01 00 00 10 00 00 00 00 ................ [ 1159.512499] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1159.520951] XFS (loop5): SB validate failed with error -117. [ 1159.527734] XFS (loop4): SB sanity check failed [ 1159.532542] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1159.578766] XFS (loop4): Unmount and run xfs_repair [ 1159.583901] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1159.590686] 00000000: 58 46 53 42 00 00 10 00 0f ff 00 00 00 00 09 00 XFSB............ [ 1159.599129] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1159.607307] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1159.615688] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1159.623967] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1159.632410] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1159.641021] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1159.649218] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1159.658080] XFS (loop4): SB validate failed with error -117. 03:48:47 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000003b40000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:48:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001c000100000000000000003b1ed565000c000100000000010000000051c9b28972ce2a5e0cec2bf9b6054328d1263b0400000000000000f9c58b3a2303379b306fce528e3cc1cba39fb6cc3dc7fe3441ee37acf8dc4ccc312d5854431ebf109a2cf7b8d745e86af0c32a405ef1d63e14d8941780a2680fe5a86be27d1dd0c258ce046d0d0644ef1ea36fb973ec93bbd6be9bf416ea4672a7674126"], 0x20}}, 0x0) 03:48:47 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_getoverrun(0x0) capget(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0xfffffffffffffffa, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @link_local}, 0x10) r3 = fcntl$dupfd(r1, 0x0, r0) accept$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000100)) sendmmsg(r2, &(0x7f0000001380), 0x3fffff1, 0x40) r4 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x1, 0x2) connect$nfc_llcp(r4, &(0x7f0000001680)={0x27, 0x1, 0x1, 0x1, 0x475f, 0x81, "7953ede3f2c97577ea376ceb645fa54b7b05c07866b035caaa7224c9fdc63759a4d012982527020ab1137eed259b60713d1c67db7ad794b9485342edde08c4", 0xd}, 0x60) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f0000000080)={0x8, 0x0, {0x1, 0x3, 0x0, 0x0, 0x4}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="51000000013907794b7c5626bfeec7bc50aa5531ecfbd8e7b5614f969f4e1866c5631afb4f1c7310a3bed71b13a10ee54a46192934a08817e8764e766625c0081280e36a0d184dc29e30d054e5de0ac4d390fba8ed"], &(0x7f0000000000)=0x59) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000140)={r5, 0x10000, 0x10}, &(0x7f0000000240)=0xc) 03:48:47 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000e000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410000, 0x10) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x80000) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x0, 0xf, 0x4, 0x400802, {r1, r2/1000+30000}, {0x3, 0x2, 0x101, 0xffffffffffff8000, 0x5f000, 0x680, "7a203099"}, 0x9, 0x3, @planes=&(0x7f0000000180)={0x800, 0x10000, @fd=r3, 0x4}, 0x4}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) [ 1159.872912] XFS (loop3): SB sanity check failed 03:48:47 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000300000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001c0001000000000000000000020000000c0001000000000100000000629fc3bc494e6596ff218fb66dfb248dbc3f7ce67d11024c68435082603f1c79c19dd1760bcc208f12ec9aca3687779d1b7791d2a6eb71729278ef42ca4280b76be8448eac9e9603d3d4d1517f20a1d395ded7b5a46c73f6553784112b953e67365b9eb85bbedc308dbb2a1ffb0786c1de388bb0db73808a7187294561705f937d948593aa"], 0x20}}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80, 0x0) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x40) [ 1159.894106] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1159.920764] XFS (loop3): Unmount and run xfs_repair 03:48:47 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802b0279c00000000000020000000017d510600200000000a08000000000000000500e50000070000001f0000000000002500000000000002000100000000be000000020000627c05000500000000000a0000000000000000000000001117000000000000000000000000000011ff0937cc533d1dc07a6b03801094ff07790d3774690990f925c179dabd"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000007000000040000000000000005001a0000000000041727fbb0fde73939ca5dbb8ab5b9da000000000000ffffac1414b202000100"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) [ 1159.943241] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1159.955379] XFS (loop2): SB sanity check failed [ 1159.962905] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1159.970718] cgroup: fork rejected by pids controller in /syz1 03:48:47 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010005e43010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1160.009673] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 0e 00 09 00 XFSB............ [ 1160.024084] XFS (loop2): Unmount and run xfs_repair [ 1160.031269] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1160.038455] 00000000: 58 46 53 42 03 b4 10 00 00 03 b4 00 00 00 09 00 XFSB............ [ 1160.043254] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:48:47 executing program 1: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x220}) mknodat(r0, &(0x7f0000000140)='./control\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000003c0)='./control\x00', r0, &(0x7f0000000000)='./control\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000008c0)='./control\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000400)={0x0, 0x0, 0x3, 0x0, [], [{0x5, 0x4, 0xffffffffffff8a8d, 0x9, 0x1, 0x8}, {0x8, 0x2, 0xfffffffffffffff8, 0x3, 0x4c8af539, 0x1000}], [[], [], []]}) [ 1160.054258] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:48:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x111000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x3, 0x10, 0x5, 0x5}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={r3, @in={{0x2, 0x4e23, @loopback}}, 0x4, 0x6}, 0x90) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="0000000000020000000c0000000000de000000"], 0x20}}, 0x0) [ 1160.095822] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1160.098570] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1160.111058] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1160.119550] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1160.129211] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1160.131495] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:48:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x102) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000a40)={"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"}) dup3(r1, r3, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x71f0d162ac2487a1, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4040ae9e, 0x0) dup2(r0, r4) [ 1160.147978] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1160.151880] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1160.162137] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1160.170399] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1160.175601] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1160.190603] XFS (loop2): SB validate failed with error -117. [ 1160.193156] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1160.205004] XFS (loop3): SB validate failed with error -117. 03:48:47 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000002ba0000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:48:47 executing program 0: mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000180)=""/133) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000000b000)={&(0x7f0000000680), 0xc, &(0x7f00005a6ff0)={&(0x7f00000002c0)=@updsa={0x154, 0x1a, 0x9, 0x0, 0x0, {{@in6=@local, @in=@remote}, {@in=@dev, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x3}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'ghash-generic\x00'}}}]}, 0x154}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) 03:48:47 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000007e000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1160.465651] XFS (loop4): SB sanity check failed [ 1160.470814] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1160.483458] XFS (loop5): SB sanity check failed 03:48:47 executing program 1: r0 = socket(0x11, 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x8001, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000140)={0x2, r2}) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) chmod(&(0x7f0000000000)='./file0\x00', 0x100) ioctl(r4, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") ioctl$NBD_SET_SOCK(r3, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r3, 0xab03) [ 1160.526063] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1160.561540] XFS (loop5): Unmount and run xfs_repair [ 1160.568931] XFS (loop4): Unmount and run xfs_repair [ 1160.590652] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1160.600822] block nbd0: Receive control failed (result -22) [ 1160.608083] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1160.616177] XFS (loop2): SB sanity check failed [ 1160.621144] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1160.621384] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:48:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001c20010000000000000005e4010000000ca51e34e400000100000000"], 0x20}}, 0x0) [ 1160.640807] 00000000: 58 46 53 42 00 00 10 00 5e 43 01 00 00 00 09 00 XFSB....^C...... [ 1160.649458] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1160.662410] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1160.671373] XFS (loop3): SB sanity check failed [ 1160.672494] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1160.676412] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1160.689350] block nbd0: shutting down sockets [ 1160.700621] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1160.718734] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1160.734382] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1160.746404] XFS (loop2): Unmount and run xfs_repair [ 1160.749352] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1160.751626] XFS (loop3): Unmount and run xfs_repair [ 1160.764261] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1160.770125] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1160.776856] 00000050: 00 00 00 01 00 00 10 00 00 00 00 03 00 00 00 00 ................ [ 1160.779958] 00000000: 58 46 53 42 03 b4 10 00 00 02 ba 00 00 00 09 00 XFSB............ [ 1160.791789] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1160.801181] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1160.809339] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1160.814036] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1160.845406] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 7e 00 09 00 XFSB........~... [ 1160.848998] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1160.853705] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1160.870605] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1160.878960] XFS (loop4): SB validate failed with error -117. [ 1160.884961] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1160.893595] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1160.902228] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1160.910772] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1160.914434] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1160.919166] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1160.927128] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1160.927140] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1160.927152] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1160.927163] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1160.927174] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1160.927210] XFS (loop3): SB validate failed with error -117. [ 1160.935703] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1160.952195] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1160.960877] XFS (loop5): SB validate failed with error -117. [ 1160.968525] XFS (loop2): SB validate failed with error -117. 03:48:48 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000500000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000040)=0xe8) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x1c, 0x100, 0x70bd2c, 0x0, {0x2}}, 0x14}}, 0x0) 03:48:48 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x2) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="a7d916ba4fbd969fe4e8fe6337345604", 0x10) shutdown(r0, 0x2) write$binfmt_script(r0, 0x0, 0x0) 03:48:48 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010005f43010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) 03:48:48 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000300000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:48 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000080000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:48 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000000bc0000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:48:48 executing program 1: socket$vsock_stream(0x28, 0x1, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) r4 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)=0x0) setpriority(0x0, r6, 0x9) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_mount_image$reiserfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RWRITE(r4, &(0x7f0000000180)={0xb, 0x77, 0x1, 0x47b9a3e4}, 0xb) 03:48:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req={0x101, 0xb05, 0x2, 0x3ff}, 0xfffffffffffffe5a) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001c0001000000000000000000020000000c0001000000000100002000e1568649d9f03bedd4d0066af8fd7772114228d8223fdf9335447f1b0740463482fed2ad69f1da8ebc3eac86071ab81161f2ef810c06"], 0x1}}, 0x0) [ 1161.334830] XFS (loop5): SB sanity check failed [ 1161.340055] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1161.374550] XFS (loop5): Unmount and run xfs_repair 03:48:48 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfs(&(0x7f0000000100)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000001c0)={[{@gid={'gid'}}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@smackfshat={'smackfshat', 0x3d, '[!\\proccgroup'}}, {@subj_user={'subj_user', 0x3d, 'gid'}}, {@dont_hash='dont_hash'}, {@fowner_eq={'fowner', 0x3d, r1}}, {@appraise='appraise'}, {@fsname={'fsname', 0x3d, '%'}}]}) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) ioctl$TIOCCBRK(r2, 0x5428) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) [ 1161.382350] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1161.393395] XFS (loop4): SB sanity check failed [ 1161.398695] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1161.401800] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1161.413517] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1161.428403] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1161.437010] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1161.446836] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1161.456134] 00000050: 00 00 00 01 00 00 10 00 00 00 00 05 00 00 00 00 ................ [ 1161.461623] XFS (loop4): Unmount and run xfs_repair [ 1161.470003] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1161.478479] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1161.486918] XFS (loop5): SB validate failed with error -117. [ 1161.490314] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1161.525024] 00000000: 58 46 53 42 00 00 10 00 5f 43 01 00 00 00 09 00 XFSB...._C...... [ 1161.539536] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:48:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local, 0x0, 0x2, [@rand_addr, @rand_addr]}, 0x3ebc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000280)={@broadcast, @broadcast}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r2, r0) [ 1161.597001] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1161.625221] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1161.633885] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:48:49 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000f00000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x100000000, 0xe000) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)={0x2, 0x0, 0x8, 0x3}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) [ 1161.656235] XFS (loop3): SB sanity check failed [ 1161.661317] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1161.681602] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1161.692754] XFS (loop3): Unmount and run xfs_repair [ 1161.705770] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1161.720264] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1161.730299] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1161.739165] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 80 00 09 00 XFSB............ [ 1161.747643] XFS (loop4): SB validate failed with error -117. [ 1161.754494] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1161.763078] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1161.771739] validate_nla: 11 callbacks suppressed [ 1161.771748] netlink: 'syz-executor0': attribute type 1 has an invalid length. 03:48:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7b030800f3ce48aa505e006b56d3b68b"]) [ 1161.803046] XFS (loop2): SB sanity check failed [ 1161.807572] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1161.816086] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1161.829690] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1161.839799] XFS (loop2): Unmount and run xfs_repair [ 1161.848229] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1161.861939] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1161.909184] 00000000: 58 46 53 42 03 b4 10 00 00 00 bc 00 00 00 09 00 XFSB............ [ 1161.910106] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1161.942407] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1161.946682] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1161.950986] XFS (loop3): SB validate failed with error -117. [ 1161.965839] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 03:48:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\b\x00\x00'], 0x20}}, 0x0) 03:48:49 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010006043010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000000c0)={0x3, 0x0, 0x8000000, 0x3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000100), 0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x9effffff, 0xf0ffffffffffff}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0) [ 1162.029604] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1162.033630] XFS (loop5): SB sanity check failed [ 1162.059074] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1162.061473] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1162.085549] XFS (loop5): Unmount and run xfs_repair [ 1162.090740] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1162.104231] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1162.120691] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1162.133138] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1162.190022] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1162.192973] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1162.205221] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 03:48:49 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000809698000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1162.232452] XFS (loop2): SB validate failed with error -117. [ 1162.238746] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1162.262728] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1162.294993] XFS (loop4): SB sanity check failed [ 1162.297650] 00000050: 00 00 00 01 00 00 10 00 00 00 00 0f 00 00 00 00 ................ [ 1162.299922] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1162.310150] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1162.333943] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1162.336190] XFS (loop4): Unmount and run xfs_repair [ 1162.347470] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1162.354361] 00000000: 58 46 53 42 00 00 10 00 60 43 01 00 00 00 09 00 XFSB....`C...... [ 1162.384183] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:48:49 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b4100000edc00000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:48:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001c0001000000000000000000020000000c0001000000000100000000b215beb6faf58400a83bd4528b5272cac066090908aa364c996e3a42323ab3ae090363f09d11cd620196776793da1381727ca5614bfeff9abd60cac4a5ba556420cbb998afab6e4454b79cbf12a3f8ee74263efd0a3a2304c74d00e6cbf268620312b627e1f9163c19c851809d76f6b3cb27cfea4084b7dea6a90272af5275d9a7ae27e1f4e985ee661528f4f660856a27743169b4e118ccabe4bfb7858dc5f0c083918d6d22b230242576c929faf1c01eb4091df1ff82"], 0x20}}, 0x0) 03:48:49 executing program 1: syz_emit_ethernet(0xffffffffffffff8c, &(0x7f0000000000)={@dev={[], 0x1b}, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}, 0x0) [ 1162.410897] XFS (loop5): SB validate failed with error -117. [ 1162.422181] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1162.441964] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1162.460295] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1162.474113] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:48:49 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f00000000c0)=0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='\x00\xc5\xa1\xee^\x00\x00\x00\x00\x00\xd4\xd8\xd2\xbf$\x8aW', 0x0, &(0x7f0000000200)='/dev/swr\x00\x00io#\x00\xc6\xc4\x8a\x92K\x80\xf8x\ar\x85\xff\x92\xa8q6\x97_\xd6\xac\x9af\x93c4?\x91T\x96=\xf8<\xf4\xe0^-\xd6\xff\xfb\x86\vfL\xdd\xa8\xb9\xec\xb4?\xc4_\x84Y;\x8e\xc5\xa0\xb8\xfb+$\xd9@m\xe7=y\xd2\xe3\xf1\x7f\xd6\x17\xe5\xc3\xca\xe6Y\x88\xb4\fX\xd4{\x8d\xf9X&\xa4\xd6\xfal\xb9R\x8d(\xbd\xe1[A]\x86\xac\xb2;\xba\xf0o\xd1\x8e\xfa\x9aj\a}\xb3\x0f\xcf@\xde\x05\x1b\xd4\nm\x92\x88\x8aO\xc7-\xd7,\x98Q/\xdfYg\xe86\xdd/j\\M1{\xf5\x87\xa1\xc8\x03\xeb\xfe\xe9') 03:48:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[]}}, 0x0) fcntl$dupfd(r0, 0x406, r0) [ 1162.511830] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1162.523785] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1162.553675] XFS (loop3): SB sanity check failed [ 1162.561222] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1162.562838] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1162.597471] XFS (loop3): Unmount and run xfs_repair 03:48:49 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000012851600000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:49 executing program 1: r0 = socket$inet_sctp(0x2, 0xffffffffffefffff, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000000009) r1 = accept(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0xb1}, &(0x7f0000000040)=0x8) [ 1162.648563] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1162.675238] 00000000: 58 46 53 42 00 00 10 00 00 00 80 96 98 00 09 00 XFSB............ [ 1162.704472] XFS (loop2): SB sanity check failed [ 1162.710896] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1162.712919] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1162.730832] XFS (loop4): SB validate failed with error -117. [ 1162.744424] XFS (loop2): Unmount and run xfs_repair 03:48:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001c000100000000000000000002086885e7f7b4dfa1374f4b4f0000000c000100000000010000000093403ad7019bde16e700c5925b51444022df237a43c8f82f8998d1bf8695"], 0x20}}, 0x0) 03:48:50 executing program 1: fcntl$addseals(0xffffffffffffffff, 0x409, 0xa) syz_emit_ethernet(0x26, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaacf2bb43c2bb89100350081002f0083194365ac7ee86004030000de0000000000"], 0x0) [ 1162.754233] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1162.794482] 00000000: 58 46 53 42 03 b4 10 00 00 ed c0 00 00 00 09 00 XFSB............ [ 1162.820553] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1162.830230] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1162.838684] netlink: 12 bytes leftover after parsing attributes in process `syz-executor0'. [ 1162.861130] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1162.886730] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1162.895707] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1162.922795] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:48:50 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010006143010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:50 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pwritev(r1, &(0x7f0000000100), 0x0, 0x0) fcntl$getown(r0, 0x9) r3 = pkey_alloc(0x0, 0x2) personality(0x5000004) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, r3) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x20000102000007) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x1, "b92481f2b6049517f74de08916cf213343b15d035fc2fe51426f3c9125e1da89cad2929cd06aca1bd4b0a988279268e61234ff8a41cd19abd481eb55130d64ca", "a3510a8deb27705deb2fac58f4f379ddd8e50e8d868ee0425ecfc1c6f4a716df3e4be867d973bcc3e056a1a04eafdeacbd0e434a62db69a6bd53316c42f16b21", "f0642b0793a51cd04ad5c00d6cf24b506d17a8df96c5968a4226e09f847e4b08", [0x100]}) [ 1162.941436] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1162.966426] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1162.966884] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1162.983370] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1163.005073] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1163.008988] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1163.020308] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1163.041876] XFS (loop3): SB validate failed with error -117. [ 1163.056575] XFS (loop5): SB sanity check failed [ 1163.077036] XFS (loop2): SB validate failed with error -117. [ 1163.097066] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1163.124301] XFS (loop5): Unmount and run xfs_repair [ 1163.129679] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1163.156374] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1163.165411] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1163.173687] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1163.182342] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1163.192298] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1163.201343] 00000050: 00 00 00 01 00 00 10 00 00 12 85 16 00 00 00 00 ................ 03:48:50 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000003ffff0000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:50 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000000c40000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:48:50 executing program 0: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xe75, 0x101000) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x4, 0x1, &(0x7f0000000180)=""/4096, &(0x7f0000000040)=0x1000) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) 03:48:50 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010006043010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1163.244738] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1163.283283] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 03:48:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x3, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0xc004) fcntl$addseals(r0, 0x409, 0x2) 03:48:50 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x4018920a, 0xffffffffffff8000) [ 1163.314914] XFS (loop5): SB validate failed with error -117. [ 1163.325285] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1163.366191] XFS (loop4): SB sanity check failed [ 1163.371353] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1163.391704] XFS (loop4): Unmount and run xfs_repair [ 1163.406928] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1163.423077] 00000000: 58 46 53 42 00 00 10 00 61 43 01 00 00 00 09 00 XFSB....aC...... [ 1163.431601] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1163.433528] XFS (loop3): SB sanity check failed [ 1163.440082] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1163.450638] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1163.452848] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1163.474306] XFS (loop3): Unmount and run xfs_repair [ 1163.479486] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1163.484111] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1163.487831] 00000000: 58 46 53 42 00 00 10 00 00 00 3f ff f0 00 09 00 XFSB......?..... [ 1163.501461] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1163.504095] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1163.512297] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1163.520597] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1163.533967] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1163.537085] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1163.553660] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1163.562047] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1163.570486] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1163.570569] XFS (loop4): SB validate failed with error -117. [ 1163.581254] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1163.592982] XFS (loop3): SB validate failed with error -117. 03:48:51 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f8000000000000000400000100000000080000000000000008100000000000000820000000100001000ffffff1f00000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:51 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f00000000c0)=0x6a, 0x4) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r4 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) tkill(r5, 0x20000000000035) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000140)) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/113, 0x71}], 0x10000000000000cc}}], 0x2, 0x0, 0x0) 03:48:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001c0082029bad357ec3650e97f7014731262df0879500000000000000010000000000000000000000000000"], 0x20}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x41, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x7, 0x10, 0x2, 0x34}, &(0x7f0000000380)=0x18) sendmsg$inet_sctp(r1, &(0x7f0000000480)={&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x401, @dev={0xfe, 0x80, [], 0x26}, 0x8}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)="bf6217b4a9aa4a62d98bae00932e7cc1617d1ea5bf20d745c05fd2af07e8", 0x1e}, {&(0x7f0000000180)="fc96f425ecaef3c3cf8d0f234bbf73dc8c290949e62b0bb00ba1b56e86257d81a51ee004874474f11edc056b9909f19d00efd7edb58bb5980369ad36e8133ff0ced37030b87402d0b6c2c6f53dbf09a6d243b89bfeb6267e1982b971b61fd80b97621141d67a0ba5a2acf923f39a91d243e7c469c454c1ce99c44977faed741484c413817a66211633aa7ead4baee8edfc4289ee98c24a2f7811e65eca2b99da0ee48fd0ea908855522180ae4aacc129e7337cb8ba62c6c04530fc683fde6388e8b31a", 0xc3}, {&(0x7f0000000280)="5e37764ab860cdf0cafa454fc1a8fc18c90eafc8c74e31cea79bfbc512cd51d439efaee22188e2d0ac18d59f317cfb2ae8d8dbfd5d520907246f895e128e450e3e5ae953c9108d529b23f5664ad63eb859d88287129ce93c7ff76d19972bfc17", 0x60}], 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="20000000000000008400000008000000ff020000000000000000000000000001180000000000000084000000000000000000080004002f0f180000000000000084000000060000000200000000000000180000000000000084000000060000000500000000000000"], 0x88, 0x8000}, 0x80) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x5, 0x3, 0x8000, 0x5, 0x9, 0x2, 0x400}) 03:48:51 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000010900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:51 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010006243010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x3d, 0x1, 0x0, 0x25dfdbfc, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) [ 1163.933822] XFS (loop2): SB sanity check failed [ 1163.942227] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1163.982570] XFS (loop2): Unmount and run xfs_repair [ 1163.988279] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1163.995823] 00000000: 58 46 53 42 03 b4 10 00 00 00 c4 00 00 00 09 00 XFSB............ [ 1164.001290] XFS (loop3): SB sanity check failed [ 1164.013758] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1164.023079] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1164.063654] XFS (loop3): Unmount and run xfs_repair [ 1164.069759] XFS (loop5): SB sanity check failed [ 1164.071681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1164.076957] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1164.086711] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1164.103395] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1164.106928] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1164.120642] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1164.125506] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 01 09 00 XFSB............ [ 1164.139151] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1164.148715] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1164.157791] XFS (loop2): SB validate failed with error -117. 03:48:51 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000100)={0x0, 0x1, 0xffff, &(0x7f0000000040)=0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) [ 1164.169002] XFS (loop5): Unmount and run xfs_repair [ 1164.174230] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1164.174243] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1164.174254] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1164.174268] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1164.184143] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1164.191870] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1164.202794] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1164.213458] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1164.214801] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1164.236757] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1164.239716] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1164.256124] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1164.272483] XFS (loop4): SB sanity check failed [ 1164.273160] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1164.277788] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1164.285679] 00000050: 00 00 00 01 00 00 10 00 ff ff ff 1f 00 00 00 00 ................ [ 1164.308807] XFS (loop3): SB validate failed with error -117. [ 1164.338441] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1164.348224] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1164.348646] XFS (loop4): Unmount and run xfs_repair [ 1164.367521] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1164.368772] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1164.376598] 00000000: 58 46 53 42 00 00 10 00 62 43 01 00 00 00 09 00 XFSB....bC...... [ 1164.383968] XFS (loop5): SB validate failed with error -117. [ 1164.400129] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1164.408907] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1164.420926] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1164.429148] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1164.440668] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1164.448878] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1164.457635] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1164.467151] XFS (loop4): SB validate failed with error -117. 03:48:51 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000003ce0000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:48:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000180)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) 03:48:51 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000020900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1164.560648] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1164.575932] netlink: 'syz-executor0': attribute type 1 has an invalid length. 03:48:51 executing program 1: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xe, 0x200) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x6d9a0324, @remote, 0x6}, @in6={0xa, 0x4e23, 0x7fff, @mcast2, 0x2c3}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e24, 0x7fff, @loopback, 0x2}, @in6={0xa, 0x4e24, 0xfffffffffffffff7, @ipv4={[], [], @empty}, 0x3}, @in6={0xa, 0x4e23, 0x100, @dev={0xfe, 0x80, [], 0x1a}, 0xffff}], 0x9c) write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="f3"], 0x1) r4 = getpgid(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r3, 0x50, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r4, r3, 0x0, 0xf, &(0x7f0000000080)='/dev/vhost-net\x00', r5}, 0x30) ioctl$VIDIOC_RESERVED(r3, 0x5601, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) readahead(r0, 0x6, 0x8) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000003, 0x1013, r3, 0x0) 03:48:51 executing program 0: ustat(0x8, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/31) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$adsp(&(0x7f00000003c0)='/dev/adsp#\x00', 0x3, 0x200000) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000400), &(0x7f0000000480)=0x60) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1ff, 0x400100) dup(r3) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="202a00001c00010000000000000000e0010000000c0001000000000100000000"], 0x20}}, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000180)=""/122) 03:48:52 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000003f00000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:52 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010006343010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:52 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/current\x00') ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000000)) write$smack_current(r0, &(0x7f0000000040)='attr/current\x00', 0xd) 03:48:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0xfe3d, 0x1c, 0x1, 0x70bd25, 0x0, {0x2}}, 0xff19}}, 0x0) r1 = dup(r0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x8, 0x3, 0x1, &(0x7f0000ffd000/0x3000)=nil, 0x4}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x4) [ 1164.825212] XFS (loop3): SB sanity check failed [ 1164.842172] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1164.842689] XFS (loop2): SB sanity check failed [ 1164.894716] XFS (loop5): SB sanity check failed [ 1164.905101] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1164.912691] XFS (loop3): Unmount and run xfs_repair [ 1164.941037] netlink: 65065 bytes leftover after parsing attributes in process `syz-executor0'. [ 1164.952952] XFS (loop4): SB sanity check failed [ 1164.956474] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1164.957900] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1164.978580] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 02 09 00 XFSB............ 03:48:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x100000001, 0x0, r0}, 0x21) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff85, &(0x7f00000000c0)}, 0xffffffffffffffe7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r2 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x3, 0x4000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd0, r3, 0x0, 0x3, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7eb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x350}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6c}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd28a}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK={0x14, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6000000000000000}]}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0xd0}}, 0x4004000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000001c0), &(0x7f0000000100)=""/108}, 0x18) socket$kcm(0x11, 0x0, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000500)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, &(0x7f00000001c0), 0x100000000000012a}, 0x10) [ 1164.984778] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1164.995152] XFS (loop4): Unmount and run xfs_repair [ 1164.998034] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1165.002986] XFS (loop5): Unmount and run xfs_repair [ 1165.022087] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1165.027428] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1165.032393] 00000000: 58 46 53 42 00 00 10 00 63 43 01 00 00 00 09 00 XFSB....cC...... [ 1165.061958] XFS (loop2): Unmount and run xfs_repair [ 1165.067467] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1165.075075] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1165.077676] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1165.083344] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1165.096835] netlink: 65065 bytes leftover after parsing attributes in process `syz-executor0'. 03:48:52 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x10002, 0x0) getsockopt$ax25_int(r1, 0x101, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @netrom={'nr', 0x0}, 0x3, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) [ 1165.100156] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1165.115739] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1165.124390] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1165.128861] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1165.136795] 00000000: 58 46 53 42 03 b4 10 00 00 03 ce 00 00 00 09 00 XFSB............ [ 1165.149839] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1165.158303] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1165.170119] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1165.170349] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1165.188479] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1165.196090] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1165.204656] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:48:52 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f00000002c0)={0x0, 0x18, [0x2, 0x10, 0x6375, 0x574, 0xffffffffffffffc0, 0x8]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB=',\x00']) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) [ 1165.209662] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1165.214381] XFS (loop3): SB validate failed with error -117. [ 1165.232803] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1165.242632] 00000050: 00 00 00 01 00 00 10 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1165.248458] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1165.251880] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1165.262207] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1165.267961] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1165.284373] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1165.287193] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1165.301292] XFS (loop5): SB validate failed with error -117. [ 1165.307122] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1165.307156] XFS (loop4): SB validate failed with error -117. [ 1165.332064] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1165.351090] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1165.379654] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1165.401480] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1165.421562] XFS (loop2): SB validate failed with error -117. 03:48:52 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000003d00000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:48:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) accept(r0, 0x0, &(0x7f0000000000)) 03:48:52 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000030900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:52 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010006443010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:52 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000002000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1165.583829] netlink: 'syz-executor0': attribute type 1 has an invalid length. 03:48:52 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f00000002c0)={0x0, 0x18, [0x2, 0x10, 0x6375, 0x574, 0xffffffffffffffc0, 0x8]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB=',\x00']) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) [ 1165.639938] netlink: 'syz-executor0': attribute type 1 has an invalid length. 03:48:53 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f00000002c0)={0x0, 0x18, [0x2, 0x10, 0x6375, 0x574, 0xffffffffffffffc0, 0x8]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB=',\x00']) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 03:48:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f01100002d00040028bd7000fddbdf250c00000041341dec8e155379cfe7edc7a8025e6071233435be42903ee94ff8725a2245d5f8ac76fa50d3b835b057d2731bba0184712efddde5a020a40795910a51ffc83143f46cb71303bcefc81f5fe60f0ff19099ab36d3b712b5e6c5bf81d6c4a9391385eaa2c53f12bc57ef16b2107945001a1f2c9509207787faa59918bcf3f3b4f499f479d56d9816d43e3565ca4ed15ad0ecf092096c53a4d278c90a224ef7e4553ba55c432462c22950cfd602e870f1ddf7ad1bdbfb12f064d8222970ae9118a998521627a6b2162d61b18ad5399da7664880b32a45d5e005b081e960c5fc2e2d22533a7f1e8331a1c0ea9908377698f03877812e66e79ee7a9cc5e78866e34cf20ecb02c69221467ec5863b2476f11e31f9955955808cb32a19a663a2d244f2f3d9fc75d08e7e8fb872bfb1b450caa8d45d25c066cc2e555b6db10fd380a1db72503533cc1725fc4b36783d11bb9901b69207d2c4fd17ad0f68414f11f8c3bee2ef224fda88d16f01e2dfff63de7dc73c62b6a1427b7c67ef31bab2a873a4eb069004c1a135f90637649fd696b386d5fe3a7b38b184f0210ef87c8bc39bf173388293d58ae05df3f2e7013406f03a1bfd666e5a794bd8476db63c028383fb75ebc37b5afe7b7f88dc661d52f433959886b78ef8d19711e612a8f4e21e59d58f06ddc1c5fc643a9c5bda1e5a8858a84db360206ac1deff56aede96158ebb0ac5512d0ad4de90ffc6eb71d479af7f6d8f131d0c90545b8d78a0e92cdeeb81449053466a69b30f1e473bd8c2cb16c9ab5266d3ea11b948cac1ddc720f6f9d4796eba4fca7fd7cf2e5069830ad38d4db2e90649e056ecd33c2dcbf7ae76c0526ccd250860c0b41a34b49b7e34cbcf37eedac116228e33f38cc003f16a0591883bcd51f3c25bae8e0ed76d6c58ec7e588bec0df67de32bb340398f907544e68336ab054505fc68fd43ecb304e6dd7cb2a4fb1dfbefdf56a63eca5feaf46d7eaa91727a9792c25b95014738c8d733a6d385ad68b5140d6266fb19d26de1dc922f82df27de44e5c2630455c978f599cf33f6d44e000e588b26a16218ec8c4339f69e0c08192462a0ee018463ac3ec4ac9dd8da4032eaba960d973d591e18df62c10a0714448f76fb75ce5383c9867068b5f7a9285e891ec7010f695f4a6edf1ae9ac7d879a8bdc09fc52d6c08767a46e63538ce63252a0ee51ad98fd2f6a833a708aa4f7c15ca6e91e19bae34232c2fdb1609eb6ba51b64140dd6ede41d1e7ae143ad2b4cd9bf30ca2834532b3a32e565c21001a77b42927dcd35a352e7c3c6d1023fe4c433a39fa41af8b7ff7cd87007f84fd3d0d17cae9709a43450453f8d6407187da404bba68281540ad3fda584bfc61cdd52148d54dc80cf088e37b8fa74bce9c4d6d76c5435b7d227e7244889018f581199307066ab284135e35f4c925c0b72f66e1e59948e92aa4491a10834374128b726673adae79356f4a9faeb2489803b4adbb8de936059663a376610d12f85990bea33d511e1d5be0fc78bba4ca4e34fe86ea147572f1ad6b436d94e727b3376fdda8054dbaf94301b566acf65f7928b4a9e1073131de28991ac1a90a0297ffadb1f451a1026686ca9400111e443251c3e5212404b55f880937910cf8a1497691b69eef453bc774610c53baacf2cfbaeb4fe4f79be8462d3cdd3ff1f97a2ff93a482c9a171d266f6b831e6e8de96d3ca9f59dddcbe51e3525c189d02330b51b32ae0cce7fbdf4e8294207457be077b9b3c1978ce7534c9f6a6cd1dfe9d83337cc82bb40a2788394fcb2f3b72b0bc6b40ac61f9f6ff3beaf47183513717bdabbc52b46c13c3f77a38a9f3d879f2dd4f68d230538df42bfc06e2821d35595de456c69c1c8e050211f78d19553033c95c7816ef3890fb412732559f2027ad8c12282fe8542afac2453b647dfb0deedc5cf3f89021aa63bcc8db6adf42b4984384378f794ab9d4ed91b71a723a10bdb1c9f13e2317b5d26c0ca1a942a8089d44bdb7a126e3feb15c4c8d743966017d25dc6fe3c427ae9419eae34e874082900564ca11da285d5ed95ef2a6c47c33c6a04c4e10b94d3833526e152bdb5e15c4f59fbf35447541f1cb28d036793617e376b97c00039ffcb22413a2adce5359bc80187d43b75c0a4c43696d498d91e4cfa0c21741fccf54ae4280f04e4708ab7aa80b3f107ddda78e09e01f44b6c3de9b1ed5296056701295454c840ba7995c38b9f92cbbe6bea76a74fb04951a3a18a91546a92d9e0870c4bcd439deb161de31c2216d12465f9f3c24835c16b5ebb384b9ff08964e41e8b88d6d89cc06852f442f05131a60cafb92f612bc8565ca663e187ecf124757dd192d54cbee81830b3f424ad5dc72f92997a82a1c6834fcf5ad8194a525436e3b2dcc3201c44e88d97db09cda4a6318035d28490539b856a6792391af69214e3c7b4062ef9fc0551d5d469a286e56d35d5f9bbf18562ded4358e911dd114885c097e94cbb4a4648c12b7be0d5e5eef8f3b9296a2468e9792386b82fcc7b92311b8eaf17374049ac2886cf3367990a9d4027153939223530e6414e73aa99ee5a9cf9715b3c38e2b9f7eaecd200092d3e6cf1e4c8e0a57ffe5764b355354633b534dc336aa1d2b319d89bdc920fd5e1a830f9fd0ba0681924119b9d03cdcf0b3d5fdb2718f4e067ec03702f7551bc026105e033c5167da57f780c9398d7446dedbe278ffdf53ea29a24c4226f456b2fd65ddf2b24e2e444b1b6d59cbb61c41402f46abeda80bb895caa81bfa9c48e7a6e68fd7307977ebf5b76b5d9a3946a6b0d7cbf2504b3e47c6cefe9fe5a2029b3db222a0cf87d61d9d112ce2738d84c850ba5ca6b3c695afe368a8716a0b304f446371de477c0f5b048c6e708ebc3990d9d8c0da40db9aba86b0a28eb8340a7a4f090f4eca1bdfcbd7c73c8d21d4320e643d093952b6515804bf5dce10da9ef0e2f4b68214292b66ff99c6da368d304a929f190058675aef8d9bad87c3198eda33d017746a0b42e6397e9785ef4d40ba43557727aee5ae870c59ebaa7dd134badb3cc68bc475daba44687224659d6a72d15f74b2cb7d1bd1601b73106c053bd021557322294930f79bb443a0bcc9ce474a09b19b46503944522e379f70acda824b43f18ed1bf135a73ce06380c73f12cf6227f66bfcd49d04efa0a6baedbef43467a072d1e28919afe3aa0868cd6d688191f44f7fd7e7fee5e5105519fc144b45aea24ef587a59d57f4e30b1bbcc6f6722f740350e63b0e7d8ac57683e23526b110fab556aa4772024fe42db99bec62f5e16bd156dc407d51dadaba63fb8c99f444a26c53ad819202c4a3deedbe1ef175cfc735b4dd8cd9ff3125184e794ec1fd9de31afb29ee5e281b60730849ac2b1fbeccb08f7de1fddb8c1db8acc58ddfa9e55d6dabb3118f195707ec2d527601a549ac3ec4f87f3f649c3074f5466303e69906db130c5c51bb6e656b873b07867337f18b9dc3674629515620cd1aa17e8ca499992555ce1db856bd817cc5d9d8e584906731e2fc5821abad10d9d1844273d5435abb817a791c7dfb333e92322be1f38f306fc6202cb3d4a7cd77ad389d3ede71207461bb2bb09bbbad107ac1294d3919612875432ffa0275a3b4e04a4165db2de80be765fb6af43f9f1a184ca1342ecf20ba0a8fc3def138e388d9c4a03d180b77c9d43d1a4e63a801f23b4711a59a0e0ea9bc0780c98c4cba7fa1c31338adecacac75d33d21c5182d0311125b5e8aaa8728b4d497ca32444bf648f0511bafb2b9514c7a9f794e54f0d6efe574227a78f29810c891da0e33e8fad6418431f1b1ce8056afef39010ad4ddc84b0c2dd72a0c6289bb552b7647e29c1f29aac474af372c51f2cbdd12cab414a12645b4e41713877f3d3ee25710645e9010868bb2ec4cae8f8da19fa9cef36aaf79b1576b206f118d3f917bd4af01f4924f35413826b1c402d699e7f70eb2991491ac3dd9f8268577f5014e9414b2b8dd22e6dd8d52077d19abeb6cdb65f56af4f21aa48cd198e5df8469ea0a9af98dd80d8109d4a0a00343233ea689faa0b0f641453132678b4fb1d222ff5fb9c1fe06878cc048e803954e5a5f74ac98677646973542acb13c92e88450c7e63b9c0f3937c46b594000317027d7e6ae60fde7e2abe6328680099592cacb795408b8ec6289d9b8c4e7cc9f19a3ca567eed21a618c7b753f92666ac0d2fae205e19584d2b8948a910f2253550e8e3708be94f2b494b486890243eb50d4fcd57fbcb7679a280d02b1151c3c6980f5696e9443eb6d492b6d038f0b1452ecff23dd01dc33acdb35f4a5e46337b6edefaffe13f363dfc19c36c33c4c4752b49ffeb3e18dbcd3b931e51d6721e7b5494ae570b15917791b6086a6ef484e97972cc9719ec3fc7ef3666efe7e68c195f59a1e7e63ed88bbf04ee74980410672370d7134e57724ee9938024a353dced0bdd83beba0dc93cc02fd4c6daa91078d97d5561ea504c48c187fd106f94bc24f7e3ee44078656b45bda6bf23b7afa0bc03305c91e91e9d7ab83e9fe3efe4addd2ac182f2256faf433742e74c7d29088a79a6c57a2386dc2692cff6540a5d3db7f4b5074398c1d695f87e8d253981ada0ae8b216b5d7df981c9b66f81b49768a2facc91baceca2665f17a34aa403e9d48f2ae965c9d13e14f859c3a882067007f41d08f447a5fa8b86dae037746aa8bd37c3097147c3dc5667a6dd371b6bf01667f62612b5f22d7df380470268e9fa9eb992770568707421881841ba57baa213771a1276650d56ef41a08dd10f56f81a58f0d47596e8326adbf445279b49c9133dbd58ce2100f186df96d05a1dc9d954e30c2b17d36dc5a75ea60d6219e1262a24c5ea30c7e0ba413adb2b89e108799ca961cef8de01132ec2dde44093db7d3e2effda8fc3bf42df19f1b41c66ca4efbb0f5ab78e8e454017bbf35765cca68dfe3070e19ef0aafb35a9f6eac167d38bb60d01237b0d59b56a024f3421254ca8a01e1ce6176b2bec24403cded7825de0854fb261d2464d805f039cf673170a3037759806852eb7857dcb0adbdcfe9b37e36a33e670d9ff22615ce84f1299a9ff9a51a34955a97ef26a1b00f6e5c5a20fd65344e22de2c6cd0fec4ab59532bb093ad10296149a72749b33fe97aaa08ffd1e36a58e293284823a2a1ebec1843d267f853f0b5b5cc262e839f6179ec5fbef45c3da896e7fdce2c1afde7a7cd3b442de89164372c64e4565d67117b569dcba09df15c031c06a7aa77a0ca13706e22d9f54a49b536b78dd332b0527c44a343a1ae061329e6350d2b739a16576f43b759d833b46685b12015314f8510206d43425d3868f9693c52703b57afde41d3a2309f4e151abe068af7310c162ebc0d5f8bbe07abedf35f8a6a452d010cecc202b1b46d2a48731f580b791fad973ac2f84b9de4b122a1bfade283dc15ee63a2c532c9871777f42a0852adfea1d8894474aae25730e96c3a300bc108a82bb7d2e450aa2e50fa0e8093cbe7a10e505d3dff3fbe9775f23388bb20a277e76b811b10f4eeec5e9f878eb3cefe83d86056c100092b02c4377892228dd561d67ce4dc7526eb83505e88157bc2ac62004f90c8d9fec06097cca8a1856d6f9f216936f9b143bbaf67c11172f6e94b0571d96969887ac9c9c0df9e692269c878d8edc60db7815e06d43529d8bcecc144f4332149979a65034a87d34a587fbb3eb29ff247986707476830d9247d8c4b67e091e6bb704b926d47f41bd1354cd5154ca90a3a4b8e8a99976eac353fa35bfa49cc003a0020d3cbaf960a61a3a1db52acfea02c50730882f2892c6b9b5e2502dcbec74d8f81a976a140b42d54cf768bb1b8a79c2afc740e8ff5205096db394bd14b745fe7858304b70940c0004077983effc8deacdf98d05034b754349a46972c536b3f7ab4c99d827401fbf6baa52460971fce67b8c43ee5cf32d605dada5a39a52e8af4e5798658bb537b405b870ee9c1e074cfea39ac5819cc7235ca94ad1391fbea5996988a36f18a1c3cd081ceb97e75abc498a50829f2c44c850214be079cbc32f704d7eaa8ebc26f6608002d00", @ANYRES32=r1, @ANYBLOB="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"], 0x11f0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001c0000fffc0001e2ffffff000000000000000000000011bf187c00004b509821b3b212f0513557466cdf3f07930cbbe59c6289b205d38ac76fc1e09d76f2cb6b4bfc2d9c970f63ba4807939bac9cfdd3e4b8f064bf24c588ad09e0b3719ed072394b2877bee27935bd219735cbbaa815d0d0737b3c7f706abd62b0dc54194eb476a6a5748a05ccdaf351470d459a98dba78aea914b326d91"], 0x20}}, 0x0) [ 1165.756217] XFS (loop5): SB sanity check failed [ 1165.761440] XFS (loop3): SB sanity check failed [ 1165.763858] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1165.767542] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1165.786327] XFS (loop5): Unmount and run xfs_repair [ 1165.804120] XFS (loop3): Unmount and run xfs_repair [ 1165.818157] XFS (loop2): SB sanity check failed [ 1165.823422] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1165.830806] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1165.855675] XFS (loop4): SB sanity check failed [ 1165.858068] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1165.860423] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1165.867357] XFS (loop2): Unmount and run xfs_repair [ 1165.889320] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 03 09 00 XFSB............ [ 1165.904124] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1165.929233] XFS (loop4): Unmount and run xfs_repair [ 1165.933357] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1165.934740] XFS (loop4): First 128 bytes of corrupted metadata buffer: 03:48:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001c0001000000000000f7ff00020000000c0001000d00000100000000"], 0x20}}, 0x0) [ 1165.949362] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1165.949374] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1165.949385] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1165.949396] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1165.967646] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1165.983463] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1165.990865] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1166.031183] 00000000: 58 46 53 42 03 b4 10 00 00 03 d0 00 00 00 09 00 XFSB............ [ 1166.047398] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1166.053508] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1166.055850] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1166.064423] 00000000: 58 46 53 42 00 00 10 00 64 43 01 00 00 00 09 00 XFSB....dC...... [ 1166.080110] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1166.088623] XFS (loop3): SB validate failed with error -117. [ 1166.100174] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1166.110353] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1166.111036] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:48:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) [ 1166.129788] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1166.138593] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1166.146962] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1166.155761] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1166.163986] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1166.172442] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1166.174191] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1166.184119] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1166.190166] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1166.200051] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1166.206450] XFS (loop2): SB validate failed with error -117. [ 1166.216646] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1166.228556] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1166.236942] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1166.245320] 00000050: 00 00 00 01 00 00 10 00 00 02 00 01 00 00 00 00 ................ [ 1166.253719] XFS (loop4): SB validate failed with error -117. [ 1166.254593] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1166.267887] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1166.276282] XFS (loop5): SB validate failed with error -117. 03:48:53 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2002, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x1805, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0xffffffff80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) 03:48:53 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000040900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="204000001c0001000000000000000000020000000c00010000000000000080009990d5f0b1fd100ded467ceb7e8c5a0b0c1540c3b88673595e6bbb0c114e03255cc70137da370d1b692715a54be045caf03cec79721ca006f0ef8d874688b58bbeaf38bcb0e7a4949d8b59ea8ef1fb941155fe13aa33b83f6a3f8c76f1d718f1430407f3885315e62c4eb5fde62e5673820ac207601ee0f5a056541f939b34a1c58523d56919d1f218581e4cbaa048c8c1dde54c19cf82c8c1e5d477f2933e67c5179164923e05c26b5c1bb2c05fc093"], 0x20}}, 0x0) ftruncate(r0, 0x5) 03:48:53 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000003d20000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:48:53 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x206, 0x0) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) 03:48:53 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010006543010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1166.555683] XFS (loop2): SB sanity check failed [ 1166.573067] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:48:53 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000003000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) readahead(r0, 0x8, 0xfffffffbfffffffc) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000abd28c8aeaca01000000f11de900000000010000000000000018470a6f6ff61721aecb66867f731996d39b61dea1198d429d2606e45a3991cae1f414d979c354c3d5a9d05257d3b3"], 0x20}}, 0x0) [ 1166.605408] XFS (loop2): Unmount and run xfs_repair [ 1166.610633] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1166.627215] 00000000: 58 46 53 42 03 b4 10 00 00 03 d2 00 00 00 09 00 XFSB............ [ 1166.639731] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1166.648960] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1166.650738] XFS (loop3): SB sanity check failed [ 1166.657648] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1166.667966] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1166.683829] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1166.700532] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 03:48:54 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x199000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x11d4, 0x36, 0x20, 0x70bd29, 0x25dfdbff, {0x18}, [@nested={0x10f8, 0x89, [@typed={0x8, 0xb, @ipv4=@rand_addr=0x10000}, @generic="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", @generic="5eaf66cea089bdec662448cbc4cbb5936f4cb34531b734ba0d43961ee780214a5582e752e9ebf33455ca5a3bde14eb8445e755aac07da7681df2f80301bfa2d550bb896048f0d63758be4bea5c2d4c62d2a121ace8fd139caab73c9d22bb1e3f2676b6f1e3007ab5bfdbf3896333eae6709f4176ea07986c9cd386c387ef1b60b68bb6c1e20afe46e11ac1b31c2fb9ea32835c7bec1ddb7aef31ad58f1b00b25cc90d5035c7f5f4b386486096550346a09cc185937572201c6d3dfde6a27ae95e2775c1438c6bbffa0d1691c8d38a2ec10d23d7c4ee947302adfb3ed229787d329dde165118f1e468f"]}, @nested={0xc8, 0x64, [@generic="fe36cf7e1571caacc775ee7c2f65ee980187aaddb572bf1d8de1c5142f86f22670a119fcbfbf60000b4467b9aa64d7f332749a0559e9e3cf4782828276dcea99a20aff6d6d5e6b67c239ad8994d7f1d5ae60291305a87025336464137481812a6188ca7628e473f42e5bf003305a105b7e5df71463880d6720fea827efb59195e8de75a93d0077a6cf307e5e65ceb1cba6e52c83bb5dfc793e96fdbe9f5d0cb5bf8940ba4df5c21b5dd185a4aaae0e2f381f8c20749dfb2341b72a1f09b1194db8"]}]}, 0x11d4}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c0c4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) [ 1166.754339] XFS (loop3): Unmount and run xfs_repair [ 1166.760301] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1166.768867] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1166.776551] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 04 09 00 XFSB............ [ 1166.783568] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1166.784903] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1166.802154] XFS (loop2): SB validate failed with error -117. [ 1166.808724] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1166.817813] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1166.826930] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1166.836303] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1166.845062] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1166.861029] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1166.869692] XFS (loop3): SB validate failed with error -117. [ 1166.899888] validate_nla: 2 callbacks suppressed 03:48:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) [ 1166.899896] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1166.913643] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1167.017963] XFS (loop4): SB sanity check failed [ 1167.023015] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1167.049381] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1167.074558] XFS (loop4): Unmount and run xfs_repair 03:48:54 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000050900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:54 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000003d40000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1167.098253] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1167.128575] XFS (loop5): SB sanity check failed [ 1167.133481] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:48:54 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000040)={0xb1ec, 0x4, 0x0, 0x5, 0x100000001, 0x3, 0x80000001}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) [ 1167.142938] 00000000: 58 46 53 42 00 00 10 00 65 43 01 00 00 00 09 00 XFSB....eC...... [ 1167.170381] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1167.171250] XFS (loop5): Unmount and run xfs_repair [ 1167.186124] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1167.189707] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1167.201381] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1167.209920] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1167.212080] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1167.223378] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1167.229455] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1167.235185] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1167.243076] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1167.256958] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1167.259544] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1167.274281] XFS (loop4): SB validate failed with error -117. [ 1167.295749] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1167.314647] netlink: 'syz-executor0': attribute type 1 has an invalid length. 03:48:54 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) close(r0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getegid() ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 1167.354836] 00000050: 00 00 00 01 00 00 10 00 00 03 00 01 00 00 00 00 ................ [ 1167.368543] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1167.370042] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1167.384301] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1167.392569] XFS (loop5): SB validate failed with error -117. [ 1167.401793] XFS (loop3): SB sanity check failed [ 1167.415783] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1167.433970] XFS (loop3): Unmount and run xfs_repair 03:48:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) [ 1167.453301] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1167.473305] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 05 09 00 XFSB............ [ 1167.497769] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1167.510337] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1167.520768] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1167.537090] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:48:54 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010006643010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1167.554134] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1167.567137] XFS (loop2): SB sanity check failed [ 1167.571955] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1167.576797] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1167.588837] XFS (loop2): Unmount and run xfs_repair [ 1167.598715] netlink: 'syz-executor0': attribute type 1 has an invalid length. 03:48:54 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000004000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1167.624259] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1167.636353] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1167.643231] 00000000: 58 46 53 42 03 b4 10 00 00 03 d4 00 00 00 09 00 XFSB............ [ 1167.652225] XFS (loop3): SB validate failed with error -117. 03:48:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001c000100f2ff08fffffbff000f0000000c0001c77a39ce7130d408"], 0x20}}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0x5, 0x1f}, 0x2) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="cb73983b56bbbab4c445bb7872484e4e4a76b3", 0x13}, {&(0x7f0000000180)="e16c4d7a29be55a596c0997998df1e49a9335845cc5bf72d4cbc36d8b03b1ddf60f75195bfa3fc4e33d1cd22a793f108331634d7afe0e7ac0d", 0x39}, {&(0x7f00000001c0)="2b150e1f8463a359fb96edf8396a302d01fe8c7298770f24bac2c9e2162e7b2a9a821d88c4908107940b94d97770c140f5b01aff341d8a028deaf315c05e1be651005117ff9c1e7506e17fabc55bd4c1d2f766dc4a80a00d5cabb8721c061c6e7d6370b59a194239059a0c705f2d769b", 0x70}, {&(0x7f0000000240)="2f2f7ef8e46c8f4e879eebfcf89e300f62620eebe7b62ea3f36254d8bdf9314b72bdd27d49b502c0c3cd1b34f0fc71bb7d279d99c427d7d1b6adb872ee3bc9ed776ac4bf", 0x44}], 0x4, &(0x7f0000000300)="858048802ade00fd8f6943499b379127d2726153f2e6d993629df5e0cffb531fde700ce97eec8d0e7939ad64b25628da5525601fbee5185c1c8787e60626558bdbc4dd0fcd9a4d622186927c02887a86cdd9900b396da554a41c43030165b0567639f4b725ef1c5c5df73d22be33eafae86e36a31926bdc4d4b3e3993320e2c4b0e7be24cbcdcafa4bc36b8bf5ff325ed7555e036e6d81695404cee0f480f51da3fad89b1f3014d7f4", 0xa9, 0x1}, 0x41) [ 1167.679835] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1167.730193] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1167.738845] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1167.750747] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1167.766905] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1167.775769] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1167.787281] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1167.800352] XFS (loop2): SB validate failed with error -117. [ 1167.809111] XFS (loop4): SB sanity check failed 03:48:55 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000060900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1167.834898] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1167.870304] XFS (loop4): Unmount and run xfs_repair [ 1167.875772] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1167.883510] 00000000: 58 46 53 42 00 00 10 00 66 43 01 00 00 00 09 00 XFSB....fC...... [ 1167.892155] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:48:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001c0001000000000000000000020000000c000100000000010050978ff8b065f388a1292daaddb1000000"], 0x20}}, 0x0) [ 1167.926508] XFS (loop5): SB sanity check failed [ 1167.939675] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1167.945055] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1167.963495] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:48:55 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000002da0000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1168.012495] XFS (loop5): Unmount and run xfs_repair [ 1168.020544] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1168.027719] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1168.033025] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1168.044827] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1168.061478] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1168.070107] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1168.073963] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1168.085560] XFS (loop4): SB validate failed with error -117. [ 1168.093421] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1168.102404] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 03:48:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) [ 1168.129066] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1168.147905] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1168.157042] XFS (loop3): SB sanity check failed [ 1168.161834] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1168.173857] 00000050: 00 00 00 01 00 00 10 00 00 04 00 01 00 00 00 00 ................ [ 1168.190814] XFS (loop3): Unmount and run xfs_repair [ 1168.200383] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1168.207221] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 06 09 00 XFSB............ [ 1168.207236] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1168.239559] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1168.247429] netlink: 'syz-executor0': attribute type 1 has an invalid length. 03:48:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) 03:48:55 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010006743010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1168.288829] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1168.293763] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1168.315919] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1168.330880] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1168.340990] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1168.354271] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1168.363215] XFS (loop5): SB validate failed with error -117. [ 1168.373084] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:48:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001c00e2ff0100000000"], 0x20}}, 0x0) [ 1168.408319] XFS (loop2): SB sanity check failed [ 1168.411469] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1168.422914] XFS (loop3): SB validate failed with error -117. [ 1168.423836] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1168.450280] XFS (loop2): Unmount and run xfs_repair 03:48:55 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x2, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x1, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) [ 1168.456179] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1168.463030] 00000000: 58 46 53 42 03 b4 10 00 00 02 da 00 00 00 09 00 XFSB............ [ 1168.494203] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:48:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x1c, 0x1, 0x0, 0x0, {0x20}}, 0x14}}, 0xffffffffffffffff) [ 1168.515598] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1168.528622] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1168.539234] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1168.553889] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 03:48:55 executing program 1: ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000027c0)) accept$unix(0xffffffffffffff9c, 0x0, 0x0) getpgrp(0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x3e, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x4c68, 0x1000, 0x10000, 0x0, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x2, 0x2, 0x0, 0x313, 0xffffffff00000000, 0x6, 0x0, 0x0, 0xb922, 0x0, 0x7ff00, 0xff, 0x7, 0x6946, 0x0, 0x100000000, 0x2, 0x1, 0x9, 0x0, 0x6, 0x9, 0x100000000, 0xc000000000, 0x401, 0x20, 0x6f7, 0x0, 0x3ff, 0x4, @perf_config_ext={0x100, 0x200}, 0x20208, 0x200, 0x5, 0x5, 0x8f, 0x9, 0x8}, 0x0, 0x0, r0, 0x2) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x8008000100000004) write$evdev(r1, &(0x7f00000002c0)=[{{0x0, 0x2710}, 0x16, 0x9, 0x3ff}, {{0x0, 0x7530}, 0x16, 0x101, 0x401}, {{0x77359400}, 0x0, 0x4}], 0x48) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ptrace(0x10, r2) r3 = dup(r0) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000000)={0x0, 0x3f, 0x8, 0x80000000, 0xfffffffffffffffb, 0x1}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x6d, 0x7fffffff, 0x4, 0x7, 0x7, 0x0, 0x2}, 0x1c) ptrace$pokeuser(0x6, r2, 0x388, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) [ 1168.564280] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1168.591727] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ 03:48:56 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000008000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:56 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000070900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001c0001080000000000000000020000000c0001060000000100000000"], 0x20}}, 0x0) [ 1168.671434] XFS (loop2): SB validate failed with error -117. 03:48:56 executing program 1: ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000027c0)) accept$unix(0xffffffffffffff9c, 0x0, 0x0) getpgrp(0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x3e, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x4c68, 0x1000, 0x10000, 0x0, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x2, 0x2, 0x0, 0x313, 0xffffffff00000000, 0x6, 0x0, 0x0, 0xb922, 0x0, 0x7ff00, 0xff, 0x7, 0x6946, 0x0, 0x100000000, 0x2, 0x1, 0x9, 0x0, 0x6, 0x9, 0x100000000, 0xc000000000, 0x401, 0x20, 0x6f7, 0x0, 0x3ff, 0x4, @perf_config_ext={0x100, 0x200}, 0x20208, 0x200, 0x5, 0x5, 0x8f, 0x9, 0x8}, 0x0, 0x0, r0, 0x2) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x8008000100000004) write$evdev(r1, &(0x7f00000002c0)=[{{0x0, 0x2710}, 0x16, 0x9, 0x3ff}, {{0x0, 0x7530}, 0x16, 0x101, 0x401}, {{0x77359400}, 0x0, 0x4}], 0x48) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ptrace(0x10, r2) r3 = dup(r0) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000000)={0x0, 0x3f, 0x8, 0x80000000, 0xfffffffffffffffb, 0x1}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x6d, 0x7fffffff, 0x4, 0x7, 0x7, 0x0, 0x2}, 0x1c) ptrace$pokeuser(0x6, r2, 0x388, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) [ 1168.772645] XFS (loop4): SB sanity check failed [ 1168.778915] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1168.790615] XFS (loop4): Unmount and run xfs_repair [ 1168.797025] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1168.805733] 00000000: 58 46 53 42 00 00 10 00 67 43 01 00 00 00 09 00 XFSB....gC...... [ 1168.815989] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1168.824946] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1168.833347] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1168.842191] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1168.851322] XFS (loop5): SB sanity check failed [ 1168.856318] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1168.867989] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1168.876500] XFS (loop5): Unmount and run xfs_repair [ 1168.881929] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1168.896984] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1168.909055] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1168.918794] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1168.927132] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1168.930128] XFS (loop4): SB validate failed with error -117. [ 1168.987313] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1169.024119] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1169.042244] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1169.054296] 00000050: 00 00 00 01 00 00 10 00 00 08 00 01 00 00 00 00 ................ [ 1169.061380] XFS (loop3): SB sanity check failed [ 1169.072177] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1169.073973] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1169.090320] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1169.109539] XFS (loop3): Unmount and run xfs_repair [ 1169.114051] XFS (loop5): SB validate failed with error -117. [ 1169.122957] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1169.140004] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 07 09 00 XFSB............ [ 1169.153557] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1169.188681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1169.219885] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:48:56 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000002dc0000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:48:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x800, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x6, 0x2) [ 1169.265941] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:48:56 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000010000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1169.309950] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1169.344844] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 03:48:56 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010006843010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x4, 0x7, 0x12b1, 0x1000, 0x4}, &(0x7f0000000180)=0x14) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000001}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r3, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_NODE={0x44, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0xc040) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0x6, 0x8}, &(0x7f0000000200)=0x8) time(&(0x7f00000003c0)) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0xa34, 0x2) [ 1169.385197] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1169.399237] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1169.415828] XFS (loop3): SB validate failed with error -117. 03:48:56 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r1, 0x400, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x5, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080625bd7000fddbdf25010000f1ed00000007410000004c0018000000086962000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x68}}, 0x10) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000700)={0xdeb, 0x10000, 0x3, 0x6, 0x10000, 0x465a}) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000880)='^') sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x5, 0x0, [{0xf000, 0x24, &(0x7f0000000340)=""/36}, {0x0, 0x63, &(0x7f0000000380)=""/99}, {0x1, 0x7a, &(0x7f0000000400)=""/122}, {0x1000, 0xde, &(0x7f0000000480)=""/222}, {0x0, 0xb8, &(0x7f0000000580)=""/184}]}) 03:48:56 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000080900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1169.664506] XFS (loop2): SB sanity check failed [ 1169.672842] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1169.705423] XFS (loop5): SB sanity check failed [ 1169.710197] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1169.755576] XFS (loop2): Unmount and run xfs_repair [ 1169.777081] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1169.784570] XFS (loop4): SB sanity check failed [ 1169.789412] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1169.813430] XFS (loop5): Unmount and run xfs_repair [ 1169.814469] 00000000: 58 46 53 42 03 b4 10 00 00 02 dc 00 00 00 09 00 XFSB............ 03:48:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000003c0)={'filter\x00', 0x4}, 0x68) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xffffffffffffffe5, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x111000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @local, @loopback}, &(0x7f00000002c0)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@getqdisc={0x30, 0x26, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, r3, {0xfffa, 0xc}, {0xf, 0xfff3}, {0xffff}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x800) [ 1169.834130] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1169.853677] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1169.862421] XFS (loop4): Unmount and run xfs_repair [ 1169.890529] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1169.899796] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1169.910707] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1169.924113] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1169.932387] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:48:57 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x101000) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000040)) [ 1169.940743] 00000000: 58 46 53 42 00 00 10 00 68 43 01 00 00 00 09 00 XFSB....hC...... [ 1169.945258] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1169.957803] XFS (loop3): SB sanity check failed [ 1169.962607] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1169.974163] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1169.983096] XFS (loop3): Unmount and run xfs_repair [ 1169.994196] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1170.002355] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1170.002400] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1170.020497] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1170.051543] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 08 09 00 XFSB............ [ 1170.054073] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1170.061756] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1170.081870] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1170.084965] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:48:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001c0001000000e00000000000020000000c0001000000000100000000"], 0x20}}, 0x0) [ 1170.090647] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1170.101741] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1170.126360] 00000050: 00 00 00 01 00 00 10 00 00 10 00 01 00 00 00 00 ................ [ 1170.138858] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1170.144394] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1170.164521] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1170.175825] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1170.177588] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1170.185758] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 03:48:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, {0x7f, 0x6, 0x2, 0x736b8f6}}) [ 1170.192592] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1170.204179] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1170.234104] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1170.242518] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1170.252987] XFS (loop5): SB validate failed with error -117. [ 1170.259288] XFS (loop2): SB validate failed with error -117. [ 1170.260559] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1170.276472] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1170.286800] XFS (loop4): SB validate failed with error -117. [ 1170.293033] XFS (loop3): SB validate failed with error -117. 03:48:57 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000002de0000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:48:57 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001c000100000000000000000002000000150501000000000100000000"], 0x20}}, 0x0) 03:48:57 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000090900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:57 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000030100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:57 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010006943010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:48:58 executing program 1: ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000027c0)) accept$unix(0xffffffffffffff9c, 0x0, 0x0) getpgrp(0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x3e, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x4c68, 0x1000, 0x10000, 0x0, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x2, 0x2, 0x0, 0x313, 0xffffffff00000000, 0x6, 0x0, 0x0, 0xb922, 0x0, 0x7ff00, 0xff, 0x7, 0x6946, 0x0, 0x100000000, 0x2, 0x1, 0x9, 0x0, 0x6, 0x9, 0x100000000, 0xc000000000, 0x401, 0x20, 0x6f7, 0x0, 0x3ff, 0x4, @perf_config_ext={0x100, 0x200}, 0x20208, 0x200, 0x5, 0x5, 0x8f, 0x9, 0x8}, 0x0, 0x0, r0, 0x2) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x8008000100000004) write$evdev(r1, &(0x7f00000002c0)=[{{0x0, 0x2710}, 0x16, 0x9, 0x3ff}, {{0x0, 0x7530}, 0x16, 0x101, 0x401}, {{0x77359400}, 0x0, 0x4}], 0x48) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ptrace(0x10, r2) r3 = dup(r0) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000000)={0x0, 0x3f, 0x8, 0x80000000, 0xfffffffffffffffb, 0x1}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x6d, 0x7fffffff, 0x4, 0x7, 0x7, 0x0, 0x2}, 0x1c) ptrace$pokeuser(0x6, r2, 0x388, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) 03:48:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001c0001000000000000020000000c0001000000890100000000000000"], 0x20}}, 0x0) fadvise64(r0, 0x0, 0x5, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000180)={0xa, 0x10000, @value=0x7fffffff}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000100)) [ 1170.763678] XFS (loop3): SB sanity check failed [ 1170.768827] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1170.789424] XFS (loop3): Unmount and run xfs_repair 03:48:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001c0001000000000000000000020000000c0001000000000100000000b682c0284e5ab367477be4cd97757c25303508230a949b4bd7a69bd38246584c21bd6badb97ca7abd4f3e0bc9456d4142cea65976e246169529053c1dc809c9b81a125d41a47df5d692ede4b0924766942878444fad9707347cad7a6"], 0x20}}, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10100) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000040)={0x8f, @broadcast, 0x4e21, 0x1, 'lblcr\x00', 0x21, 0x5, 0x41}, 0x2c) [ 1170.815990] XFS (loop5): SB sanity check failed [ 1170.823021] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1170.835235] XFS (loop5): Unmount and run xfs_repair [ 1170.839927] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1170.840326] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1170.867720] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1170.878852] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 09 09 00 XFSB............ [ 1170.895908] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1170.904963] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1170.914253] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1170.923008] XFS (loop4): SB sanity check failed [ 1170.930082] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1170.942402] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1170.956271] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:48:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001c000100000000000000000000000000000000"], 0x20}}, 0x0) [ 1170.967593] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1170.978626] XFS (loop4): Unmount and run xfs_repair [ 1170.983708] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1170.993903] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1171.011545] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1171.020061] 00000000: 58 46 53 42 00 00 10 00 69 43 01 00 00 00 09 00 XFSB....iC...... [ 1171.029496] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1171.041098] 00000050: 00 00 00 01 00 00 10 00 00 00 03 01 00 00 00 00 ................ [ 1171.051246] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1171.059775] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:48:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001400)='/dev/zero\x00', 0x40, 0x0) sendmsg$alg(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000100)="59420a790385618dc513672abe35cec559ff3662caf6278f9e86dbe80cbd5b00cbbb90ffcbafb046fa85ff1ffbfc7de2da83292818a0abdb7bad24f437725971cbdd4046f9e87d3e69d6b0e3597a17732420e3e9f837e9e5033ab37a1359cdae726ad35349ff851888ab1955b085c7db7186263c792dcc96238e8f5d1b1ca85a54d8d12ba89424ad69b4", 0x8a}, {&(0x7f0000000040)="29ddc69067b12a913d9f17c46874b136385d7c", 0x13}, {&(0x7f00000002c0)="7190cc3162ad6db0a9c17e05a2c3de2800e7b574d42746fd0565ca980dbed004aa9a7204a45bc5c3f602807270ca2511f04ca9c1bdbaadc943c72e544fd7a9bc2d48c98eca7af32b2940d92a2627bb72ca3e72e1bdd1877afca0b789434d91f038999f374c4ec69b31a861bf37079431d070700c30be6d6a4da88b40eeb5ffd7edde2b62fa395eefd8ddc44e25d03cef5cbcf9089a36ed7b2de64ddc0dfc30993560bb6336d835cba389b9625938373e3dfc7ca8a68dc48a182bd55ee40a999c09192d400cef98d6ff52b9f4a131b9c31f75076a32d20553c429a465846fc75a3a696393640447f0f8afac706a36d4756cad49b9f9c7b19382a6410828d0b5dd1a6d19c1e4119ed9e8f80010035cbf39049594952d8aa3bbff68e283b0e56e5834e100f2f4880ca671fb73e55e79ef4848ccc2c5984ff1581156a1b4df6be2f28740780d24c1102ce9cc97126c8c5daebda394ee58f7b8a37973729f3c20c2c7937de8c505e97a340ed26ae9f889b3550c8e8e1d4048e596f4a00f8eb04775d8dc18e70ab3e6e19aa258ea268f556ed9be87c8305fda28e4b3080f9c5fc700d68bd11f8d4349e07aa32898867a11434e61967c3a60638b7a7ec09444bb9b43b142c25e0a6ebaf5ee484dfa9ab7e440fc67ff40bdde93ca80e3bdadbabf5cc2b98ecf264d64b7d2244ec1a787400898ef73db143f0e12293c276b091d3b47771a6f542b8823d07795ecfcbdb42d49b49ed55256fec51fc519ec41c6af836e2f1382031aad1ed8a3f86c8430bdf4360cabd161ae9715821869c28ea4cd39374b1bf0dcf16f2f4c742f6c3b336845461c0d84c4e08fd28c35c16221291485184dce3e8ad5f69bc5a86164f77815621a48c3af48f2bced4be7809ad86a78a8c88e5ef07e933279050cdb9974137f58d659652586daa4c561b02562d0ad3afd38119c21881592ab530551258c3236c41a3aca15fdb2dc5fcac3dd1b5bb1dcd30c017be700cec98826febc23df7fcb4b4fcd1322b2cf8ec8db244396d38ee84fb7bc2eda92623bf63d82a35ea70bd38bfc4c1e7587d8c1845233ff0b9b9eb48370a2ce502e3e4a1743ddcdc6e1cd62567386b417ebfdd116e75a90c0c15aa2bfc7e6bdb8039263ed5df5c46ba53667e03c314f898a6e4c7f232c672211eab52cbc91461434f4129b5d7211196ffe0e030eadb7c83a96ea36e1e0f6d5ad445c38fa23377a9e86c4a171651eba63322d7045515164d22002813e81a7ca477b29fbd0737da4af3ae745f9f2597c0dbec9f29710d62ab3442b826b5e1d313a29f2eb3bc8e0a59e94fe65d58d99f2fae319c75ae7cf3fb5766d8a63f67fc5972b6e5687e2cd48fdc2b8c6daffd2af8545aa6687620e0a751e0f116dbdf35d336d3013c028aa2c09bc8375aa76c79c81f91d3dbe907bb5a2c3c2151f2236ac6d446a9b8bd3d8f095151c0b64ccd627a42218c5c7bf0364cc699faea2be5c8d5a2588fe9925c87776f56b8b0cd6a3ddba5c128700c34ebdf9c071f7b8ded8821860f6c4a2f5c01fb0d8d20451487b29c9992abdc5ab052228740325c5999a7c228c3a567a281c0cf4c2babbae76ccf3936271a6ed99f989d19c4be3668a515f8012b59c9f58d4557f803edb2437ee2cfb047060077b45df52464f695d62b5e720dbf7003db201b31b227378f79aca5965a26f3807494da5852d668b9b96f0bb1c0e68321429265a15ac123232c55b773dac8e899e4a91153bbab004ad5a99aa19fded73f4e5528c9da898141d49566870b3c6066c254d3006ae81e425d0d9974abbf6564f5bb203cb356e151a7147c3dfa30885d556e8d5a37274e6cf41e732d980f525c743a6043395f1c5ad5fe23c0d2670d8cbad477b4604bd47b04f6c766ba3acc9432e9ee02034b7ae7a5b3c808debebf211c16b48f8715c2537515317c77e1d9b5f93fb3461738b4602925f7c4a85e3addc2f400709c6d8a1153f378e4d3522398cab51fc1c358aa8d92bf5f796e8f2f1ceeee25fc3ccff62078c59ff16b0312cf24e8f79d465e2addc6e7c24e62ede06aef57b3b4a06595458ee70789dc1db6a5c3ec3eb2b4aced8f1b95053ee497ead84668df87a172d51b3da90a2f267a75efd1cee414f22ffa9f707d7a768e2ef8583cb1005d0c92a04733b7a9091639e01cf4dcbebc405135672bfc2d47b6483513d1f9b687a39c0d20b9a36deef4ef99067a29ee6985b394ee6a1f06d7783e77d87d54d1c2242a75e83a0bc15a93d39310075da5138ca7a68bd77ecee7089e16b5abee441a4e249d6d0b108aac5f88776c5e9b2005d147cc1f20e78f839e044e55a63f8c89d00212e055f1fbaa1d3847dd3a5a6b6fd7551e578b91cf1ea60bc22fcda684bbd8d2d4286b2ad0e578cad95e78e0e923796d051aa82b52399416df7d8f770b7eed78ba74777eb9eb12085592ecb026ffe04c208cb25e103db0f67c80355c89588772e35624319d165a3e61e0659bb0c79b9f25288a1068ba763c7afda42fb41879f8c5c0caceef78260e32d38857f2b284441229e3e94df33009ca64a1df251192b91aeed637bdee3e396977a6379b0148d6cf3986711748b7dd798daf9b7daa14960e7a97f4b0a6b65f6dc62da61ebc4ba57c5a7d9082dc87044a5574da5e0ffb9aea038970f36a967e030c60dc2b07713f764481774e74dcd7e5cccaebf5573d2fa4b02da4052792f050b2801672c5e8ec6ce8ee79b2ce012ab4f2b1b21edbabbbc0235e5308895972900519bbb887f753ca89ec3333bf9437fbe5752d6060493bb08a2fe997da1b6dccd8bd32bd12b791d8e39a6f3352494ce62886ed30c35d6a6d84702b32f39fd48f4735552e4cb121f0760583bafb95895b40de8b87fd9791bf9dfe2a11d3bd890b9fd69bccfa76a4d69cb89d0d52661669222b4c0c932829999100fb732a10e6af9e50e091e9ce80382683eb6692862911bfe085cf4c742de20cd280904db32dcd5b4c93a07fda0f357ee8027b4ec5aea7aa872df32b4efbfca00226a9a91667114f2223869e61310205ffb6b8a9b2cb81e4f62753ce937e503fe7ef66435475ee5ff6b9558b1ac21e0edf347b8d560ac8de1761d8a6e05ed496f4bfd456a1943acc5056c59b735237a7921d3a011760284be36dc5f6bc94b0d59a66df83381b944a80953341a8155ad161bf6d25de59b3731849bc8d24ca823ed59619508a812a1072e24d08187bc1e9164f49e8ff52045cfdca01072f854a6ba0d66933c66ee7d421b7bf015a9cac57c95053b5fa9d068b16e21aaa6321294e1b62781f5acba955d2423becef48b64bff212924208d66e4eada49195ca1d66c6810f1c0c0e809874b915d5adba9567c1d4b3b068a2e2b617af0bc2a78afdff03dc78aa14d08723ff279e0876f6115e0995029d9a2e0dbc32e574519578c1fe83dbda4e6e32c43381c9128aca552a7e6a10f281e10de038dfb74536a11193ca6038fdb21dcc3c0e674361e145c5cb95237779c5b5afbf9af96ae66c1365d55c1189587d08f1a6c89181e65372632d9325ce8dbbc6b2dd85f3685ec70715cd5787576d6f0163f1c43899b0f957981b370a888541a7b4f83dbd281cdf8c3d89f104c1ec8935b9f672e18a652085aea0f26aed4960d6bb2545cf19217f84d1b16dc31512a7f23c775b3cdc404c24c4c04b3bd5eb4c15c40e42033030599575ccd36772214c908afd4ac4a1916fa3b5d17dbf0131c875a2c38d812d38ee4ec8b3744963f1ef89f85cdf20d37eb22cf4f4c888d4b19f0b7b62aad7c0f1d18a1090226dc0c8a3ab0527f2cb3b04103998fb2a3c3a4403b0ff4dc23bdebddacca875f8a67414cdb4bde2940219be43d79469814b88ecea0d0846e481477516d00490ccb88d110a2c27c3b2bd32d4cc7f248635577c13f3a9c110f62b07bed08b58662c121b32c3022498dcf089c0107328f6ba4bcf1043cfaef0d23a55231eff45e18a8207cdf05beb60bd422982d314b0b70312d761feff373eb4a8bdead1e9d1bcfa98d7e57ce18f00cd4e234e3b01d97ec889b9e86f8d8d73a8dfd7a51299cde7aea59c6af4f5276616712801b1e151935d375b11b041b1d0cc2764b10468f85c8c8b25946d2f631f05a9fc1d4e97198e2f094e9e519859600d4e417d25e53e89d57eb055a74cc510c0cefb7fc0c616744f1480520aac8274769f6fcc9ada57ffc1ab4b5751113098c27c50b46a95610f37cc5a247d709673f9440ddb66cdd4946d5ec43201bb952c460c2050ec0ce2629961ba2bac3839e3f69731846a4441220a1031ca81256ef492bf3e918825b6d7d13c049d13d0e25c779336bf622207f256f249812e0f0cbc58159b3768e4cada0401fbcd829f1b855a2828969539ea0cc88c6b546aefa600cf368f115d341664e1c82692ab2fbf15f435adea5551ce300620f628ead27e52ac4190d1fdaab404f2362ade12a8ed65233f8d088def6b43981f23e546693823b1568d8537b209eac779d4866b2854a9ef1fcb7ca11f498752451bf6908d0fb49cea8e8ea1e9a68ac4aa69fd6b6c5a0814f0ff55153592e9dbc235cce395aacd381731df7050acd4bec2dc14cdf3d5be19f0b53f033348d6589bbd49ad75cc7694cdc3c0085bc19c1d4110643d7c1d3f0306fef1dbfc9d04cf592a5ed6b25f2baf319b42bd023f6b5f4554347b81733130707c195d309bae7e4551d252d1b3775e90527a96f68b893edfdf338e3656f13ea08ab2086d749792921306f9aa63cd438cfdf516b9c01f6445a05ffe2b009d2cd7f45f9db69a4376fdfae995cfc79c057df6bd5e7d47887cd6303af898c2508c0164aed1428c3e86fa031a3afd09aaa74dc1611d3da76f556f8021e57ea7edcb6f415e6e086e03839e5e5168fa2922f7126d067d7a9e12100c2d8a831e00b7947490a0276ed0542f61155ef293d370793cf2b13666c9f02037d3e60d946576f59dc9354768ad385fe4574a443013da68150d03d61dc278dfa73a0ee206d6dac4d54ae8a547e4971ace96b8b0038cde0eff85beb8f171ec194fac340b5926d5ca1efe361d14020117ab9da546ab1935ad8125e7aebf40d37ad869cf42e845acbb6c6cb9486b8bf8e80311e0ee24639cfd5ff077bfeacf0ef94cbdc03f338e59647510673a57dcca30961022856c20925c6a687c85538d6c807b9a0eba772c3e303c3d58df65709e7bc5575f4905551b662839cd929c1c914082c786ba558363d3cfe3569b074a70fbc1c3eb118c7f77235a819e92856c50cca9310a8028101d58a5fdc2584baba4330735185d0271adf924468d4bdc73c28a5a3f2706dff8f6b0074480a1a2aa610f441d195046b717cd822200e8505374b2336ac27398da02f93392af2220a414befb9ecb9cf1bb72c45364ecd14cd2a84184cb01240a0ba1cf0e549af34bda4caf4f1b8fc9b5275eedfcfd6e86c9e9c0c4f4c06a991b6a322662c0291bf695996e382217440f5fd97a7f2c75140a07a839f8674e5d0c6366a3fc51cb735cef9f6723ab94729e5e3d8b00b7ce6a7ac33b1084ca8ba3f89d5002d983c6ad21010bb1d24dece06def8bcf83b6d44f6befaf7d5af8e6959ff693bbf1da413a0733af245488c1311d23c6efd0c4fa105b27aeb59c20c2161129ab4f17ba1e542dc8e34dc793c6d947c4159a4e635c409fd3277a64412db02053fdae5ed317cfd81bf9bc8e757a24108a9f44716961bd481100d090650398f83383860ee190085753d6121184d3bd9cbbd215673a0f2ac033b520ec8621ea9ca94fe754f38c5ba2a0020957e3bd95f87b85ddc1bf8b", 0x1000}, {&(0x7f00000001c0)="fa84823529232f2c1cfbb73245d7330248a41b3e049bacf6d24833669746de6f7540a847041d1ae924afc467d2bcf8a12276d0b11751eaeb726629", 0x3b}], 0x4, &(0x7f0000001300)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18, 0x40}, 0x48004) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000821c0001000000000000000000020000000c0001000000000100000000183c7fb4e46073f50d1bc66b30774322285394ab96934d5f9e346cfa18cd76502c646203557f1f88d0e4173d860501754c24c92c3db04d4931c511f99a0b21b3a953242ca9ad93d5c9316e4566c31b56f57e09fb9606006f662df1106e44ab487699a6b6232d370a429a4e67b9d9e69aea05fddf"], 0x20}}, 0x0) [ 1171.068242] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1171.076644] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1171.085260] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1171.093468] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1171.102731] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1171.111227] XFS (loop3): SB validate failed with error -117. [ 1171.117345] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1171.125789] XFS (loop5): SB validate failed with error -117. [ 1171.134431] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1171.144345] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1171.153683] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1171.162718] XFS (loop4): SB validate failed with error -117. 03:48:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x44140, 0x0) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000180)) r2 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r2) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) splice(r1, &(0x7f0000000100), r0, &(0x7f0000000200), 0x2b, 0x6) [ 1171.170442] XFS (loop2): SB sanity check failed [ 1171.175699] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1171.187652] XFS (loop2): Unmount and run xfs_repair [ 1171.193170] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1171.200521] 00000000: 58 46 53 42 03 b4 10 00 00 02 de 00 00 00 09 00 XFSB............ [ 1171.209498] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1171.218264] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1171.226760] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1171.235560] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1171.243911] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1171.252493] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1171.261097] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ 03:48:58 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000000000000a0900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1171.269778] XFS (loop2): SB validate failed with error -117. [ 1171.346489] IPVS: ftp: loaded support on port[0] = 21 [ 1171.573522] XFS (loop3): SB sanity check failed [ 1171.582394] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1171.630258] XFS (loop3): Unmount and run xfs_repair [ 1171.644317] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1171.651052] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 0a 09 00 XFSB............ [ 1171.684064] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1171.692232] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1171.707312] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1171.734054] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1171.742229] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1171.750499] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1171.758662] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1171.758731] XFS (loop3): SB validate failed with error -117. [ 1172.054187] chnl_net:caif_netlink_parms(): no params data found [ 1172.199429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.206316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.213212] device bridge_slave_0 entered promiscuous mode [ 1172.220230] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.226675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.233619] device bridge_slave_1 entered promiscuous mode [ 1172.378400] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1172.387615] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1172.404319] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1172.411497] team0: Port device team_slave_0 added [ 1172.418049] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1172.426126] team0: Port device team_slave_1 added [ 1172.431318] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1172.560492] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1172.626871] device hsr_slave_0 entered promiscuous mode [ 1172.694370] device hsr_slave_1 entered promiscuous mode [ 1172.754803] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1172.871989] bridge0: port 3(gretap0) entered disabled state [ 1172.879704] device gretap0 left promiscuous mode [ 1172.884869] bridge0: port 3(gretap0) entered disabled state [ 1172.941346] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1172.958575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.964930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1172.971492] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.977876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1173.124626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.131486] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.148681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1173.271368] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1173.279893] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1173.286067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1173.292992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1173.303008] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1173.309537] 8021q: adding VLAN 0 to HW filter on device team0 [ 1173.318285] device bridge_slave_1 left promiscuous mode [ 1173.323749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.385052] device bridge_slave_0 left promiscuous mode [ 1173.390521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.526983] device hsr_slave_1 left promiscuous mode [ 1176.569824] device hsr_slave_0 left promiscuous mode [ 1176.630307] team0 (unregistering): Port device team_slave_1 removed [ 1176.641544] team0 (unregistering): Port device team_slave_0 removed [ 1176.652442] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1176.690927] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1176.778777] bond0 (unregistering): Released all slaves [ 1176.890847] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1176.900267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1176.911613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1176.919299] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.925649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.936170] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1176.946909] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1176.953821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1176.961715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1176.969399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.975770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1176.982485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1176.991825] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1176.999089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1177.019887] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1177.027643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1177.035962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1177.043871] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1177.088307] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1177.097276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1177.114717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1177.124313] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1177.132508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1177.148133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1177.158926] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1177.167228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1177.178207] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1177.184786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1177.191733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1177.199807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1177.213275] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1177.225563] 8021q: adding VLAN 0 to HW filter on device batadv0 03:49:04 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\'-\'vmnet1\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000100)={{0xcc, 0x0, 0x0, 0x195, 0x2b4, 0x0, 0x75}}, 0x20) execveat(r0, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x1000) 03:49:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0xc0, @broadcast, 0x4e21, 0x1, 'wlc\x00', 0x2, 0x1e, 0x20}, 0xfffffd84) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000180)={0xe, 0x0, 0x93, 0x91, 0xbd, "9ecc2c3fcea717c32da1f054ae9251dc281b8663b40632e59e34ff942a24b1500847829dd019dd99f46e5fdff04477dcf61ca97d50a776876753fc0188f3cea279152837dc0f50629ecd87a65f997d406173ed4b1bacd4b6ba2c92547809acf6aeb15fbba9e5b9582a2999f7aaff29666de79b8db00546464cf26e632e3422d96090b66ea9e2579289b8c3bf6d982501a1de59f4e7130af54cc0e35462da6f69312ffde0cafd83b4037658f8014645b11784c821bad1c3a2fa272d339d"}, 0xc9) 03:49:04 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000000e00000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:04 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f800000000000000040000010000000008000000000000000810000000000000082000000010000100000003f0100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:04 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010006a43010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:04 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000000000000b0900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1177.471862] validate_nla: 12 callbacks suppressed [ 1177.471872] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1177.496570] netlink: 'syz-executor0': attribute type 1 has an invalid length. 03:49:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000180)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x2) [ 1177.626573] XFS (loop5): SB sanity check failed [ 1177.634149] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1177.656787] XFS (loop4): SB sanity check failed [ 1177.661755] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1177.673825] XFS (loop2): SB sanity check failed [ 1177.679190] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1177.709113] XFS (loop5): Unmount and run xfs_repair 03:49:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) [ 1177.724324] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1177.737905] XFS (loop2): Unmount and run xfs_repair [ 1177.751840] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1177.755884] XFS (loop4): Unmount and run xfs_repair [ 1177.776236] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1177.782589] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1177.785580] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1177.810773] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1177.821256] 00000000: 58 46 53 42 00 00 10 00 6a 43 01 00 00 00 09 00 XFSB....jC...... [ 1177.827711] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1177.830782] 00000000: 58 46 53 42 03 b4 10 00 00 00 e0 00 00 00 09 00 XFSB............ [ 1177.853711] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1177.862287] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1177.874407] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1177.887323] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1177.900892] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1177.909437] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1177.916484] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:49:05 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x7, 0x4, 0x4a8, 0x0, 0x280, 0x140, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f0000000000), {[{{@arp={@remote, @local, 0xffffffff, 0xffffffff, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0xff, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}, 0xcd, 0xfff, 0x5, 0x100000000, 0x4, 0x5af, 'teql0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x0, 0x88}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xa, 0xffffffff}}}, {{@arp={@loopback, @rand_addr=0xa7c0000000000, 0xffffff00, 0xff, @mac=@broadcast, {[0x0, 0xff, 0xff, 0xff, 0xff]}, @mac=@remote, {[0xff, 0x0, 0x0, 0xff, 0xff]}, 0x7, 0x7, 0x101, 0x2, 0x5, 0x7, 'bridge_slave_0\x00', 'rose0\x00', {}, {}, 0x0, 0x1}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xf, 0xffffffff}}}, {{@uncond, 0x71, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @empty, 0xf, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0xa73) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) listen(r0, 0x7) [ 1177.934194] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1177.946345] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1177.950755] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1177.967474] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1177.981767] 00000050: 00 00 00 01 00 00 10 00 00 00 3f 01 00 00 00 00 ..........?..... [ 1177.982894] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1177.993842] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1178.013514] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1178.024648] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:49:05 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000284, 0x0) [ 1178.032778] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1178.043772] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1178.053820] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1178.054415] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1178.071887] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1178.088924] XFS (loop4): SB validate failed with error -117. [ 1178.094293] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1178.113783] XFS (loop2): SB validate failed with error -117. [ 1178.114364] XFS (loop5): SB validate failed with error -117. [ 1178.131720] XFS (loop3): SB sanity check failed 03:49:05 executing program 1: 03:49:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="20390e9149ec174d86b8d1b30000001c00010000000000000000000200deff0b0001000000000100000000eaa6ec10ad67d6fab595a28f0ef19509d752"], 0x20}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x4) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@initdev, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xe8) r4 = geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000540)=0xe8) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000740)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000780)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000880)=0xe8) r9 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f00000009c0)=0xe8) r11 = syz_open_dev$admmidi(&(0x7f0000000a40)='/dev/admmidi#\x00', 0x0, 0x400000) ioctl$ASHMEM_GET_NAME(r11, 0x81007702, &(0x7f0000000a80)=""/160) getgroups(0x3, &(0x7f0000000a00)=[0xee01, 0xffffffffffffffff, 0xee00]) r13 = getegid() r14 = getegid() r15 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000010007000000000002000400", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32=r2, @ANYBLOB="02000100", @ANYRES32=r3, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="02000600", @ANYRES32=r5, @ANYBLOB="02000200", @ANYRES32=r6, @ANYBLOB="02000100", @ANYRES32=r7, @ANYBLOB="02000200", @ANYRES32=r8, @ANYBLOB="02000400", @ANYRES32=r9, @ANYBLOB="0200010089d7b7770574f2ca44a8e3a38d1ccb8fa3718ee334436fe70874c14ca5dc4abf4cce5ffbc5ad008bfd1092329880413f394e4383c8fe297c54fe9aa241130c2db9ed8d425b", @ANYRES32=r10, @ANYBLOB="040003000000000008000200", @ANYRES32=r12, @ANYBLOB="08000500", @ANYRES32=r13, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r14, @ANYBLOB="08000600", @ANYRES32=r15, @ANYBLOB="10000100000000002000020000000000"], 0x94, 0x1) [ 1178.155724] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:49:05 executing program 1: [ 1178.203412] XFS (loop3): Unmount and run xfs_repair [ 1178.215280] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1178.223823] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 0b 09 00 XFSB............ [ 1178.239837] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:49:05 executing program 1: [ 1178.252097] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1178.271312] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1178.290438] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1178.339383] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1178.361343] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1178.392497] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1178.408102] XFS (loop3): SB validate failed with error -117. 03:49:05 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000001e00000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:05 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000003000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:05 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010006b43010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:05 executing program 1: 03:49:05 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000000000000c0900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001c0001000000000000000080020000000c0001000000000100000000"], 0x20}}, 0x0) 03:49:05 executing program 1: [ 1178.692686] XFS (loop2): SB sanity check failed [ 1178.719025] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1178.724164] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1178.757014] XFS (loop2): Unmount and run xfs_repair 03:49:06 executing program 1: 03:49:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'netdevsim0\x00', {0x2, 0x4e20, @multicast2}}) [ 1178.822622] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1178.878377] 00000000: 58 46 53 42 03 b4 10 00 00 01 e0 00 00 00 09 00 XFSB............ [ 1178.887465] XFS (loop5): SB sanity check failed [ 1178.892441] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1178.904394] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1178.910764] netlink: 'syz-executor0': attribute type 1 has an invalid length. 03:49:06 executing program 1: [ 1178.945238] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1178.949112] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1178.961024] XFS (loop5): Unmount and run xfs_repair [ 1178.977533] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1178.988978] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1179.000767] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1179.018244] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1179.032255] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:49:06 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xa8000, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) [ 1179.058492] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1179.075173] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1179.083710] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1179.084354] XFS (loop3): SB sanity check failed [ 1179.097101] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:49:06 executing program 1: [ 1179.109707] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1179.118276] XFS (loop2): SB validate failed with error -117. [ 1179.130000] XFS (loop3): Unmount and run xfs_repair [ 1179.142263] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1179.150121] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1179.160918] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 0c 09 00 XFSB............ [ 1179.169449] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1179.175075] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1179.186719] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1179.197853] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1179.198848] 00000050: 00 00 00 01 00 00 10 00 00 00 00 00 03 00 00 00 ................ [ 1179.233527] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1179.240275] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1179.255445] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1179.256511] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 03:49:06 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000001e80000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1179.279461] XFS (loop5): SB validate failed with error -117. [ 1179.291776] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1179.293193] XFS (loop4): SB sanity check failed [ 1179.311870] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1179.348579] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1179.357187] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1179.358657] XFS (loop3): SB validate failed with error -117. [ 1179.383174] XFS (loop4): Unmount and run xfs_repair [ 1179.393281] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1179.400318] 00000000: 58 46 53 42 00 00 10 00 6b 43 01 00 00 00 09 00 XFSB....kC...... [ 1179.421982] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1179.441999] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1179.451034] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1179.461217] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1179.469720] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1179.480325] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1179.490024] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1179.498888] XFS (loop4): SB validate failed with error -117. 03:49:06 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000004000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:06 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010006c43010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:06 executing program 1: 03:49:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0xf412) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001c000100000000000057c8d768c6844e00"], 0x20}}, 0x0) 03:49:06 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000000000000d0900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1179.613095] XFS (loop2): SB sanity check failed [ 1179.618208] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1179.685630] XFS (loop2): Unmount and run xfs_repair 03:49:07 executing program 1: 03:49:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x88, &(0x7f0000000080)={&(0x7f0000000000)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) [ 1179.744080] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1179.763136] 00000000: 58 46 53 42 03 b4 10 00 00 01 e8 00 00 00 09 00 XFSB............ [ 1179.819775] XFS (loop5): SB sanity check failed [ 1179.826167] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1179.829490] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:49:07 executing program 1: [ 1179.862580] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 03:49:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={r0}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001c000100000000000000fd19020000009dbed3ffffffff20d505d50000adfe53cba10015b3c4d2738fcbdcbc54a648607bbbb1a1974c473cf4d2598d62078c3cd2114cc30558a352895114c1add8f2744eba2230c6f2cb7190a6ac6126b2d5f95e6506184fd0edd442bd10ad7d74bfc7a20d415d6f46e070b51de369a93b149471ad9f15f38c01"], 0x1}}, 0x20000010) [ 1179.911618] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1179.921299] XFS (loop5): Unmount and run xfs_repair [ 1179.957013] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1179.965627] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1179.989365] XFS (loop4): SB sanity check failed [ 1179.994488] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1180.001256] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1180.015622] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1180.046613] XFS (loop4): Unmount and run xfs_repair 03:49:07 executing program 1: 03:49:07 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000100)=ANY=[@ANYBLOB="6a6f75724e03365f6465763d30783030eda40000000000000000000000000000"]) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x14104842}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x600, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000900)={0x0, 0x1000, "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"}, &(0x7f00000002c0)=0x1008) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={r3, 0x6ea78ccc, 0xffffffff, 0x1, 0x3, 0x4}, &(0x7f0000000340)=0x14) getsockname$llc(r0, &(0x7f0000000240), &(0x7f0000000280)=0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r4, 0xf04, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1180.047779] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1180.052072] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1180.087256] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1180.099296] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1180.125529] 00000000: 58 46 53 42 00 00 10 00 6c 43 01 00 00 00 09 00 XFSB....lC...... [ 1180.127948] XFS (loop2): SB validate failed with error -117. [ 1180.145469] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1180.167209] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1180.185545] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1180.190427] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1180.221950] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1180.225663] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1180.261148] 00000050: 00 00 00 01 00 00 10 00 00 00 00 00 04 00 00 00 ................ [ 1180.281908] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1180.285335] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:49:07 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000003e80000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1180.310007] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1180.327836] XFS (loop5): SB validate failed with error -117. [ 1180.345268] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1180.353741] XFS (loop3): SB sanity check failed [ 1180.374507] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1180.385948] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1180.395176] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1180.408388] XFS (loop3): Unmount and run xfs_repair [ 1180.413560] XFS (loop4): SB validate failed with error -117. [ 1180.420553] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1180.427721] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 0d 09 00 XFSB............ [ 1180.436246] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1180.458531] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1180.475085] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1180.488273] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:49:07 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000030000000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1180.540446] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1180.584946] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1180.608762] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1180.623926] XFS (loop3): SB validate failed with error -117. 03:49:07 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010006d43010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:07 executing program 1: [ 1180.641614] XFS (loop2): SB sanity check failed [ 1180.661795] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:49:08 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000000000000e0900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:08 executing program 1: [ 1180.714200] XFS (loop2): Unmount and run xfs_repair [ 1180.719339] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1180.741084] 00000000: 58 46 53 42 03 b4 10 00 00 03 e8 00 00 00 09 00 XFSB............ [ 1180.765516] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1180.791830] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1180.810561] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:49:08 executing program 1: [ 1180.843801] EXT4-fs (sda1): Unrecognized mount option "jourN6_dev=0x00í¤" or missing value [ 1180.889697] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:49:08 executing program 1: [ 1180.933562] XFS (loop5): SB sanity check failed [ 1180.933734] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1180.939317] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1180.958979] XFS (loop5): Unmount and run xfs_repair [ 1180.961372] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1180.972663] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1180.973234] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1180.984477] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1180.993272] XFS (loop2): SB validate failed with error -117. [ 1180.996252] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1181.010115] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1181.010126] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:49:08 executing program 1: [ 1181.010137] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1181.010147] 00000050: 00 00 00 01 00 00 10 00 00 00 03 00 00 00 00 00 ................ [ 1181.010158] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1181.010168] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1181.010235] XFS (loop5): SB validate failed with error -117. [ 1181.078158] XFS (loop4): SB sanity check failed [ 1181.083475] XFS (loop3): SB sanity check failed [ 1181.088042] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1181.094145] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1181.120271] XFS (loop3): Unmount and run xfs_repair 03:49:08 executing program 1: [ 1181.128725] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1181.140139] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 0e 09 00 XFSB............ [ 1181.142258] XFS (loop4): Unmount and run xfs_repair [ 1181.150907] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1181.157511] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1181.179176] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1181.198125] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1181.212025] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1181.223343] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 03:49:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x20000) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000040)={0x0, 0x1}) [ 1181.231411] 00000000: 58 46 53 42 00 00 10 00 6d 43 01 00 00 00 09 00 XFSB....mC...... [ 1181.247700] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1181.256093] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1181.264979] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:49:08 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410ffffffeb0000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0xfff, 0x0, 0x0, 0xffffffffffffffdd}) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)) [ 1181.293180] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1181.302557] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1181.342658] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1181.343632] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 03:49:08 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000040000000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1181.384489] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1181.403123] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1181.420565] XFS (loop4): SB validate failed with error -117. [ 1181.426808] XFS (loop3): SB validate failed with error -117. [ 1181.537423] XFS (loop2): SB sanity check failed [ 1181.542318] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1181.554079] XFS (loop2): Unmount and run xfs_repair [ 1181.559152] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1181.565925] 00000000: 58 46 53 42 03 b4 10 ff ff ff eb 00 00 00 09 00 XFSB............ [ 1181.574401] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1181.582551] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1181.582564] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1181.582575] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1181.582587] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1181.582598] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1181.582610] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1181.582679] XFS (loop2): SB validate failed with error -117. 03:49:09 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010006e43010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:09 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x3, 0x100000001) r2 = memfd_create(0x0, 0x3) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) fcntl$getown(r1, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) getpgid(r3) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) r4 = socket$packet(0x11, 0x2, 0x300) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) ioctl$EVIOCGSW(r2, 0x8040451b, 0x0) fchmodat(r2, &(0x7f00000000c0)='./file0\x00', 0x40) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r5 = open(&(0x7f0000000280)='./file0\x00', 0x400000014104e, 0x0) bind$inet(r5, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xa6}) ftruncate(r5, 0x8007ffc) sendfile(r1, r5, 0x0, 0x400008bca) 03:49:09 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000100900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:09 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="059fe2a0aea24a8c425233ffb56183f109001300000000000000f699000040543c0f005f1c6bbacdc5465caaf2477e9976d15cd69b58021a92f44b02fe90032244ecab6b54ed87b1e3de5a32b911ba30710843de72efd204385cb95d8fadd17db17532030cddddb078d84f661722ff7ff81d9424c44631b1bac3f017b0df21af722b898e3f598dc22c95e70be23edb43f74d18b825215d305dd9b5af2b1c39395a4f2b267ade36f15e608ea3b1b1151961fb50f7d41680925eeed8ddf7d5ea30ae5401990fdae747a853e048f0753c79dbbd5b4d4489d8a7add55b84fb", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000080000000000000000000000c4d981ae211e6951"], 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "d7b3d850ee296e57"}}, 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200800001c000100000000130000ff00020000ec0c0001000000000100000000"], 0x20}}, 0x0) [ 1181.735262] XFS (loop5): SB sanity check failed [ 1181.745530] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1181.774077] protocol 88fb is buggy, dev hsr_slave_0 [ 1181.779227] protocol 88fb is buggy, dev hsr_slave_1 [ 1181.797125] XFS (loop5): Unmount and run xfs_repair [ 1181.816683] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1181.836381] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ 03:49:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x101000, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) [ 1181.846491] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1181.855472] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1181.895023] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1181.934290] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1181.959887] 00000050: 00 00 00 01 00 00 10 00 00 00 04 00 00 00 00 00 ................ [ 1181.974430] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1181.991933] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 03:49:09 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000001f20000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1182.032117] XFS (loop4): SB sanity check failed [ 1182.040844] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:49:09 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x0) 03:49:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001c00010000000000000000000200000004a6b25a0f76591a2efab707"], 0x20}}, 0x0) [ 1182.086336] XFS (loop4): Unmount and run xfs_repair [ 1182.095290] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1182.096159] XFS (loop5): SB validate failed with error -117. [ 1182.102118] 00000000: 58 46 53 42 00 00 10 00 6e 43 01 00 00 00 09 00 XFSB....nC...... [ 1182.116943] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1182.136289] XFS (loop3): SB sanity check failed [ 1182.141164] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1182.174817] XFS (loop3): Unmount and run xfs_repair 03:49:09 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x80000001, 0x0, "0950fe4adba7"}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6}, 0x2c) open(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x0) r3 = geteuid() write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000780)={0x78, 0xfffffffffffffffe, 0x5, {0xfffffffffffffffc, 0x3ff, 0x0, {0x3, 0x7, 0x3, 0x673000, 0x0, 0x10000, 0x3ff, 0x8, 0x80000001, 0x0, 0x6e, r3, 0x0, 0x6, 0x8}}}, 0x78) listen(r0, 0x7f) gettid() fstat(r2, &(0x7f0000000840)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getgid() getpgrp(0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getgid() getresgid(&(0x7f00000014c0), &(0x7f0000001500), 0x0) getgid() getgid() getpgid(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000006340)) fcntl$getown(r2, 0x9) r4 = accept(r0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) sendmsg$rds(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/250, 0xfa}, {0x0}], 0x2}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001080)=[{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000003c0)=[@rights={0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r4]}], 0x28}], 0x1, 0x0) [ 1182.189435] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1182.189963] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1182.208992] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 10 09 00 XFSB............ [ 1182.209266] netlink: 12 bytes leftover after parsing attributes in process `syz-executor0'. [ 1182.224096] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1182.243193] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1182.251645] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1182.262323] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1182.272585] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1182.281684] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1182.290476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1182.301986] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1182.322059] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1182.342771] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1182.352457] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1182.361992] XFS (loop4): SB validate failed with error -117. [ 1182.368403] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1182.395184] XFS (loop3): SB validate failed with error -117. [ 1182.403440] XFS (loop2): SB sanity check failed [ 1182.408428] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:49:09 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0) membarrier(0x79, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000180)="e3a7c80504e8f661cc03b29c8e2538ff456e51f1d5f9598245c392994bed0d96f49b420c01e6a28261d85015e96df2d4cb839cbd415cec234f99d2e6ac0731c475244b25991cf66a12a7cf66549b9565fd420c5d23a97c29732b289579335858d0d8e184674a6548864ad49879f92a3f5c112f8804052c3f39ea38557111188da3cebcd01efb562d18d01423263d5d17c6398d0469655a6956425b2721315f9c9f72", &(0x7f0000000040)="054ed251845c0447e27950c584a5f76cc4fc3055afc84081ad3d18e66bbca83cfdb591275253d3328e8e08", 0x2}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000240)=0xf9c6) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x541800, 0x0) 03:49:09 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000020100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1182.444256] XFS (loop2): Unmount and run xfs_repair [ 1182.449593] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1182.468119] 00000000: 58 46 53 42 03 b4 10 00 00 01 f2 00 00 00 09 00 XFSB............ [ 1182.495756] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1182.511726] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1182.521617] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1182.531625] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:49:09 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010006f43010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1182.584369] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1182.618787] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:49:09 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000200900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1182.635980] validate_nla: 7 callbacks suppressed [ 1182.636008] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1182.681255] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1182.707978] XFS (loop2): SB validate failed with error -117. [ 1182.715225] XFS (loop5): SB sanity check failed [ 1182.720121] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:49:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x900, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:49:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2000, 0x0) close(r0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x100}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x401}, 0x8) [ 1182.730175] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1182.738063] XFS (loop5): Unmount and run xfs_repair [ 1182.751923] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1182.759023] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1182.778900] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1182.800410] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1182.848271] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1182.886103] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:49:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@dev, @remote, 0x0}, &(0x7f0000000180)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'vcan0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001600)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000002d40)={@rand_addr, @initdev, 0x0}, &(0x7f0000002d80)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000002dc0)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000002ec0)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000002f00)={0x11, 0x0, 0x0}, &(0x7f0000002f40)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002f80)={'ifb0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004000)={'sit0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000040c0)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004100)={'bridge0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000004540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f0000004500)={&(0x7f0000004140)={0x398, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0xb4, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x81}}}]}}, {{0x8, 0x1, r4}, {0xfc, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xf1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x170, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x800}}}]}}]}, 0x398}, 0x1, 0x0, 0x0, 0xc080}, 0x800) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) [ 1182.898736] XFS (loop3): SB sanity check failed [ 1182.912829] 00000050: 00 00 00 01 00 00 10 00 00 00 02 01 00 00 00 00 ................ [ 1182.925916] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1182.934770] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:49:10 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410fffffff60000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1182.954988] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1182.994333] XFS (loop3): Unmount and run xfs_repair [ 1183.000404] XFS (loop4): SB sanity check failed [ 1183.009131] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1183.020325] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1183.033553] XFS (loop5): SB validate failed with error -117. [ 1183.048762] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 20 09 00 XFSB......... .. [ 1183.072082] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1183.083160] XFS (loop4): Unmount and run xfs_repair [ 1183.089818] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1183.101856] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1183.106895] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1183.120394] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1183.146029] 00000000: 58 46 53 42 00 00 10 00 6f 43 01 00 00 00 09 00 XFSB....oC...... [ 1183.161090] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:49:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000000100)='net/ip_vs_stats\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000001c0)={0x0, @speck128, 0x1, "5bb4bf585dea0c14"}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000c32df51746f326f9000000000000020000000c030000000000000000ea00"], 0x20}}, 0x0) fcntl$dupfd(r0, 0x0, r2) 03:49:10 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000030100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1183.210370] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1183.223769] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1183.248116] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1183.255624] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1183.264055] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1183.270738] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1183.273198] XFS (loop3): SB validate failed with error -117. [ 1183.281722] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1183.300564] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1183.324265] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1183.348007] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1183.352377] XFS (loop2): SB sanity check failed 03:49:10 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x9a, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x34343459}}) write$binfmt_misc(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="73797a30c775632e759236587a14f1f27938542025631b08f1654f289cef20c2366c5c942fb9cb7e8b52c21eb85be10f6d38d9796dd6908149c89c3854ec75594cbf467b2bf5baa52368f04113e8f4d6b844ef2038c209625cbb4b3541c465ba1877bebcf1de152abf28e850c6d5f0506e0917a877c8f7e97e5c91157a620ace95105149464c4c3bf4fa79ace962b9466446df5b5425608e3e191fbd3d85bb7c0fbbf17306b831f7523f8a04a06c39f35bedbfe4056d65b272c78bf852d2754b813f088de6379751cb33dc844489a031f4b83ae5c204f3010a4c41edada84dd07268"], 0xeb) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000440)='/dev/vcsa#\x00', 0x9, 0x2000) perf_event_open(&(0x7f00000003c0)={0x7, 0x70, 0x3, 0x5, 0x20, 0x401, 0x0, 0xb1, 0x20400, 0x4, 0xaa, 0x80000000, 0x0, 0x5d, 0xfffffffffffffffd, 0x100000001, 0x3, 0x7, 0x8, 0x2, 0x4, 0x23, 0x7ff, 0x3f, 0xda, 0x9, 0xc9f, 0x2, 0x81, 0xc7, 0x8, 0x2, 0x6, 0x10000, 0x10000, 0x6, 0x7, 0x500000000000000, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x81}, 0x10000, 0x1, 0x4, 0x0, 0x8, 0x6}, r2, 0xb, r3, 0x3) pipe2(&(0x7f0000000140), 0x80000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x4e21, @multicast1}}) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001cdd0100b9b7ad8b00000000020000000c0001000000000100000000a95e1ff37d10ca499f0624ebc02d1d9adadf636b27ed5b75a9a665e1800515"], 0x20}}, 0x0) [ 1183.366329] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1183.384423] XFS (loop2): Unmount and run xfs_repair [ 1183.389657] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1183.396557] XFS (loop4): SB validate failed with error -117. [ 1183.402988] 00000000: 58 46 53 42 03 b4 10 ff ff ff f6 00 00 00 09 00 XFSB............ [ 1183.422277] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1183.433876] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1183.442367] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1183.451207] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1183.461138] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1183.487473] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1183.524416] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ 03:49:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x2) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000180)={0x4, "fab9f57761150ea888c8fdd7da3a0be6a8e2af42ef6c27fe4b179e68a3d0c9dd", 0x1f1, 0x0, 0x1000, 0x6, 0x5}) [ 1183.547178] XFS (loop2): SB validate failed with error -117. 03:49:10 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000002200900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:10 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010007043010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1183.647259] XFS (loop5): SB sanity check failed [ 1183.658935] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1183.678781] XFS (loop5): Unmount and run xfs_repair [ 1183.683893] XFS (loop5): First 128 bytes of corrupted metadata buffer: 03:49:11 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000010000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1183.692733] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ 03:49:11 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000003f80000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1183.769172] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1183.800091] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1183.814659] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1183.881741] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1183.945963] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1183.972997] XFS (loop3): SB sanity check failed [ 1183.978401] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:49:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x1, 0x200) sendto$rxrpc(r1, &(0x7f00000002c0)="03d2647b5ce0411fd15288361ced4a2107481bb5f90c07099bd9bea6de7c0141bdbc2737513bd882c9c22dde50e59e381c4863d0116ac3257caa3203004753451dcf9e34161466bcea661021b4c71f404a7264870043a47d32604666364ebcadc4240404b7b5ec5c5b3ea85a4320be0986c5c17f3fb30e34c7ac960d40c4b6a8eff25852ee04e6b0633e74e273b5a82612dcfaf640a4f06f205e30ebf1f856d1aa8093987a4a2e51b986417931da80ed4c1e4e0cdd06d718ed450c78c99de772e70bcbe8bdcbad6a", 0xc8, 0x20000010, &(0x7f0000000400)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0xd6d9, @empty, 0x10001}}, 0x24) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xa8, &(0x7f0000000180)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @rand_addr=0x8}, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0x15}, 0x93}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e23, @rand_addr=0x7}, @in6={0xa, 0x4e21, 0x80000001, @mcast2, 0xffffffffffff4702}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000240)={r3, 0xe, 0x3}, 0x8) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000be00010000000000feffffff020000000c0001000000000100000000"], 0xffffffffffffffce}}, 0x0) 03:49:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, 0x0}) migrate_pages(r2, 0x5, &(0x7f0000000140)=0xf, &(0x7f0000000180)=0x81) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x1) ioctl$RTC_WIE_OFF(r3, 0x7010) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x1a, 0x0, &(0x7f0000000080)) [ 1183.988496] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1184.042583] 00000050: 00 00 00 01 00 00 10 00 00 00 03 01 00 00 00 00 ................ [ 1184.051605] XFS (loop2): SB sanity check failed [ 1184.061479] XFS (loop4): SB sanity check failed [ 1184.062202] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1184.069946] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1184.087156] XFS (loop3): Unmount and run xfs_repair [ 1184.104427] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1184.114669] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1184.124098] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 02 20 09 00 XFSB......... .. [ 1184.129101] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 03:49:11 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) [ 1184.140541] XFS (loop2): Unmount and run xfs_repair [ 1184.145864] XFS (loop4): Unmount and run xfs_repair [ 1184.150978] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1184.152331] XFS (loop5): SB validate failed with error -117. [ 1184.159778] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1184.182453] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1184.192685] 00000000: 58 46 53 42 00 00 10 00 70 43 01 00 00 00 09 00 XFSB....pC...... [ 1184.204210] 00000000: 58 46 53 42 03 b4 10 00 00 03 f8 00 00 00 09 00 XFSB............ [ 1184.212467] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1184.224203] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1184.234354] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1184.244709] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1184.264157] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1184.272479] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1184.283868] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:49:11 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x44020, &(0x7f0000000600)={[], [{@uid_eq={'uid'}}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) [ 1184.292226] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1184.300555] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1184.300567] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1184.300580] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1184.317191] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1184.344118] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1184.352536] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1184.364138] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1184.372417] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1184.384123] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ 03:49:11 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000040100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1184.394349] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1184.407906] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1184.416273] XFS (loop2): SB validate failed with error -117. [ 1184.422205] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1184.432523] XFS (loop3): SB validate failed with error -117. [ 1184.438797] XFS (loop4): SB validate failed with error -117. 03:49:11 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffd, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @sliced={0x7fffffff, [0x81, 0x4, 0x0, 0x101, 0x1, 0x9, 0xffffffffffffffc0, 0x8ed5, 0x10000, 0x0, 0x6, 0xfff, 0x51f, 0x10000, 0x10000, 0x47b, 0x6, 0xfffffffffffff1ad, 0x1, 0x8001, 0x2, 0x7, 0x8, 0x2e, 0x182, 0xffffffffffffffff, 0x9, 0x6, 0xffffffffffffffff, 0x2212, 0x50, 0x4, 0x0, 0x6ad, 0x5, 0x36, 0x1, 0x0, 0xffffffff, 0xff, 0x388, 0x10000, 0x7, 0x8, 0xa60, 0x1, 0x6, 0x22], 0x88}}) [ 1184.473422] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1184.490756] netlink: 'syz-executor0': attribute type 1 has an invalid length. 03:49:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, 0x1c, 0x1, 0x0, 0x3, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) 03:49:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xffffffff, 0x20000) accept4$netrom(r1, &(0x7f0000000080)={{}, [@default, @remote, @rose, @bcast, @rose, @bcast, @netrom, @bcast]}, &(0x7f0000000100)=0x48, 0x800) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r2 = socket$kcm(0xa, 0x400000000000002, 0x73) bind$inet6(r2, &(0x7f0000000000), 0x5f) close(r2) 03:49:11 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000010200900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1184.638978] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1184.659906] XFS (loop4): SB sanity check failed [ 1184.681504] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1184.728423] XFS (loop4): Unmount and run xfs_repair [ 1184.733674] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1184.743689] 00000000: 58 46 53 42 00 00 10 00 70 43 01 00 00 00 09 00 XFSB....pC...... [ 1184.764110] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1184.785432] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1184.793625] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1184.844142] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1184.859619] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1184.869185] XFS (loop5): SB sanity check failed [ 1184.879972] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1184.902284] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1184.914249] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1184.922561] XFS (loop5): Unmount and run xfs_repair [ 1184.929249] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1184.957886] XFS (loop4): SB validate failed with error -117. [ 1184.973904] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1184.991422] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1185.000695] XFS (loop3): SB sanity check failed [ 1185.001202] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1185.011122] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1185.013667] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1185.031094] XFS (loop3): Unmount and run xfs_repair [ 1185.033483] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1185.038689] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1185.046625] 00000050: 00 00 00 01 00 00 10 00 00 00 04 01 00 00 00 00 ................ [ 1185.046636] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1185.046648] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1185.046682] XFS (loop5): SB validate failed with error -117. [ 1185.059137] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 10 20 09 00 XFSB......... .. [ 1185.091947] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1185.100306] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 03:49:12 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010007143010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) 03:49:12 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000003fc0000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:12 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r1) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0x4, 0x10000}) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000100)) r4 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @broadcast, @initdev}, &(0x7f0000000240)=0xc) accept4$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000500)={@local, 0x0}, &(0x7f0000000540)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000800)={@dev, 0x0}, &(0x7f0000000840)=0x14) getsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000880)={@loopback, @local, 0x0}, &(0x7f00000008c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@local, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000a40)=0xe8) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000f40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000f00)={&(0x7f0000000a80)={0x44c, r4, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0xb8, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r7}, {0xec, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffa}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r9}, {0xb4, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xe71}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x174, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xb672}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3f}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x203}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x41}}}]}}, {{0x8, 0x1, r14}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r15}}, {0x8}}}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) [ 1185.108745] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1185.117095] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1185.154091] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1185.163323] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1185.171771] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1185.172003] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1185.180087] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 03:49:12 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x0, 0x0) getresuid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0xfffffffffffffff5, 0x5, {{0x10001, 0x3, 0xfffffffffffffff9, 0x6, 0x1ff, 0xfffffffffffff848, {0x1, 0x5, 0x80000001, 0x7fff, 0x7, 0xc3, 0x7, 0x3ff, 0x14, 0xde, 0x8, r2, r3, 0x2, 0x1ff}}, {0x0, 0x3}}}, 0xa0) ioctl$TUNSETPERSIST(r0, 0x400454de, 0x712000) vmsplice(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d3684bc6694c21c5754e49b042f2512348a5346f01edda83c820ace13f7d04b45b4bc9defaa370cda3523c91c038c8244e0608b8550eb28f427b168232cc4be3fad2db1e7040ecfccb286bdef39cd16c4bed8e204ceed9c7d1570151d71f04bd61b319ea9bf19fd80bc48555acf8e3370c15a6ba2544675a625947b75c32349d9e96c2e0204dbe099777e025ce427d1dd5244b9a7b1778f00e0e89ade655bca220c96c78193c231919aec4f27ab19d374a7be55fa3081440c0bce6869104282d3d055f6ff66c95778538e2e0aec5957f0fbd81", 0xd3}, {&(0x7f0000000100)="9fa79aa24d70e6b85b03809e72add460ede12667327593840240269db391b55341f32b", 0x23}, {&(0x7f0000000140)="76de535e4d867ba1eb82d3683d29553a001a7809421ca971da947b42e8b2d2be59f66eb9a532c316fcd185a8b84ca9b19d026b6bca869249cb825ddf4e257eb810b35a4fea303934d86ce2927d60446471524660f1c2608cb141fb98407f098f5472e298bf3a3c894ced8e23624bdb737bf0f45e10c30bbdff67c1c782a38fd08010f7b96bf5798b92ec1f4ea19c577abf7ee3f238a3d1fc00005b7777f01a28e93d530e2681de39b690df47b8dad5f7f6a27c32aa6aa3bbf8a34bbfe99a609cf9e7e44873", 0xc5}, {&(0x7f0000000240)="c1b229cfbd2a58aa582b42e3aa42fa23cb3c0c3e0fe94990d664b5fa2621744141c03ce2dc1c3eb358a12a5958fd3a0963431128578e293868d3148dafc029afdac22eefa4ee111c9c471781e87b3068d9bc69de5fee56c0cfe6f68730e9c2c2089b3103f76a9199037eee686453cbd3d93ecfad0074cf34d4ee6da56e1a5f70965ee53d9451beb0affb2c778931cd59f77b0443bb2fbff9066c261ac93d89c9d9d20670e68a304b82a6952a3ef4aa3e77277156430e2c1bf080", 0xba}, {&(0x7f0000000340)}, {&(0x7f0000000380)="616f346419", 0x5}], 0x6, 0x2) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000680)='/dev/rtc0\x00', 0x901, 0x0) openat$cgroup_type(r4, &(0x7f00000006c0)='cgroup.type\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)) [ 1185.205514] XFS (loop3): SB validate failed with error -117. 03:49:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000003c0001000000000000000000020012000c0001000000f90100000000"], 0x20}}, 0x0) fchdir(r0) 03:49:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x9, 0x1d, 0x6, 0xc, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f00000002c0)}, 0x1b) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002540)={r0, &(0x7f0000000340)='U', &(0x7f0000002440)}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x200400, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000800)={r0, &(0x7f0000000380)="c2", &(0x7f0000000700)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f00000002c0)='\x009', &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000280)="eb", &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000400)="2bca1d5beb6ed63c236d87be4e83899877450363981f76f9a8863b7dd8f8c10e1c90dd8d6c53a0259f728338863ea6a9722480a75369d8393dee19b5b3b9fb7a2da79c0b5971a1f18154a56e5ffefa1240701d8c958ae6d7a5be501e76af28807fa233c07f00834c69231bcc01be94d018f9552562a70bfcab728037026925c55cc0c8b6c6806ef7914646c637b87a8acf4e7fd04850e07fe0bec01a0435cdce63a81f96816bb664e1ad42d860d1a6683b5f8c26b9f3c5d522", &(0x7f00000003c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000100), &(0x7f00000003c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000200), &(0x7f0000001440)}, 0x20) 03:49:12 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000080100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:12 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000230900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1185.402769] XFS (loop2): SB sanity check failed [ 1185.410905] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1185.427548] XFS (loop2): Unmount and run xfs_repair [ 1185.450258] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1185.476376] XFS (loop4): SB sanity check failed [ 1185.478037] 00000000: 58 46 53 42 03 b4 10 00 00 03 fc 00 00 00 09 00 XFSB............ [ 1185.487336] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1185.514254] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1185.522639] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1185.532103] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1185.541146] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1185.553873] XFS (loop4): Unmount and run xfs_repair [ 1185.562589] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 03:49:12 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x80000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x8000, 0x0) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000180)={0x6, 0x10003, "fd2d9774ab14a13f1f506909095a3755e61a774d0f95d80a", {0x6, 0xfffffffffffff3ac}, 0x4}) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000040)) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001c000100000000000000000002000a000c0001000000000100000000"], 0x20}}, 0x0) [ 1185.569569] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1185.574494] XFS (loop3): SB sanity check failed [ 1185.590307] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:49:12 executing program 1: socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000001200)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000001240)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000001180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001140)={&(0x7f00000012c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00002dbd7000ffdbdf2502000000951d27415b034b440c0bc4dad279bd2f6149b952d255fe93a64004cc804067460bc6ae959d4313458ea61119f2a2a064deddb4ffc35e5bac28d303d8e8a023527174bb28642db20b042d0773e8c9b5ba454d57a9bfac99fcac50088c6ce7"], 0x14}}, 0x4080) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000002300)=ANY=[], &(0x7f0000000100)=""/4096, 0xfffffffffffffdb3, 0x1000, 0x1}, 0x20) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000001280)={0x3, &(0x7f00000000c0)=[{}, {}, {}]}) get_mempolicy(&(0x7f0000000040), &(0x7f00000011c0), 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x1) [ 1185.627808] 00000000: 58 46 53 42 00 00 10 00 71 43 01 00 00 00 09 00 XFSB....qC...... [ 1185.646550] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1185.657303] XFS (loop3): Unmount and run xfs_repair [ 1185.670991] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1185.685042] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1185.708770] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1185.713587] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ 03:49:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10080000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xdc, r1, 0x306, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x8}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x1b}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x20}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xfc, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2cc80000000}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xd}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2fd}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4192c7d9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}]}]}, 0xfc}}, 0x8010) [ 1185.726679] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 23 09 00 XFSB.........#.. [ 1185.737039] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1185.747095] XFS (loop2): SB validate failed with error -117. [ 1185.753457] XFS (loop5): SB sanity check failed [ 1185.755662] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1185.759010] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1185.782739] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1185.799871] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1185.805906] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1185.828340] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1185.833475] XFS (loop5): Unmount and run xfs_repair [ 1185.842434] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1185.845104] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1185.856640] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1185.870806] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1185.878461] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1185.879713] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1185.887439] XFS (loop4): SB validate failed with error -117. [ 1185.897201] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1185.910100] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1185.919070] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1185.927794] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1185.931303] XFS (loop3): SB validate failed with error -117. [ 1185.936337] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1185.951081] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1185.959568] 00000050: 00 00 00 01 00 00 10 00 00 00 08 01 00 00 00 00 ................ [ 1185.968402] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1185.976615] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1185.985042] XFS (loop5): SB validate failed with error -117. [ 1186.212962] XFS (loop5): SB sanity check failed 03:49:13 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010007243010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x40002, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffc, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000000), 0x4) 03:49:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) r1 = semget$private(0x0, 0x1, 0xc) semctl$IPC_INFO(r1, 0x0, 0x3, &(0x7f0000000000)=""/11) 03:49:13 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000407ff0000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:13 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000001380900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1186.234107] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1186.262099] XFS (loop5): Unmount and run xfs_repair [ 1186.283857] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1186.301703] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ 03:49:13 executing program 1: r0 = socket$inet6(0xa, 0x20000000003, 0x3) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4000, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'syzkaller0\x00'}}, 0x1e) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2800120000d3ffff2800000002000000"], 0x10}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x2ac, 0x0) 03:49:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) [ 1186.332496] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1186.372216] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1186.412606] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1186.457817] XFS (loop2): SB sanity check failed [ 1186.462553] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1186.498744] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1186.521751] XFS (loop2): Unmount and run xfs_repair [ 1186.533278] 00000050: 00 00 00 01 00 00 10 00 00 00 08 01 00 00 00 00 ................ [ 1186.544394] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1186.563573] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1186.570519] 00000000: 58 46 53 42 03 b4 10 00 04 07 ff 00 00 00 09 00 XFSB............ [ 1186.590224] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1186.599402] XFS (loop4): SB sanity check failed [ 1186.601065] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1186.605659] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1186.613431] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1186.628571] XFS (loop3): SB sanity check failed [ 1186.632166] XFS (loop5): SB validate failed with error -117. [ 1186.642458] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1186.663069] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1186.664046] XFS (loop3): Unmount and run xfs_repair [ 1186.671610] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1186.678974] XFS (loop4): Unmount and run xfs_repair 03:49:14 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000100100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:14 executing program 1: r0 = socket(0x400000011, 0x100004000000002, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) prlimit64(0x0, 0x4000000000006, &(0x7f0000000100)={0x20, 0x10000000004}, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x1020, &(0x7f0000000080)=ANY=[@ANYBLOB='mode=00000000000000000000011,mode=01777777777777777777776,uid<', @ANYRESDEC=r1, @ANYBLOB='@\x00']) setresuid(r1, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r2 = dup(r0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000140)={0x10000, 0x0, 0x2, 0xffffffff00000001}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000180)={r3, 0xfffffffffffffff7}) 03:49:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x19, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) [ 1186.696050] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1186.702868] 00000000: 58 46 53 42 00 00 10 00 72 43 01 00 00 00 09 00 XFSB....rC...... [ 1186.710166] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1186.714863] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1186.722907] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1186.727942] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 01 38 09 00 XFSB.........8.. [ 1186.748260] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1186.757602] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1186.761632] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1186.779342] netlink: 5 bytes leftover after parsing attributes in process `syz-executor0'. [ 1186.781031] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1186.793695] XFS (loop2): SB validate failed with error -117. [ 1186.803066] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1186.824194] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1186.832897] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:49:14 executing program 1: ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000480)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [], {0x77359400}}) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4200, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={@remote={[], 0x2}, 0x6, 'gre0\x00'}) [ 1186.847680] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1186.858420] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1186.874324] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1186.882636] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1186.896664] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1186.903266] netlink: 5 bytes leftover after parsing attributes in process `syz-executor0'. [ 1186.905253] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1186.922002] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1186.930486] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1186.938956] XFS (loop4): SB validate failed with error -117. 03:49:14 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b41000000fff0000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1186.961772] XFS (loop3): SB validate failed with error -117. [ 1187.039430] XFS (loop5): SB sanity check failed [ 1187.044645] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1187.070703] XFS (loop5): Unmount and run xfs_repair [ 1187.077906] XFS (loop5): First 128 bytes of corrupted metadata buffer: 03:49:14 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010007343010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:14 executing program 1: socketpair$unix(0x1, 0x10000000002, 0x0, &(0x7f00000000c0)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(0x0, 0x89, 0x0, 0x0, 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2800, 0x0) splice(r0, &(0x7f0000000100), r1, &(0x7f00000001c0), 0x81, 0x2) openat$cgroup_subtree(r2, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) 03:49:14 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x201, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x2, 0x30, 0x5cb, 0xa0ff}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000200)={r1, 0xda, "e0b0fc032672f85731ff9287d89d0a00b551be5fe554e39b734f68bedda8a95b8f17cf4aceeaee2269d567d8cfe642abc60ac50f71ed9b28464ba0fbee028548bd7b3837d1d282ae7268b4cc72a6b1f24fe05fc7abae3055954e7840557982f000b3f661459eaf5593e4def3d7deae658fb129ba16fcfc09823e00d364d7600312ed1707cb8b4d188580de8ee44623d60dc7dffdd7d98b00b9434a6698cc2dfe7fa6288b76240ef1b00bbdd9bdd598df963911e84db6f6fc8c91a7d8241fbedc13b8a56581b62cc762ed623718f8bc17840c67a0131f9c367b7a"}, &(0x7f0000000300)=0xe2) getsockopt$inet_int(r0, 0x0, 0x27, &(0x7f0000000040), &(0x7f0000000100)=0x4) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000340)=0x7, 0x4) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) [ 1187.087569] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1187.098860] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1187.110227] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1187.121399] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:49:14 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9ca0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000080)=0xedd4) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x7, 0x1, 0x70}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xac, &(0x7f00000000c0)=""/251}, 0x48) [ 1187.132216] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1187.142940] 00000050: 00 00 00 01 00 00 10 00 00 00 10 01 00 00 00 00 ................ [ 1187.153031] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1187.163155] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1187.177236] XFS (loop5): SB validate failed with error -117. 03:49:14 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000000000003f0900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, @u64=0x1000000}]}, 0x20}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000280)=@routing={0x0, 0x2, 0x2, 0xffffffffffffff45, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}]}, 0x18) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000100)={@empty, @multicast2, r2}, 0xc) [ 1187.304353] XFS (loop4): SB sanity check failed [ 1187.309290] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1187.321332] XFS (loop4): Unmount and run xfs_repair [ 1187.327061] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1187.333932] 00000000: 58 46 53 42 00 00 10 00 73 43 01 00 00 00 09 00 XFSB....sC...... [ 1187.364300] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1187.404165] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 03:49:14 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000300000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1187.414783] XFS (loop2): SB sanity check failed [ 1187.419603] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1187.437009] XFS (loop2): Unmount and run xfs_repair [ 1187.442405] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1187.451191] 00000000: 58 46 53 42 03 b4 10 00 00 0f ff 00 00 00 09 00 XFSB............ 03:49:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1000000000000a, 0x80000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001400279900c7e742dec733b88a000000", @ANYRES32=r3, @ANYBLOB="080003000000000008000200ffffffff"], 0x28}}, 0x0) [ 1187.459939] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1187.468500] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1187.478921] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1187.504068] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1187.504190] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:49:14 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0xffffffffffdfffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x8001, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000200)=0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x3, 0x7) getsockname(r2, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000300)=0x80) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x004\x01\x00'}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x120) getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000440)={@multicast1, @multicast2, 0x0}, &(0x7f0000001580)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000340)={'team0\x00', r4}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000015c0)={@mcast1, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xe}}, @mcast1, 0x8, 0x3f, 0x2, 0x500, 0x95d6, 0xc00000, r4}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x200000, 0x0) write$P9_RFSYNC(r5, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000000140)=0x1) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x89a1, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="f67588973f0156c447e22b5bc0b3275d4c1b09133cd098fa9675ec68ff6523de701ce5e152db4d9e0aae3f3a0f5441e5e7112540019696b2f6919828bc18934a621830a133aae736c481fe3ad0433b8dbcfd80000000000000"], 0x59) r7 = syz_open_pts(r6, 0x181000) ioctl$TCSETSF(r7, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000}) ioctl$BLKROTATIONAL(r5, 0x127e, &(0x7f0000000180)) r8 = gettid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r8, 0x30f0, &(0x7f0000000080)) memfd_create(&(0x7f0000000000)='\x00', 0x1) dup(r1) pivot_root(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00') r9 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x20000) ioctl$EVIOCSREP(r9, 0x40084503, &(0x7f0000000240)=[0x9, 0x8001]) [ 1187.537299] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1187.586752] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 03:49:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x800) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) clock_gettime(0x0, &(0x7f0000007900)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000007680)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/249, 0xf9}, {&(0x7f0000001240)=""/93, 0x5d}, {&(0x7f00000012c0)=""/26, 0x1a}, {&(0x7f0000001300)=""/49, 0x31}, {&(0x7f0000001340)=""/139, 0x8b}, {&(0x7f0000001400)=""/158, 0x9e}], 0x7, &(0x7f0000001540)=""/216, 0xd8}, 0x7fffffff}, {{&(0x7f0000001640)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001a80)=[{&(0x7f00000016c0)=""/152, 0x98}, {&(0x7f0000001780)=""/169, 0xa9}, {&(0x7f0000001840)=""/248, 0xf8}, {&(0x7f0000001940)=""/178, 0xb2}, {&(0x7f0000001a00)=""/61, 0x3d}, {&(0x7f0000001a40)=""/52, 0x34}], 0x6, &(0x7f0000001b00)=""/193, 0xc1}, 0x9}, {{&(0x7f0000001c00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001c80)=""/48, 0x30}, {&(0x7f0000001cc0)=""/206, 0xce}, {&(0x7f0000001dc0)=""/17, 0x11}, {&(0x7f0000001e00)=""/235, 0xeb}], 0x4, &(0x7f0000001f40)=""/129, 0x81}, 0x10000}, {{&(0x7f0000002000)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000002240)=[{&(0x7f0000002080)=""/113, 0x71}, {&(0x7f0000002100)=""/248, 0xf8}, {&(0x7f0000002200)=""/57, 0x39}], 0x3, &(0x7f0000002280)=""/172, 0xac}}, {{&(0x7f0000002340), 0x80, &(0x7f0000004780)=[{&(0x7f00000023c0)=""/25, 0x19}, {&(0x7f0000002400)=""/247, 0xf7}, {&(0x7f0000002500)=""/149, 0x95}, {&(0x7f00000025c0)=""/231, 0xe7}, {&(0x7f00000026c0)=""/93, 0x5d}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004740)}], 0x8, &(0x7f0000004800)=""/155, 0x9b}, 0x9}, {{&(0x7f00000048c0)=@ipx, 0x80, &(0x7f0000004c80)=[{&(0x7f0000004940)=""/220, 0xdc}, {&(0x7f0000004a40)=""/245, 0xf5}, {&(0x7f0000004b40)=""/87, 0x57}, {&(0x7f0000004bc0)=""/41, 0x29}, {&(0x7f0000004c00)=""/119, 0x77}], 0x5}, 0x5}, {{&(0x7f0000004d00)=@isdn, 0x80, &(0x7f0000005f40)=[{&(0x7f0000004d80)=""/147, 0x93}, {&(0x7f0000004e40)=""/100, 0x64}, {&(0x7f0000004ec0)=""/4096, 0x1000}, {&(0x7f0000005ec0)=""/84, 0x54}], 0x4, &(0x7f0000005f80)=""/56, 0x38}}, {{&(0x7f0000005fc0)=@isdn, 0x80, &(0x7f0000006180)=[{&(0x7f0000006040)=""/217, 0xd9}, {&(0x7f0000006140)=""/61, 0x3d}], 0x2, &(0x7f00000061c0)=""/14, 0xe}, 0x3}, {{0x0, 0x0, &(0x7f0000007440)=[{&(0x7f0000006200)=""/197, 0xc5}, {&(0x7f0000006300)=""/133, 0x85}, {&(0x7f00000063c0)=""/4096, 0x1000}, {&(0x7f00000073c0)=""/112, 0x70}], 0x4, &(0x7f0000007480)=""/41, 0x29}, 0x2}, {{&(0x7f00000074c0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000007540), 0x0, &(0x7f0000007580)=""/213, 0xd5}, 0x33c6}], 0xa, 0x40, &(0x7f0000007940)={r2, r3+30000000}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000007980)={@remote, r4}, 0x14) name_to_handle_at(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x14, 0x9, "fd9ceed19be4097e112795cd"}, &(0x7f0000000100), 0x0) ioctl(r0, 0x1f, 0x0) prctl$PR_MCE_KILL_GET(0x22) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) [ 1187.632206] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1187.641927] XFS (loop3): SB sanity check failed [ 1187.647386] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1187.649331] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1187.677830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.682119] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1187.686378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.698335] XFS (loop2): SB validate failed with error -117. [ 1187.708807] XFS (loop5): SB sanity check failed [ 1187.713744] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1187.730526] XFS (loop3): Unmount and run xfs_repair [ 1187.748924] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1187.754319] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1187.758975] XFS (loop5): Unmount and run xfs_repair 03:49:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0xb, 0x80000000007ffd) setsockopt$inet_dccp_int(r1, 0x21, 0x1b, &(0x7f0000000080)=0x7, 0x4) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, 0x7fffffff, 0x0, 0x40, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)=0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x0, {0x1}, 0x6, 0x0, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x8000, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000380)={0x0, 0x8, 0x8}) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x1, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x8, 0x0, 0x0, 0x101, 0x0, 0x9, 0x800, 0x0, 0x81, 0x7, 0x0, 0x69ef, 0x6, 0x3, 0x7, 0x5784, 0x1, 0x5, 0x0, 0x0, 0x539e, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x1f, 0x0, @perf_config_ext={0x5}, 0x28100, 0x2eb, 0x400, 0x6, 0x0, 0x73bc}, r4, 0x0, 0xffffffffffffff9c, 0xa) close(0xffffffffffffffff) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80001}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="20002abd7000fbdbdf250c0000002c00ad28f6420001001f0000000800020008000000080002000000006a82a5971e9b7523ecb09427e0"], 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x10) write(r5, &(0x7f0000000400)="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", 0x200) sendfile(r5, r6, 0x0, 0x10000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) [ 1187.786557] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1187.788671] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 3f 09 00 XFSB.........?.. [ 1187.804185] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1187.815677] XFS (loop4): SB validate failed with error -117. [ 1187.816903] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1187.829134] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1187.845984] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1187.855348] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1187.863164] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1187.863904] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1187.872128] device bridge_slave_1 left promiscuous mode [ 1187.886256] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1187.891998] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1187.909169] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1187.914545] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1187.918067] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1187.941229] XFS (loop3): SB validate failed with error -117. [ 1187.946968] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1187.956381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.964239] 00000050: 00 00 00 01 00 00 10 00 00 00 00 03 00 00 00 00 ................ [ 1187.972389] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1187.982243] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1187.994558] audit: type=1800 audit(2000000955.310:62): pid=32591 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor1" name="file0" dev="sda1" ino=17089 res=0 [ 1188.013965] XFS (loop5): SB validate failed with error -117. [ 1188.021746] audit: type=1804 audit(2000000955.330:63): pid=32591 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir435899082/syzkaller.C257LL/43/file0" dev="sda1" ino=17089 res=1 [ 1188.046430] device bridge_slave_0 left promiscuous mode [ 1188.052878] bridge0: port 1(bridge_slave_0) entered disabled state 03:49:15 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b4107fffffff0000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:15 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010007443010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:15 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000f0ff3f0900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:15 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000500000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:15 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0xffffffffffdfffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x8001, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000200)=0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x3, 0x7) getsockname(r2, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000300)=0x80) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'bridge0\x004\x01\x00'}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x120) getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000440)={@multicast1, @multicast2, 0x0}, &(0x7f0000001580)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000340)={'team0\x00', r4}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000015c0)={@mcast1, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xe}}, @mcast1, 0x8, 0x3f, 0x2, 0x500, 0x95d6, 0xc00000, r4}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x200000, 0x0) write$P9_RFSYNC(r5, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000000140)=0x1) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x89a1, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="f67588973f0156c447e22b5bc0b3275d4c1b09133cd098fa9675ec68ff6523de701ce5e152db4d9e0aae3f3a0f5441e5e7112540019696b2f6919828bc18934a621830a133aae736c481fe3ad0433b8dbcfd80000000000000"], 0x59) r7 = syz_open_pts(r6, 0x181000) ioctl$TCSETSF(r7, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000}) ioctl$BLKROTATIONAL(r5, 0x127e, &(0x7f0000000180)) r8 = gettid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r8, 0x30f0, &(0x7f0000000080)) memfd_create(&(0x7f0000000000)='\x00', 0x1) dup(r1) pivot_root(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00') r9 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x20000) ioctl$EVIOCSREP(r9, 0x40084503, &(0x7f0000000240)=[0x9, 0x8001]) [ 1188.514055] XFS (loop2): SB sanity check failed [ 1188.540203] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1188.557447] XFS (loop2): Unmount and run xfs_repair [ 1188.568004] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1188.578735] 00000000: 58 46 53 42 03 b4 10 7f ff ff ff 00 00 00 09 00 XFSB............ [ 1188.595194] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1188.606625] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1188.651617] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1188.667060] audit: type=1804 audit(2000000955.980:64): pid=32589 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir435899082/syzkaller.C257LL/43/file0" dev="sda1" ino=17089 res=1 [ 1188.670731] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1188.700434] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1188.740453] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1188.761058] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1188.761113] XFS (loop3): SB sanity check failed [ 1188.788952] XFS (loop2): SB validate failed with error -117. [ 1188.796006] XFS (loop4): SB sanity check failed 03:49:16 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x2, {0x7, 0x1c, 0x4, 0x90, 0x6, 0x608, 0x5b05, 0x2}}, 0x50) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f00000001c0)=0x10, 0x800) getpeername(r1, &(0x7f0000000200)=@ipx, &(0x7f0000000280)=0x80) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00') [ 1188.800969] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1188.824320] XFS (loop4): Unmount and run xfs_repair [ 1188.829526] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1188.841186] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1188.844376] XFS (loop3): Unmount and run xfs_repair [ 1188.886025] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1188.906465] audit: type=1804 audit(2000000956.020:65): pid=32590 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir435899082/syzkaller.C257LL/43/file0" dev="sda1" ino=17089 res=1 [ 1188.914506] 00000000: 58 46 53 42 00 00 10 00 74 43 01 00 00 00 09 00 XFSB....tC...... [ 1188.950965] 00000000: 58 46 53 42 00 00 10 00 00 00 00 f0 ff 3f 09 00 XFSB.........?.. [ 1188.960327] XFS (loop5): SB sanity check failed [ 1188.965283] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:49:16 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b4108cffffff0000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:16 executing program 1: unshare(0x44000000) mq_open(&(0x7f0000000280)='#posix_acl_access\'#ppp1\\\xd0system-lo}GPLeth0:\x00', 0x6e93ebbbc80884f1, 0x0, 0x0) 03:49:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_smack_transmute(0x0, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000380), &(0x7f00000002c0)=0x30) r1 = creat(&(0x7f0000000180)='./file0/bus\x00', 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x2000000000000, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r3 = socket(0x1e, 0x4, 0x0) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000680)={0x0, 0x0, 0x2080}) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) recvmsg(r4, &(0x7f0000002a00)={&(0x7f00000003c0)=@xdp, 0x80, &(0x7f00000028c0)=[{&(0x7f0000002840)=""/109, 0x6d}], 0x1, &(0x7f0000002a40)=""/213, 0xd5}, 0x0) getpeername(r3, &(0x7f00000005c0)=@can, &(0x7f0000000640)=0x80) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) getegid() getgid() getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000002700)={0x0, 0x8, 0x770, 0x800, 0x0, 0x7}, &(0x7f0000002740)=0x14) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000002780)={r5, 0x100000001}, 0x8) gettid() open$dir(&(0x7f00000001c0)='./file0/bus/file0/../file0\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000300)={0x2, 0xffffffff80000000, 0x7, 0x2, 0x2, 0xffffffff00000001, 0x3a, 0x4c, 0x7, 0x8, 0x7ff}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x13f, 0x100f}}, 0x20) ioctl$KDSKBLED(r1, 0x4b65, 0x9) write$binfmt_script(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x179) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000200)=ANY=[]) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r6, 0xc010640c, &(0x7f0000000180)={0x8}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1189.020698] XFS (loop5): Unmount and run xfs_repair [ 1189.026104] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1189.037742] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1189.040426] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1189.055956] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1189.064461] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1189.072619] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1189.077421] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1189.081238] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1189.098863] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1189.107494] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1189.110362] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1189.115978] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1189.139097] IPVS: ftp: loaded support on port[0] = 21 [ 1189.154486] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1189.172426] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1189.184315] 00000050: 00 00 00 01 00 00 10 00 00 00 00 05 00 00 00 00 ................ [ 1189.201031] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1189.209767] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1189.235907] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1189.244661] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1189.254441] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1189.264816] XFS (loop5): SB validate failed with error -117. [ 1189.284109] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1189.292382] XFS (loop4): SB validate failed with error -117. [ 1189.299684] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1189.323836] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 03:49:16 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010007543010000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1189.353908] XFS (loop3): SB validate failed with error -117. [ 1189.388650] IPVS: ftp: loaded support on port[0] = 21 03:49:16 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000400900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:16 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000f00000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1189.506157] XFS (loop2): SB sanity check failed [ 1189.511872] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1189.527369] XFS (loop2): Unmount and run xfs_repair [ 1189.540102] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1189.540115] 00000000: 58 46 53 42 03 b4 10 8c ff ff ff 00 00 00 09 00 XFSB............ [ 1189.540125] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1189.540134] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1189.540143] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1189.540152] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1189.540160] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1189.540167] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:49:16 executing program 1: mkdir(0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) lseek(r0, 0x0, 0x7) [ 1189.540176] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1189.540238] XFS (loop2): SB validate failed with error -117. 03:49:17 executing program 1: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0xc0000) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x8080, 0x0) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x400, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x80) ioctl$IMGETVERSION(r0, 0x80044942, 0x0) r1 = memfd_create(&(0x7f0000000080)='numa_maps\x00', 0x5) migrate_pages(0x0, 0x7, &(0x7f0000000080)=0x10001, &(0x7f00000000c0)=0x1) fallocate(r1, 0x3, 0x7fffffffffffdffe, 0x2) 03:49:17 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410ebffffff0000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1189.788467] XFS (loop4): SB sanity check failed [ 1189.793470] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1189.853528] XFS (loop4): Unmount and run xfs_repair [ 1189.864832] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1189.871985] 00000000: 58 46 53 42 00 00 10 00 75 43 01 00 00 00 09 00 XFSB....uC...... [ 1189.880702] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1189.889475] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1189.898203] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1189.906716] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1189.906721] XFS (loop3): SB sanity check failed [ 1189.915723] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1189.927998] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1189.935668] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1189.952151] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1189.982445] XFS (loop4): SB validate failed with error -117. [ 1189.989115] XFS (loop5): SB sanity check failed 03:49:17 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) ptrace$getregs(0xc, 0x0, 0x9, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x2e7) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000000000000008) clone(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0) sendfile(r2, r2, &(0x7f00000001c0), 0xa198) mmap$xdp(&(0x7f0000b3b000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x180000000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000040)="d5", 0x1) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x6685) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x29}, 0x7}}, 0x0, 0x81, 0xb93, 0x1, 0x45}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000240)=r5, 0x4) write(r4, &(0x7f0000000340), 0x10000014c) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1190.005573] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1190.012344] XFS (loop3): Unmount and run xfs_repair [ 1190.023576] XFS (loop5): Unmount and run xfs_repair [ 1190.029492] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1190.042116] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 40 09 00 XFSB.........@.. [ 1190.050283] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1190.050298] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1190.050309] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1190.050320] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1190.050330] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1190.050340] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1190.050350] 00000050: 00 00 00 01 00 00 10 00 00 00 00 0f 00 00 00 00 ................ 03:49:17 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x84300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) [ 1190.050360] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1190.050370] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1190.124985] XFS (loop5): SB validate failed with error -117. [ 1190.128619] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1190.140781] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1190.153801] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1190.163207] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1190.177028] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1190.177037] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1190.204175] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1190.212386] XFS (loop3): SB validate failed with error -117. 03:49:17 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000020000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget(0x3, 0x4000, 0x78000010, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x200000003ffe) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r2 = syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x7, 0x41) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0xfffffffffffffffd, 0xfa00, {0x200000000000000, &(0x7f00000004c0), 0xfffffffffffffff9, 0x10000000}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000280), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa5e0936e7f46bf5c) fchmodat(r2, &(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x400500, 0x84) accept(r3, &(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000480)=0xfffffef1) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f00000005c0), &(0x7f0000000900)=0xfffffffffffffd89) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0xfffffffffffff7fc, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, 0x0, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000080), 0x4) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r6) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x10, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f00000007c0)) r7 = accept4$packet(r5, 0x0, &(0x7f0000000c00), 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e20, @rand_addr=0x2}]}, &(0x7f0000000540)=0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000640), &(0x7f0000000680)=0x14) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000340), &(0x7f00000006c0)=0x4) ioctl$sock_inet_SIOCGIFADDR(r7, 0x8915, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000a80), 0x366) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000440)={0xffffffffffffffa0, 0x11, 0x2}, 0x14) shmdt(r1) [ 1190.303714] XFS (loop2): SB sanity check failed [ 1190.312260] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1190.333376] XFS (loop2): Unmount and run xfs_repair [ 1190.339788] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1190.352869] 00000000: 58 46 53 42 03 b4 10 eb ff ff ff 00 00 00 09 00 XFSB............ [ 1190.362043] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:49:17 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000003f00000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:17 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000001430900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1190.515466] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1190.584335] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1190.604369] XFS (loop4): SB sanity check failed [ 1190.609347] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1190.610555] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1190.664167] XFS (loop4): Unmount and run xfs_repair [ 1190.671281] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1190.684275] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 03:49:18 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x840, 0x0) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f00000002c0)=0x1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r3, 0x304, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000000}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r4, r0}}, 0x18) [ 1190.707265] 00000000: 58 46 53 42 00 00 10 00 00 00 02 00 00 00 09 00 XFSB............ [ 1190.713928] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1190.735950] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1190.742929] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ 03:49:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) [ 1190.764190] XFS (loop2): SB validate failed with error -117. [ 1190.771374] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1190.794799] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1190.834804] QAT: Invalid ioctl [ 1190.837148] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1190.851065] QAT: Invalid ioctl [ 1190.872141] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1190.913341] XFS (loop5): SB sanity check failed [ 1190.919274] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1190.941438] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:49:18 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x2, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000011) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f00000004c0)={0x2, 0x0, 0x2, 0x2}) 03:49:18 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410f6ffffff0000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1190.959846] XFS (loop3): SB sanity check failed [ 1190.981426] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1190.996652] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1190.998188] XFS (loop5): Unmount and run xfs_repair [ 1191.035307] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1191.040650] XFS (loop4): SB validate failed with error -117. [ 1191.048029] XFS (loop3): Unmount and run xfs_repair [ 1191.048043] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1191.048059] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 01 43 09 00 XFSB.........C.. [ 1191.048071] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1191.048084] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1191.048096] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1191.106862] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1191.117718] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1191.126362] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1191.135400] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1191.143731] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1191.152717] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1191.161357] 00000050: 00 00 00 01 00 00 10 00 00 00 00 3f 00 00 00 00 ...........?.... [ 1191.170056] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 03:49:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)='net/mcfilter\x00', 0xffffffffffffffff}, 0x30) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000100)='numa_maps\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) [ 1191.178644] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1191.187318] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1191.195926] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1191.205164] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1191.213590] XFS (loop5): SB validate failed with error -117. [ 1191.214294] XFS (loop3): SB validate failed with error -117. 03:49:18 executing program 1: getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000000c0), &(0x7f00000002c0)=0xfffffffffffffeb0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)=0x0) r4 = perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x1, 0x20, 0xe1aa, 0x1ff, 0x0, 0x3, 0x1, 0x7, 0x4, 0x1, 0x100, 0x77, 0x1, 0x1000, 0xff, 0x10001, 0x200, 0x1, 0xa5, 0x8, 0x3, 0x4, 0x3, 0x1, 0x2, 0x2, 0x2, 0x0, 0x4, 0x1, 0x8, 0x3ff, 0x400, 0x9, 0x5, 0x3f, 0x0, 0x100, 0x4, @perf_config_ext={0xf80000000000, 0x81}, 0x1000, 0x7, 0x1000, 0x5, 0x9, 0x0, 0x2}, r3, 0x0, 0xffffffffffffffff, 0x3) bind$netlink(r2, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x400401}, 0xfffffffffffffffc) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000001c0)) fallocate(r0, 0x20000000000001, 0x6, 0xfffffffffffffc00) vmsplice(r4, &(0x7f00000019c0)=[{&(0x7f0000001980)="de84c679046d76344d8b5594e4b3ebdb3916d872e8", 0x15}], 0x1, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) getpeername$netlink(r2, &(0x7f0000000240), &(0x7f0000000280)=0xc) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/sequencer\x00', 0x80, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000400)={0x262, 0x8, 0x6, 0x7}, 0x8) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x10000001) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0xf86}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000740)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x0, 0xfffffffffffff001, 0xfffffffffffffffa, 0x3, 0x4}, &(0x7f0000000580)=0x98) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000800)={r7, 0x7f, 0x3f, 0x1, 0x8, 0xee24, 0x2, 0x20, {r8, @in6={{0xa, 0x4e22, 0x2, @loopback, 0x6}}, 0x3ff, 0x1ff, 0x4, 0x8001, 0x3098e59c}}, &(0x7f00000008c0)=0xb0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000900)={r9, 0x1, 0x10}, &(0x7f0000000980)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x8000a0ffffffff, 0x0, 0x0, 0x0, 0x6]}, 0x8}) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x0, 0xfdffffff}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) sendmsg$alg(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)="3466d60c9af9fcdd1dcebbdef831cdd9d4bd07a54f6a31a349e4baf04a7fbddf9b6f57b79372119de986d022ff1b70ba46b6b1bb7a558cd23c1464d112a688c1086993aed7e82581e58805672ddbe8bc670435252352e5e90a0fa9dd176a16d9faba7061d04874c6e89457244c692b2853d59c57702d9e71ffb80d5cbda1d9b4bd07ac331b65d9c3814a149ceb3791738484f0ee38e0b146ed1ea6ee4eed9fab49bc7dc652f981af4c904ce9802dd0b69ebaedfd0e428379e47571e90e582347c203b5b87db0f69cd5adda74aa22ab6e88", 0xd1}], 0x10000000000001da, 0x0, 0x0, 0x40000}, 0x20000000) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r10, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000005c0)) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000540)={0x0, 0x2}) r11 = geteuid() sendmsg$nl_generic(r2, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0x100, 0x29, 0x800, 0x70bd2d, 0x25dfdbfc, {0x7}, [@typed={0x8, 0x76, @uid=r11}, @generic="c85cefd1d37298ce76883f111e349b0f1c80976e04f2d1f8be816bb02522eca11aa2c53f416ac171f88a2c63965d34f19d0022a140c8e6d270e8aab5fed00ef94cf8ac8886291e0319f3dc0e1290c1f650b735bbd984ecd76093ffbc0e22a5af18f02613af4d87722abc57f9adfb3c95f7816ed8687a7a0afae4eff466cd65fae996a4a4e0c5fdd8b08beb543c6583a3a9e29b827f9d889d176c61a2393d531fe15a4370fc9bc77de42ca3e1e691b241c98b0a1fa8eb0379a6c17d49f991d0821c3bb3666f3783edc32dd56a380db55883bfaf59654eba0e782f1f403678325a08"]}, 0x100}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) 03:49:18 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010003049020000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:18 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000000000004a0900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:18 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40000, 0x0) [ 1191.418802] XFS (loop2): SB sanity check failed [ 1191.423623] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1191.475754] XFS (loop2): Unmount and run xfs_repair [ 1191.508180] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1191.536896] 00000000: 58 46 53 42 03 b4 10 f6 ff ff ff 00 00 00 09 00 XFSB............ 03:49:18 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000200000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xe7c1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8), 0x71, 0x0) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0xd83, 0x4) [ 1191.597853] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1191.641964] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1191.718290] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1191.795470] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1191.826215] XFS (loop4): SB sanity check failed [ 1191.831646] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1191.833366] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1191.896226] XFS (loop4): Unmount and run xfs_repair [ 1191.920406] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1191.946606] 00000000: 58 46 53 42 00 00 10 00 30 49 02 00 00 00 09 00 XFSB....0I...... [ 1191.958022] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1191.978004] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1192.005616] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1192.012127] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1192.032211] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1192.048590] XFS (loop2): SB validate failed with error -117. [ 1192.048915] XFS (loop3): SB sanity check failed [ 1192.068120] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:49:19 executing program 0: futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0xfffffffffffffffc, 0x100000000000000}, 0x0, 0x0) [ 1192.079215] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1192.113469] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 03:49:19 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000000000000000a00000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1192.160973] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1192.186055] XFS (loop3): Unmount and run xfs_repair [ 1192.193551] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1192.204114] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1192.214573] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 4a 09 00 XFSB.........J.. [ 1192.237945] XFS (loop4): SB validate failed with error -117. [ 1192.245336] XFS (loop5): SB sanity check failed [ 1192.252403] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1192.266507] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1192.301442] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 03:49:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x800000000001, 0x3a) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)="80d2", 0x2}], 0x1}, 0x808000) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000340)="feccbac0987a", 0x6}], 0x1}, 0x0) [ 1192.324122] XFS (loop5): Unmount and run xfs_repair [ 1192.344189] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1192.352587] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1192.379435] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1192.395298] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1192.422252] XFS (loop2): SB sanity check failed [ 1192.465945] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1192.482015] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1192.491470] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 03:49:19 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000030000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:19 executing program 0: r0 = socket(0x800000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="bc0000001a000700ab092500090007000aab80ff010052020000369309000100fd8ed69ad84e3d951e6a599f141591bcd000e000ba6da9edf27595057d00bfacf22956e233f96a948b676476c05778cbca032f2e517c35ebc2052140000004c300897f00000100000000004548ad414f5423e2a9d165df4700000000000000d796d556272f5baa000005de0d020000006e7fbf6ab82088f8e0039fe2800e3c5cafdc2c098b56f902454f0151c8bf83be82f605f30c9ddaf2fe0820f4", 0xbc) [ 1192.516631] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1192.544257] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1192.552541] XFS (loop2): Unmount and run xfs_repair [ 1192.558098] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1192.586832] 00000000: 58 46 53 42 03 b4 10 00 00 00 00 00 00 00 0a 00 XFSB............ [ 1192.595601] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1192.603859] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1192.639117] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1192.646643] netlink: 148 bytes leftover after parsing attributes in process `syz-executor0'. [ 1192.655004] XFS (loop3): SB validate failed with error -117. [ 1192.664325] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1192.681204] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1192.709729] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1192.734399] 00000050: 00 00 00 01 00 00 10 00 00 00 00 02 00 00 00 00 ................ 03:49:20 executing program 1: socketpair$unix(0x1, 0x800000000001, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x9903000000000000, &(0x7f0000000040)={0x40000000000002, 0x3, 0x8000000000001, 0x8000000000008, 0x5, 0xffffffffffffffff, 0x4, [0x305f, 0x5f, 0x500]}, 0x2c) 03:49:20 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000640900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:20 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000000) r2 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000240)={0x0, 0xa1bc}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r3, 0x4) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'nat\x00\r\x00\x00\x00\x00\xde\xff\xff\xff\xff\xff\xff\xff\x00'}, &(0x7f00000000c0)=0x54) setreuid(0x0, r5) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a02000000ff81004e227e00000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd000000100001000a0c0c00fcff0000040e05a5", 0x58}], 0x1) [ 1192.759362] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1192.761031] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1192.793084] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1192.834532] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1192.843516] XFS (loop4): SB sanity check failed [ 1192.848757] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1192.865300] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1192.896669] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1192.919870] XFS (loop5): SB validate failed with error -117. [ 1192.938948] XFS (loop4): Unmount and run xfs_repair [ 1192.944635] XFS (loop2): SB validate failed with error -117. [ 1192.964479] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1192.979017] netlink: 64 bytes leftover after parsing attributes in process `syz-executor0'. 03:49:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5e7bfe0d, 0x80400) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0xffffffff, 0x0, 0x1, 0xfffffdfd}) [ 1192.991059] 00000000: 58 46 53 42 00 00 10 00 00 00 03 00 00 00 09 00 XFSB............ 03:49:20 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000300000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1193.050440] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1193.062402] netlink: 64 bytes leftover after parsing attributes in process `syz-executor0'. [ 1193.071462] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1193.088403] XFS (loop3): SB sanity check failed [ 1193.095141] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1193.139101] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:49:20 executing program 0: socket$kcm(0x11, 0x400000009, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13}, 0x2c) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair(0x18, 0x6, 0x9, &(0x7f0000000540)) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=@srh={0x87, 0x6, 0x4, 0x3, 0x5, 0x0, 0x9, [@mcast2, @remote, @loopback]}, 0x38) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000000c0)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) close(r1) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000600)) 03:49:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet(0x10, 0x3, 0xc) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000300)="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", 0x1000, r2) sendmsg(r1, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000280)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000180a43ba5d806055b6fdd80b40000000140003000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) [ 1193.159976] XFS (loop3): Unmount and run xfs_repair [ 1193.175623] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1193.183451] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:49:20 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000000000000000b00000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1193.208115] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 64 09 00 XFSB.........d.. [ 1193.245674] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1193.265649] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1193.297893] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1193.301452] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1193.323823] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1193.341651] XFS (loop5): SB sanity check failed [ 1193.346654] XFS (loop4): SB validate failed with error -117. [ 1193.361397] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1193.364135] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1193.393681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1193.396491] XFS (loop5): Unmount and run xfs_repair [ 1193.412230] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1193.412431] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1193.437559] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1193.438928] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1193.455821] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1193.468272] XFS (loop2): SB sanity check failed 03:49:20 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f0000000600)=@framed={{0xffffffb4, 0x4000, 0x0, 0x0, 0x0, 0xffffff95, 0x0, 0x20001}}, &(0x7f00000001c0)='syzkaller\x00o\xaf\xcb\t\x85\xea\xce\xa4\xff\xd1\nZ\xe2\x13U]*\x82\xcf\xb0\x98B\xe2T&\xb1\xf3#\x93&2\x1b\x8c\xa8D\x92\x8db\xa9\\DA\x18X*\xf3\x12K\x8d\x01\xc7\xbb5\x8a\x18\xd9)+\xd5\xb3/\xc6\x00!Cf?\x8a\xe5\xa2M\xd6@tkN-\x1c\x1f%\xeb!P\xb0f\x95t\xa9\x8f\x14\xb8\x14\xe4\xaa\xac\xb5\xd1\xa2\xb8\xd2\xffhDb!\xc43\x17\xae\x96h\v\xce\xec\xeb\xb7q\x83\xfb\xfd\xaa\xec\x15~\xdbW`U\xc9\xc4\x95\x8cH\xda\x1e\'BZ\xbe\x9aB\x05\xd7KY\xe1n\x8aa\xf8j\xc8\x99\xce\x980\x97\xcb\xd29\xbc\xff\xc1\x1bEX\xd7\xc2D', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/current\x00') r1 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x1, 0x8000) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000280)=""/47, &(0x7f00000002c0)=0x2f) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)={0x0}) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x111800) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000080)={r2, 0x1}) [ 1193.468933] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1193.478734] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1193.483342] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1193.501453] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1193.518667] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1193.519213] XFS (loop3): SB validate failed with error -117. [ 1193.536237] XFS (loop2): Unmount and run xfs_repair [ 1193.542878] 00000050: 00 00 00 01 00 00 10 00 00 00 00 03 00 00 00 00 ................ [ 1193.550582] XFS (loop2): First 128 bytes of corrupted metadata buffer: 03:49:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000021002551075c0165ff0ffcfe0200000310100f0007e1000c050018008000a000bc0000008f3943793a5ea6765b31292bb8c9cb22d90000000000000059b97dc8f8b55002af8c33bce8833b049e6474457ae66a2bff77c4931da84157f7a733686a22fd8169f6b6b4f464e0db5d63feac6f0eceb081f670d851f785ea2b85d32b35837ad3379f3bb0b9e2cc000000dcce1fb4ac2cbd48c8378a00d82a5b83c01295723da595c4831f65123819e604853d48a5a6bd525801d5cae983cf4544a9c4c396f36e85787a8efc32e0015c85ead20748bc6a5fefc4e53543f9f6", 0xe1d53418) [ 1193.569121] 00000000: 58 46 53 42 03 b4 10 00 00 00 00 00 00 00 0b 00 XFSB............ [ 1193.571321] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1193.589955] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1193.597864] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1193.609706] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1193.622951] XFS (loop5): SB validate failed with error -117. [ 1193.630593] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1193.659073] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1193.676531] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1193.685836] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:49:21 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000040000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1193.725677] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1193.734538] XFS (loop2): SB validate failed with error -117. 03:49:21 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000000000036c0900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:21 executing program 0: socket$kcm(0x11, 0x400000009, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13}, 0x2c) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair(0x18, 0x6, 0x9, &(0x7f0000000540)) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=@srh={0x87, 0x6, 0x4, 0x3, 0x5, 0x0, 0x9, [@mcast2, @remote, @loopback]}, 0x38) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000000c0)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) close(r1) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/33, 0x21}, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000600)) 03:49:21 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000500000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:21 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000000000000000c00000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1193.972481] XFS (loop4): SB sanity check failed [ 1193.981325] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1194.024296] XFS (loop4): Unmount and run xfs_repair [ 1194.031011] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1194.071773] 00000000: 58 46 53 42 00 00 10 00 00 00 04 00 00 00 09 00 XFSB............ [ 1194.099385] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1194.109488] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1194.118364] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1194.129130] XFS (loop3): SB sanity check failed [ 1194.129269] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1194.134083] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1194.142753] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 03:49:21 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc0\x00', 0xa01, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000380)=0x7, 0x4) process_vm_writev(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/90, 0x5a}, {&(0x7f0000000140)=""/200, 0xc8}], 0x2, &(0x7f0000000440)=[{&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000000300)=""/10, 0xa}, {&(0x7f0000000480)=""/223, 0xffffff79}], 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) close(r0) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000000)) [ 1194.200630] XFS (loop5): SB sanity check failed [ 1194.218337] XFS (loop3): Unmount and run xfs_repair [ 1194.221700] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1194.230270] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1194.258939] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 03 6c 09 00 XFSB.........l.. [ 1194.293799] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1194.295822] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1194.310321] XFS (loop5): Unmount and run xfs_repair [ 1194.310331] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1194.310346] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1194.355336] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1194.362357] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1194.381379] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1194.392790] XFS (loop4): SB validate failed with error -117. [ 1194.398735] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1194.398746] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1194.398756] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1194.398765] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1194.431855] XFS (loop3): SB validate failed with error -117. [ 1194.438161] XFS (loop2): SB sanity check failed [ 1194.440980] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:49:21 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x8) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000000003, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000680), &(0x7f0000000700)=0xc) getresuid(&(0x7f0000000780), &(0x7f00000007c0)=0x0, &(0x7f0000000800)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000000)=0x3, 0x4) setfsuid(r3) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000400)='fou\x00') sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) timer_create(0x7, &(0x7f0000000280)={0x0, 0x4, 0x2, @thr={&(0x7f00000001c0)="3f12148678d82f117b4c224ad6882cc06fd5c448d627b1b0fc96c313648108d5aec395c9aa590d07d99b7a3f9e22f7864d", &(0x7f0000000840)="1ede83c6ec209d329f794f3c656eaf1270a3acdc71f6e79864d7b5976996afea7c9e3831fd115170e53a98a457b5081a7d9fe87c39bebcea479226f5a9b7e0fb73ca331b0c898aace37352b4b289d04dd618c80509488e3a621c27fe18baacc13b7c7e"}}, &(0x7f0000000300)=0x0) timer_getoverrun(r4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r2}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000180)=0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r2, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) setsockopt$inet6_dccp_buf(r5, 0x21, 0xf, &(0x7f0000000900)="001aecbffba6d17e37257e629e7112d1795a471b13bb921e9eb0729f9d464e5ce69264fe811ac6a46be8f36ca867212631fac2fa584e3e446e089393abf64e59e3a3f66b90f8fb385edd3ee760ef692eeaa1a3eb1d9e327b8194215425c0a4885855f0a712cfd0464f44e0ebc2bc791f9546f4715af9dd106cc424f446808708571f10f703d56f166f6e2214f53de9bda8f8666bae536db43b1b18", 0x9b) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000500)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0) 03:49:21 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000040)={0x5, @raw_data="d5f342f7544eef796acaf6d612e59ce6b0229d1fa955cb1b3e721e1e1d803c05308d060d226750d4b3eb9de8d66bff80503e04634922f2826de5141de067c3d759d87c1845a0eb054986ae478f3ae007fe27c19a4722d9d3d7210e93118ce0a041ac146e51c6eb1163ddd03e02d2a53b229d5bb1129562ac29e69c747a3bf568e9f2ef952cdaf1b7b4a340ada4cb4ab6bfbb43b38a45bf93c0adb0a605a1e04b57635d69a476b5f600910e72f52bbf440e94205f5ef1633f357bf73a05592f652ca20d993e03bc7a"}) [ 1194.449999] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1194.489348] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1194.493359] XFS (loop2): Unmount and run xfs_repair [ 1194.514496] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1194.529498] 00000000: 58 46 53 42 03 b4 10 00 00 00 00 00 00 00 0c 00 XFSB............ [ 1194.531146] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1194.546834] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1194.556074] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1194.569774] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1194.582703] 00000050: 00 00 00 01 00 00 10 00 00 00 00 05 00 00 00 00 ................ [ 1194.588066] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1194.606481] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:49:21 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x4, 0xa38, 0x100000001, 0x0, 0x1, 0x0, [0x5f]}, 0x4e) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}, [0x6, 0x6a, 0x9, 0x4, 0x2174, 0x1, 0x10001, 0x7f, 0x0, 0x1, 0xffffffffffffffff, 0x3ff, 0x100, 0x0, 0x3]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r2, 0x2, 0x3b}, &(0x7f0000000140)=0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f00000003c0)=""/200}, 0x18) [ 1194.611303] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1194.620359] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1194.629744] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1194.649769] XFS (loop5): SB validate failed with error -117. [ 1194.650843] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1194.668571] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1194.677255] XFS (loop2): SB validate failed with error -117. 03:49:22 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000ff07040000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:22 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000000000000000d00000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r2, 0x107, 0x17, &(0x7f0000000140)=0x6, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x150, r3, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_AF={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nlmon0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x800}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xcd01}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r4 = dup2(r1, r0) r5 = open(&(0x7f00004b8ff8)='./file1\x00', 0x28042, 0x0) write$cgroup_type(r5, &(0x7f0000000000)='threaded\x00', 0x9) sendfile(r1, r5, &(0x7f00000000c0), 0x3c) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r5, 0xc040564b, &(0x7f0000000400)={0x8, 0x0, 0x303f, 0x7f, 0x9, {0x9, 0x9b}}) accept4$packet(r4, 0x0, 0x0, 0x0) 03:49:22 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000000000006e0900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:22 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000f00000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x80002, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2000, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) [ 1195.046984] XFS (loop4): SB sanity check failed [ 1195.054797] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1195.070757] XFS (loop2): SB sanity check failed [ 1195.078030] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1195.118592] XFS (loop4): Unmount and run xfs_repair [ 1195.125711] XFS (loop3): SB sanity check failed [ 1195.130773] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1195.137330] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1195.173242] XFS (loop5): SB sanity check failed [ 1195.178431] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1195.199704] 00000000: 58 46 53 42 00 00 10 00 ff 07 04 00 00 00 09 00 XFSB............ [ 1195.207329] XFS (loop2): Unmount and run xfs_repair [ 1195.225381] XFS (loop3): Unmount and run xfs_repair [ 1195.231703] XFS (loop5): Unmount and run xfs_repair [ 1195.238268] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1195.244527] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1195.249877] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1195.261337] XFS (loop5): First 128 bytes of corrupted metadata buffer: 03:49:22 executing program 1: perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffff9c, &(0x7f0000000200)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0}, 0x0) write$nbd(r0, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x24, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x3, 0x82) r4 = memfd_create(&(0x7f00000016c0)='\xb5t_\a\x92\x8e/\x00\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x9f5f, 0x4, 0x0, 0x0, @sint={0x9, 0x80000001}}]}) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000280)=0x1c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000440)={r5, @in6={{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, [], 0x18}, 0x400}}}, &(0x7f0000000300)=0x84) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) fcntl$getflags(r2, 0x401) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4004, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x2000005) fallocate(r4, 0x0, 0x3, 0x6) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) close(0xffffffffffffffff) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000400)='TRUE', 0x4, 0x1) [ 1195.271711] 00000000: 58 46 53 42 03 b4 10 00 00 00 00 00 00 00 0d 00 XFSB............ [ 1195.275858] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1195.284620] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1195.300912] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 6e 09 00 XFSB.........n.. [ 1195.312119] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1195.314378] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1195.326936] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1195.339166] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1195.351149] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1195.356153] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1195.367895] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1195.371576] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1195.385022] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1195.389121] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1195.398948] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1195.419054] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1195.426768] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1195.432012] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1195.443689] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1195.449839] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1195.452964] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1195.468643] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 03:49:22 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) socketpair(0x9, 0x80806, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0xc, 0x2, {0x54, 0x81c, 0x1, {0x7, 0x3}, {0x2f, 0x101}, @rumble={0x8, 0x81}}, {0x57, 0x7ff, 0x5, {0xfff, 0x2}, {0x3, 0xfffffffffffffff8}, @cond=[{0x401, 0xd2d9, 0x800, 0x1, 0x3, 0x3f}, {0x8, 0x9, 0x0, 0x7, 0x448, 0x5}]}}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000340), 0x2) accept4(r2, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0x2, 0x5, 0x0, 0x74b3}) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) r5 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7fff, 0x2000) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0xed7) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r6, r6, 0x0, 0x20) [ 1195.473546] 00000050: 00 00 00 01 00 00 10 00 00 00 00 0f 00 00 00 00 ................ [ 1195.476981] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1195.491623] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1195.502624] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1195.505261] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1195.518475] XFS (loop5): SB validate failed with error -117. [ 1195.521457] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1195.528845] XFS (loop4): SB validate failed with error -117. [ 1195.544138] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1195.561250] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1195.561569] XFS (loop3): SB validate failed with error -117. 03:49:22 executing program 0: clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x200001040, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) capset(&(0x7f0000000200)={0x19980330, r0}, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x2, 0x200, 0x3}) ptrace(0x10, r0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x14) 03:49:23 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000003000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1195.655641] XFS (loop2): SB validate failed with error -117. 03:49:23 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000070000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:23 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000001800900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:23 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000000000000000e00000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1196.009834] XFS (loop5): SB sanity check failed [ 1196.015241] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1196.041345] XFS (loop5): Unmount and run xfs_repair [ 1196.046946] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1196.060412] XFS (loop4): SB sanity check failed [ 1196.066072] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1196.071300] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1196.080819] XFS (loop4): Unmount and run xfs_repair [ 1196.119925] XFS (loop4): First 128 bytes of corrupted metadata buffer: 03:49:23 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) socketpair(0x9, 0x80806, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0xc, 0x2, {0x54, 0x81c, 0x1, {0x7, 0x3}, {0x2f, 0x101}, @rumble={0x8, 0x81}}, {0x57, 0x7ff, 0x5, {0xfff, 0x2}, {0x3, 0xfffffffffffffff8}, @cond=[{0x401, 0xd2d9, 0x800, 0x1, 0x3, 0x3f}, {0x8, 0x9, 0x0, 0x7, 0x448, 0x5}]}}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000340), 0x2) accept4(r2, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000080)={0x2, 0x5, 0x0, 0x74b3}) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) r5 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7fff, 0x2000) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0xed7) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r7 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) sendfile(r6, r6, 0x0, 0x20) [ 1196.169329] XFS (loop2): SB sanity check failed [ 1196.173570] 00000000: 58 46 53 42 00 00 10 00 00 00 07 00 00 00 09 00 XFSB............ [ 1196.181412] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1196.198807] XFS (loop3): SB sanity check failed [ 1196.209446] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1196.218299] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1196.220425] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1196.251829] XFS (loop2): Unmount and run xfs_repair [ 1196.252677] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1196.271028] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1196.276740] XFS (loop3): Unmount and run xfs_repair [ 1196.285484] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1196.293184] 00000000: 58 46 53 42 03 b4 10 00 00 00 00 00 00 00 0e 00 XFSB............ [ 1196.295618] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1196.314208] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 01 80 09 00 XFSB............ [ 1196.314235] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1196.338699] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1196.339293] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1196.360741] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1196.362080] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1196.373604] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1196.386250] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1196.393432] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1196.403170] 00000050: 00 00 00 01 00 00 10 00 00 00 00 00 03 00 00 00 ................ [ 1196.420189] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1196.425075] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1196.430411] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1196.453468] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1196.462286] XFS (loop4): SB validate failed with error -117. [ 1196.472579] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1196.478134] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1196.492609] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1196.503234] XFS (loop5): SB validate failed with error -117. [ 1196.520678] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1196.530596] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1196.539312] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1196.547742] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1196.556719] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1196.565001] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 03:49:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000400)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xe8) getresgid(&(0x7f0000000540), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000740)=0xe8) getgroups(0x7, &(0x7f0000000780)=[0xee00, 0x0, 0xee01, 0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f00000008c0)=0xe8) fstat(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getuid() fstat(r1, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0, 0x0}, &(0x7f0000000ac0)=0xc) stat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000000d80)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)="d487dd1562b2af1f387767282a2028c5156422178a6c3c725c696ba1670cfee30d14e0b489f078b78eb9f407694e7582f01028916d8cb242c9ab1b87a929b7254d279da9b1c45b6a8f69f0932db05a7e74f47c36888573fd02c14fb263477471c40c88f56eed5dd0d925c258f981d37d4f082bae97e2639f209c334be9452a74d963f5c8bfbd9a18e8a3ee91c86afa67bac077d0cb686a4434fe21de63b1e5aafc71ff90aad2ccba6f71059944af080f81e465862be41768e9d45b23a8", 0xbd}, {&(0x7f0000000200)="0062755afe4c11bfbd97459d5d405fe562d5b503be41fd993ed6bb499564b20eb336853bbc10cae6f9704c50523a8f3763c7f214349e5bfad0050198039dc75590d177bedcc5df5b92978fe77b0aced37f9000fcaaa9a7207932557795ee451c0b96eb2b6eaa7c337632d98210d62e12d84afd9d5d8257e366e127a943856669b61a0688de3d220225d68e9e3ea559ccb703e7fa7cb001e6ade48df9d3149d9e7cbd45340f29e179f1e8bd25c1e7ef39cac15266d0158724c14764ba8b1dc0320381483dc21d5b3bce3118806e341cb2a19ad2ca8c0793c2ca", 0xd9}, {&(0x7f0000000300)="54dbcf7c6f906e3a659512c3513bd7bd58a24f08a282be9f3a0df1aa3e355d2637764f825ebd49d3353e55bb15c645510b405dd88f97cc0b0ae9c8aff8ee9556efce26997d072d6b0cd8bf9c82bb10790580ac4434a8e03c1bb783951a147cd6dbff1e028a17797ce5827474c3d50f4a273d00e37c8ee9326a9e015cda8b89e753f4c53c", 0x84}, {&(0x7f0000000080)="4737498f2f9d7d58b29610f68553ed6e58ffea13f5848e2736d361da06", 0x1d}], 0x4, &(0x7f0000000c80)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r2, r5, r6}, @rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r2, r7, r8}, @cred={0x20, 0x1, 0x2, r2, r9, r10}, @cred={0x20, 0x1, 0x2, r2, r11, r12}, @rights={0x28, 0x1, 0x1, [r1, r0, r1, r1, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r13, r14}], 0x100, 0x4}, 0x24000800) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xe) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x4f}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) [ 1196.565013] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1196.565025] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1196.565060] XFS (loop3): SB validate failed with error -117. [ 1196.565772] XFS (loop2): SB validate failed with error -117. 03:49:24 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000001685120000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:24 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000000e0000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:24 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000003800900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:24 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000003000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:24 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000000000000001000000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1196.924989] XFS (loop5): SB sanity check failed [ 1196.944248] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1197.026184] XFS (loop5): Unmount and run xfs_repair 03:49:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000040)={0x18, 0xf, 0x1, {{0x14, 0x4, 0x5}}}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) [ 1197.051790] XFS (loop3): SB sanity check failed [ 1197.056761] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1197.072955] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1197.084387] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1197.102518] XFS (loop4): SB sanity check failed [ 1197.104547] XFS (loop3): Unmount and run xfs_repair [ 1197.108944] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1197.119253] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1197.133187] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1197.150030] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1197.165543] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 03 80 09 00 XFSB............ [ 1197.175189] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1197.183873] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1197.185768] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1197.192997] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1197.206952] XFS (loop4): Unmount and run xfs_repair [ 1197.215006] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1197.221538] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1197.223476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1197.233202] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1197.239059] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1197.253287] 00000000: 58 46 53 42 00 00 10 00 00 00 0e 00 00 00 09 00 XFSB............ [ 1197.255639] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1197.271464] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1197.272498] XFS (loop3): SB validate failed with error -117. [ 1197.281614] 00000050: 00 00 00 01 00 00 10 00 00 00 00 16 85 12 00 00 ................ [ 1197.294860] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1197.303835] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1197.312657] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1197.320583] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1197.321356] XFS (loop5): SB validate failed with error -117. [ 1197.344383] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1197.353340] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1197.353922] XFS (loop2): SB sanity check failed [ 1197.371841] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1197.374850] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1197.393354] XFS (loop2): Unmount and run xfs_repair 03:49:24 executing program 1: delete_module(0x0, 0xa00) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000005c0), 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000680)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x2) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f00000000c0)={@ipv4={[], [], @local}}, &(0x7f00000003c0)=0x14) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000140)=0x7fff, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0x3e, 0x85a2, 0x9}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x1c\x9e\x00\x02\x00', 0x811}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) fremovexattr(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="747275737465642e00001c000023000000001c9e0002"]) write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7) syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0xfff, 0x40) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000240)=0x1) sendfile(r0, r3, &(0x7f0000d83ff8)=0xa00, 0x800000000024) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000004c0), &(0x7f0000000500)=0x4) creat(&(0x7f0000000200)='./bus\x00', 0x0) [ 1197.395572] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1197.398908] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1197.413331] XFS (loop4): SB validate failed with error -117. [ 1197.437785] 00000000: 58 46 53 42 03 b4 10 00 00 00 00 00 00 00 10 00 XFSB............ 03:49:24 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000009896800900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1197.498361] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1197.522215] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 03:49:24 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000001fffffff00000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:24 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000360000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1197.669480] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1197.701088] XFS (loop3): SB sanity check failed [ 1197.706442] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1197.710150] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1197.726242] XFS (loop3): Unmount and run xfs_repair [ 1197.731471] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1197.754284] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1197.755274] 00000000: 58 46 53 42 00 00 10 00 00 00 00 98 96 80 09 00 XFSB............ [ 1197.770784] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1197.770796] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1197.770842] XFS (loop2): SB validate failed with error -117. [ 1197.781353] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1197.833813] XFS (loop5): SB sanity check failed [ 1197.845484] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1197.861377] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1197.865391] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1197.884555] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1197.924259] XFS (loop5): Unmount and run xfs_repair [ 1197.929478] XFS (loop5): First 128 bytes of corrupted metadata buffer: 03:49:25 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000000000000001100000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1198.000857] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 09 00 XFSB............ [ 1198.014633] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1198.034505] XFS (loop4): SB sanity check failed [ 1198.039497] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1198.052959] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1198.062862] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1198.078650] XFS (loop4): Unmount and run xfs_repair [ 1198.083956] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1198.101902] 00000000: 58 46 53 42 00 00 10 00 00 00 36 00 00 00 09 00 XFSB......6..... [ 1198.108423] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1198.113271] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1198.118584] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1198.133584] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1198.153269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1198.154944] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1198.192181] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1198.198280] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1198.208960] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1198.209948] XFS (loop2): SB sanity check failed [ 1198.223982] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1198.234628] XFS (loop3): SB validate failed with error -117. [ 1198.239387] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1198.253112] 00000050: 00 00 00 01 00 00 10 00 00 00 00 1f ff ff ff 00 ................ [ 1198.276563] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1198.286311] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1198.297149] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1198.298309] XFS (loop2): Unmount and run xfs_repair [ 1198.332632] XFS (loop5): SB validate failed with error -117. [ 1198.332671] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1198.353806] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1198.388427] 00000000: 58 46 53 42 03 b4 10 00 00 00 00 00 00 00 11 00 XFSB............ [ 1198.447739] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1198.465564] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1198.479211] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1198.481768] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1198.487136] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1198.520895] XFS (loop4): SB validate failed with error -117. [ 1198.553912] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1198.562682] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1198.571465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1198.586681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1198.595674] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1198.603923] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1198.613024] XFS (loop2): SB validate failed with error -117. 03:49:27 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@rand_addr, @initdev, 0x0}, &(0x7f00000000c0)=0xc) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', r3}) r6 = getpid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0xffffff45, &(0x7f0000000380)={&(0x7f0000000040)=@setlink={0x30, 0x13, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x8, 0x16, [{0x4}]}, @IFLA_NET_NS_PID={0x8, 0x13, r6}]}, 0x30}}, 0x0) 03:49:27 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000040880900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:27 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000102000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:27 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000007e0000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:27 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000360000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:27 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000000000000001200000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="c756de0bd1a088e61833d5dadee1f33bfd3f7a94a63e066e8eb4883e2aaae12b53e45ccd354913f981d2942a1a6ebff99a2211e9d6e0887044c5c6e2bbb07c8f16a5b46d5580e32ae0812d622877716aad46417b8c9f7f014748250207195fbc3da95e3dca1ac71a928940a4428addc67143eac90cd49588626eb4a62ffedad44a3245a6048447eaaff02f875f03e7966b", 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2, 0x0) sendfile(r3, r4, 0x0, 0x10000000000443) read(r3, &(0x7f00000003c0)=""/72, 0x100000104) write$binfmt_misc(r2, &(0x7f0000000900)=ANY=[@ANYRESOCT=r1, @ANYRES64=r4, @ANYRESOCT=0x0, @ANYRES16=r0, @ANYBLOB="34258ca6f36a896a09aabfa7bd68b047ad14401b68783faeff3438078b9f44bfb66d4dcc206b80d48d98cd95d3e48e05d00da53884ffdf284a9a02c860f009f178cfd2b90abdeecef0a45b2c3769f7e01b4c1a509eaa04db526421d723cde875bd5d00998881fba29415b4e2b2374d02c44fc59169f53a799dcfecfb55bc700363d0bafd078a5f500638e4fc9df29a41df469c740e9bfc0f3499af58712754688fead670456422af98dacc96e4d9fa33050fe387b12370de863abfc4cbfbaff1331f1bd8b8fdd9c76aef2b42673b9bf9d375541df623455295ff0cc8955b86d847b2c36989f0f8746b4acc4f61", @ANYRESDEC=r0, @ANYRESOCT=r2, @ANYRES16=r1], 0x152) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 03:49:27 executing program 0: r0 = socket(0x25, 0x2, 0xb4) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f00000003c0)={0x18, 0x5}) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000100)=0x1, 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r3 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x502) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x1007}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3, @local, 0x20}, {0xa, 0x4e22, 0x8, @mcast1, 0x1}, r4, 0x80000000}}, 0x48) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r2) socket$inet6(0xa, 0x2, 0x9) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000000300)={0x0, 0x2, 0x4, [], &(0x7f0000000340)=0x100000000}) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000280)=0x4, 0x4) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0xfffffffffffffc00, @empty, 0x1ff}, 0x1c) [ 1199.941046] XFS (loop2): SB sanity check failed [ 1199.946720] XFS (loop4): SB sanity check failed [ 1199.946775] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1199.951676] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1199.963347] XFS (loop3): SB sanity check failed [ 1199.990553] XFS (loop5): Mounting V4 Filesystem [ 1200.008128] XFS (loop5): totally zeroed log [ 1200.012705] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1200.018919] XFS (loop4): Unmount and run xfs_repair [ 1200.029238] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1200.036299] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1200.039485] XFS (loop2): Unmount and run xfs_repair [ 1200.048568] XFS (loop3): Unmount and run xfs_repair [ 1200.054081] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1200.062977] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1200.068541] 00000000: 58 46 53 42 00 00 10 00 00 00 7e 00 00 00 09 00 XFSB......~..... [ 1200.078498] 00000000: 58 46 53 42 03 b4 10 00 00 00 00 00 00 00 12 00 XFSB............ [ 1200.087234] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 40 88 09 00 XFSB........@... [ 1200.099224] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1200.107722] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1200.123503] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1200.129609] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 03:49:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) personality(0x554000f) shmget(0x3, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r1, 0x0) [ 1200.132069] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1200.145835] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1200.172543] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:49:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008f0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCNOTTY(r0, 0x5422) recvmsg$kcm(r1, &(0x7f0000001c40)={&(0x7f0000001440)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001a80)=[{&(0x7f00000014c0)=""/242, 0xf2}, {&(0x7f00000015c0)=""/14, 0xe}, {&(0x7f0000001600)=""/101, 0x65}, {&(0x7f0000001680)=""/169, 0xa9}, {&(0x7f0000001740)=""/63, 0x3f}, {&(0x7f0000001780)=""/83, 0x53}, {&(0x7f0000001800)=""/154, 0x9a}, {&(0x7f00000018c0)=""/239, 0xef}, {&(0x7f00000019c0)=""/146, 0x92}], 0x9, &(0x7f0000001b40)=""/247, 0xf7}, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) clone(0x3103001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() pause() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0x0, 0x2, 0x0, 0xe9}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000100)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ptrace$cont(0x1f, r3, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000012c0)={0x0, 0x0}, &(0x7f0000001300)=0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000001c80), &(0x7f0000001cc0)=0x8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001340)={0x0, 0x0}, &(0x7f0000001380)=0xc) syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000180)='./file0\x00', 0xc1, 0x3, &(0x7f0000001240)=[{&(0x7f00000001c0)="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", 0x1000, 0x7}, {&(0x7f00000011c0)="f2339fb8bf4e02e76e918e5a32a03d7088ffed52", 0x14, 0x3}, {&(0x7f0000001200)="7e6a4432acffbcd84ad89267121e9e34ef6104a554e758e24e388f82aa93bd553b6bbfb39bce6bc1ffe3e474f00e77e5766d6bf7ee04db01e1db", 0x3a, 0xdf}], 0x1, &(0x7f00000013c0)={[{@noquota='noquota'}], [{@appraise='appraise'}, {@fowner_gt={'fowner>', r4}}, {@fowner_gt={'fowner>', r5}}]}) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r2, &(0x7f0000000100)=0x4) [ 1200.186114] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1200.201087] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1200.209684] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1200.218105] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1200.222418] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1200.236102] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1200.245982] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1200.248073] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1200.282208] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1200.302814] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1200.308322] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1200.322520] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1200.335787] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1200.337221] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ 03:49:27 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000103000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:27 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000102000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1200.354119] XFS (loop3): SB validate failed with error -117. [ 1200.354997] XFS (loop4): SB validate failed with error -117. [ 1200.361642] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "appraise" [ 1200.379596] XFS (loop2): SB validate failed with error -117. 03:49:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000180)={0x1, 0x0, {0x2, 0x800, 0x300d, 0x6, 0xc, 0x3, 0x0, 0x7}}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in=@loopback}}, {{@in=@local}, 0x0, @in=@remote}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x2) read(r0, &(0x7f00000000c0)=""/192, 0xc0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x80000000000000, 0x0) pipe(0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x2dd, 0x80) 03:49:28 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000ffffff8b0900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:28 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000000000000001400000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:28 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000800000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1200.786655] XFS (loop5): Mounting V4 Filesystem [ 1200.821413] XFS (loop5): totally zeroed log [ 1200.847472] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1200.995137] XFS (loop3): SB sanity check failed [ 1200.999977] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1201.083030] XFS (loop3): Unmount and run xfs_repair 03:49:28 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000104000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1201.104457] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1201.148353] 00000000: 58 46 53 42 00 00 10 00 00 00 ff ff ff 8b 09 00 XFSB............ [ 1201.182705] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1201.196069] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1201.204343] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1201.212493] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1201.223537] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1201.232259] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1201.240809] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1201.249653] XFS (loop3): SB validate failed with error -117. [ 1201.256297] XFS (loop2): SB sanity check failed [ 1201.266735] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1201.289293] XFS (loop2): Unmount and run xfs_repair [ 1201.298355] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1201.312319] 00000000: 58 46 53 42 03 b4 10 00 00 00 00 00 00 00 14 00 XFSB............ [ 1201.323730] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1201.341754] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1201.352360] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1201.372053] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1201.385429] XFS (loop5): Mounting V4 Filesystem [ 1201.399643] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1201.410928] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1201.426497] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1201.439320] XFS (loop2): SB validate failed with error -117. [ 1201.447956] XFS (loop4): SB sanity check failed 03:49:28 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000103000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1201.453031] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1201.471372] XFS (loop4): Unmount and run xfs_repair [ 1201.477725] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1201.491853] 00000000: 58 46 53 42 00 00 10 00 00 00 80 00 00 00 09 00 XFSB............ 03:49:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}, 0x5}, 0x1f7) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5"]}, 0x48}}, 0x0) socket$kcm(0x29, 0x7, 0x0) [ 1201.500450] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1201.516419] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1201.531011] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1201.541905] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:49:28 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) r1 = memfd_create(&(0x7f0000000180)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f00000000c0)="0600", 0x2) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) unlink(&(0x7f0000000000)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="4800070003000100000000000000000000000000000025000000000000000000000000000000200000000000"], 0x2c) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x1, 0x5, 0x7, 0x1}) sendfile(r1, r1, &(0x7f0000001000), 0x10002) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) r2 = dup3(r1, r1, 0x80000) ioctl$KDSETLED(r2, 0x4b32, 0xea4) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x400000, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000014000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) [ 1201.562479] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1201.570997] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1201.586904] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1201.600157] XFS (loop4): SB validate failed with error -117. 03:49:28 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000000000028c0900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1201.619537] XFS (loop5): totally zeroed log [ 1201.638909] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1201.919512] XFS (loop3): SB sanity check failed [ 1201.924382] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1201.936280] XFS (loop3): Unmount and run xfs_repair [ 1201.941298] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1201.948089] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 02 8c 09 00 XFSB............ [ 1201.956565] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1201.973193] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1202.001179] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1202.011397] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1202.019983] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1202.033152] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1202.048829] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1202.057588] XFS (loop3): SB validate failed with error -117. 03:49:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x20001000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300090e0000000000e1000005000005000600000000000a0000000013256fb30b6850a854ffffff00000000000000000b0000000000000200010900000000000003820000d0f605000500000800000a00000000000000ffe7001f0002000000000000000000170000000000000000"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x40000000000ff1a, 0x0) 03:49:30 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000000000000001800000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:30 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010008096980000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:30 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x0, 0x2}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x5, 0x12) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, 0x0) 03:49:30 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000108000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:30 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000ffffff8c0900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000080), 0xc, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e002903000018307b81da1700000000000007000019", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0xd6], 0x28}}, 0x0) [ 1203.476346] netlink: 12 bytes leftover after parsing attributes in process `syz-executor1'. [ 1203.487031] XFS (loop4): SB sanity check failed [ 1203.500067] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1203.513134] XFS (loop3): SB sanity check failed 03:49:30 executing program 0: syz_mount_image$erofs(&(0x7f0000000040)='erofs\x00', &(0x7f0000000080)='./file0\x00', 0x4d1, 0x0, 0x0, 0x0, 0x0) acct(&(0x7f0000000000)='./file0\x00') 03:49:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x800008c02) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_team\x00'}, 0x18) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000002c80)) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000080)=@in={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000027c0), 0x0, &(0x7f00000029c0)}, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x200000101, 0x0) close(0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) write(r0, &(0x7f0000000200)="b63d784793300600000000000000ed69d2bc70c2de96aa7879acc21db6d2b4760fae1a0000002e000000fb", 0x2b) [ 1203.518078] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1203.532032] XFS (loop4): Unmount and run xfs_repair [ 1203.539520] XFS (loop2): SB sanity check failed [ 1203.550226] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1203.564091] XFS (loop3): Unmount and run xfs_repair [ 1203.577462] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1203.582155] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1203.591889] erofs: read_super, device -> /dev/loop0 [ 1203.600922] 00000000: 58 46 53 42 00 00 10 00 80 96 98 00 00 00 09 00 XFSB............ [ 1203.609757] 00000000: 58 46 53 42 00 00 10 00 00 00 ff ff ff 8c 09 00 XFSB............ [ 1203.609773] XFS (loop2): Unmount and run xfs_repair [ 1203.624228] erofs: options -> [ 1203.627857] erofs: cannot read erofs superblock [ 1203.634964] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1203.645769] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1203.646894] sg_write: data in/out 405615/1 bytes for SCSI command 0x0-- guessing data in; [ 1203.646894] program syz-executor1 not setting count and/or reply_len properly [ 1203.657553] 00000000: 58 46 53 42 03 b4 10 00 00 00 00 00 00 00 18 00 XFSB............ [ 1203.671476] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1203.677650] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1203.694165] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1203.696219] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1203.710584] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1203.713565] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1203.728953] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1203.734850] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1203.737685] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1203.754248] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1203.762652] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1203.762931] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1203.787799] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1203.797492] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1203.812250] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1203.816949] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1203.822895] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1203.828847] XFS (loop4): SB validate failed with error -117. [ 1203.839029] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1203.853530] sg_write: data in/out 405615/1 bytes for SCSI command 0x0-- guessing data in; [ 1203.853530] program syz-executor1 not setting count and/or reply_len properly [ 1203.871439] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ 03:49:31 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="2e00000018008100e00f80ecdb4cb92e0a480e181e0cd300e8bd6efb120808000e0010000000030002de00000000", 0x2e}], 0x1}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r2 = dup2(r0, r1) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000280)=0x0) r5 = geteuid() write$P9_RSTATu(r2, &(0x7f00000002c0)={0x9f, 0x7d, 0x2, {{0x0, 0x72, 0xffffffffffffff58, 0x100000001, {0x10, 0x4, 0x7}, 0x10800000, 0x10001, 0xfffffffffffffffd, 0x6, 0x0, '', 0x7, 'trusted', 0x15, 'keyring+{nodev\'vmnet0', 0x23, 'procbdev\\vmnet1+ppp0lo^vboxnet1\xae\x95{]'}, 0x18, 'procproc+mime_type-wlan1', r3, r4, r5}}, 0x9f) [ 1203.880596] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1203.882300] XFS (loop2): SB validate failed with error -117. [ 1203.908336] XFS (loop3): SB validate failed with error -117. [ 1203.911145] XFS (loop5): Mounting V4 Filesystem [ 1203.923435] XFS (loop5): totally zeroed log 03:49:31 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000380)={0x7}, 0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x81, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) getpgid(r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100), 0x2) keyctl$join(0x1, &(0x7f00000005c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000600)={0x800, {{0xa, 0x4e23, 0x2, @empty, 0x7}}, {{0xa, 0x4e21, 0xffffffffffffff01, @loopback, 0x1}}}, 0x108) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x14) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x1, 0x0) listen(r0, 0x4) [ 1203.934780] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1203.956505] netlink: 18 bytes leftover after parsing attributes in process `syz-executor1'. [ 1203.968787] IPv6: NLM_F_CREATE should be specified when creating new route 03:49:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0xfffffffffffffffa, 0x101002) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0xd2, "8f41f15eee406930f4f144a8f8a2f2a18332e09972d785d0bb124837a66adbad23d3540e0cf0ba2deeded1fbd99d0b6844436fb1106cdff0e464a164dc19b3d46ff773e44e6d90d1bce3529f62fc6dcaf0efce1cd9e7d1ab3654832006bcfd3a48a6303938839c20ec0452620cdcfd6030c526df999190621b622385aa5a09849ec634ce8a5207c2b428031c9d86e771ccda512a1c4b94519d96124221668da6b6d527e4cd1d89a5c99ad302d9a5c7466f3d06fc93d5782fad0281235a502ca8a3cc66eacc5cd30d6115bcd93ec9fa14b9f2"}, &(0x7f0000000280)=0xda) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0x4, 0x2}, 0x8) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffc9, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) getsockopt(r0, 0xe7, 0x4, &(0x7f0000000000)=""/81, &(0x7f0000000100)=0x51) sendto$inet(r0, &(0x7f00000003c0), 0xed5f0dd4, 0x0, 0x0, 0x184) shutdown(r0, 0x400000000000001) 03:49:31 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000000000000002000000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:31 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000003960900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:31 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010003ffff00000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet_sctp(0x2, 0x5, 0x84) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0), 0x4) 03:49:31 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000110000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1204.466922] sctp: [Deprecated]: syz-executor1 (pid 1264) Use of int in maxseg socket option. [ 1204.466922] Use struct sctp_assoc_value instead [ 1204.518515] XFS (loop2): SB sanity check failed [ 1204.523523] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1204.536929] XFS (loop2): Unmount and run xfs_repair [ 1204.542298] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1204.549494] 00000000: 58 46 53 42 03 b4 10 00 00 00 00 00 00 00 20 00 XFSB.......... . [ 1204.558313] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:49:31 executing program 1: ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0xfffffffffffffe8d) [ 1204.574459] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1204.586098] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:49:31 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000380)={0x7}, 0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x81, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) getpgid(r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100), 0x2) keyctl$join(0x1, &(0x7f00000005c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000600)={0x800, {{0xa, 0x4e23, 0x2, @empty, 0x7}}, {{0xa, 0x4e21, 0xffffffffffffff01, @loopback, 0x1}}}, 0x108) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x14) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x1, 0x0) listen(r0, 0x4) [ 1204.641542] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1204.707936] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1204.731154] XFS (loop3): SB sanity check failed [ 1204.736277] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1204.765284] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1204.783587] XFS (loop3): Unmount and run xfs_repair [ 1204.789924] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1204.794717] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1204.803506] XFS (loop2): SB validate failed with error -117. [ 1204.807566] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 03 96 09 00 XFSB............ [ 1204.820482] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1204.829288] XFS (loop4): SB sanity check failed [ 1204.829375] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1204.838464] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1204.842498] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1204.863870] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1204.872443] XFS (loop4): Unmount and run xfs_repair [ 1204.877813] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1204.889683] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1204.892722] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1204.921503] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1204.931575] XFS (loop5): Mounting V4 Filesystem [ 1204.940251] 00000000: 58 46 53 42 00 00 10 00 3f ff f0 00 00 00 09 00 XFSB....?....... [ 1204.954091] XFS (loop3): SB validate failed with error -117. [ 1204.960463] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1204.971214] XFS (loop5): totally zeroed log [ 1204.977283] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1204.985855] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1204.994424] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1205.007233] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1205.016624] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1205.032391] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1205.042324] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1205.058106] XFS (loop4): SB validate failed with error -117. 03:49:32 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000380)={0x7}, 0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x81, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) getpgid(r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100), 0x2) keyctl$join(0x1, &(0x7f00000005c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000600)={0x800, {{0xa, 0x4e23, 0x2, @empty, 0x7}}, {{0xa, 0x4e21, 0xffffffffffffff01, @loopback, 0x1}}}, 0x108) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x14) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x1, 0x0) listen(r0, 0x4) 03:49:32 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100030000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:32 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000000000000003300000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/packet\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x1}) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x10000) write$P9_RATTACH(r2, &(0x7f0000000480)={0x14, 0x69, 0x2, {0x0, 0x0, 0x4}}, 0x14) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1b8, r3, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9e}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA={0x64, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x23}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4340}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb09}]}]}, @TIPC_NLA_BEARER={0x10, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x28}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffffffffffe1}]}, @TIPC_NLA_NET={0x64, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x853}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2169}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x99e3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x43635ae6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x63bd}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdc}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000}, 0x40) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) splice(r1, &(0x7f0000000400), r1, &(0x7f0000000440)=0x45, 0x2, 0x1) [ 1205.552778] XFS (loop4): SB sanity check failed [ 1205.576768] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1205.599521] XFS (loop4): Unmount and run xfs_repair [ 1205.608359] XFS (loop4): First 128 bytes of corrupted metadata buffer: 03:49:33 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000003b40900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1205.620348] 00000000: 58 46 53 42 00 00 10 00 3f ff f0 00 00 00 09 00 XFSB....?....... [ 1205.632659] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1205.651095] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1205.666281] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:49:33 executing program 1: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000003960900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1205.744308] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1205.754148] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1205.796588] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1205.814453] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1205.832869] XFS (loop5): Mounting V4 Filesystem [ 1205.839051] XFS (loop4): SB validate failed with error -117. [ 1205.849857] XFS (loop5): totally zeroed log [ 1205.879753] XFS (loop5): Failed to read root inode 0x100000000080, error 22 03:49:33 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8000, 0x0) write$capi20_data(r2, &(0x7f0000000180)={{0x10, 0xffffffffffff0000, 0x0, 0x0, 0x4, 0x10000}, 0x82, "f547028285d08f312f83c9b42e5b3efe8fcf7611fb16b94a3de0b29ae478383beafc600a983cb43926b6d89ccf47cf6f3307e79c3d9de2a0b2805c76c3f14af20f6dddbec0656d8714f567e636d237f999edd0d7cb09a62d1c92d474d6760eab5c35b3382c16f3b1065b8b0b636a1d9d77bad12df039a8c910c0d00b7ae951e43b80"}, 0x94) read(r0, &(0x7f0000000280)=""/114, 0x25) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0x80082407, &(0x7f0000000100)=ANY=[@ANYBLOB="7b3a69e33a9a96d5d838cc9833f3c6083d68edaafcffffffffffffffaaff38f2f39a9fd8364c285cfd6a92ea77f84b3be3f35814974ddcf8e45d4ae290b0460207c92b32c440"]) sendmsg$unix(r3, &(0x7f0000000080)={&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000380)="338a16dad3e89b222834047ab3eb9dc2a4a415562805951fde0652352f97bec263f3f7c6614892ddb83dcc75390345b3ffdd839975560a29c0b77263482bcae37ebaf6cb9e0ba068d1bcf74ac323b3bd6ae0c46fc02c08ab3f57c809", 0x5c}, {&(0x7f0000000400)="38a31e24bfa2c486783244123220400fee1b66beb3f77bd5c3df8a8b525faa4d72f7e50fc5ffeb458db43982149d4b9532d6c2dae595ff1d680fbf52eb89f6411f3dfbb47bf4983f2b573b112d1d422fda", 0x51}, {&(0x7f0000000480)="e49877e1b3d326032849798fd55f4718ae4135bf3338b806a5b73eb5f43fc52f313b8d3d3469e094bfde5f45a09b2f3bde5d446d11a3d4cb2b08cac2f200f8bc7aca168896221e982e1098644627d92d60cdcd0683c78d65b9323264b9ef3a90d5997de7d3151bcea353ea38c51ef1810e3a765077b08f4dbc3df9c2f187a3c1b3196ebc41fc4cb97f2986b27654d40efd5b", 0x92}, {&(0x7f0000000540)="210bf25656a13f62af931eb76031f5ef81e8f16ea51bab690a1274c6966e5a185f3ab957c8aadb821eb5e17bf88728bee7e26045ed89f49beafd223a3650df7a7d59090d47a6add0f8c87440f483b5fabb0f7881a46cc1a72eec7c242376b2b74c87f88ed686574bb779afeea2aa71dcfa9f0a80602529cc179842339619d45776c5", 0x82}, {&(0x7f0000000600)="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", 0x1000}], 0x5, 0x0, 0x0, 0x4000080}, 0x4000800) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042408, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000240)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 1205.934887] XFS (loop3): SB sanity check failed [ 1205.940308] XFS (loop2): SB sanity check failed [ 1205.958016] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:49:33 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2, 0x0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000040)) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)={0x80000000, 0xf6}) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711018000000000095000000000000005e302255422af6d0c27f90dc7387a978014a0ca8fb5676022e6fb2145df28a3af3fcd871b353a81a8324fa82d58c5168089dd9901b8104aec598d835ab318362351ebb49a977758500c2b8a213f1a42d061fdec6794d6edf1d69aa7b7bf98112421da47ed19e194f4776d4c06d86f8c1e68f232e1cc5bb3a4e5afeb0f14053f945726d717adce48ac7ab14d82a7d24d67c9432feac04d648496630a660cf4c13ff8f12b625b2d3a9597af37fe5656c9f91f3f543c48819435ab3fcdb0f907e4c029cb54f23ab033cf798de53d56a74a2"], &(0x7f0000000200)='\xe24\x96\x97p\xcbs[\xe3u\xf1\x12P\x8b\xda\xd2\x8b\xde\xbd\x19\f\xdem\xbc\x9c6\x81\x93f\x94\x9bi\xa6\xcf_rv\xf7\x8e?\xc5\xa75\x97\xcc\xe5\xef\xc3%#I\xa4JR'}, 0xffffff5f) lsetxattr$security_smack_transmute(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x1) write$binfmt_elf32(r2, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x1, 0x4, 0x6, 0x7fff, 0x3, 0x3f, 0x9, 0x1e3, 0x38, 0x19a, 0xad, 0x3f, 0x20, 0x1, 0xffffffffffffff07, 0x802000000000, 0x3}, [{0x4, 0x0, 0x0, 0xc0000000000000, 0xbd95, 0x9232, 0x3ff, 0x401}], "5a02532530e812d653e9d77910b1a0b452ddea691ee673154565a57f52ac7bc7373ae81175a89aa5c87ead6243f5f11cd92adfbd1a039602b53d849acc94f9553f3fc1c1582f6b2e1a670afed268a34b280f5a6810d89671c5c562f05e004288964b1237728a4bf9d236292403fb1c4195833950f5d1c4536e990ec430ee42348c8c3a360ad303e0ae3faeee1feb42fcba0b5d1232178fc85741857151b52dc5d760adb484be127844f935bbaed3dae525ed61f0baba10ab356e0d7bf46dcf348ebc7e7676529259001dc916eba4d782c9a51c6c129a70a30693edfd0bef565ad47f4bc3c1dab122c94ac112b72ca6c8b427ef3e", [[]]}, 0x24c) 03:49:33 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000100000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1205.978257] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1206.018853] XFS (loop3): Unmount and run xfs_repair [ 1206.021140] XFS (loop2): Unmount and run xfs_repair [ 1206.032403] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1206.038645] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1206.044284] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 03 b4 09 00 XFSB............ [ 1206.047759] 00000000: 58 46 53 42 03 b4 10 00 00 00 00 00 00 00 33 00 XFSB..........3. [ 1206.068404] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1206.090885] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:49:33 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000108100000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:33 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100030000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1206.126246] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1206.140605] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1206.154121] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1206.158523] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1206.168294] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1206.171214] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:49:33 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$unix(0x1, 0x10000000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400800, 0x0) clone(0x400002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(r0, 0x40096101, &(0x7f0000000040)) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8000, 0x20000) [ 1206.222018] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1206.280367] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1206.283299] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1206.303494] XFS (loop4): SB sanity check failed [ 1206.304846] QAT: Device 0 not found 03:49:33 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$unix(0x1, 0x10000000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400800, 0x0) clone(0x400002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(r0, 0x40096101, &(0x7f0000000040)) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8000, 0x20000) [ 1206.324501] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1206.354149] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1206.362636] XFS (loop4): Unmount and run xfs_repair [ 1206.369311] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1206.387714] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1206.396364] XFS (loop3): SB validate failed with error -117. [ 1206.398002] 00000000: 58 46 53 42 00 00 10 00 00 00 00 01 00 00 09 00 XFSB............ [ 1206.404307] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ 03:49:33 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$unix(0x1, 0x10000000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400800, 0x0) clone(0x400002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(r0, 0x40096101, &(0x7f0000000040)) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8000, 0x20000) [ 1206.433494] XFS (loop2): SB validate failed with error -117. [ 1206.440266] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1206.452710] XFS (loop0): Mounting V4 Filesystem [ 1206.457259] QAT: Device 0 not found [ 1206.461364] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1206.483666] XFS (loop0): totally zeroed log [ 1206.492405] XFS (loop0): Failed to read root inode 0x100000000080, error 22 [ 1206.503289] XFS (loop5): Mounting V4 Filesystem [ 1206.505269] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1206.519764] XFS (loop5): totally zeroed log [ 1206.542879] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1206.550223] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1206.570718] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1206.586723] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1206.613674] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1206.637087] XFS (loop4): SB validate failed with error -117. 03:49:34 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000000000000007d00000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:34 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000ffffffb60900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:34 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$unix(0x1, 0x10000000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400800, 0x0) clone(0x400002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(r0, 0x40096101, &(0x7f0000000040)) readv(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8000, 0x20000) 03:49:34 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xe8) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="66643dfbd6c647f660952960b11ba1030028dfaf454f96d801620dcd35af5b9ed61f8a3ca287eee6d85a48db966e9d788627cd453041aa336b9589dbca473786d424c6494204e69c6aef9589a716cd7207e09130b48354f0d39e6e0eb8adb61a22951d56b392e5b7ae40089c18d2c0c2d0bbd1d3cdbc", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',default_permissions,default_permissions,allow_other,default_permissions,max_read=0x00000000000000ff,max_read=0x000000000000001f,allow_other,allow_other,allow_other,blksize=0x0000000000001000,dont_measure,\x00']) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x7, 0x70, 0x0, 0x3, 0xf74, 0x2f, 0x0, 0x5, 0x2, 0x0, 0x0, 0x8001, 0x9, 0x1ff, 0x200, 0x6, 0x6d, 0x1, 0x3, 0x7, 0x2, 0x7, 0xffffffffffffffe0, 0x53e, 0x800, 0x1, 0x10001, 0x0, 0x80000001, 0x80000001, 0xe10, 0x4, 0x81, 0xae, 0x9, 0xff, 0x1, 0x3, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x4, 0x6, 0x400, 0x7, 0xab, 0x0, 0x6}, r0, 0x1, 0xffffffffffffff9c, 0x4) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) 03:49:34 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100030000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1206.730882] QAT: Device 0 not found [ 1206.743092] XFS (loop5): Mounting V4 Filesystem [ 1206.760600] XFS (loop5): totally zeroed log [ 1206.783106] XFS (loop5): Failed to read root inode 0x100000000080, error 22 03:49:34 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000200000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:34 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f800000000000000040000010000000008000000000000000810000000000000082000000010000100000000001003f0000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1206.933706] XFS (loop3): SB sanity check failed [ 1206.944429] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1206.961399] XFS (loop3): Unmount and run xfs_repair [ 1207.024341] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1207.032891] XFS (loop2): SB sanity check failed [ 1207.040200] 00000000: 58 46 53 42 00 00 10 00 00 00 ff ff ff b6 09 00 XFSB............ [ 1207.052667] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1207.089161] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1207.126368] XFS (loop0): Mounting V4 Filesystem 03:49:34 executing program 1: capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000200)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory\x01\x00\x00\x00\x16\x00\x00\x00\xeafW\x1dn\xf0\x130\x00', 0x26e1, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000000c0)={0x9, 0x1c00000}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x58}) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)={0x9, {0x6, 0x1, 0x2}}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x114, r1, 0x320, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff80000001}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x894}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x17}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc00000000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x60, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x44001) [ 1207.131609] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1207.154207] XFS (loop2): Unmount and run xfs_repair [ 1207.158864] XFS (loop0): totally zeroed log [ 1207.160486] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1207.195426] XFS (loop4): SB sanity check failed [ 1207.197480] 00000000: 58 46 53 42 03 b4 10 00 00 00 00 00 00 00 7d 00 XFSB..........}. [ 1207.200254] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1207.216603] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1207.228321] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1207.248988] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1207.254960] XFS (loop0): Failed to read root inode 0x100000000080, error 22 [ 1207.270243] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1207.287807] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1207.295874] XFS (loop4): Unmount and run xfs_repair [ 1207.305491] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1207.322140] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1207.322254] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1207.337397] 00000000: 58 46 53 42 00 00 10 00 00 00 00 02 00 00 09 00 XFSB............ [ 1207.339802] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1207.354761] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1207.363390] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1207.366272] XFS (loop5): Mounting V4 Filesystem [ 1207.376846] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1207.385256] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 03:49:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6, @in=@loopback}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, 0xe8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @empty}, {0x2, 0x4e21, @rand_addr=0xfff}, 0x41, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)='irlan0\x00', 0x7, 0x7fffffff, 0x8}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000040)={@local, @local}, &(0x7f0000000080)=0xc) [ 1207.393752] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1207.397202] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1207.402376] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1207.419311] XFS (loop5): totally zeroed log [ 1207.420010] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1207.432525] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1207.443218] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1207.447019] XFS (loop3): SB validate failed with error -117. [ 1207.453622] XFS (loop2): SB validate failed with error -117. [ 1207.463638] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1207.473081] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1207.482118] XFS (loop4): SB validate failed with error -117. 03:49:34 executing program 1: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xa98, 0x2000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x7ba) 03:49:34 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000003c0)='/dev/vbi#\x00', 0x0, 0x2) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000900)={0x7, 0x40}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup\x00', 0x200002, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x9, 0x800) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000300)={0x0, 0x2d, "73d860c8d7e561c2adc66cdd715e2d6262e7ac4555e3da2e0c9b1762c1c29af2ae480a8c265af06e7b7e7fea3c"}, &(0x7f0000000540)=0x35) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000580)={r6, 0x5, 0x0, 0x401, 0x400, 0x2}, &(0x7f00000005c0)=0x14) fchdir(r4) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r8 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r8, &(0x7f0000000a80)=ANY=[@ANYPTR64=&(0x7f0000000a00)=ANY=[@ANYRESDEC=r2, @ANYRES16=r8, @ANYPTR64=&(0x7f0000000940)=ANY=[@ANYRES16=r7, @ANYRESHEX=r8, @ANYBLOB="5592db711dfa772414bdfbb1bf11798d1bc00920ab8113ad7d6c44e28030b2d6057de80213969c41f6235dac465fdf94786818ea1b46e636b937b920ce153fdcb34375b62ac0cbaef463c2e237785015547a6587ffbbbdcf2d3a2188f84bdeb7614e29af6d1b2cabfa13248b70e8c97fe203", @ANYRES32=r6, @ANYRESOCT=r3, @ANYRES16=r0, @ANYPTR64]], @ANYRES32=r7, @ANYPTR64=&(0x7f0000000a40)=ANY=[@ANYRES32=0x0], @ANYBLOB="a6bab5a099e7c5cadf80182366cb7c4c3f6d8d2b402ba25b3beaa892bcdad7828266b19a43b34be40f0207add6a95f93d8fdba8b54cff4cb4915a2d4aa49726f7791c7a0470c23f0df4f5eca3d528469e6029b4da29898d2279db90964380a9f6d09dceabce1cc25821def70cf564a89053300c52b805d36fb7f096b62c29fc040d483e3a5ec603dfe82408cc2ef0bc2659ebe04d2df7495598dbe2f0df8355e1a1cf4ebf0fe48783c1c94a39f24e48047f00a2102bdb399f44879ae29d5faf8f4fcf7b7da786c6845667b895d18217639116d84e693a266c6bca295de6db107a547c73a", @ANYBLOB="337e1d0afa56ad21bbfa01f26d4f6f122034f51f929f668a8474501015fea8c99e8f0b80154f6c74981eddc589a379950479ce9f0466638688a951a0a4bb0882e3e1ac3b5ec081b2382f36ea70adbbf7441acbb0da87bcce4df5c9b7759bff0562d8c50910a4dfd72eeded071933a00c40baf63a02"], 0x16d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800100, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000800)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r9, 0x10, &(0x7f0000000840)={0x38}) io_setup(0x7ff, &(0x7f0000000240)=0x0) io_cancel(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4, r4, &(0x7f0000000340)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x8, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000000480)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r11 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000880)={0x3, 0x70, 0x3, 0x1, 0x3f, 0x8, 0x0, 0x9, 0x1800, 0x4, 0x2, 0x8, 0xffffffff, 0x2, 0x1, 0x1, 0x0, 0xa1, 0x10000, 0x8001, 0x280fef92, 0xfffffffffffffffc, 0xa8a4, 0x139b, 0x0, 0x20, 0x8001, 0x81, 0x5, 0xeead, 0x6, 0x10001, 0x4, 0x491, 0x8, 0x3, 0x4, 0x7, 0x0, 0x6, 0x0, @perf_config_ext={0x3, 0x401}, 0x2c000, 0x6, 0x2, 0x9, 0x8000, 0x4, 0x1}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) keyctl$update(0x2, r11, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) fcntl$setpipe(r0, 0x407, 0x9) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) ioctl$EVIOCGPHYS(r8, 0x80404507, &(0x7f0000000700)=""/225) fcntl$getown(r2, 0x9) ioctl$KVM_GET_MSR_INDEX_LIST(r8, 0xc004ae02, &(0x7f0000000140)=ANY=[@ANYBLOB="050000ff0000000000000000000000000000000000000000"]) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 03:49:34 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000000000000038b00000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:34 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000000000edc00900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:34 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x640002, 0x0) sendfile(r0, r0, &(0x7f00000000c0), 0x73) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x10010, r0, 0x4f) r1 = creat(&(0x7f0000000500)='./file0\x00', 0x7d) write$P9_RWALK(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="3d0000006f1a5bb8c260e5e898000004f3776b977b18f213bacfaec669776813005800000000000000000000d5691c0ce7f8fba3000000000000000000000000000000020008461a2d33af7b75f35073d8dd0000010000000000ae69b9a4e2700b9b447aebcf8e60a4d2"], 0x3d) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x522, 0x0, 0x8, 0x8, 0x0}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000180)={r2, 0x4, 0x7fff}, 0x8) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f00000004c0)='trusted.overlay.opaque\x00', &(0x7f0000000400)='y\x00', 0xffffff3c, 0x6) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000640)=[&(0x7f0000000280)='user\x00', &(0x7f0000000540), &(0x7f0000000580)='-\x00', &(0x7f00000005c0)='/dev/nullb0\x00', &(0x7f0000000600)='.bdevem0\x00'], &(0x7f0000000900)=[&(0x7f0000000680)='\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='md5sumeth1\x00', &(0x7f0000000740)='/dev/nullb0\x00', &(0x7f0000000780)='trusted.overlay.opaque\x00', &(0x7f00000007c0)='trusted.overlay.opaque\x00', &(0x7f0000000800)='trusted.overlay.opaque\x00', &(0x7f0000000840)=')/wlan1vmnet1vmnet0&\x00', &(0x7f0000000880)='em0\x00', &(0x7f00000008c0)='\x00']) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffcc1, 0xfa00, {0x1, &(0x7f0000000240), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x0, r3, 0x30, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0xa0) [ 1207.623299] overlayfs: failed to resolve './file1': -2 [ 1207.631212] overlayfs: failed to resolve './file1': -2 03:49:35 executing program 1: r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000440)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x3, 'syz1\x00', @null, 0x4, 0x5, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x3fd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000080)={0x8, 0x100, 0xc5}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x15) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000004c0)={0x15, 0x110, 0xfa00, {r4, 0x800, 0x0, 0x0, 0x0, @in, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}}, 0x118) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x8000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) write$9p(r1, &(0x7f0000000780)="63ad9211d5c8c18a34eca7186efd59b21297ebe33bb249ba3ec44e27e36f0a9c5bcb6fa103bca2c43bd81b76f93319331e3dc1abe1ccc35ebd22b315a5fb3a000b7d353637f3324ac3952fc2c1555d930bf4fa1cc3546b698deb1e10730acb35b796fa6a69eea155d94c96d13c5b81c9b968e73349e4d6bb624dedb54f76e1e6cb8428c829978ba80481472eccafff0aff8c22852c8321406b156d0b68bdf5e46c32c841f2", 0xa5) unshare(0x40000000) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x100, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000140)=0x0) ptrace$getregset(0x4204, r6, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=""/129, 0x81}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'ipddp0\x00', 0x20}) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200029090000001c000100080006006f766600080008000700000008000800ff0f000009f41f5331513713de388154a2000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x40010}, 0x0) write$smack_current(r0, &(0x7f0000000040)='proc(\x00', 0xffffffffffffff36) [ 1207.818156] XFS (loop2): SB sanity check failed [ 1207.827087] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1207.847862] XFS (loop2): Unmount and run xfs_repair [ 1207.852900] XFS (loop4): SB sanity check failed 03:49:35 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000108800000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1207.852929] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1207.852940] XFS (loop4): Unmount and run xfs_repair [ 1207.900116] IPVS: ftp: loaded support on port[0] = 21 [ 1207.961950] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1207.990962] 00000000: 58 46 53 42 00 00 10 00 00 00 00 02 00 00 09 00 XFSB............ [ 1208.043888] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1208.089466] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1208.125637] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1208.143674] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1208.153036] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1208.171867] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1208.182358] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1208.199472] XFS (loop4): SB validate failed with error -117. [ 1208.238058] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1208.244344] IPVS: ftp: loaded support on port[0] = 21 [ 1208.245545] 00000000: 58 46 53 42 03 b4 10 00 00 00 00 00 00 03 8b 00 XFSB............ [ 1208.258762] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1208.266942] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1208.266954] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1208.266965] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1208.294264] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1208.308874] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1208.317228] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1208.326501] XFS (loop2): SB validate failed with error -117. 03:49:35 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000300000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:35 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f800000000000000040000010000000008000000000000000810000000000000082000000010000100000000001003f0000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x5, 0x0, [{0x394, 0x0, 0x4}, {0xbf7, 0x0, 0x9db}, {0xbdc, 0x0, 0x7}, {0x8b, 0x0, 0x8}, {0x40000b6f, 0x0, 0x7}]}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000480)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10) write$P9_RLOPEN(r3, &(0x7f0000000000)={0x18}, 0xfdef) [ 1208.532660] XFS (loop3): SB sanity check failed [ 1208.549075] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:49:35 executing program 1: bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, {0x0, 0xffffffffffff8000, 0x90, 0x9, 0xaf, 0x6}}, 0x1) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x4}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)={0x0, 0x452b, 0x0, 0x0, 0x13, 0x3}) r3 = syz_open_pts(r2, 0x4000000040000) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) gettid() ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000180)="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") ioprio_set$pid(0x2, 0x0, 0x100000001) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000380)=0x6) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@ng={0x4, 0xa, "6a8f96"}, 0x5, 0x1) [ 1208.618566] XFS (loop3): Unmount and run xfs_repair [ 1208.639124] XFS (loop3): First 128 bytes of corrupted metadata buffer: 03:49:36 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b41000000000000003d100000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1208.693900] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 ed c0 09 00 XFSB............ [ 1208.746134] XFS (loop5): Mounting V4 Filesystem 03:49:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="f2", 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}, 0x48) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=ANY=[@ANYBLOB="20000000000000008400000002000000000041020000000000000000", @ANYRES32=0x0], 0x20}], 0x4924924924924d0, 0x0) [ 1208.775809] XFS (loop5): totally zeroed log [ 1208.781559] XFS (loop4): SB sanity check failed [ 1208.792320] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1208.822953] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1208.831254] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1208.849817] XFS (loop4): Unmount and run xfs_repair [ 1208.861223] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1208.880132] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1208.909963] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1208.932980] 00000000: 58 46 53 42 00 00 10 00 00 00 00 03 00 00 09 00 XFSB............ [ 1208.989654] XFS (loop2): SB sanity check failed [ 1208.993781] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1209.003240] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1209.005261] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1209.014584] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 03:49:36 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000001000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:36 executing program 0: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000500)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000680)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000740)={r2}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000700)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x2, 0x0) futimesat(r4, &(0x7f00000006c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$KVM_NMI(r4, 0xae9a) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB=',\x00']) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='tpperdir=./file']) r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000780)) chdir(0x0) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f0000000180)) getsockopt$packet_buf(r5, 0x107, 0x5, &(0x7f0000000580)=""/201, &(0x7f0000000340)=0xc9) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) renameat2(r5, &(0x7f0000000800)='./bus\x00', r1, &(0x7f0000000300)='./bus/file0\x00', 0x1) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480)='overlay\x00', 0x0, &(0x7f00000004c0)={[{@default_permissions='default_permissions'}, {@workdir={'workdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000440)='./file0/file0\x00', 0x3b, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480), 0x0, 0x5}], 0x0, 0x0) [ 1209.050229] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1209.068349] XFS (loop2): Unmount and run xfs_repair [ 1209.073640] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1209.086158] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1209.096045] 00000000: 58 46 53 42 03 b4 10 00 00 00 00 00 00 03 d1 00 XFSB............ [ 1209.104470] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1209.109991] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1209.112745] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1209.129210] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1209.160363] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1209.180845] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1209.210131] XFS (loop3): SB validate failed with error -117. [ 1209.220896] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1209.230509] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1209.252360] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1209.260820] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1209.265743] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1209.269194] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1209.292862] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1209.322062] XFS (loop4): SB validate failed with error -117. [ 1209.344249] XFS (loop2): SB validate failed with error -117. 