3379.821013][T10271] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3379.830905][T10271] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3379.840107][T20770] XFS (loop0): SB validate failed with error -117. 08:36:30 executing program 2: open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000003900)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f0000002280)=""/8, 0x8}, 0xffff7efc}], 0x2, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x315, 0xf0ffffff7f0000) 08:36:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents(r0, &(0x7f0000001140)=""/4096, 0x1000) syz_genetlink_get_family_id$tipc2(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket(0x80000000000000a, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@loopback, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) close(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000380)=@alg, &(0x7f0000000180)=0xfe14, 0x0) socket$unix(0x1, 0x0, 0x0) dup(0xffffffffffffffff) 08:36:35 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100000000c000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) 08:36:35 executing program 2: open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000003900)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f0000002280)=""/8, 0x8}, 0xffff7efc}], 0x2, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x315, 0xf0ffffff7f0000) 08:36:35 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x20000000, 0x0) 08:36:35 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3384.938458][T20913] XFS (loop5): device supports 512 byte sectors (not 0) [ 3385.018390][T10271] XFS (loop0): SB sanity check failed [ 3385.034529][T10271] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3385.062493][T10271] XFS (loop0): Unmount and run xfs_repair [ 3385.075129][T10271] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3385.088995][T10271] 00000000: 58 46 53 42 00 00 10 00 00 00 0c 00 0b 00 10 00 XFSB............ [ 3385.104898][T10271] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3385.130775][T10271] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3385.142682][T10271] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3385.152003][T10271] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3385.164486][T10271] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3385.182268][T10271] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3385.191542][T10271] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3385.203917][T20922] XFS (loop0): SB validate failed with error -117. [ 3385.210381][T20913] XFS (loop5): device supports 512 byte sectors (not 0) [ 3385.347930][T20922] XFS (loop0): SB sanity check failed [ 3385.357867][T20922] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3385.370563][T20922] XFS (loop0): Unmount and run xfs_repair [ 3385.376705][T20922] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3385.384448][T20922] 00000000: 58 46 53 42 00 00 10 00 00 00 0c 00 0b 00 10 00 XFSB............ [ 3385.393526][T20922] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3385.402805][T20922] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3385.415507][T20922] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3385.424747][T20922] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3385.433937][T20922] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3385.443322][T20922] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3385.452395][T20922] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3385.462497][T20922] XFS (loop0): SB validate failed with error -117. 08:36:43 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000011, 0xa, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000080)) 08:36:43 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x28}}}, 0x8, 0x0, 0x3ff, 0x101, 0x80}, 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:36:43 executing program 2: open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000003900)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f0000002280)=""/8, 0x8}, 0xffff7efc}], 0x2, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x315, 0xf0ffffff7f0000) 08:36:43 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x20100000, 0x0) 08:36:43 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100000000d000b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a402", 0x67}], 0x0, 0x0) [ 3393.131992][T21069] XFS (loop0): SB sanity check failed [ 3393.141105][T21069] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 3393.176618][T21069] XFS (loop0): Unmount and run xfs_repair [ 3393.203728][T21069] XFS (loop0): First 128 bytes of corrupted metadata buffer: 08:36:43 executing program 2: open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') preadv(r0, &(0x7f00000017c0), 0x315, 0xf0ffffff7f0000) 08:36:43 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)='XFSB', 0x4}], 0x23000000, 0x0) [ 3393.263275][T21069] 00000000: 58 46 53 42 00 00 10 00 00 00 0d 00 0b 00 10 00 XFSB............ [ 3393.276822][T21069] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3393.286518][T21069] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 3393.298575][T21069] 00000030: 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 3393.402434][T21069] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 3393.444594][T21195] ================================================================== [ 3393.452756][T21195] BUG: KCSAN: data-race in do_mpage_readpage / set_blocksize [ 3393.460146][T21195] [ 3393.462485][T21195] read to 0xffff8881256752e6 of 1 bytes by task 21197 on cpu 1: [ 3393.470149][T21195] do_mpage_readpage+0x81/0x10e0 [ 3393.475113][T21195] mpage_readpages+0x2b8/0x3c0 [ 3393.479881][T21195] blkdev_readpages+0x36/0x50 [ 3393.484560][T21195] read_pages+0xa2/0x2d0 [ 3393.488839][T21195] __do_page_cache_readahead+0x353/0x390 [ 3393.494467][T21195] force_page_cache_readahead+0x13a/0x1f0 [ 3393.497725][T21069] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 3393.500188][T21195] page_cache_sync_readahead+0x1cf/0x1e0 [ 3393.500207][T21195] generic_file_read_iter+0xeb6/0x1440 [ 3393.500221][T21195] blkdev_read_iter+0xb2/0xe0 [ 3393.500247][T21195] new_sync_read+0x389/0x4f0 [ 3393.509184][T21069] 00000060: 00 00 06 c0 b4 a4 02 00 00 00 00 00 00 00 00 00 ................ [ 3393.514690][T21195] __vfs_read+0xb1/0xc0 [ 3393.514709][T21195] vfs_read+0x143/0x2c0 [ 3393.514724][T21195] ksys_read+0xd5/0x1b0 [ 3393.514832][T21195] __x64_sys_read+0x4c/0x60 [ 3393.520472][T21069] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3393.525043][T21195] do_syscall_64+0xcc/0x3a0 [ 3393.525068][T21195] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3393.525072][T21195] [ 3393.525089][T21195] write to 0xffff8881256752e6 of 1 bytes by task 21195 on cpu 0: [ 3393.525190][T21195] set_blocksize+0x1cb/0x210 [ 3393.529944][T21069] XFS (loop0): SB validate failed with error -117. [ 3393.538606][T21195] sb_set_blocksize+0x3d/0xc0 [ 3393.538621][T21195] sb_min_blocksize+0xa5/0xc0 [ 3393.538638][T21195] xfs_fc_fill_super+0xae/0xaf0 [ 3393.538654][T21195] get_tree_bdev+0x2b7/0x3f0 [ 3393.538676][T21195] xfs_fc_get_tree+0x26/0x40 [ 3393.619210][T21195] vfs_get_tree+0x56/0x1a0 [ 3393.623609][T21195] do_mount+0x1004/0x14f0 [ 3393.628016][T21195] ksys_mount+0xe8/0x160 [ 3393.632242][T21195] __x64_sys_mount+0x70/0x90 [ 3393.636818][T21195] do_syscall_64+0xcc/0x3a0 [ 3393.641319][T21195] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3393.647327][T21195] [ 3393.649650][T21195] Reported by Kernel Concurrency Sanitizer on: [ 3393.655792][T21195] CPU: 0 PID: 21195 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 3393.664441][T21195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3393.674480][T21195] ================================================================== [ 3393.682528][T21195] Kernel panic - not syncing: panic_on_warn set ... [ 3393.689102][T21195] CPU: 0 PID: 21195 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 3393.697761][T21195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3393.707828][T21195] Call Trace: [ 3393.711103][T21195] dump_stack+0x11d/0x181 [ 3393.715421][T21195] panic+0x210/0x640 [ 3393.719308][T21195] ? vprintk_func+0x8d/0x140 [ 3393.724959][T21195] kcsan_report.cold+0xc/0xd [ 3393.729627][T21195] kcsan_setup_watchpoint+0x3fe/0x460 [ 3393.735000][T21195] __tsan_unaligned_write1+0xc3/0x100 [ 3393.740372][T21195] set_blocksize+0x1cb/0x210 [ 3393.744947][T21195] sb_set_blocksize+0x3d/0xc0 [ 3393.749622][T21195] sb_min_blocksize+0xa5/0xc0 [ 3393.754297][T21195] xfs_fc_fill_super+0xae/0xaf0 [ 3393.759133][T21195] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3393.765378][T21195] get_tree_bdev+0x2b7/0x3f0 [ 3393.769964][T21195] ? xfs_mount_free+0x60/0x60 [ 3393.774635][T21195] xfs_fc_get_tree+0x26/0x40 [ 3393.779224][T21195] vfs_get_tree+0x56/0x1a0 [ 3393.783681][T21195] do_mount+0x1004/0x14f0 [ 3393.788005][T21195] ? __sanitizer_cov_trace_pc+0x1/0x50 [ 3393.793461][T21195] ksys_mount+0xe8/0x160 [ 3393.797690][T21195] __x64_sys_mount+0x70/0x90 [ 3393.802266][T21195] do_syscall_64+0xcc/0x3a0 [ 3393.806849][T21195] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3393.812738][T21195] RIP: 0033:0x45d36a [ 3393.816634][T21195] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 3393.836335][T21195] RSP: 002b:00007f7843138a68 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 3393.846233][T21195] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045d36a [ 3393.854196][T21195] RDX: 00007f7843138ae0 RSI: 0000000020000100 RDI: 00007f7843138b00 [ 3393.862158][T21195] RBP: 000000000075bf20 R08: 00007f7843138b40 R09: 00007f7843138ae0 [ 3393.870131][T21195] R10: 0000000023000000 R11: 0000000000000202 R12: 00007f78431396d4 [ 3393.878094][T21195] R13: 00000000004cae78 R14: 00000000004e44c8 R15: 00000000ffffffff [ 3393.886850][T21195] Kernel Offset: disabled [ 3393.891209][T21195] Rebooting in 86400 seconds..