03:49:36 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000c30900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1209.423378] overlayfs: unrecognized mount option "tpperdir=./file" or missing value [ 1209.452449] XFS (loop5): Mounting V4 Filesystem [ 1209.488259] XFS (loop5): totally zeroed log [ 1209.514944] XFS (loop5): Failed to read root inode 0x100000000080, error 22 03:49:36 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000400000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1209.559472] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 1209.597855] overlayfs: missing 'lowerdir' 03:49:37 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b41000000000000000ef00000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1209.727064] XFS (loop3): SB sanity check failed [ 1209.732226] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:49:37 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,workdir=./file1']) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000100)='./file1/file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f00000001c0)=@ng={0x4, 0x14, "b8c86fef88684417386d7af5399f73b08b9e9ce3"}, 0x16, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) [ 1209.785326] XFS (loop3): Unmount and run xfs_repair [ 1209.792231] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1209.804272] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 c3 09 00 XFSB............ [ 1209.813170] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1209.835960] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1209.855550] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1209.881401] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1209.921952] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1209.930514] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1209.939021] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1209.994116] audit: type=1804 audit(2000000977.300:66): pid=1747 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir435899082/syzkaller.C257LL/96/file0/bus" dev="overlay" ino=297177 res=1 [ 1210.012822] XFS (loop3): SB validate failed with error -117. 03:49:37 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000002000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1210.146468] overlayfs: unrecognized mount option "tpperdir=./file" or missing value [ 1210.165805] XFS (loop2): SB sanity check failed [ 1210.175595] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1210.209854] XFS (loop2): Unmount and run xfs_repair [ 1210.218442] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1210.226146] audit: type=1804 audit(2000000977.540:67): pid=1771 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir435899082/syzkaller.C257LL/96/file0/bus" dev="overlay" ino=297177 res=1 [ 1210.227978] 00000000: 58 46 53 42 03 b4 10 00 00 00 00 00 00 00 ef 00 XFSB............ 03:49:37 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,workdir=./file1']) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000100)='./file1/file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f00000001c0)=@ng={0x4, 0x14, "b8c86fef88684417386d7af5399f73b08b9e9ce3"}, 0x16, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) [ 1210.268673] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1210.286659] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1210.304423] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1210.314699] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1210.327155] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1210.341249] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1210.359118] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1210.378413] XFS (loop2): SB validate failed with error -117. [ 1210.399539] XFS (loop4): SB sanity check failed 03:49:37 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000c40900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1210.436009] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 1210.444708] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1210.460384] XFS (loop4): Unmount and run xfs_repair [ 1210.470024] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1210.491458] 00000000: 58 46 53 42 00 00 10 00 00 00 00 04 00 00 09 00 XFSB............ [ 1210.505210] overlayfs: missing 'lowerdir' [ 1210.520660] XFS (loop5): Mounting V4 Filesystem [ 1210.521309] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1210.543501] XFS (loop5): totally zeroed log [ 1210.543837] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1210.564509] audit: type=1804 audit(2000000977.880:68): pid=1787 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir435899082/syzkaller.C257LL/97/file0/bus" dev="overlay" ino=296694 res=1 [ 1210.580471] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1210.590737] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1210.631080] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1210.657106] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1210.684296] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1210.712217] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1210.729973] XFS (loop4): SB validate failed with error -117. 03:49:38 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000440)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000480)={0xb}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x1, 0x0) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000140)={0xc0, 0x40, &(0x7f0000000040)="b7a05a0598d7f4254b6a66ebe7626ec6a11c54fe840bee3957c20be9b21fd6e0ba6192ca2a050286388f3f4c91cc6021eb9d2289310e918493c1a3d20e2c5e724c0bbe8e6d29eb7ce3a316b3faf2fdbaeddbf9d9538b8c0839cef4a99a8d2ec786897f5cc0574f49e957b20900e0f3477283515046b79631d55670f8589e4ee1baca95db44d3361cbd8b5c6d79a19d38e91698e5bca3e7987d4a4d58936833dce0646fe23c4e11277a2fe0c57dc197214125cf19e31aab4f6132acde8b0121155358faca5ce7fa2587c73b73ec83e05d31f199e2adf4ee269e", {0x2, 0xf97, 0xf777767d, 0xb, 0x28, 0x10001, 0xafa8a34af86fa011, 0x6}}) 03:49:38 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b41000000000ffffffff00000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:38 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000003000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:38 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000500000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:38 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$KVM_SET_CPUID(r0, 0x4004551e, &(0x7f0000000700)=ANY=[]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)=0x3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x48000, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x5514, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0)='nfs4\x00', &(0x7f0000000100)='./file0\x00', 0xa45, 0x0, &(0x7f0000000180), 0x10020, &(0x7f00000001c0)=')+\x00') 03:49:38 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) dup2(0xffffffffffffffff, r0) socket$nl_crypto(0x10, 0x3, 0x15) [ 1211.093110] XFS (loop3): SB sanity check failed [ 1211.109477] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1211.146525] usb usb3: usbfs: interface 0 claimed by hub while 'syz-executor0' resets device 03:49:38 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = socket(0x10, 0x2, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) open(&(0x7f0000000e00)='./file1\x00', 0x0, 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file1\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') sendfile(r0, r1, 0x0, 0x80000008000000b) [ 1211.219190] XFS (loop2): SB sanity check failed [ 1211.223923] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1211.230548] XFS (loop3): Unmount and run xfs_repair [ 1211.242642] XFS (loop5): Mounting V4 Filesystem [ 1211.243671] XFS (loop2): Unmount and run xfs_repair [ 1211.248530] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1211.260780] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1211.270399] XFS (loop4): SB sanity check failed [ 1211.275638] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1211.304354] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 c4 09 00 XFSB............ [ 1211.331654] 00000000: 58 46 53 42 03 b4 10 00 00 00 00 ff ff ff ff 00 XFSB............ [ 1211.331962] XFS (loop5): totally zeroed log [ 1211.359350] XFS (loop4): Unmount and run xfs_repair [ 1211.364145] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:49:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7, &(0x7f0000000100)="5baf2d311b97fde4ba60d77f0554a7b5ad38b73a5de243818652c678e7357071c4da0c78ca612cde85cac9c96795c220000000805992ec32a8ef7f4684e6606ed02c55436230aaf02341c80c645cd037232c5a5d845b5ba6857115b9e65d1eafc0e2cf4ed841c962cfacf088e30f866aa33097f46614739aac0828e9c469a8eebb730774790d409b11cebb072e4f5a69e0d6e6f2b98e43dbbe06ebfe5affba") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x2, 0x28e) syz_genetlink_get_family_id$ipvs(&(0x7f0000007c40)='IPVS\x00') [ 1211.383182] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1211.387367] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1211.406313] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1211.409318] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1211.438756] 00000000: 58 46 53 42 00 00 10 00 00 00 00 05 00 00 09 00 XFSB............ [ 1211.484584] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1211.493283] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1211.501395] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1211.533005] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1211.564866] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1211.573020] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 03:49:38 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000004000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1211.581511] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1211.614744] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1211.642876] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1211.651145] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:49:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7f9, &(0x7f0000000380)="0adcf755b21f023c43d6e1daa0703bbc0f90298d8fd4a098515f63705147b4790cd6de9f317b3077f6486449125ecd563ccd1d6bc33c56a494d123a7b007124def97f2dd4de3962b70b8684aa281bbbd2535720e3cd698f17d2d04c19cfbe3511157b6fe0ef3f69e7285247ec0f859094eae361a464ccc2acc352bdeaf3a4661931f8fd11331b81e2e85a01829e1f2bcf53a04b5cf4e75d07dcf8da8c1944309268905cb8fca14ecc4ce4ce7b6f642ad1289a42e61048621179624000000000000000000000000") syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60b409000005110000000000000000ffffe0005a02ff020000000000000000000000000001830090780009040060b680000000000000000000000000ffffff09000000000000000000000000ffffac14ffbb"], 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x80800, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f00000000c0)={0xd7, ""/215}) [ 1211.684137] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1211.692541] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1211.717555] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1211.753567] XFS (loop2): SB validate failed with error -117. [ 1211.764091] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1211.791629] QAT: Invalid ioctl [ 1211.799635] QAT: Invalid ioctl 03:49:39 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000200000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1211.866140] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1211.876001] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1211.914173] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1211.936461] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1211.958596] XFS (loop3): SB validate failed with error -117. [ 1211.967816] XFS (loop4): SB validate failed with error -117. [ 1211.980567] XFS (loop5): Mounting V4 Filesystem [ 1211.993811] XFS (loop5): totally zeroed log [ 1212.009081] XFS (loop5): Failed to read root inode 0x100000000080, error 22 03:49:39 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000003c40900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x4000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffff82c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000080)) r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x40000) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000240)={0xfffffffffffff043, 0x100000000, 0xb9e}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0xf1fdcd91e1180c2a, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000140)={0x5, 0x10, 0xfa00, {&(0x7f0000000480), r2, 0x2}}, 0x18) semget(0x3, 0x6, 0x30) semget(0x2, 0x3, 0x208) semget(0x2, 0x3, 0x0) semget$private(0x0, 0x2, 0x104) semget(0x3, 0x3, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r3, &(0x7f0000000480), 0x10000000000001ed, 0x4c000000) 03:49:39 executing program 1: clock_getres(0x5, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getgid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r0, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x7, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) 03:49:39 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000600000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1212.102709] XFS (loop2): SB sanity check failed [ 1212.115604] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1212.156471] XFS (loop2): Unmount and run xfs_repair [ 1212.161666] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1212.214124] 00000000: 58 46 53 42 03 b4 10 00 02 00 00 00 00 00 09 00 XFSB............ 03:49:39 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000008000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000040)={0x0, 0x2000000001, 0x0, 0x0}) [ 1212.263332] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1212.304934] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1212.313908] XFS (loop4): SB sanity check failed [ 1212.314810] XFS (loop3): SB sanity check failed [ 1212.318932] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1212.323592] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1212.399332] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1212.427472] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1212.453202] XFS (loop4): Unmount and run xfs_repair [ 1212.483379] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1212.490261] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1212.530261] XFS (loop3): Unmount and run xfs_repair [ 1212.550997] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1212.562674] 00000000: 58 46 53 42 00 00 10 00 00 00 00 06 00 00 09 00 XFSB............ [ 1212.571314] XFS (loop3): First 128 bytes of corrupted metadata buffer: 03:49:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="3026204d5bc054c010872a70453b644c0e00001fa3c6174dddece31c645d3c000000000000002d00cfe1b60097b466038621a70000b61f92470d7b066f66db7c"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x220000002b) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000040)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = socket$inet(0x2, 0xf, 0x2) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000040)={0x2, 0x404e23, @remote}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000dc0)='pids.current\x00', 0x0, 0x0) r5 = accept4$inet6(r2, 0x0, &(0x7f0000000e40), 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, &(0x7f0000000600)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'bridge_slave_1\x00', 0x0}) bind$bt_hci(r4, &(0x7f0000000a80)={0x1f, r7, 0x1}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000400)={'team0\x00'}) r8 = accept$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast2}, &(0x7f0000000240)=0x10) syz_extract_tcp_res(&(0x7f00000001c0), 0x100000001, 0x9) r9 = getpid() ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000180)=r9) getpeername(r2, &(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000080)=0xffffffffffffffe2) setsockopt$inet_mreqsrc(r8, 0x0, 0x0, 0x0, 0x0) r10 = msgget$private(0x0, 0x10) r11 = geteuid() fstat(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) r14 = getegid() msgctl$IPC_SET(r10, 0x1, &(0x7f0000000640)={{0x10000, r11, r12, r13, r14, 0x114, 0x5}, 0x2, 0x40, 0x7, 0x1, 0x0, 0x6681cdb9, r1, r1}) [ 1212.601104] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1212.603930] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1212.628175] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 03 c4 09 00 XFSB............ [ 1212.639391] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1212.658930] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1212.670405] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1212.683900] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1212.690859] XFS (loop2): SB validate failed with error -117. [ 1212.694403] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 03:49:40 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="7bf01b15a98a4ffeb18f3c6b6eaf11dbc8d18e1886db7c923bd472cf67ca209515ce5f35a1c5d90941d97cfd4a51487014368071d27d6339d80b3c9aecff999da4bae8b4a30e40602fd4030376855e0f80891cae2314134cc5f10a", @ANYRES16=r1, @ANYBLOB="200b2bbd7000fcdbdf250b0000003c0007000c000400000000000000000008000200eb000000080001000000000008000200010000000c00040047000000000000000800020007000000240006000400020008000100ff0100000800010081000000080001000700000004000200"], 0x74}}, 0x20000000) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) [ 1212.715567] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1212.719803] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1212.737992] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1212.750136] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 03:49:40 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80480, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f00000000c0)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000002b00)="b1", 0x1}], 0x1, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/8, 0x8}], 0x1) bind$isdn(r1, &(0x7f0000000100)={0x22, 0x6, 0xb5, 0x64f4851e, 0x7}, 0x6) [ 1212.754983] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1212.758828] XFS (loop4): SB validate failed with error -117. [ 1212.773988] XFS (loop5): Mounting V4 Filesystem [ 1212.809000] XFS (loop5): totally zeroed log [ 1212.818178] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1212.827811] XFS (loop5): Failed to read root inode 0x100000000080, error 22 03:49:40 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x2}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00004b4000/0x4000)=nil, 0x4000}, 0x1}) setrlimit(0x7, &(0x7f0000000100)) clone(0x0, 0x0, 0x0, 0x0, 0x0) sigaltstack(&(0x7f00004b4000/0x4000)=nil, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000280)={&(0x7f00004b7000/0x1000)=nil, 0x5, 0x1, 0x20, &(0x7f00004b5000/0x3000)=nil, 0x2}) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="f01d1c10", @ANYRES16=r2, @ANYBLOB="08002bbd7000fddbdf2508000000a40004000c00010073797a300000000014000700080002002000000008000200050000001c000700080002002a000000080003009504000008000300feffffff0c00010073797a31000000001c000700080002009e00000008000400ffffffff08000300827700003c0007000800020000000000080002000800000008000300300a000008000400040000000800030003000000080001001f00000008000400008000001c000900080002000600000008000200eaf1ffff0800010000020000"], 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x8000) read(r0, &(0x7f0000000380)=""/100, 0xffe4) [ 1212.856208] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:49:40 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000300000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:40 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000700000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1212.905479] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1212.977765] XFS (loop3): SB validate failed with error -117. 03:49:40 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000003ce0900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:40 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) r0 = syz_open_dev$vcsa(&(0x7f0000000480)='/dev/vcsa#\x00', 0x0, 0x10000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000004c0)={0xfffffffffffffffb}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) flock(0xffffffffffffffff, 0x0) r3 = dup2(r2, r2) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x12b, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)) sendmsg$nl_netfilter(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0x8, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[], 0xfffffffffffffdee}, 0x1, 0x0, 0x0, 0x8000}, 0x4044000) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x2ce, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) io_setup(0x6, &(0x7f0000000500)=0x0) io_cancel(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x7, r1, &(0x7f0000000540)="4e11e6756513b05db2f8d736a21666e21774", 0x12, 0x2, 0x0, 0x1, r3}, 0x0) 03:49:40 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100001008000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1213.295394] XFS (loop2): SB sanity check failed [ 1213.303451] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1213.315409] XFS (loop4): SB sanity check failed [ 1213.320216] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1213.360479] XFS (loop5): Mounting V4 Filesystem [ 1213.389681] XFS (loop4): Unmount and run xfs_repair [ 1213.392962] XFS (loop3): SB sanity check failed [ 1213.400827] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1213.413942] XFS (loop2): Unmount and run xfs_repair [ 1213.421090] XFS (loop5): totally zeroed log [ 1213.422695] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1213.445805] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1213.461615] 00000000: 58 46 53 42 00 00 10 00 00 00 00 07 00 00 09 00 XFSB............ [ 1213.462559] XFS (loop3): Unmount and run xfs_repair [ 1213.487941] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1213.506946] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1213.515093] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1213.539191] 00000000: 58 46 53 42 03 b4 10 00 03 00 00 00 00 00 09 00 XFSB............ [ 1213.550997] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 03 ce 09 00 XFSB............ [ 1213.564152] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1213.566181] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1213.572661] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1213.589726] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1213.598304] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1213.606860] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1213.616113] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1213.624668] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1213.633205] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1213.637799] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1213.641757] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1213.659542] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1213.668254] XFS (loop3): SB validate failed with error -117. [ 1213.674562] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1213.680110] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1213.698791] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1213.718695] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1213.730825] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1213.738343] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1213.753493] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1213.759841] XFS (loop2): SB validate failed with error -117. [ 1213.769813] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1213.779616] XFS (loop4): SB validate failed with error -117. 03:49:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = creat(&(0x7f0000000400)='./file0\x00', 0x0) close(r1) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x8, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40080) ioctl$EXT4_IOC_RESIZE_FS(r1, 0x6611, 0x0) 03:49:41 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100008008000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:41 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000003d20900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:41 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000800000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:41 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000400000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000000)=0x5) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x8, 0x2000) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/220, 0xdc) ioctl$IOC_PR_PREEMPT(r1, 0xc0386105, 0x0) 03:49:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) pipe(&(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) gettid() r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000935000/0x12000)=nil, 0x12000, 0x200000e, 0x10, r3, 0xfffffffffffffffe) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000440)) write$binfmt_misc(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="3c52177e117461958bab5fe80a84a1c5715f045656000000ad7c3e16dcbe8b6164a20e34089cac20ce1490ac757389ea3a74066dbb9a8d9760cc5c35036cf121151311c392a1ae0890d2b9d664fb5e4d9fe55ec7ebcdcbc82a3388a7cf1cc8e55022edefcbadfa645d4b5bbd96629699daa0ead07b05d078f60022a19c267c5201427de3b3ce236224585b9b54a25e91477076ef736869b3945b7c311d0c7c4633bced3f644aae6c402e610b3250251d6f42569d52168ae77aa40668665c44857be57d67c45317d4a612bc09078c0b90c31c4ea52cea70de37df5ee577f1"], 0xde) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r4, 0x1, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000680)={0x0, 0x1}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f00000005c0)) setxattr$security_selinux(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:man_t:s0\x00', 0x1b, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x40000000000013, 0x10, 0xe68}, 0x2c) getresuid(&(0x7f0000000500)=0x0, &(0x7f0000000540), &(0x7f0000000580)) stat(&(0x7f0000000600)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0}, &(0x7f0000000840)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6}}, &(0x7f0000000980)=0xe8) syz_mount_image$gfs2(&(0x7f0000000200)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x6, 0x1, &(0x7f00000004c0)=[{&(0x7f00000003c0)="2e44d7efa4f58af17d26cca42786d5195613aa730fcc19704d56b9c758e64cd1015fa12e94d6eb093378e8d3750743676a9cc0943a738ba614a1d8d171400c5c22d92278cc206b63db07b35b5f3feb606954e5f41466850f3acacde59e96", 0x5e, 0x8001}], 0xa022c42fb3aea7c7, &(0x7f00000009c0)={[{@noacl='noacl'}, {@nosuiddir='nosuiddir'}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fsname={'fsname', 0x3d, 'system_u:object_r:man_t:s0\x00'}}, {@fowner_lt={'fowner<', r6}}, {@euid_gt={'euid>', r7}}, {@uid_eq={'uid', 0x3d, r8}}, {@smackfsroot={'smackfsroot', 0x3d, 'em0$]'}}, {@fowner_gt={'fowner>', r9}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000240)={r5, &(0x7f0000000100), 0x0}, 0x137) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000100)=0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x2}) [ 1214.102565] XFS (loop5): Mounting V4 Filesystem [ 1214.130984] XFS (loop5): totally zeroed log [ 1214.155234] XFS (loop5): Failed to read root inode 0x100000000080, error 22 03:49:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x88901, 0x0) [ 1214.269607] XFS (loop2): SB sanity check failed [ 1214.288844] XFS (loop3): SB sanity check failed [ 1214.293922] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1214.312491] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1214.338952] XFS (loop3): Unmount and run xfs_repair [ 1214.368692] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1214.377262] XFS (loop2): Unmount and run xfs_repair [ 1214.388237] XFS (loop4): SB sanity check failed [ 1214.407610] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:49:41 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000010000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1214.429850] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 03 d2 09 00 XFSB............ [ 1214.430340] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1214.458036] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1214.463674] 00000000: 58 46 53 42 03 b4 10 00 04 00 00 00 00 00 09 00 XFSB............ [ 1214.470025] XFS (loop4): Unmount and run xfs_repair 03:49:41 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100008008000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1214.487823] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1214.496458] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1214.512632] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1214.517657] 00000000: 58 46 53 42 00 00 10 00 00 00 00 08 00 00 09 00 XFSB............ [ 1214.521522] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1214.537837] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1214.571054] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1214.571467] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1214.593939] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1214.610638] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1214.621146] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1214.622909] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1214.645943] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1214.666990] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1214.668080] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1214.692510] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1214.701537] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1214.715044] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1214.720821] XFS (loop3): SB validate failed with error -117. [ 1214.733263] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1214.751030] XFS (loop2): SB validate failed with error -117. [ 1214.757371] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1214.776085] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1214.786221] XFS (loop0): Mounting V4 Filesystem [ 1214.790552] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1214.803053] XFS (loop4): SB validate failed with error -117. [ 1214.805016] XFS (loop0): totally zeroed log [ 1214.850576] XFS (loop0): Failed to read root inode 0x100000000080, error 22 [ 1214.873510] XFS (loop5): Mounting V4 Filesystem 03:49:42 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000002de0900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1214.915149] XFS (loop5): totally zeroed log [ 1214.928395] XFS (loop5): Failed to read root inode 0x100000000080, error 22 03:49:42 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100008008000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:42 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000500000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:42 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000900000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:42 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f8000000000000000400000100000000080000000000000008100000000000000820000000100001000000000010000003f000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1215.250807] XFS (loop3): SB sanity check failed [ 1215.255804] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1215.292192] XFS (loop3): Unmount and run xfs_repair [ 1215.320284] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1215.330746] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 02 de 09 00 XFSB............ [ 1215.393884] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1215.427443] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1215.468277] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1215.484302] XFS (loop4): SB sanity check failed [ 1215.489390] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1215.515665] XFS (loop0): Mounting V4 Filesystem [ 1215.522130] XFS (loop5): Mounting V4 Filesystem [ 1215.544416] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1215.551028] XFS (loop4): Unmount and run xfs_repair [ 1215.558235] XFS (loop0): totally zeroed log [ 1215.562965] XFS (loop5): totally zeroed log [ 1215.567838] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1215.574676] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1215.588043] 00000000: 58 46 53 42 00 00 10 00 00 00 00 09 00 00 09 00 XFSB............ [ 1215.590402] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1215.604902] XFS (loop0): Failed to read root inode 0x100000000080, error 22 [ 1215.617299] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1215.627598] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1215.640585] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1215.650286] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1215.651841] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1215.672707] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1215.681434] XFS (loop3): SB validate failed with error -117. [ 1215.689188] XFS (loop2): SB sanity check failed [ 1215.694543] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1215.706827] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1215.715389] XFS (loop2): Unmount and run xfs_repair [ 1215.721446] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1215.736247] 00000000: 58 46 53 42 03 b4 10 00 05 00 00 00 00 00 09 00 XFSB............ [ 1215.745408] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1215.757672] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1215.774248] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1215.782891] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1215.785634] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1215.799361] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1215.799373] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1215.799383] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:49:43 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000002e20900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:43 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f800000000000000040000010000000008000000000000000810000000000000082000000010000100000000001ffffffeb000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1215.799394] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1215.799463] XFS (loop2): SB validate failed with error -117. [ 1215.864185] XFS (loop4): SB validate failed with error -117. 03:49:43 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f8000000000000000400000100000000080000000000000008100000000000000820000000100001000000000010000003f000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:43 executing program 1: socket$can_bcm(0x1d, 0x2, 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xd0, 0x400200) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/exec\x00') syz_open_pts(r1, 0x20000000501001) syslog(0x0, 0x0, 0xf4) 03:49:43 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000600000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:43 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000a00000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:43 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100008008000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x111040, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000040)=""/134) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1216.197968] XFS (loop3): SB sanity check failed [ 1216.202933] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1216.218093] XFS (loop5): Mounting V4 Filesystem [ 1216.243627] XFS (loop5): totally zeroed log [ 1216.272707] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1216.303074] XFS (loop3): Unmount and run xfs_repair [ 1216.331425] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1216.342856] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 02 e2 09 00 XFSB............ [ 1216.384222] XFS (loop4): SB sanity check failed [ 1216.389062] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1216.401362] XFS (loop2): SB sanity check failed [ 1216.409615] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1216.430129] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1216.439357] XFS (loop0): Mounting V4 Filesystem [ 1216.443983] XFS (loop4): Unmount and run xfs_repair [ 1216.457281] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1216.457569] XFS (loop0): totally zeroed log [ 1216.466326] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1216.479333] XFS (loop0): Failed to read root inode 0x100000000080, error 22 [ 1216.480473] 00000000: 58 46 53 42 00 00 10 00 00 00 00 0a 00 00 09 00 XFSB............ [ 1216.497079] XFS (loop2): Unmount and run xfs_repair [ 1216.506929] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1216.518550] XFS (loop2): First 128 bytes of corrupted metadata buffer: 03:49:43 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="5b643a3a5d2c45852d303a7a62"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x131040, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="02002cbd7000ffdbdf250c0000002c0002000800020006000000040004000800010018940000080001000600000008000200feffffff04000400a00005004c00020008000300200000000800020000800000080004000008000008000200040000000800030040000000080004000900000008000200020000000800020005000000080002000600000008000100756470000c0002000800040043000000140002000800030007000000080002009b667a3108000100657468000c0002000800040029e3241208000100696200000c00020008000100020000000c000600080001001f000000"], 0xec}, 0x1, 0x0, 0x0, 0x3f3af834c3173b2b}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x20200, 0x0) connect$vsock_stream(r3, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000200)={r4, 0x5, 0x8, 0x4, 0x10000, 0x91f, 0x2}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000014) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0c002cbd7000ffdbdf25010000002400070008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="090000002372104f64a33e3e64ad7597a5977303a82537855de36ed703b1561051427c408c7c9a1dcb0b28c8df36d41c2507000000000000005db735d4416c34dfcdb6150050dab85a4966780fc7814155df09a58e7fe33e4a5b06c81568db61e9c3b0de8fe9b43d4f0aa4a4a1e2053f4fa27297b24136a15e257ee325f35da846744bec0566073eb1f8b239b0cabfa380a3c932be757af5271dcae5593752ff10994517668ba47774c737e90f48b1c88f869e2141960e08e040bf5acf0cdd2e1a6e20ce73983f67afe0f8a4e175c0be478d", @ANYRES32=r3, @ANYBLOB="0c00040005000000000000000c0006000300000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40880}, 0x20048004) [ 1216.529463] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1216.541822] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1216.553629] 00000000: 58 46 53 42 03 b4 10 00 06 00 00 00 00 00 09 00 XFSB............ [ 1216.569853] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1216.581639] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1216.597723] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1216.600398] ceph: device name is missing path (no : separator in [d::],E…-0:zb) [ 1216.608224] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1216.627840] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1216.634053] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1216.636162] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1216.644780] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1216.658973] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1216.662937] ceph: device name is missing path (no : separator in [d::],E…-0:zb) [ 1216.672267] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1216.677277] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1216.691040] XFS (loop3): SB validate failed with error -117. [ 1216.693529] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1216.699187] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1216.699197] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1216.699256] XFS (loop4): SB validate failed with error -117. 03:49:44 executing program 1: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x8000, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x78) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00D\x00\xec\xff\x03E') r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cachefiles\x00', 0x4, 0x0) getdents64(r1, &(0x7f0000000180)=""/82, 0x214) getdents64(r2, &(0x7f0000000df0)=""/528, 0xfffffffffffffd9d) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@dev, @in6}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) [ 1216.708889] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1216.738381] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1216.753904] XFS (loop2): SB validate failed with error -117. 03:49:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, 0x0, 0x0) lstat(0x0, 0x0) getresgid(&(0x7f0000000a80), &(0x7f0000000ac0), &(0x7f0000000b00)) getpgrp(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, 0x0, &(0x7f0000000c40)) getgid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d00)={{{@in6=@loopback, @in=@remote}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000e00)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e40)={0x0}, 0x0) getpgrp(r2) getgroups(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000011c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, 0x0, &(0x7f0000001240)) fstat(r0, 0x0) getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000001400)) stat(&(0x7f0000001440)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)={0x19, 0x8e5, 0x100, 0x5, 0x0, 0x1, 0x9}, 0x2c) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40000) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = gettid() r7 = getpgrp(r6) kcmp(r6, r7, 0x0, r4, r5) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000002c0)=ANY=[@ANYBLOB="5e000000f0a83f74a47b8f72ed89e3bc2ac3fe250b8a5c76000044c7cd9f8f27a0ac1c5e64e14694b794066353b812ec5bcb766d2067fba9ee7f491204b9d6870b5a87833fb412e0f2e85e4bb73e913db95087895680f98eaf2600000000f6b4b3d6297945e362a941c6a9a50000000000517154f1936f3d886e3f404a4b6d56d8c1e2daea728f7b0d6c8fd976e6393fd5701e1d6d1cd6cccd55e93af4b088a1c99871c22877dadde1fd018e54c84cc39cb1d91dfe1e68ba09120943e879a5f8ad7c0fb116c20967585126f2b72a"], 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000580)={&(0x7f0000000240), 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB='2\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="280827bd7000fcdbdf2507000000100006000400020008000100010400001c0005000800010069620000080001006574680008000100756470000c0006000800010003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20048040) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x400}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000000c0)={0x8000008, 0x7ff, 0x8, 0x1, 0xffffffffffffff74, 0x7, 0x4, 0x7f, r9}, &(0x7f0000000140)=0x6) 03:49:44 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f800000000000000040000010000000008000000000000000810000000000000082000000010000100000000001fffffdfc000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:44 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000ffffffeb0900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:44 executing program 1: timerfd_create(0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x4, &(0x7f0000000180), &(0x7f00000001c0)) rt_sigqueueinfo(0x0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x5, @mcast1, 0x1}, 0x1c) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_STD(r3, 0x80085617, &(0x7f0000000140)) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f0000005fc0), 0x0, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) 03:49:44 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000b00000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:44 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000700000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000080)={0x1, 0xfffffffffffffe01}) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c00)=""/125, 0x7d}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') preadv(r1, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/100}, {&(0x7f0000000140)=""/4096}, {&(0x7f0000001140)=""/204}, {&(0x7f0000001240)=""/63}], 0x65d, 0x0) [ 1217.268763] XFS (loop4): SB sanity check failed [ 1217.278080] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1217.291713] XFS (loop5): Mounting V4 Filesystem [ 1217.304141] XFS (loop5): totally zeroed log [ 1217.324752] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1217.333821] XFS (loop3): SB sanity check failed [ 1217.340486] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1217.345132] XFS (loop4): Unmount and run xfs_repair [ 1217.360161] XFS (loop3): Unmount and run xfs_repair [ 1217.368531] XFS (loop3): First 128 bytes of corrupted metadata buffer: 03:49:44 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm_plock\x00', 0x20000, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000980)={[], 0x0, 0x0, 0x10001, 0x0, 0x0, 0x3000, 0x0, [], 0x69c157c8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000002c460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], 0x0}, 0x48) exit(0xe000000a0ffffff) getcwd(&(0x7f00000000c0)=""/16, 0x10) getitimer(0x1, &(0x7f0000000440)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000480)={0x1f, 0x200, 0x201, 0xffffffffffffffff, 0x7, 0x5, 0x8, 0x9, 0x0}, &(0x7f00000004c0)=0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1}, &(0x7f0000000680)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000008c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000c40)={@mcast1, @loopback, @ipv4={[], [], @empty}, 0x6, 0x2, 0xfffffffffffffff8, 0x500, 0xcd6, 0x4000000, r2}) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f00000005c0)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000200e92207036438c4ab00040100"], 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000500)={@initdev, @multicast2, 0x0}, &(0x7f0000000700)=0xc) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000b40)={{{@in=@local, @in=@empty, 0x4e24, 0x9, 0x4e22, 0x2, 0xa, 0x20, 0x80, 0x3c, r3, r4}, {0x10001, 0x3643, 0x1, 0x80000000, 0x4, 0x6, 0x2, 0x8}, {0x6, 0x1, 0x4d7c, 0x80}, 0xffffffff80000001, 0x6e6bb0, 0x3, 0x1, 0x2, 0x2}, {{@in=@loopback, 0x4d3}, 0x0, @in6=@ipv4={[], [], @multicast1}, 0x3507, 0x0, 0x3, 0x6f, 0x5, 0x4, 0x2}}, 0xe8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x8, &(0x7f0000000180), 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000340)={0xf, 0x8}, 0x10) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000380)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x4, 0x6, [0x0, 0x1, 0x4, 0x6, 0x4, 0x3]}, &(0x7f00000003c0)=0x14) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000400), 0x4) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000900)) write$UHID_INPUT(r0, &(0x7f0000001080)={0x8, "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", 0x1000}, 0x1006) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000cc0)=@updpolicy={0x240, 0x19, 0x4, 0x70bd28, 0x25dfdbfd, {{@in6=@mcast1, @in6, 0x4e24, 0x0, 0x4e22, 0x0, 0xa, 0x20, 0x80, 0x73, r3, r4}, {0xdc00, 0x1, 0x8, 0x5, 0x8, 0x6, 0xfffffffffffffffc, 0x2}, {0x5, 0x0, 0x2, 0x2}, 0x6, 0x6e6bbb, 0x3, 0x1, 0x0, 0x3}, [@algo_comp={0x11c, 0x3, {{'deflate\x00'}, 0x690, "f446136b567a15d7603f57275bd8f45af99588b1887dff03793622452a2626f215f713687b05f0edb8040b64944cc23fd65f6599a8679da3c59fdf4051e3e605d7ddfef3db4e3aedcc10498601248b3d54720c0ae8e862e28f9b914833f72dd070036356fc5e792d79fe068c58de0f0739c87957d782d8275aa5d75b2bf64d064fd3650b150b50f82e52aa9e555dcf2d5135e6b9278609614188d6181d7ebbef1abfce126a1f7f41365a4532f3e8174af413f9f5ae6f70e45531e89ecc9a59ec47b4335801e300b0a05463f1b7e7f8070f1a"}}, @sec_ctx={0x64, 0x8, {0x5f, 0x8, 0x1, 0x1, 0x57, "63e571b4fe94d16108bf6d851b7ab280602f3455868df402169488996e0b6fefe438cd036a6245d3a6cc85fe569f2bbb1a74506c3684e632dccbde17fc920195c85f592e01ba15b303642ecd958faeb2a10885c0a6bbec"}}, @proto={0x8, 0x19, 0x32}]}, 0x240}, 0x1, 0x0, 0x0, 0x40}, 0x4800) [ 1217.393008] 00000000: 58 46 53 42 00 00 10 00 00 00 ff ff ff eb 09 00 XFSB............ [ 1217.393137] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1217.408369] XFS (loop2): SB sanity check failed [ 1217.413218] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1217.420122] 00000000: 58 46 53 42 00 00 10 00 00 00 00 0b 00 00 09 00 XFSB............ [ 1217.430552] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:49:44 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) socketpair(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x1c}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x100, 0x0) socket$rxrpc(0x21, 0x2, 0xa) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000080)={0x3000, 0x83, 0x8}) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000001240)='trusted.overlay.origin\x00', &(0x7f0000001280)='y\x00', 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001300)={'veth1_to_hsr\x00', &(0x7f00000012c0)=@ethtool_channels={0x3d, 0x8000, 0x4, 0x37, 0x0, 0xffffffffffffffff, 0x5, 0xffff, 0xbe}}) listen(r3, 0x100) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x4}, 0x8) connect$inet(r2, &(0x7f0000000180)={0x2, 0x8000000000004e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000001340)='./file0\x00') r4 = accept(r0, 0x0, 0x0) write$UHID_INPUT(r3, &(0x7f0000000200)={0x8, "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", 0x1000}, 0x1006) close(r4) [ 1217.441308] XFS (loop2): Unmount and run xfs_repair [ 1217.446452] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1217.452438] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1217.467534] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1217.476669] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1217.482829] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1217.492141] 00000000: 58 46 53 42 03 b4 10 00 07 00 00 00 00 00 09 00 XFSB............ [ 1217.523011] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1217.531581] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:49:44 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x11) r1 = dup3(r0, r0, 0x80000) setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, &(0x7f0000000040)=r1, 0xfffffffffffffe60) setsockopt$inet6_dccp_buf(r1, 0x21, 0x8f, &(0x7f0000000140)="db9ad5d03008456ab87e8d2ee338ac34cfc2ea8675dcd4683e85324a3440c18b3cee90a4f96086c876fa7c3cc1e90accbeec7acea3723785c36c6d2967d3c88365356ba56f3fda5b2adf72dcaf2456cef05cfed70726af6f537f75acb3b668057507f80461371fb3057f7af34d2fccc6524b90b18977344312406507e3663355d3a417ca989e003cd61e30f958140f9b732ee982c09a315f86168c50", 0x9c) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10000, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'syzkaller1\x00', 0x200}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) [ 1217.561485] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1217.574417] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1217.581326] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1217.595749] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:49:44 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f800000000000000040000010000000008000000000000000810000000000000082000000010000100000000001fffffdfd000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1217.608494] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1217.619741] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1217.638238] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1217.644061] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1217.652038] XFS (loop3): SB validate failed with error -117. [ 1217.676859] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1217.700863] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1217.707809] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1217.711586] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1217.732778] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1217.762433] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 03:49:45 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x101000, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x114) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x500, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) fcntl$dupfd(r1, 0x0, r0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000200)="b8010000000f01d965660faeb603000000b8358556370f23c80f21f8350400d0000f23f8640fc7ae02000000ea00600000fa00c4c18566220f20d835080000000f22d8360f01cf66baf80cb83bd30c85ef66bafc0cb06aee0fc7b49f0a000000", 0x60}], 0x1, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1217.793439] XFS (loop2): SB validate failed with error -117. [ 1217.829664] XFS (loop4): SB validate failed with error -117. 03:49:45 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000f40900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1217.888122] XFS (loop5): Mounting V4 Filesystem 03:49:45 executing program 1: r0 = semget(0x1, 0x4, 0x4) semctl$IPC_INFO(r0, 0x0, 0x3, &(0x7f0000000600)=""/4096) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x6, 0x0) readv(r3, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000025c) getpeername$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) write$FUSE_DIRENT(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='0'], 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r5, 0x15) write$P9_RWSTAT(r2, &(0x7f0000000000)={0x7}, 0x176) [ 1217.918085] XFS (loop5): totally zeroed log 03:49:45 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000c00000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1217.946610] XFS (loop5): Failed to read root inode 0x100000000080, error 22 03:49:45 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000900000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1218.114279] XFS (loop3): SB sanity check failed 03:49:45 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f800000000000000040000010000000008000000000000000810000000000000082000000010000100000000001fffffffe000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1218.138349] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:49:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x3ff, 0x45, 0x1000, 0xfffffffffffffffa, 0xc, 0x1, 0x2, 0xd45a, 0x7, 0x4, 0x400, 0x6}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)) ioctl$KDSETLED(r1, 0x4b32, 0x1f) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) inotify_init1(0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) [ 1218.283032] XFS (loop4): SB sanity check failed [ 1218.288082] XFS (loop3): Unmount and run xfs_repair [ 1218.288211] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1218.338967] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1218.364178] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 f4 09 00 XFSB............ [ 1218.384670] XFS (loop2): SB sanity check failed [ 1218.391468] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1218.412153] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1218.427617] XFS (loop4): Unmount and run xfs_repair [ 1218.434173] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1218.454766] XFS (loop2): Unmount and run xfs_repair [ 1218.459239] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1218.460113] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1218.475913] XFS (loop2): First 128 bytes of corrupted metadata buffer: 03:49:45 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x80800, 0x0) unshare(0x20000) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="d42e71013eca37860924ac21a4c85ece"], &(0x7f0000000240)='./file0\x00', 0x0, 0x1000, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="9335d2399a08a6cca1483e88d24c0a251dd3caa98ef6d0c4f444f6db0f2c4950a302275c4326a2daee85b5acdcca840c4f13f7bdd1c21d4b7d60cde22d3a0e4d3cedd961f467aac0075907a9a4b59b116aed788103672bb0644a2ee8f001e5ad8b1cc5cab91dce09f84a633440fa6093db9c1944e8ead39ea19f5f4abad7c925c62f5720c574db7c5beee27b4ab8410451718259", 0xfffffffffffffde6) unlink(&(0x7f0000000080)='./file0\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20080201}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="000428bd7000fddbdf25070000001c0002000800090040000000080009004618000008000500ffffff7f0800050074fdffff08000400ff030000440001000800080002000000080009007f0000000800010000000000080009002400000008000b007369700008000800ff070000080004004e23000008000500040000000c0002000800060008000000"], 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) [ 1218.490842] 00000000: 58 46 53 42 00 00 10 00 00 00 00 0c 00 00 09 00 XFSB............ [ 1218.504104] 00000000: 58 46 53 42 03 b4 10 00 09 00 00 00 00 00 09 00 XFSB............ [ 1218.519433] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1218.528159] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1218.544666] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1218.547951] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1218.553032] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1218.574162] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1218.597134] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1218.602784] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1218.611091] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1218.621679] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1218.622871] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1218.632038] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1218.638527] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1218.638539] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1218.638548] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1218.638635] XFS (loop4): SB validate failed with error -117. [ 1218.657064] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1218.672231] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ 03:49:46 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000040)=""/4096) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001040)=""/205) syncfs(r0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000001140)={0x2}) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$KVM_SMI(r0, 0xaeb7) r1 = add_key$user(&(0x7f0000001180)='user\x00', &(0x7f00000011c0)={'syz', 0x3}, &(0x7f0000001200)="cb6efcb2b57609fe051820f30295202d21e2e949a8d3ea6676aed210cc289e994f9453713cd879e7485a25de37275d3de4658e62c5533cee359f3026cae9ee7a50ee3a4c85e51f01e4658c572fcc434cc42fb900f492145139a40927a741c7cd14b1b133127f7ce1e50b5f9471bb10d708bbd8eb1792d41d0e9599f97455aa314af9bd29e6c8530c2715e04bb2991497a1ecf7fd7550ffa63777dde30e40664422b3df3108b31b13bbac59a08b5d7b22f6fe7976052bf6525bb30381", 0xbc, 0xffffffffffffffff) keyctl$get_security(0x11, r1, &(0x7f00000012c0)=""/23, 0x17) ioctl$SIOCNRDECOBS(r0, 0x89e2) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001300)={0x0, 0xe5be}, &(0x7f0000001340)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000001380)={r2, 0x0, 0xfffffffffffffffc}, 0x8) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001400)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x14, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001540)={r2, 0x2c, &(0x7f0000001500)=[@in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x2b}, 0xfffffffffffffff7}]}, &(0x7f0000001580)=0x10) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001640)=0x0) r6 = perf_event_open(&(0x7f00000015c0)={0x1, 0x70, 0x1, 0x49f, 0x80000000, 0x818, 0x0, 0x7f, 0x1, 0x1, 0x7, 0x1d04, 0x7, 0x800, 0x3, 0xa6, 0x3, 0x15bf, 0x3f6b, 0xb1, 0xedf, 0x3, 0x1, 0xfffffffffffffffa, 0x1, 0x8, 0x6, 0x100, 0x6, 0x6, 0x200, 0x4, 0x3, 0x3, 0x4, 0x9, 0x1, 0x101, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x4}, 0x8000, 0x8, 0x1000, 0x4, 0x5, 0x25c}, r5, 0xd, 0xffffffffffffffff, 0x2) keyctl$revoke(0x3, r1) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000001680)={0x6, 0x3afd4c36}) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000016c0)={r4, 0x1, 0x1, 0x100000001}, 0x10) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000001700)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001740)={{{@in=@multicast1, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000001840)=0xe8) ioctl$FICLONE(r6, 0x40049409, r0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001880)=0x8, 0x4) ioctl$RTC_VL_CLR(r0, 0x7014) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f00000018c0)) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000001900)=""/97, &(0x7f0000001980)=0x61) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000019c0)={0x7, 0x5, 0x1}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a40)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x24, r7, 0x201, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x2}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 03:49:46 executing program 0: syz_emit_ethernet(0x163, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) syz_mount_image$ceph(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)='./file0\x00', 0x1a9b, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000200)="db97a500966a6ddd49a0ba7c86ec8bc6270d0c7759b08dca82695955e98c45fa32ecc9bef07d270e840cc878c99be41f961d97934b1f70e6c0af2414454054d167dae4ef9fb2fc8c23c244c3912df4d4fa659c501cc58f3dda3b70be723794", 0x5f, 0x80}, {&(0x7f0000000280)="a5e212148b5a33104d0c2b3f8c3b20c2d37aadec1b39e0e812816e7966d0c88b78bfd53fd6c591d77fd2bb1bcbb8b4145e7c56339db5c6cee811baa03669f2284f83a1f51dab655bb789c7a015c4f2f8d41a70aa86a880023ea979c75e71323482a5a8d1164982946eed1fd04d14519be5d690b9303cd2282ecae9b44558c9fe80782060cc", 0x85, 0xfff}, {&(0x7f0000000340)="cf9a3fbcde388f076b056df8eafe8b9831ec3bb96a7cb7ba6df5b9e2404ab5317bd7cac122bde4b2d51e9d9ca94d4dd494e3bec17230e46ee0f65f7c1ab2aef163d59aa1d29232e66aed18e180ccd3467f04c15dc869fc2f14f37206392fa9767c2253531965880509712fe947179ad506938f4cbecaae99c469e88873521a38251254c5979e5c37c267261fbd1950ede6439602ebaf2be57067f2362e901d2f2f96f44a82f53c4e28b4244150b3f72458f1115fa3cbd19eed2728c3a272531bf0dac4ce65f823e6bb524798576023c30fb790ab3f2402fcd7746cc1db7bfc8816b6e6510b286d193434cb3aea9b517d365cb6", 0xf3, 0x3ff}, {&(0x7f0000000440)="93c39155a91c38e499f20a8ffceec5c6247d07b8305a768196d4b686f47a6d543ba8002de6045b72c70d32abe01c8cb6e44a75334388bef5fb8dcb199ba92c42b6b8c6a813e4a7da684fcff7596a1268368974f91d28f5016e", 0x59, 0x3}], 0x2000000, &(0x7f0000000540)='%^em1\x00') [ 1218.694763] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1218.700967] XFS (loop2): SB validate failed with error -117. [ 1218.710843] XFS (loop5): Mounting V4 Filesystem [ 1218.722721] XFS (loop3): SB validate failed with error -117. [ 1218.746370] XFS (loop5): totally zeroed log [ 1218.772093] XFS (loop5): Failed to read root inode 0x100000000080, error 22 03:49:46 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) socket$inet(0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x10000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000700)=[@text32={0x20, &(0x7f0000000740)="3e0f005417000f35b9800000c00f3235000800000f3066b8b6008ec0c4e27941220fc75bd00f0d5a0d0f080f20e035040000000f22e066baf80cb8b84c8d89ef66bafc0ced", 0x45}], 0x1, 0x21, 0x0, 0x2d6) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f0000000480)={0x103b, 0x100, "e45e3aee69ccb3a7ed4b4c6a752e7964b00ac31386526676c0816597546a5620", 0x0, 0x0, 0x3, 0x200, 0x2}) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3323, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$9p(r3, &(0x7f0000000280)="67de53ede54bb386ea500b0c1536a3cef3f1e6efe5ff5224fc485fcee4a5b5ad4e88b7db05fda8cf18eed535923604a8952cad8505fe13c92c17a4ae02747c7399f138e77874ce11816cf4c64e85062befae4e243d68ec0d19791a927c552d8f55acc1a974198904b0ba66d50663454c52ab17c953b6e4d2e72fd3e1140d065658f1dee4a9b21b9f0b314aec78cb56d970808b072844def54d322d319bc27b190ca18727af96651650aa3e9e03e97a47f172", 0xb2) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_dccp_buf(r3, 0x21, 0xc, &(0x7f00000007c0)=""/155, &(0x7f00000000c0)=0x9b) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000380)={'U+', 0x9}, 0x28, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="21160000b98106", @ANYRES16=r6, @ANYBLOB="100027bd7000fedbdf250a0000000800050008000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4041) fcntl$setown(r4, 0x8, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f00000003c0)) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r8, &(0x7f0000011fd2), 0xffffffee) read(r7, &(0x7f0000000000)=""/126, 0xfffffeab) ioctl$RTC_AIE_OFF(r7, 0x7002) write$P9_RRENAME(r3, &(0x7f00000005c0)={0x7, 0x15, 0x2}, 0x7) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000680)=0x100, 0x4) clone(0x0, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x6, 0x0) 03:49:46 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000a00000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:46 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000fffffff60900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1218.960089] ceph: device name is missing path (no : separator in /dev/loop0) 03:49:46 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000d00000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1219.083382] XFS (loop5): Mounting V4 Filesystem [ 1219.091645] XFS (loop5): totally zeroed log [ 1219.096797] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1219.136984] XFS (loop2): SB sanity check failed [ 1219.141757] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:49:46 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f800000000000000040000010000000008000000000000000810000000000000082000000010000100000000001fcfdffff000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1219.208286] XFS (loop2): Unmount and run xfs_repair 03:49:46 executing program 0: socketpair$unix(0x1, 0x8000000000000001, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknod(0x0, 0x0, 0x0) clone(0xa0000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000)) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x420, [0x0, 0x200002c0, 0x200004d0, 0x20000610], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x498) [ 1219.250950] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1219.286379] 00000000: 58 46 53 42 03 b4 10 00 0a 00 00 00 00 00 09 00 XFSB............ [ 1219.318538] XFS (loop3): SB sanity check failed [ 1219.325721] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1219.361447] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1219.393661] XFS (loop4): SB sanity check failed [ 1219.395650] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1219.399060] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1219.409824] XFS (loop3): Unmount and run xfs_repair [ 1219.429135] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1219.437116] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1219.437708] XFS (loop3): First 128 bytes of corrupted metadata buffer: 03:49:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x8ec0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[]], 0x8) close(r2) [ 1219.459589] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1219.480345] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1219.484177] 00000000: 58 46 53 42 00 00 10 00 00 00 ff ff ff f6 09 00 XFSB............ [ 1219.489753] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1219.513422] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1219.514082] XFS (loop4): Unmount and run xfs_repair [ 1219.521991] XFS (loop2): SB validate failed with error -117. [ 1219.554518] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1219.568107] XFS (loop5): Mounting V4 Filesystem [ 1219.580184] XFS (loop5): totally zeroed log [ 1219.584646] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1219.592902] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1219.597751] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1219.609383] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1219.631139] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1219.642084] 00000000: 58 46 53 42 00 00 10 00 00 00 00 0d 00 00 09 00 XFSB............ [ 1219.647119] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1219.664417] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1219.680977] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1219.690755] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 03:49:47 executing program 0: r0 = dup(0xffffffffffffffff) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0xffffffffffffffe0}, 0x2) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="5048fdf3a33189a196bdd7e2f05356f7085f72d7e49c4485e3313e985b5de2e5e9f6da3a424bc4138f76bc90e2eefff0b4068655b554059195d90cf16e6fa5ed0c9ec8faca2c847ef9a0dad9b69d6feab4778d663a42fab00474e72c1c7c37883323e61c9a1a326269aa0344dd56b43f4f09ac87325ec7ce295e4fae2bca9d41ca7415f6fb1190a6", 0x88) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/userio\x00', 0x8082, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000100), 0x2) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f00000001c0)=0x6) [ 1219.701687] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1219.706437] XFS (loop3): SB validate failed with error -117. [ 1219.731026] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1219.755423] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1219.764684] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1219.773051] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1219.782080] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1219.790961] XFS (loop4): SB validate failed with error -117. 03:49:47 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000b00000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:47 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000003f80900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1219.966444] misc userio: The device must be registered before sending interrupts [ 1219.982949] misc userio: The device must be registered before sending interrupts 03:49:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000240)=ANY=[@ANYBLOB="8a7fd089f5b6f620bb9493f9de287e93e3ee0c9ec8ecc3ee43fef6f8764fead021baf685f9d227fdb4951529fe7e0f23702c00ab7b5d5aabf8ffffff9fed9034aab11a8c90836bb4829b3b648fa620e8095266c8bc4604705c7afb79707c9e3f8556515d3ab1f7cefaaa5945f88c9dfa997e7dbe8a1b6d9521230858c7f51258ad0fd6be32bae638a5e1a8d4a8f5a6291e431f4a"]) unshare(0x40000000) r3 = epoll_create1(0x0) ioctl$TCSBRKP(r0, 0x5425, 0x101) getsockopt$inet6_dccp_int(r2, 0x21, 0xe341739f8b7ef7d6, &(0x7f00000001c0), &(0x7f0000000300)=0x4) fcntl$lock(r3, 0x26, &(0x7f0000000200)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000340)={0x7ff, 0x2, 0xaf}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004100), 0x2a37, 0x2, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000100)=0x7fffffff, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc9c6, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x66c, 0x3, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000380)={'veth0_to_bond\x00', {0x2, 0x4e24, @loopback}}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00') r5 = creat(&(0x7f00000008c0)='./bus\x00', 0x0) sendfile(r5, r4, &(0x7f0000000180), 0x10013c93a) 03:49:47 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f800000000000000040000010000000008000000000000000810000000000000082000000010000100000000001fdfdffff000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:47 executing program 0: r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r1 = dup2(r0, r0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000180)={0xfffffffffffffdc6, 0x3, 0x0, {0x0, 0x2}}, 0x12) setsockopt$sock_int(r0, 0x1, 0x2000000000000009, &(0x7f0000000080)=0x3003, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000140), 0x10) 03:49:47 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000e00000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1220.228325] XFS (loop3): SB sanity check failed [ 1220.234965] XFS (loop5): Mounting V4 Filesystem [ 1220.242641] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1220.242952] IPVS: ftp: loaded support on port[0] = 21 [ 1220.264722] XFS (loop2): SB sanity check failed [ 1220.266726] XFS (loop5): totally zeroed log [ 1220.273854] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1220.323846] XFS (loop2): Unmount and run xfs_repair 03:49:47 executing program 0: r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x11a) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000004c0)={0x3, {{0xa, 0x4e21, 0x5, @ipv4={[], [], @broadcast}}}, 0x1, 0x2000000000000cd, [{{0xa, 0x4e21, 0x2, @mcast2, 0xf9de}}, {{0xa, 0x4e22, 0x9, @mcast2, 0xffffffffffffffff}}, {{0xa, 0x4e21, 0x6, @mcast2, 0x4}}, {{0xa, 0x4e20, 0x572de509, @empty, 0x2}}, {{0xa, 0x4e20, 0x0, @remote, 0x42e}}, {{0xa, 0x4e21, 0x0, @mcast1, 0x99e6}}, {{0xa, 0x4e24, 0x6, @local, 0x62b527f1}}]}, 0x410) bind$isdn_base(r0, &(0x7f0000000000), 0x6) [ 1220.351393] XFS (loop3): Unmount and run xfs_repair [ 1220.364045] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1220.377159] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1220.394184] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 03 f8 09 00 XFSB............ [ 1220.402569] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1220.448462] XFS (loop4): SB sanity check failed [ 1220.450386] 00000000: 58 46 53 42 03 b4 10 00 0b 00 00 00 00 00 09 00 XFSB............ [ 1220.459628] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1220.483550] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1220.534322] XFS (loop4): Unmount and run xfs_repair [ 1220.545490] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1220.557397] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1220.572040] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 03:49:47 executing program 0: mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) umount2(&(0x7f00000002c0)='./bus\x00', 0x1) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000280)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x4000, 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000100)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@xino_on='xino=on'}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) [ 1220.590709] 00000000: 58 46 53 42 00 00 10 00 00 00 00 0e 00 00 09 00 XFSB............ [ 1220.624895] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 03:49:47 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f800000000000000040000010000000008000000000000000810000000000000082000000010000100000000001ebffffff000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1220.634308] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1220.645996] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1220.650791] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1220.658391] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1220.672122] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1220.685289] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1220.688651] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1220.694715] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1220.709952] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1220.754179] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1220.769277] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1220.792774] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1220.801176] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1220.831888] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1220.844935] XFS (loop3): SB validate failed with error -117. [ 1220.851192] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 03:49:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x13f, 0x5}}, 0x20) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e) fchown(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) close(r2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 1220.897875] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1220.929659] XFS (loop2): SB validate failed with error -117. [ 1220.939391] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 03:49:48 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000003fc0900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1220.975919] XFS (loop4): SB validate failed with error -117. [ 1220.985870] XFS (loop5): Mounting V4 Filesystem [ 1220.989358] IPVS: ftp: loaded support on port[0] = 21 [ 1220.998134] XFS (loop5): totally zeroed log [ 1221.023677] XFS (loop5): Failed to read root inode 0x100000000080, error 22 03:49:48 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000c00000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x8000000036, &(0x7f0000000180)=ANY=[@ANYBLOB="0000001f00000000"], 0x8) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000001c0)=0x7fff, 0x4) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000069c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 03:49:48 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000001000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1221.293907] XFS (loop3): SB sanity check failed [ 1221.303704] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1221.325214] XFS (loop3): Unmount and run xfs_repair [ 1221.344535] XFS (loop2): SB sanity check failed [ 1221.404970] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1221.443136] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1221.465669] XFS (loop2): Unmount and run xfs_repair [ 1221.472234] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 03 fc 09 00 XFSB............ [ 1221.485122] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1221.499220] 00000000: 58 46 53 42 03 b4 10 00 0c 00 00 00 00 00 09 00 XFSB............ [ 1221.522388] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1221.531732] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1221.546821] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1221.557981] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1221.583663] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1221.598343] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1221.607705] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1221.624456] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1221.632629] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1221.647139] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1221.664200] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1221.677315] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1221.679257] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1221.714137] XFS (loop3): SB validate failed with error -117. [ 1221.725346] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1221.747712] XFS (loop2): SB validate failed with error -117. 03:49:50 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f800000000000000040000010000000008000000000000000810000000000000082000000010000100000000001feffffff000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:50 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsuid(0x0) mq_notify(0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video1\x00', 0x2, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001740)='/dev/vhci\x00', 0x200) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="3f35109e9e146ea1f2135b911bbd50f50c3f59147dd2400000008d6771d3faf5700ddb8b9be2a082b8760313d65a979a5b3b80b1206d0f07064a699bd06c4110c3095f185e9de34ff0e8544f60dfcb16bc7003781b0c587fe69a7c5ca7e271bd1f59c2e2bd625512af46f2ae722e9a5c3c3577079f371792dfaa9ddd4129fc91d99d793237fbc8191dd2050ccfb44db952ad57b5af80af4bf608"]) r2 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = syz_open_dev$vcsa(0x0, 0x1, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000100)) r4 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000040)=0x80000002) process_vm_writev(r0, &(0x7f0000001580)=[{&(0x7f00000002c0)=""/38, 0x26}, {&(0x7f0000000400)=""/118, 0x76}, {0x0}, {0x0}, {&(0x7f0000000340)=""/34, 0x22}], 0x5, &(0x7f0000001700)=[{&(0x7f00000016c0)=""/61, 0x3d}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x3}}, 0x20) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000001c0)={0x5, 0x7d, 0xf9c, 0x401}, 0x8) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000540)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r2, &(0x7f00000006c0)={0xa0, 0x0, 0x1, {{0x3, 0x3, 0x8000, 0x4, 0x1, 0x7, {0x1, 0x9, 0xb2da, 0x1, 0x4, 0x7ff, 0x52, 0xfffffffffffffffb, 0x8, 0x4, 0x0, r5, r6, 0x80000001, 0x5}}}}, 0xa0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000080)={0x5, 0x80000000, 0x0, 0x10001}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:49:50 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000002000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:50 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000407ff0900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x0, 0x0, 0x4}, {0x0, 0x0, 0xfe}]}) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socket$inet6(0xa, 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x9, 0x4, 0x2, 0x70d8, 0xa, 0x400, 0x10001, 0x1, 0x9, 0x80, 0xb5, 0x1fc8}) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x1000}, 0x14) 03:49:50 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000d00000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1223.535056] XFS (loop5): Mounting V4 Filesystem [ 1223.583299] XFS (loop5): totally zeroed log [ 1223.607979] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1223.658812] XFS (loop4): SB sanity check failed [ 1223.659218] XFS (loop2): SB sanity check failed [ 1223.663514] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1223.663524] XFS (loop4): Unmount and run xfs_repair [ 1223.663534] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1223.663548] 00000000: 58 46 53 42 00 00 10 00 00 00 00 20 00 00 09 00 XFSB....... .... [ 1223.663561] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1223.663572] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1223.663584] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1223.663595] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1223.700000] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:49:51 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000080)='HRL\x00', 0x1, 0x0, 0x0, 0x41f00}, 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f8, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x005\x00', @ifru_data=&(0x7f00000000c0)="f67c66252b05296af6d41d3a321c4628f15709b5b3f890acfdc0aa860890ed6e"}) r2 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x0, 0x0) accept$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@map={0x18, 0xb, 0x1, 0x0, r2}, @alu={0x7, 0x200, 0x9, 0x9, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}, @generic={0x2, 0x2, 0x2, 0x80, 0x8}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3f, 0xa0, &(0x7f0000000200)=""/160, 0x41f00, 0x1, [], r3}, 0x48) [ 1223.817781] XFS (loop2): Unmount and run xfs_repair [ 1223.823303] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1223.838725] 00000000: 58 46 53 42 03 b4 10 00 0d 00 00 00 00 00 09 00 XFSB............ [ 1223.850170] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1223.873792] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1223.893794] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1223.919548] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1223.934200] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1223.949875] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1223.960366] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1223.963298] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1223.969690] XFS (loop4): SB validate failed with error -117. [ 1223.987292] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1223.997229] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1224.009043] XFS (loop3): SB sanity check failed [ 1224.009070] XFS (loop2): SB validate failed with error -117. [ 1224.013749] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1224.013758] XFS (loop3): Unmount and run xfs_repair [ 1224.013779] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1224.013790] 00000000: 58 46 53 42 00 00 10 00 00 00 00 04 07 ff 09 00 XFSB............ [ 1224.013800] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1224.013828] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1224.013838] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1224.013862] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1224.013872] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1224.013882] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1224.013892] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1224.013964] XFS (loop3): SB validate failed with error -117. 03:49:51 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="14000209fe800000000000000000000000000000"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:49:51 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100020000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:51 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000012c0)='proc\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000080)=0x80, 0x800) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) 03:49:51 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000fff0900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1224.331334] overlayfs: unrecognized mount option "?5žžn¡ò[‘½Põ ?Y}Ò@" or missing value 03:49:51 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000022000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:51 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000e00000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1224.510152] XFS (loop5): Mounting V4 Filesystem [ 1224.533657] XFS (loop5): totally zeroed log [ 1224.554300] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1224.596174] XFS (loop4): SB sanity check failed [ 1224.601579] XFS (loop3): SB sanity check failed [ 1224.607422] XFS (loop2): SB sanity check failed [ 1224.612316] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1224.624285] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1224.639106] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1224.650890] XFS (loop4): Unmount and run xfs_repair [ 1224.654165] XFS (loop3): Unmount and run xfs_repair [ 1224.656220] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1224.661092] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1224.667788] XFS (loop2): Unmount and run xfs_repair [ 1224.680464] 00000000: 58 46 53 42 00 00 10 00 00 00 02 20 00 00 09 00 XFSB....... .... [ 1224.681877] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 0f ff 09 00 XFSB............ [ 1224.688925] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1224.704543] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1224.724479] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1224.733360] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1224.739443] 00000000: 58 46 53 42 03 b4 10 00 0e 00 00 00 00 00 09 00 XFSB............ [ 1224.756035] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1224.759560] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1224.765221] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1224.781392] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1224.790985] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1224.816627] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1224.818310] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1224.825947] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1224.841538] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1224.842480] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1224.854768] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1224.858040] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1224.871909] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1224.874471] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1224.882667] XFS (loop4): SB validate failed with error -117. 03:49:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x8000, 0xfffffffffffffff8}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x1}, &(0x7f0000000200)=0x8) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x806, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000040)={0x1, 0x1}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) 03:49:52 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100030000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000240), 0x1c) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6176, 0x400000) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) shutdown(r0, 0x0) [ 1224.899182] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1224.911648] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1224.920076] XFS (loop3): SB validate failed with error -117. [ 1224.937920] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1224.951139] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1224.960313] XFS (loop2): SB validate failed with error -117. [ 1224.988647] tls_set_device_offload_rx: netdev lo with no TLS offload 03:49:52 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000007fffffff0900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x84000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4000000004, 0x1000, 0x5, r0, 0x0, [0x305f, 0xa]}, 0x2c) acct(&(0x7f0000000280)='./file0\x00') r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x100, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:wtmp_t:s0\x00', 0x1c, 0x3) ioctl$TIOCNXCL(r1, 0x540d) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="02005400000001000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 03:49:52 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000102000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x7fffffff, 0xf04b, 0x7ff, 0x6c3, 0x0, 0xff, 0x15880, 0x3, 0x3f, 0x81, 0x3, 0x7, 0x60e, 0x361, 0x3, 0x100000000, 0x3, 0x31ac000000, 0xfffffffffffffe01, 0xffffffffffff8001, 0x1, 0x8001, 0x1, 0x3c1a, 0x7, 0x0, 0x9, 0x1, 0x0, 0x1000, 0x6, 0x9, 0x1fd9, 0x4, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x4}, 0x0, 0x6, 0x9, 0x4, 0x5, 0x8, 0x81}, 0x0, 0xf, 0xffffffffffffffff, 0x8) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) 03:49:52 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410001000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1225.243163] XFS (loop5): Mounting V4 Filesystem [ 1225.278820] XFS (loop5): totally zeroed log [ 1225.289093] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1225.315624] XFS (loop3): SB sanity check failed [ 1225.336645] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1225.353794] XFS (loop4): SB sanity check failed [ 1225.363949] XFS (loop3): Unmount and run xfs_repair [ 1225.372695] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1225.407255] loop0: p1[DM] [ 1225.411513] loop0: partition table partially beyond EOD, truncated [ 1225.438320] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1225.463173] loop0: p1 start 1 is beyond EOD, truncated [ 1225.465097] 00000000: 58 46 53 42 00 00 10 00 00 00 7f ff ff ff 09 00 XFSB............ [ 1225.478294] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1225.486820] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1225.487893] XFS (loop4): Unmount and run xfs_repair [ 1225.495228] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1225.517529] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1225.520456] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1225.528075] 00000000: 58 46 53 42 00 00 10 00 00 00 10 20 00 00 09 00 XFSB....... .... [ 1225.535473] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1225.544580] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1225.558449] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:49:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20000, 0x0) getsockname$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f00007a8000)={&(0x7f0000000180)={0x18, 0x1, 0xb0302ae1f9c92e07, 0xffffffffffffffff, 0x0, 0x0, {}, [@nested={0x4, 0x7}]}, 0x18}}, 0x0) [ 1225.564104] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1225.572960] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1225.575396] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1225.593986] XFS (loop3): SB validate failed with error -117. [ 1225.599453] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1225.610770] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1225.630738] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:49:53 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_THP_DISABLE(0x29, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) getsockname(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x800000, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="fe800000000000000000000000000018fe800000000000000000000000000000000000000000000000000000000000000000000000000000ffffff00ffffff007465616d5f736c6176655f31000000007663616e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000100000000000000ff00000000ff000000000000000000000000000000ff0000006e7230000000000000000000000000006e72300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000c800f0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000700200000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000ff000000ffffffff00000000000000ff000000000000000000000000766c616e30000000000000000000000069703667726574617030000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008800000409000000000000000000000000000000c800f000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x400) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) [ 1225.669140] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1225.682305] XFS (loop4): SB validate failed with error -117. [ 1225.694398] __loop_clr_fd: partition scan of loop0 failed (rc=-22) 03:49:53 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000008bffffff0900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:53 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100040000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:53 executing program 0: r0 = memfd_create(&(0x7f0000002901)='\x00\x00\x00\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="00fb1508fe28e0d94f6c3611b7f8031ce82b6359005ee4a54a0f5bb5be528fe325c4daee0dad650fa79e4ea22e702d9bf011768b594b2edf8f184beb41174014359b75a9f286809f"], 0x1, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x101000, 0x61) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x6) write$eventfd(r0, &(0x7f0000000100), 0xffb9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x800011, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000000280)) 03:49:53 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000012200000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1226.057129] XFS (loop2): SB sanity check failed [ 1226.093049] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1226.190022] XFS (loop2): Unmount and run xfs_repair [ 1226.223731] XFS (loop2): First 128 bytes of corrupted metadata buffer: 03:49:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000027000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x0, @dev}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1226.288363] 00000000: 58 46 53 42 03 b4 10 00 10 00 00 00 00 00 09 00 XFSB............ [ 1226.317089] XFS (loop4): SB sanity check failed [ 1226.324112] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1226.370038] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1226.384509] XFS (loop4): Unmount and run xfs_repair [ 1226.389759] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1226.402961] 00000000: 58 46 53 42 00 00 10 00 00 00 01 22 00 00 09 00 XFSB.......".... [ 1226.411765] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1226.426561] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1226.438313] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1226.449761] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1226.450153] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1226.470796] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1226.499368] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1226.507766] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1226.509072] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1226.516454] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1226.559834] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1226.568380] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1226.571225] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1226.578267] XFS (loop2): SB validate failed with error -117. [ 1226.593616] XFS (loop5): Mounting V4 Filesystem [ 1226.600218] XFS (loop3): SB sanity check failed [ 1226.612409] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1226.624067] XFS (loop4): SB validate failed with error -117. [ 1226.632979] XFS (loop5): totally zeroed log [ 1226.637651] XFS (loop3): Unmount and run xfs_repair [ 1226.643076] XFS (loop5): Failed to read root inode 0x100000000080, error 22 03:49:54 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410001800000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:54 executing program 0: openat$rfkill(0xffffffffffffff9c, 0x0, 0x101006, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$vfio(0xffffffffffffff9c, 0x0, 0x131000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000200)='/dev/nullb0\x00', 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100), 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40000000000003b, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @multicast2}, &(0x7f0000000300)=0x10) rseq(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x7, 0x3, 0x7f, 0x2}, 0x4}, 0x20, 0x1, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x4, 0x4}}, 0x2e) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e20, 0x7, @loopback, 0x1ff}, 0x1c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) write$binfmt_misc(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000"], 0x1200e) [ 1226.684184] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1226.722917] 00000000: 58 46 53 42 00 00 10 00 00 00 8b ff ff ff 09 00 XFSB............ 03:49:54 executing program 1: syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000140)='./file0\x00', 0x39b0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@subvolid={'subvolid'}}]}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x4, 0x1, 0x7, 0x0, 0x1f}) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', &(0x7f0000000100)='btrfs\x00', 0x6, 0x1) [ 1226.749973] XFS (loop4): SB sanity check failed [ 1226.760296] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1226.764165] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1226.772405] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1226.786642] XFS (loop4): Unmount and run xfs_repair [ 1226.794167] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1226.794355] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1226.802781] 00000000: 58 46 53 42 00 00 10 00 00 00 01 22 00 00 09 00 XFSB.......".... [ 1226.815763] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1226.818158] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1226.832178] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1226.842199] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1226.850583] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1226.856994] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1226.858985] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1226.875881] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1226.876873] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1226.892632] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:49:54 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8000000000005, 0x0) shutdown(r0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) [ 1226.901032] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1226.909553] XFS (loop4): SB validate failed with error -117. [ 1226.909885] XFS (loop3): SB validate failed with error -117. 03:49:54 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000002300000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:54 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100080000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000600)=""/11, 0xfe1c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) clone(0x88000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\a\x00\x00\xa4\xd1\x19i\x8f\x1c\x12u\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xcb\x85\xb4\xb7\xa15\x05\x88t<\x8d\x9b\xaf\x1f\x02\xac\xc7\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x8b\v\xd6\xdc\xaf!\xbc!\x13\x17\xff\xef3\x86|\xcc[\x8f\x149\xb5m4\x16b\xbc\x88\x80\x97\x98C\xb35R6\xbe\x93Bd\x85\xf9\x9f\x87\x99\x8fH\xad\x7f\xfa)\xbd\xa0\x80\xd7\x01\xb7\r%$\a!\x8f\xada.\aE\x83Ag\x11\xec\x10S\xba@\xf2h\t\xa9Qq\xa9') syz_execute_func(&(0x7f0000000140)="3666440f50f564ff0941c366440f56c9c4c27d794e0066420fe2e3f347aac442019dccd3196f") fsetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000000c0)='\x00', 0xfe9, 0x0) r2 = dup2(r0, r1) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0x0) 03:49:54 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000008cffffff0900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1227.178290] XFS (loop2): SB sanity check failed [ 1227.183327] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1227.201146] XFS (loop2): Unmount and run xfs_repair [ 1227.256871] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1227.312697] 00000000: 58 46 53 42 03 b4 10 00 18 00 00 00 00 00 09 00 XFSB............ [ 1227.354278] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1227.370421] XFS (loop5): Mounting V4 Filesystem [ 1227.380673] XFS (loop4): SB sanity check failed [ 1227.384272] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1227.386990] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1227.415139] XFS (loop5): totally zeroed log [ 1227.421556] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1227.434962] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:49:54 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x8006, 0x16e8) r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000380)=""/67, 0x5c78f728127772f2) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) msgrcv(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7c9dc16fe304000000000000000001d4fc0000004000001000197f33acc23392ae0750e0543be3510a4b8dc52ab8afd90d3b5882547f59891d9bd33ecc32e4eb361e47a64595420e8e0e880ea02c71bb96c78701f0729c0ca1259edd"], 0x1, 0x0, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)) 03:49:54 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x80000001, 0x0, "0950fe4adba7"}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6}, 0x2c) open(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x0) r3 = geteuid() write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000780)={0x78, 0xfffffffffffffffe, 0x5, {0xfffffffffffffffc, 0x3ff, 0x0, {0x3, 0x7, 0x3, 0x673000, 0x0, 0x10000, 0x3ff, 0x8, 0x80000001, 0x0, 0x6e, r3, 0x0, 0x6, 0x8}}}, 0x78) listen(r0, 0x7f) fstat(r2, &(0x7f0000000840)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getgid() getpgrp(0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getgid() getresgid(&(0x7f00000014c0), &(0x7f0000001500), &(0x7f0000001540)) getgid() getpgrp(0x0) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000006340)) fcntl$getown(r2, 0x9) r4 = accept(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) sendmsg$rds(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/250, 0xfa}, {0x0}], 0x2}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001080)=[{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000003c0)=[@rights={0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, r5, 0xffffffffffffffff, r4]}], 0x28}], 0x1, 0x0) [ 1227.462175] XFS (loop3): SB sanity check failed [ 1227.477620] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1227.511089] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1227.514574] XFS (loop4): Unmount and run xfs_repair [ 1227.557407] XFS (loop3): Unmount and run xfs_repair [ 1227.563929] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1227.599462] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1227.599832] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1227.624483] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1227.628735] 00000000: 58 46 53 42 00 00 10 00 00 00 00 23 00 00 09 00 XFSB.......#.... [ 1227.655825] 00000000: 58 46 53 42 00 00 10 00 00 00 8c ff ff ff 09 00 XFSB............ [ 1227.656510] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1227.665100] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1227.672445] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1227.680516] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1227.680527] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:49:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='shortname=winnt,shortname=win95,rodir,nonumtail=0,rodir,shortname=lower,shortname=winnt,errors=remount-ro']) 03:49:55 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100100000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1227.680537] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1227.717747] XFS (loop2): SB validate failed with error -117. [ 1227.723705] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1227.734202] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1227.735645] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1227.761887] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1227.764073] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1227.780131] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1227.782122] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1227.822169] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1227.847382] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1227.850388] XFS (loop3): SB validate failed with error -117. [ 1227.878032] XFS (loop4): SB validate failed with error -117. 03:49:55 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410002300000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:55 executing program 1: mknod(&(0x7f0000000140)='./file0\x00', 0x8005, 0x16e8) r0 = syz_open_pts(0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/67, 0x43) r1 = open(&(0x7f0000001240)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:49:55 executing program 0: mkdir(&(0x7f0000000480)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:49:56 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100081000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:56 executing program 0: syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000000000000aaaaaabb886384a7038847e8"], 0x0) 03:49:56 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000003f00000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:56 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000ebffffff0900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:56 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="473c08000000000000c64b69bb2b299c0d63f01da223624fcc6a585a66c6351cfed8b37f36cdedc6b7abfb"], 0x1, 0x0, 0x0) 03:49:56 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1229.423352] XFS (loop3): SB sanity check failed [ 1229.429982] XFS (loop5): Mounting V4 Filesystem [ 1229.442919] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1229.462127] XFS (loop2): SB sanity check failed [ 1229.467396] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1229.473249] XFS (loop3): Unmount and run xfs_repair [ 1229.489930] XFS (loop5): totally zeroed log [ 1229.491435] XFS (loop2): Unmount and run xfs_repair [ 1229.500383] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1229.509066] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1229.514633] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1229.522858] 00000000: 58 46 53 42 00 00 10 00 00 00 eb ff ff ff 09 00 XFSB............ [ 1229.523305] 00000000: 58 46 53 42 03 b4 10 00 5e 00 00 00 00 00 09 00 XFSB....^....... [ 1229.541078] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1229.547129] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1229.550933] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1229.558546] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1229.568303] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1229.582889] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1229.591209] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1229.591801] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1229.600173] XFS (loop4): SB sanity check failed [ 1229.608360] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1229.621899] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1229.628605] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1229.631796] XFS (loop3): SB validate failed with error -117. [ 1229.651095] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1229.664121] XFS (loop4): Unmount and run xfs_repair [ 1229.669384] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1229.677687] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1229.684895] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1229.693038] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1229.701677] 00000000: 58 46 53 42 00 00 10 00 00 00 00 3f 00 00 09 00 XFSB.......?.... [ 1229.709988] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1229.718277] XFS (loop2): SB validate failed with error -117. 03:49:57 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:49:57 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100003f00000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1229.755406] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1229.771266] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1229.781101] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1229.807154] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1229.820111] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1229.831570] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1229.846718] XFS (loop4): SB validate failed with error -117. 03:49:57 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000f6ffffff0900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:57 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:49:57 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410006000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:57 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000f0ff3f00000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:57 executing program 0: r0 = epoll_create1(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$binder(&(0x7f0000000880)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) [ 1230.112129] XFS (loop5): Mounting V4 Filesystem [ 1230.130140] XFS (loop5): totally zeroed log [ 1230.147145] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1230.190994] XFS (loop3): SB sanity check failed [ 1230.195830] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1230.236367] XFS (loop3): Unmount and run xfs_repair [ 1230.241527] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1230.265962] 00000000: 58 46 53 42 00 00 10 00 00 00 f6 ff ff ff 09 00 XFSB............ [ 1230.292317] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1230.313479] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1230.330354] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1230.341268] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1230.350329] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1230.363971] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:49:57 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1230.386345] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1230.398723] XFS (loop3): SB validate failed with error -117. 03:49:57 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) exit(0x0) 03:49:57 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100088000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1230.470690] XFS (loop4): SB sanity check failed 03:49:57 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000100000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1230.511805] XFS (loop2): SB sanity check failed [ 1230.524327] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1230.536893] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1230.567347] XFS (loop4): Unmount and run xfs_repair [ 1230.586180] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1230.604547] XFS (loop2): Unmount and run xfs_repair [ 1230.609821] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1230.634704] 00000000: 58 46 53 42 00 00 10 00 00 f0 ff 3f 00 00 09 00 XFSB.......?.... [ 1230.651370] 00000000: 58 46 53 42 03 b4 10 00 60 00 00 00 00 00 09 00 XFSB....`....... [ 1230.662279] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1230.671147] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1230.683215] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1230.701136] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 03:49:58 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1230.736905] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1230.749160] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1230.763662] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1230.776033] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1230.800051] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1230.813675] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1230.836737] XFS (loop5): Mounting V4 Filesystem [ 1230.838810] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1230.858045] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1230.871848] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1230.872372] XFS (loop5): totally zeroed log [ 1230.883221] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1230.898732] XFS (loop4): SB validate failed with error -117. [ 1230.916569] XFS (loop2): SB validate failed with error -117. [ 1230.929335] XFS (loop3): Mounting V4 Filesystem [ 1230.934665] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1230.944834] XFS (loop3): totally zeroed log [ 1230.949858] XFS (loop3): Failed to read root inode 0x100000000080, error 22 03:49:58 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:49:58 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:49:58 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000200000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:58 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000010006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:58 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410006800000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:58 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000004000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:58 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:49:58 executing program 0: socketpair(0xfffffffffffffffb, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x3, 0x4, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), 0x0}, 0x20) [ 1231.537491] XFS (loop5): Mounting V4 Filesystem 03:49:58 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1231.560243] XFS (loop2): SB sanity check failed [ 1231.572213] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1231.584677] XFS (loop5): Log size 16778944 blocks too large, maximum size is 1048576 blocks [ 1231.634297] XFS (loop2): Unmount and run xfs_repair [ 1231.639652] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1231.652690] XFS (loop5): Log size out of supported range. [ 1231.660984] XFS (loop3): Mounting V4 Filesystem [ 1231.666619] XFS (loop4): SB sanity check failed [ 1231.671684] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1231.673420] XFS (loop5): Continuing onwards, but if log hangs are experienced then please report this message in the bug report. [ 1231.687267] 00000000: 58 46 53 42 03 b4 10 00 68 00 00 00 00 00 09 00 XFSB....h....... [ 1231.708736] XFS (loop3): totally zeroed log [ 1231.720600] XFS (loop3): Failed to read root inode 0x100000000080, error 22 [ 1231.737656] XFS (loop4): Unmount and run xfs_repair 03:49:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) [ 1231.763821] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1231.772199] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1231.795642] 00000000: 58 46 53 42 00 00 10 00 00 00 00 40 00 00 09 00 XFSB.......@.... [ 1231.822889] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1231.832243] XFS (loop5): totally zeroed log [ 1231.836673] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1231.861150] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1231.869422] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1231.873778] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1231.894990] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1231.910681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1231.920923] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1231.936609] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1231.947616] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1231.964962] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:49:59 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1231.975869] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1231.994466] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1231.996327] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1232.002673] XFS (loop2): SB validate failed with error -117. [ 1232.032249] XFS (loop4): SB validate failed with error -117. 03:49:59 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect(r0, &(0x7f0000000040)=@un=@file={0x0, './file0\x00'}, 0x80) 03:49:59 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000300000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:59 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:49:59 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000020006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:59 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410006b00000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:49:59 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000014300000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:49:59 executing program 0: r0 = socket$inet(0x2, 0x4100000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pwritev(r1, &(0x7f0000000480)=[{&(0x7f0000000440)="47e5730d7c895124fbf2516c495f1dcaafdeb970ffd8281f29dfa1f736d51681a68723ec8e4264a761d2b370ad743b7079758248b0191772556ac2987c9fb7", 0x3f}], 0x1, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r2) lseek(0xffffffffffffffff, 0x0, 0x0) syz_execute_func(&(0x7f0000000800)="cd80c2b0001f36b0c4c4821597fa362e430f617f00ee660fdbe3bad0d8d892000880410fd1b02db5d900670f0f1194e2c481c653fbc42211ddb8956d0000c4e3a95fd9658f6988906521408064797f41430f186a33400ee6f20fef5109c4a1fd28d27d2f6745d00f483b3b0a1ae3104c654c65c161fc4d960404767821") bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20840000, &(0x7f00000000c0)="04659b3d038d70d4e3da5f785b43642801ff1fd671f2f3fdfc2b5dc70937e1644a3e4b722ed4a9500eb56104e90d43808655", 0x0, 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x1, 0x0, 0x10000103) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) write$P9_RREADLINK(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="10000010170200fe45622ccf06002e2f66696c6530"], 0x15) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000180)={@mcast1, @local, @mcast1}) ftruncate(r4, 0x2) write$binfmt_elf32(r0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x5c, r7, 0xc00, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x715b}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40005}, 0x20000001) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 03:49:59 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1232.466237] XFS (loop3): Mounting V4 Filesystem [ 1232.524545] XFS (loop3): totally zeroed log [ 1232.534883] XFS (loop3): Failed to read root inode 0x100000000080, error 22 [ 1232.553931] XFS (loop5): Mounting V4 Filesystem [ 1232.565436] XFS (loop5): Log size 33556160 blocks too large, maximum size is 1048576 blocks [ 1232.597637] XFS (loop5): Log size out of supported range. [ 1232.623356] XFS (loop2): SB sanity check failed [ 1232.633814] XFS (loop5): Continuing onwards, but if log hangs are experienced then please report this message in the bug report. [ 1232.646823] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:50:00 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1232.688744] XFS (loop5): totally zeroed log [ 1232.690919] XFS (loop2): Unmount and run xfs_repair [ 1232.706333] XFS (loop5): Failed to read root inode 0x100000000080, error 22 03:50:00 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000400000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1232.749418] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1232.774164] 00000000: 58 46 53 42 03 b4 10 00 6b 00 00 00 00 00 09 00 XFSB....k....... [ 1232.799606] XFS (loop4): SB sanity check failed [ 1232.806686] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1232.836356] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1232.877030] XFS (loop4): Unmount and run xfs_repair [ 1232.886319] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1232.906414] XFS (loop4): First 128 bytes of corrupted metadata buffer: 03:50:00 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000030006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:00 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1232.947223] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1232.956050] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1232.959397] 00000000: 58 46 53 42 00 00 10 00 00 00 01 43 00 00 09 00 XFSB.......C.... [ 1232.969337] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1232.982969] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1232.989142] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1232.991904] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1233.008284] XFS (loop2): SB validate failed with error -117. [ 1233.022431] XFS (loop3): Mounting V4 Filesystem [ 1233.049078] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1233.058147] XFS (loop3): totally zeroed log [ 1233.067507] XFS (loop3): Failed to read root inode 0x100000000080, error 22 [ 1233.081186] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:50:00 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1233.104154] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1233.129034] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1233.153902] XFS (loop5): Mounting V4 Filesystem [ 1233.161476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1233.174917] XFS (loop5): Log size 50333376 blocks too large, maximum size is 1048576 blocks [ 1233.183640] XFS (loop5): Log size out of supported range. [ 1233.190375] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 03:50:00 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1233.210333] XFS (loop5): Continuing onwards, but if log hangs are experienced then please report this message in the bug report. [ 1233.237815] XFS (loop4): SB validate failed with error -117. 03:50:00 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000500000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1233.272550] XFS (loop5): totally zeroed log [ 1233.286202] XFS (loop5): Failed to read root inode 0x100000000080, error 22 03:50:00 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410006c00000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:50:00 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:50:00 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000004800000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:00 executing program 0: 03:50:00 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1233.583507] XFS (loop2): SB sanity check failed [ 1233.595878] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1233.607557] XFS (loop2): Unmount and run xfs_repair [ 1233.638719] XFS (loop3): Mounting V4 Filesystem [ 1233.657922] XFS (loop2): First 128 bytes of corrupted metadata buffer: 03:50:01 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1233.693208] XFS (loop3): totally zeroed log [ 1233.699607] XFS (loop4): SB sanity check failed [ 1233.704695] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1233.726748] XFS (loop3): Failed to read root inode 0x100000000080, error 22 [ 1233.753010] 00000000: 58 46 53 42 03 b4 10 00 6c 00 00 00 00 00 09 00 XFSB....l....... [ 1233.786612] XFS (loop5): Mounting V4 Filesystem [ 1233.791949] XFS (loop4): Unmount and run xfs_repair 03:50:01 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1233.802404] XFS (loop5): Log size 67110592 blocks too large, maximum size is 1048576 blocks [ 1233.819934] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1233.827447] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:50:01 executing program 0: clone(0x200000041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() getgroups(0x2, &(0x7f0000000080)=[0xffffffffffffffff, 0xee00]) setregid(0x0, r1) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000380)) ptrace(0x10, r0) [ 1233.850726] XFS (loop5): Log size out of supported range. [ 1233.878100] 00000000: 58 46 53 42 00 00 10 00 00 00 00 48 00 00 09 00 XFSB.......H.... [ 1233.894302] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1233.903907] XFS (loop5): Continuing onwards, but if log hangs are experienced then please report this message in the bug report. [ 1233.918166] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:50:01 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000600000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1233.941484] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1233.951111] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 03:50:01 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1233.983065] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1233.992371] XFS (loop5): totally zeroed log [ 1234.000636] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1234.008812] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1234.014518] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1234.028577] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1234.068204] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1234.072206] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1234.082721] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1234.102609] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1234.111131] XFS (loop2): SB validate failed with error -117. [ 1234.119434] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1234.156757] XFS (loop4): SB validate failed with error -117. [ 1234.232382] XFS (loop3): Mounting V4 Filesystem 03:50:01 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410006e00000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1234.256126] XFS (loop3): totally zeroed log [ 1234.269572] XFS (loop3): Failed to read root inode 0x100000000080, error 22 03:50:01 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000080006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:01 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:50:01 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000700000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:01 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000004a00000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1234.575438] XFS (loop2): SB sanity check failed [ 1234.580179] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:50:01 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1234.621217] XFS (loop5): Mounting V4 Filesystem [ 1234.670134] XFS (loop5): Log size 134219456 blocks too large, maximum size is 1048576 blocks [ 1234.683601] XFS (loop2): Unmount and run xfs_repair [ 1234.713514] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1234.741335] 00000000: 58 46 53 42 03 b4 10 00 6e 00 00 00 00 00 09 00 XFSB....n....... [ 1234.755656] XFS (loop3): Mounting V4 Filesystem 03:50:02 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0105512, &(0x7f00000002c0)={0x0, 0x5516}) [ 1234.771291] XFS (loop3): totally zeroed log [ 1234.775193] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1234.796549] XFS (loop5): Log size out of supported range. [ 1234.816957] XFS (loop3): Failed to read root inode 0x100000000080, error 22 [ 1234.837743] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1234.853453] XFS (loop5): Continuing onwards, but if log hangs are experienced then please report this message in the bug report. [ 1234.866333] XFS (loop4): SB sanity check failed [ 1234.871138] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1234.885210] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1234.908035] XFS (loop4): Unmount and run xfs_repair [ 1234.922748] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1234.936241] XFS (loop5): totally zeroed log [ 1234.940830] 00000000: 58 46 53 42 00 00 10 00 00 00 00 4a 00 00 09 00 XFSB.......J.... [ 1234.947357] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1234.958074] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:50:02 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1234.966745] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1234.976361] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1234.982324] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1234.993213] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1235.003377] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1235.006263] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1235.019948] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1235.027856] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1235.028968] XFS (loop2): SB validate failed with error -117. [ 1235.054224] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:50:02 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0105512, &(0x7f00000002c0)={0x0, 0x5516}) [ 1235.074430] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1235.095557] XFS (loop4): SB validate failed with error -117. 03:50:02 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0105512, &(0x7f00000002c0)={0x0, 0x5516}) 03:50:02 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:50:02 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000010080006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:02 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410007800000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:50:02 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000800000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:02 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0105512, &(0x7f00000002c0)={0x0, 0x5516}) 03:50:02 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000004c00000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1235.499342] XFS (loop5): Mounting V4 Filesystem [ 1235.508252] XFS (loop5): Log size 134219456 blocks too large, maximum size is 1048576 blocks 03:50:02 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1235.543571] XFS (loop5): Log size out of supported range. [ 1235.558374] XFS (loop5): Continuing onwards, but if log hangs are experienced then please report this message in the bug report. 03:50:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1235.642951] XFS (loop5): totally zeroed log [ 1235.655971] XFS (loop3): Mounting V4 Filesystem [ 1235.687046] XFS (loop2): SB sanity check failed [ 1235.691274] XFS (loop3): totally zeroed log [ 1235.694466] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1235.710828] XFS (loop3): Failed to read root inode 0x100000000080, error 22 [ 1235.733452] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1235.750615] XFS (loop4): SB sanity check failed [ 1235.759574] XFS (loop2): Unmount and run xfs_repair [ 1235.774556] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1235.792406] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1235.809333] 00000000: 58 46 53 42 03 b4 10 00 78 00 00 00 00 00 09 00 XFSB....x....... [ 1235.823834] XFS (loop4): Unmount and run xfs_repair [ 1235.848037] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1235.862585] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1235.873298] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 03:50:03 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000200000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1235.932346] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1235.948843] 00000000: 58 46 53 42 00 00 10 00 00 00 00 4c 00 00 09 00 XFSB.......L.... 03:50:03 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1235.980151] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1235.999078] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:50:03 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000080080006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1236.064502] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1236.087507] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1236.101744] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1236.113600] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1236.138843] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1236.161293] XFS (loop2): SB validate failed with error -117. [ 1236.173094] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1236.209918] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1236.223492] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1236.240357] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1236.270699] XFS (loop3): SB sanity check failed [ 1236.283715] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1236.287096] XFS (loop4): SB validate failed with error -117. 03:50:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:50:03 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410007e00000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1236.364196] XFS (loop3): Unmount and run xfs_repair [ 1236.379582] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1236.407477] XFS (loop5): Mounting V4 Filesystem 03:50:03 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x101000000}) read(r0, &(0x7f0000000100)=""/67, 0x43) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) msgrcv(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7c9dc16fe360a9e9471e00000000010000000000000000197f24acc233eeae0750e0369005000000e50fc4909198cc53e0ab49282d676a683580600f172c4d0d167917bd7a81dc850b"], 0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, &(0x7f00000001c0)) [ 1236.427988] XFS (loop5): Log size 134219456 blocks too large, maximum size is 1048576 blocks [ 1236.428350] 00000000: 58 46 53 42 00 00 10 00 00 00 00 02 00 00 09 00 XFSB............ [ 1236.481742] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1236.485705] XFS (loop5): Log size out of supported range. [ 1236.495836] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1236.501800] XFS (loop5): Continuing onwards, but if log hangs are experienced then please report this message in the bug report. [ 1236.506177] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1236.523580] XFS (loop5): totally zeroed log [ 1236.528998] XFS (loop5): Failed to read root inode 0x100000000080, error 22 03:50:03 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000001435e00000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:04 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000100006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1236.633493] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1236.668600] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1236.694829] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1236.729859] XFS (loop2): SB sanity check failed [ 1236.735353] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1236.761409] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1236.788064] XFS (loop2): Unmount and run xfs_repair 03:50:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1236.809973] XFS (loop3): SB validate failed with error -117. [ 1236.819508] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1236.842974] 00000000: 58 46 53 42 03 b4 10 00 7e 00 00 00 00 00 09 00 XFSB....~....... [ 1236.869083] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1236.879125] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1236.889122] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1236.923122] XFS (loop4): SB sanity check failed [ 1236.931405] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1236.946277] XFS (loop5): Mounting V4 Filesystem [ 1236.964224] XFS (loop5): Log size 268437184 blocks too large, maximum size is 1048576 blocks 03:50:04 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000300000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1236.970686] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1237.002607] XFS (loop4): Unmount and run xfs_repair [ 1237.015129] XFS (loop5): Log size out of supported range. [ 1237.032973] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1237.040046] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1237.060748] XFS (loop5): Continuing onwards, but if log hangs are experienced then please report this message in the bug report. [ 1237.086539] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1237.096141] 00000000: 58 46 53 42 00 00 10 00 00 01 43 5e 00 00 09 00 XFSB......C^.... [ 1237.135521] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1237.146505] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1237.155007] XFS (loop5): Invalid block length (0x1) for buffer [ 1237.155298] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 03:50:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1237.182986] XFS (loop5): empty log check failed [ 1237.189550] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1237.201470] XFS (loop2): SB validate failed with error -117. [ 1237.209853] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1237.212931] XFS (loop5): log mount/recovery failed: error -12 [ 1237.223384] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1237.237791] XFS (loop5): log mount failed [ 1237.252148] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1237.261805] XFS (loop3): SB sanity check failed [ 1237.268988] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1237.304386] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1237.326785] XFS (loop4): SB validate failed with error -117. [ 1237.330262] XFS (loop3): Unmount and run xfs_repair 03:50:04 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f800000000000000040000010000000008000000000000000810000000000000082000000010000100000000001000000003f0006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1237.384809] XFS (loop3): First 128 bytes of corrupted metadata buffer: 03:50:04 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b41000a200000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:50:04 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:50:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) [ 1237.473991] 00000000: 58 46 53 42 00 00 10 00 00 00 00 03 00 00 09 00 XFSB............ [ 1237.505194] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:50:04 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000001435f00000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1237.599232] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1237.628081] XFS (loop5): Mounting V4 Filesystem [ 1237.633276] XFS (loop5): Log size 1056966336 blocks too large, maximum size is 1048576 blocks [ 1237.699772] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1237.715667] XFS (loop5): Log size out of supported range. [ 1237.743491] XFS (loop5): Continuing onwards, but if log hangs are experienced then please report this message in the bug report. [ 1237.756305] XFS (loop2): SB sanity check failed [ 1237.769939] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1237.782497] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1237.785636] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1237.804489] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1237.814778] XFS (loop5): Invalid block length (0x1) for buffer [ 1237.822490] XFS (loop5): empty log check failed 03:50:05 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:50:05 executing program 0: [ 1237.836669] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1237.844654] XFS (loop5): log mount/recovery failed: error -12 [ 1237.851977] XFS (loop5): log mount failed [ 1237.868096] XFS (loop2): Unmount and run xfs_repair [ 1237.869356] XFS (loop3): SB validate failed with error -117. [ 1237.881649] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1237.907945] 00000000: 58 46 53 42 03 b4 10 00 a2 00 00 00 00 00 09 00 XFSB............ [ 1237.912491] XFS (loop4): SB sanity check failed [ 1237.920803] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1237.929435] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1237.929446] XFS (loop4): Unmount and run xfs_repair [ 1237.929459] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1237.954126] 00000000: 58 46 53 42 00 00 10 00 00 01 43 5f 00 00 09 00 XFSB......C_.... [ 1237.963071] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1237.966452] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1237.976767] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1237.988057] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1237.994407] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1237.996505] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1238.012792] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1238.023912] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1238.032192] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1238.032755] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1238.049086] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1238.057768] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1238.066469] XFS (loop2): SB validate failed with error -117. [ 1238.073966] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1238.091821] XFS (loop4): SB validate failed with error -117. 03:50:05 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:50:05 executing program 0: 03:50:05 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100ffffffeb0006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:05 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000400000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:05 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b41000bc00000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:50:05 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000006000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:05 executing program 0: 03:50:05 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1238.589442] XFS (loop3): SB sanity check failed [ 1238.594740] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1238.617969] XFS (loop5): Mounting V4 Filesystem 03:50:05 executing program 0: [ 1238.636364] XFS (loop5): Log size -352319808 blocks too large, maximum size is 1048576 blocks [ 1238.662376] XFS (loop4): SB sanity check failed [ 1238.666906] XFS (loop3): Unmount and run xfs_repair [ 1238.680618] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1238.712693] XFS (loop4): Unmount and run xfs_repair [ 1238.718299] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1238.725502] XFS (loop5): Log size out of supported range. [ 1238.749377] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1238.758138] XFS (loop5): Continuing onwards, but if log hangs are experienced then please report this message in the bug report. [ 1238.780859] 00000000: 58 46 53 42 00 00 10 00 00 00 00 04 00 00 09 00 XFSB............ [ 1238.797514] 00000000: 58 46 53 42 00 00 10 00 00 00 00 60 00 00 09 00 XFSB.......`.... 03:50:06 executing program 0: [ 1238.810343] XFS (loop2): SB sanity check failed [ 1238.815451] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1238.831818] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1238.853621] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1238.862694] XFS (loop5): totally zeroed log [ 1238.876077] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1238.884952] XFS (loop2): Unmount and run xfs_repair [ 1238.892496] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1238.902435] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1238.911134] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1238.919229] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1238.930992] 00000000: 58 46 53 42 03 b4 10 00 bc 00 00 00 00 00 09 00 XFSB............ [ 1238.941753] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1238.951969] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:50:06 executing program 0: [ 1238.961031] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1238.969877] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1238.981599] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1238.984484] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1238.990664] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1239.004753] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1239.006938] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1239.020267] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1239.023296] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1239.032219] XFS (loop3): SB validate failed with error -117. [ 1239.039770] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1239.051604] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1239.054119] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1239.063217] XFS (loop4): SB validate failed with error -117. [ 1239.070617] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1239.084612] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1239.092824] XFS (loop2): SB validate failed with error -117. 03:50:06 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:50:06 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000500000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x1, @remote}}}, 0x108) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000280), 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) 03:50:06 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100fffffdfc0006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:06 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:50:06 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b41000c400000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:50:06 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000001436000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffc) [ 1239.607201] XFS (loop3): SB sanity check failed [ 1239.612156] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1239.659586] XFS (loop3): Unmount and run xfs_repair [ 1239.670747] XFS (loop5): Mounting V4 Filesystem [ 1239.688149] XFS (loop5): Log size -67107136 blocks too large, maximum size is 1048576 blocks [ 1239.700544] XFS (loop3): First 128 bytes of corrupted metadata buffer: 03:50:07 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1239.705151] XFS (loop5): Log size out of supported range. [ 1239.712926] XFS (loop5): Continuing onwards, but if log hangs are experienced then please report this message in the bug report. [ 1239.717273] 00000000: 58 46 53 42 00 00 10 00 00 00 00 05 00 00 09 00 XFSB............ [ 1239.733301] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1239.743091] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 03:50:07 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740)='/dev/fuse\x00', 0x2, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000780)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50}, 0x50) [ 1239.789079] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1239.821712] XFS (loop5): Invalid block length (0x1) for buffer [ 1239.833036] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1239.846267] XFS (loop5): empty log check failed [ 1239.870777] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1239.892492] XFS (loop5): log mount/recovery failed: error -12 [ 1239.918707] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1239.931392] XFS (loop5): log mount failed [ 1239.933599] XFS (loop4): SB sanity check failed [ 1239.947139] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1239.957063] XFS (loop3): SB validate failed with error -117. [ 1239.961341] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1239.978625] XFS (loop2): SB sanity check failed [ 1239.987173] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1239.992309] XFS (loop4): Unmount and run xfs_repair [ 1240.012566] XFS (loop2): Unmount and run xfs_repair [ 1240.017788] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1240.037413] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1240.059063] 00000000: 58 46 53 42 03 b4 10 00 c4 00 00 00 00 00 09 00 XFSB............ [ 1240.068720] 00000000: 58 46 53 42 00 00 10 00 00 01 43 60 00 00 09 00 XFSB......C`.... 03:50:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r0, &(0x7f0000000480), 0x2000000000000113, 0x0) ioctl$void(0xffffffffffffffff, 0x5450) [ 1240.110635] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1240.134869] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:50:07 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1240.155472] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1240.173590] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1240.199711] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:50:07 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100fffffdfd0006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1240.264585] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1240.274438] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1240.286750] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1240.299387] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:50:07 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000600000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1240.311827] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1240.327578] XFS (loop2): SB validate failed with error -117. [ 1240.334311] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1240.394140] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 03:50:07 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1240.463776] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:50:07 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b41000e000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:50:07 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x400000009, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x101000002}) flock(r0, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x8007, 0x16eb) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x10, r1, 0x0) flock(r0, 0x2) flock(r0, 0x2) flock(r0, 0x2) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="a81b016fada0c259e72900002e2f66696c65300045990946b8433ebd359368657af0991d54c893c7773b9be076e5df29dc2293a6b4ea7a7381fa1620535fd6b7faf6c100d0ab84818cd677"], 0x1) [ 1240.536700] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1240.564923] XFS (loop3): SB sanity check failed [ 1240.570428] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1240.582799] XFS (loop4): SB validate failed with error -117. [ 1240.594320] XFS (loop3): Unmount and run xfs_repair [ 1240.599870] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1240.625118] 00000000: 58 46 53 42 00 00 10 00 00 00 00 06 00 00 09 00 XFSB............ [ 1240.662365] XFS (loop5): Mounting V4 Filesystem [ 1240.672635] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1240.689476] XFS (loop5): Log size -50329920 blocks too large, maximum size is 1048576 blocks 03:50:08 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000001436100000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1240.731093] XFS (loop5): Log size out of supported range. [ 1240.738448] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1240.761822] XFS (loop5): Continuing onwards, but if log hangs are experienced then please report this message in the bug report. [ 1240.792164] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1240.824233] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:50:08 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:50:08 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f800000000000000040000010000000008000000000000000810000000000000082000000010000100000000001000000003f0006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1240.837166] XFS (loop5): Invalid block length (0x1) for buffer [ 1240.843560] XFS (loop2): SB sanity check failed [ 1240.848434] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1240.868237] XFS (loop5): empty log check failed [ 1240.876987] XFS (loop5): log mount/recovery failed: error -12 [ 1240.883084] XFS (loop2): Unmount and run xfs_repair [ 1240.893874] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1240.915976] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1240.931622] XFS (loop5): log mount failed [ 1240.943353] 00000000: 58 46 53 42 03 b4 10 00 e0 00 00 00 00 00 09 00 XFSB............ [ 1240.963060] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1240.973194] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1240.989824] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1240.994637] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1241.009477] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1241.029410] XFS (loop4): SB sanity check failed [ 1241.030174] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:50:08 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1241.037038] XFS (loop3): SB validate failed with error -117. [ 1241.049688] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1241.051086] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1241.076226] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1241.089051] XFS (loop4): Unmount and run xfs_repair [ 1241.090232] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1241.100981] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1241.102455] XFS (loop2): SB validate failed with error -117. [ 1241.109715] 00000000: 58 46 53 42 00 00 10 00 00 01 43 61 00 00 09 00 XFSB......Ca.... [ 1241.131111] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:50:08 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100fffffffe0006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1241.174418] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1241.233179] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1241.250353] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1241.299433] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1241.320360] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1241.334839] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 03:50:08 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000700000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1241.347261] XFS (loop0): Mounting V4 Filesystem [ 1241.354816] XFS (loop0): Log size 1056966336 blocks too large, maximum size is 1048576 blocks [ 1241.422880] XFS (loop0): Log size out of supported range. [ 1241.433737] XFS (loop4): SB validate failed with error -117. [ 1241.441317] XFS (loop5): Mounting V4 Filesystem [ 1241.454432] XFS (loop0): Continuing onwards, but if log hangs are experienced then please report this message in the bug report. 03:50:08 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:50:08 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410004301000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1241.463015] XFS (loop5): Log size -33552704 blocks too large, maximum size is 1048576 blocks [ 1241.489469] XFS (loop5): Log size out of supported range. [ 1241.500449] XFS (loop5): Continuing onwards, but if log hangs are experienced then please report this message in the bug report. [ 1241.522778] XFS (loop3): SB sanity check failed [ 1241.528039] XFS (loop5): Invalid block length (0x1) for buffer [ 1241.534412] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1241.534424] XFS (loop3): Unmount and run xfs_repair [ 1241.534435] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1241.534451] 00000000: 58 46 53 42 00 00 10 00 00 00 00 07 00 00 09 00 XFSB............ [ 1241.534466] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1241.553663] XFS (loop5): empty log check failed [ 1241.564103] XFS (loop0): Invalid block length (0x1) for buffer [ 1241.580071] XFS (loop5): log mount/recovery failed: error -12 [ 1241.598399] XFS (loop5): log mount failed [ 1241.631265] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1241.638465] XFS (loop0): empty log check failed [ 1241.646784] XFS (loop0): log mount/recovery failed: error -12 [ 1241.649739] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1241.677181] XFS (loop0): log mount failed [ 1241.709557] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1241.718955] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1241.739339] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:50:09 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000001436200000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:09 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:50:09 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100fcfdffff0006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1241.873842] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1241.904166] XFS (loop3): SB validate failed with error -117. 03:50:09 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f800000000000000040000010000000008000000000000000810000000000000082000000010000100000000001000000003f0006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1241.941190] XFS (loop2): SB sanity check failed [ 1241.955594] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1241.974217] XFS (loop4): SB sanity check failed [ 1241.980285] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1241.983456] XFS (loop2): Unmount and run xfs_repair [ 1241.997208] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1242.004226] 00000000: 58 46 53 42 03 b4 10 00 43 01 00 00 00 00 09 00 XFSB....C....... [ 1242.012673] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1242.022075] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1242.031009] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1242.036370] XFS (loop4): Unmount and run xfs_repair [ 1242.039514] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1242.052723] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1242.056266] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1242.061150] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1242.076109] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1242.084586] XFS (loop2): SB validate failed with error -117. [ 1242.088958] 00000000: 58 46 53 42 00 00 10 00 00 01 43 62 00 00 09 00 XFSB......Cb.... [ 1242.106036] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1242.114352] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1242.122701] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1242.134283] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1242.142613] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1242.151191] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1242.159487] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1242.167999] XFS (loop4): SB validate failed with error -117. 03:50:09 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:50:09 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000800000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1242.296542] XFS (loop5): Mounting V4 Filesystem [ 1242.301686] XFS (loop5): Log size -16775488 blocks too large, maximum size is 1048576 blocks [ 1242.313594] XFS (loop5): Log size out of supported range. [ 1242.323182] XFS (loop5): Continuing onwards, but if log hangs are experienced then please report this message in the bug report. 03:50:09 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410008001000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1242.361259] XFS (loop5): Invalid block length (0x1) for buffer [ 1242.384408] XFS (loop5): empty log check failed [ 1242.389592] XFS (loop5): log mount/recovery failed: error -12 [ 1242.406110] XFS (loop5): log mount failed [ 1242.448126] XFS (loop0): Mounting V4 Filesystem [ 1242.458106] XFS (loop0): Log size 1056966336 blocks too large, maximum size is 1048576 blocks 03:50:09 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:50:09 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000001436300000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1242.500231] XFS (loop0): Log size out of supported range. [ 1242.506740] XFS (loop0): Continuing onwards, but if log hangs are experienced then please report this message in the bug report. [ 1242.556309] XFS (loop0): Invalid block length (0x1) for buffer [ 1242.566649] XFS (loop0): empty log check failed [ 1242.577914] XFS (loop0): log mount/recovery failed: error -12 [ 1242.584510] XFS (loop3): SB sanity check failed [ 1242.589230] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:50:09 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100fdfdffff0006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1242.639160] XFS (loop0): log mount failed 03:50:10 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1242.690136] XFS (loop3): Unmount and run xfs_repair [ 1242.707317] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1242.714680] 00000000: 58 46 53 42 00 00 10 00 00 00 00 08 00 00 09 00 XFSB............ [ 1242.723206] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1242.731999] XFS (loop2): SB sanity check failed [ 1242.751139] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1242.813372] XFS (loop4): SB sanity check failed [ 1242.818994] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1242.857830] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 03:50:10 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f800000000000000040000010000000008000000000000000810000000000000082000000010000100000000001000000003f0006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:10 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1242.900009] XFS (loop5): Mounting V4 Filesystem [ 1242.902376] XFS (loop2): Unmount and run xfs_repair [ 1242.910036] XFS (loop4): Unmount and run xfs_repair [ 1242.911543] XFS (loop5): Log size -16775488 blocks too large, maximum size is 1048576 blocks [ 1242.921233] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1242.936732] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1242.957303] XFS (loop5): Log size out of supported range. [ 1242.959831] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1242.980605] 00000000: 58 46 53 42 00 00 10 00 00 01 43 63 00 00 09 00 XFSB......Cc.... [ 1242.982786] XFS (loop5): Continuing onwards, but if log hangs are experienced then please report this message in the bug report. [ 1242.992544] 00000000: 58 46 53 42 03 b4 10 00 80 01 00 00 00 00 09 00 XFSB............ [ 1243.001544] XFS (loop5): Invalid block length (0x1) for buffer [ 1243.033613] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1243.043676] XFS (loop5): empty log check failed [ 1243.057169] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1243.061820] XFS (loop5): log mount/recovery failed: error -12 [ 1243.069077] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1243.086892] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1243.100486] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1243.111740] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1243.114114] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1243.127851] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1243.138954] XFS (loop5): log mount failed [ 1243.139385] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:50:10 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1243.158946] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1243.167790] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1243.170693] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1243.190503] XFS (loop0): Mounting V4 Filesystem [ 1243.194652] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1243.203912] XFS (loop0): Log size 1056966336 blocks too large, maximum size is 1048576 blocks [ 1243.216240] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1243.218807] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1243.233063] XFS (loop0): Log size out of supported range. [ 1243.239629] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1243.248713] XFS (loop3): SB validate failed with error -117. [ 1243.249334] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1243.263062] XFS (loop0): Continuing onwards, but if log hangs are experienced then please report this message in the bug report. [ 1243.268721] XFS (loop4): SB validate failed with error -117. [ 1243.287627] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1243.300356] XFS (loop2): SB validate failed with error -117. 03:50:10 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1243.310397] XFS (loop0): Invalid block length (0x1) for buffer [ 1243.319504] XFS (loop0): empty log check failed [ 1243.332974] XFS (loop0): log mount/recovery failed: error -12 [ 1243.363938] XFS (loop0): log mount failed 03:50:10 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:50:10 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100ebffffff0006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:10 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000900000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:10 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410008801000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:50:10 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000006400000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:10 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:50:10 executing program 0: syz_mount_image$xfs(0x0, &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f800000000000000040000010000000008000000000000000810000000000000082000000010000100000000001000000003f0006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1243.719292] XFS (loop5): Mounting V4 Filesystem [ 1243.732665] XFS (loop3): SB sanity check failed [ 1243.738279] XFS (loop5): Log size -16775488 blocks too large, maximum size is 1048576 blocks [ 1243.750424] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1243.795290] XFS (loop5): Log size out of supported range. [ 1243.829916] XFS (loop3): Unmount and run xfs_repair [ 1243.844788] XFS (loop5): Continuing onwards, but if log hangs are experienced then please report this message in the bug report. [ 1243.860233] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1243.870337] XFS (loop2): SB sanity check failed [ 1243.875439] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1243.883650] 00000000: 58 46 53 42 00 00 10 00 00 00 00 09 00 00 09 00 XFSB............ [ 1243.904380] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1243.929977] XFS (loop5): Invalid block length (0x1) for buffer 03:50:11 executing program 0: syz_mount_image$xfs(0x0, &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f800000000000000040000010000000008000000000000000810000000000000082000000010000100000000001000000003f0006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1243.951614] XFS (loop2): Unmount and run xfs_repair [ 1243.956620] XFS (loop5): empty log check failed [ 1243.958547] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1243.971660] XFS (loop5): log mount/recovery failed: error -12 [ 1243.982331] XFS (loop4): SB sanity check failed [ 1243.987444] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1243.998985] XFS (loop5): log mount failed [ 1244.003684] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1244.044459] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:50:11 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1244.054137] 00000000: 58 46 53 42 03 b4 10 00 88 01 00 00 00 00 09 00 XFSB............ [ 1244.060124] XFS (loop4): Unmount and run xfs_repair [ 1244.063319] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1244.078214] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1244.085849] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1244.086976] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1244.101976] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1244.106039] 00000000: 58 46 53 42 00 00 10 00 00 00 00 64 00 00 09 00 XFSB.......d.... [ 1244.119874] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1244.123910] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1244.129513] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1244.143251] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1244.153116] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1244.153122] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1244.153134] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1244.177845] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1244.178302] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1244.190273] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1244.194902] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1244.209732] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1244.211410] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1244.219959] XFS (loop4): SB validate failed with error -117. [ 1244.227875] XFS (loop3): SB validate failed with error -117. [ 1244.245451] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ 03:50:11 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1244.281696] XFS (loop2): SB validate failed with error -117. 03:50:11 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100feffffff0006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:11 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000a00000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:11 executing program 0: syz_mount_image$xfs(0x0, &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f800000000000000040000010000000008000000000000000810000000000000082000000010000100000000001000000003f0006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:11 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:50:11 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b41000b401000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:50:11 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000001436400000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:12 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1244.735977] XFS (loop5): Mounting V4 Filesystem [ 1244.741931] XFS (loop5): Log size -16775488 blocks too large, maximum size is 1048576 blocks [ 1244.751716] XFS (loop3): SB sanity check failed [ 1244.756824] XFS (loop5): Log size out of supported range. [ 1244.780652] XFS (loop5): Continuing onwards, but if log hangs are experienced then please report this message in the bug report. [ 1244.784266] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1244.805505] XFS (loop3): Unmount and run xfs_repair [ 1244.810752] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1244.817884] 00000000: 58 46 53 42 00 00 10 00 00 00 00 0a 00 00 09 00 XFSB............ [ 1244.827051] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1244.827303] XFS (loop5): Invalid block length (0x1) for buffer [ 1244.835551] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1244.849850] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1244.860080] XFS (loop5): empty log check failed [ 1244.874258] XFS (loop5): log mount/recovery failed: error -12 [ 1244.893498] XFS (loop5): log mount failed [ 1244.899785] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1244.929011] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 03:50:12 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:50:12 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000200000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1245.044197] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:50:12 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', 0x0, 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f800000000000000040000010000000008000000000000000810000000000000082000000010000100000000001000000003f0006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1245.086906] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1245.102768] XFS (loop2): SB sanity check failed [ 1245.122779] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1245.179711] XFS (loop3): SB validate failed with error -117. [ 1245.186315] XFS (loop2): Unmount and run xfs_repair [ 1245.187281] XFS (loop4): SB sanity check failed [ 1245.191516] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1245.207700] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1245.232713] 00000000: 58 46 53 42 03 b4 10 00 b4 01 00 00 00 00 09 00 XFSB............ [ 1245.234084] XFS (loop4): Unmount and run xfs_repair [ 1245.254149] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1245.254492] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1245.262431] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1245.262443] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1245.262456] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1245.262467] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1245.262479] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1245.262490] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1245.262526] XFS (loop2): SB validate failed with error -117. [ 1245.359653] 00000000: 58 46 53 42 00 00 10 00 00 01 43 64 00 00 09 00 XFSB......Cd.... [ 1245.394940] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:50:12 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000b00000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:12 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', 0x0, 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f800000000000000040000010000000008000000000000000810000000000000082000000010000100000000001000000003f0006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1245.424230] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1245.434252] XFS (loop5): Mounting V4 Filesystem [ 1245.442696] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1245.478547] XFS (loop5): totally zeroed log 03:50:12 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1245.515064] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1245.557738] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1245.560432] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1245.574307] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1245.593760] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1245.603099] XFS (loop4): SB validate failed with error -117. 03:50:13 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b41000e001000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:50:13 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', 0x0, 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f800000000000000040000010000000008000000000000000810000000000000082000000010000100000000001000000003f0006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:13 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1245.768208] XFS (loop3): SB sanity check failed [ 1245.773040] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:50:13 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000001436500000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1245.845450] XFS (loop3): Unmount and run xfs_repair [ 1245.850628] XFS (loop3): First 128 bytes of corrupted metadata buffer: 03:50:13 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000300000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1245.897638] 00000000: 58 46 53 42 00 00 10 00 00 00 00 0b 00 00 09 00 XFSB............ [ 1245.933549] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1245.969395] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1245.979624] XFS (loop2): SB sanity check failed [ 1245.984611] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1246.007274] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1246.020926] XFS (loop2): Unmount and run xfs_repair 03:50:13 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1246.044459] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1246.045929] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1246.057740] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 03:50:13 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f800000000000000040000010000000008000000000000000810000000000000082000000010000100000000001000000003f0006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1246.095806] 00000000: 58 46 53 42 03 b4 10 00 e0 01 00 00 00 00 09 00 XFSB............ [ 1246.098271] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1246.114158] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1246.127134] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1246.135791] XFS (loop3): SB validate failed with error -117. [ 1246.143785] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1246.201271] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1246.225221] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1246.234472] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1246.242819] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1246.252148] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1246.261374] XFS (loop2): SB validate failed with error -117. [ 1246.320231] XFS (loop4): SB sanity check failed 03:50:13 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1246.343729] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:50:13 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000c00000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1246.452160] XFS (loop4): Unmount and run xfs_repair [ 1246.466976] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1246.475775] XFS (loop5): Mounting V4 Filesystem [ 1246.481260] 00000000: 58 46 53 42 00 00 10 00 00 01 43 65 00 00 09 00 XFSB......Ce.... [ 1246.489987] XFS (loop5): totally zeroed log [ 1246.522785] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1246.541333] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1246.551471] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1246.560233] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:50:13 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b41000e801000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1246.568706] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1246.588704] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1246.602714] XFS (loop0): Invalid superblock magic number [ 1246.606430] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1246.628740] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 03:50:14 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1246.673898] XFS (loop4): SB validate failed with error -117. 03:50:14 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000400000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1246.725505] XFS (loop3): SB sanity check failed [ 1246.731913] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1246.757533] XFS (loop3): Unmount and run xfs_repair [ 1246.766310] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1246.773381] 00000000: 58 46 53 42 00 00 10 00 00 00 00 0c 00 00 09 00 XFSB............ [ 1246.782179] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1246.804219] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1246.854228] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1246.874692] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1246.894758] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 03:50:14 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:50:14 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f800000000000000040000010000000008000000000000000810000000000000082000000010000100000000001000000003f0006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:14 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000001436600000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1246.969207] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1247.049184] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1247.058778] XFS (loop2): SB sanity check failed [ 1247.070357] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1247.097740] XFS (loop3): SB validate failed with error -117. 03:50:14 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1247.170734] XFS (loop2): Unmount and run xfs_repair [ 1247.178850] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1247.187799] XFS (loop5): Mounting V4 Filesystem [ 1247.193987] 00000000: 58 46 53 42 03 b4 10 00 e8 01 00 00 00 00 09 00 XFSB............ [ 1247.209819] XFS (loop5): totally zeroed log [ 1247.211941] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1247.247593] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1247.263050] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 03:50:14 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000d00000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1247.292576] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1247.316918] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1247.334713] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1247.343540] XFS (loop0): Invalid superblock magic number [ 1247.343956] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1247.358480] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1247.367323] XFS (loop2): SB validate failed with error -117. 03:50:14 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:50:14 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000800000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1247.425079] XFS (loop4): SB sanity check failed [ 1247.430297] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1247.479336] XFS (loop4): Unmount and run xfs_repair [ 1247.487487] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1247.504668] 00000000: 58 46 53 42 00 00 10 00 00 01 43 66 00 00 09 00 XFSB......Cf.... 03:50:14 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f800000000000000040000010000000008000000000000000810000000000000082000000010000100000000001000000003f0006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1247.564337] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1247.584837] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 03:50:15 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b41000f201000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1247.639050] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1247.648968] XFS (loop3): SB sanity check failed [ 1247.664998] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:50:15 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1247.704327] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1247.735517] XFS (loop3): Unmount and run xfs_repair [ 1247.742238] XFS (loop5): Mounting V4 Filesystem [ 1247.756753] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1247.761128] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1247.773280] XFS (loop5): totally zeroed log [ 1247.789782] 00000000: 58 46 53 42 00 00 10 00 00 00 00 0d 00 00 09 00 XFSB............ [ 1247.799817] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1247.811207] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1247.838516] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1247.849944] XFS (loop0): Invalid superblock magic number [ 1247.858213] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1247.859042] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1247.875822] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1247.883555] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1247.892942] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1247.912081] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1247.923400] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1247.927127] XFS (loop4): SB validate failed with error -117. [ 1247.939656] XFS (loop3): SB validate failed with error -117. 03:50:15 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1247.980623] XFS (loop2): SB sanity check failed [ 1247.987152] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1248.020747] XFS (loop2): Unmount and run xfs_repair [ 1248.033400] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1248.040910] 00000000: 58 46 53 42 03 b4 10 00 f2 01 00 00 00 00 09 00 XFSB............ [ 1248.049579] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:50:15 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0) [ 1248.110371] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 03:50:15 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100001000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:15 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000e00000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1248.168909] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:50:15 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000001436700000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1248.229412] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1248.284616] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1248.366101] XFS (loop0): Invalid superblock magic number [ 1248.371920] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1248.403985] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ 03:50:15 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1248.404989] XFS (loop4): SB sanity check failed [ 1248.415210] XFS (loop2): SB validate failed with error -117. [ 1248.430863] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1248.445463] XFS (loop4): Unmount and run xfs_repair [ 1248.451896] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1248.459327] 00000000: 58 46 53 42 00 00 10 00 00 01 43 67 00 00 09 00 XFSB......Cg.... [ 1248.468709] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1248.506376] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1248.520651] XFS (loop5): Mounting V4 Filesystem [ 1248.528742] XFS (loop3): SB sanity check failed [ 1248.535995] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1248.572040] XFS (loop5): totally zeroed log [ 1248.589599] XFS (loop5): Failed to read root inode 0x100000000080, error 22 03:50:15 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0) [ 1248.616172] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1248.628395] XFS (loop3): Unmount and run xfs_repair [ 1248.654837] XFS (loop3): First 128 bytes of corrupted metadata buffer: 03:50:15 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410003602000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1248.664372] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1248.674190] 00000000: 58 46 53 42 00 00 10 00 00 00 00 0e 00 00 09 00 XFSB............ [ 1248.681124] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1248.682735] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1248.707314] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1248.720706] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1248.732146] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1248.744856] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1248.751092] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1248.761798] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:50:16 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1248.769485] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1248.776899] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1248.790640] XFS (loop4): SB validate failed with error -117. [ 1248.803423] XFS (loop3): SB validate failed with error -117. 03:50:16 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000003000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:16 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000006800000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:16 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000001000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:16 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1249.088209] XFS (loop0): Invalid superblock magic number 03:50:16 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0) [ 1249.231562] XFS (loop2): SB sanity check failed [ 1249.244651] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1249.268548] XFS (loop5): Mounting V4 Filesystem [ 1249.286212] XFS (loop5): totally zeroed log [ 1249.295653] XFS (loop2): Unmount and run xfs_repair [ 1249.307732] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1249.327568] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1249.358506] XFS (loop4): SB sanity check failed [ 1249.363627] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1249.367817] 00000000: 58 46 53 42 03 b4 10 00 36 02 00 00 00 00 09 00 XFSB....6....... [ 1249.405691] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1249.406843] XFS (loop4): Unmount and run xfs_repair [ 1249.414467] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1249.428297] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1249.428899] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1249.437583] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1249.450330] 00000000: 58 46 53 42 00 00 10 00 00 00 00 68 00 00 09 00 XFSB.......h.... [ 1249.452545] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1249.462744] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1249.477303] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1249.483658] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1249.486103] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1249.500886] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1249.503145] XFS (loop2): SB validate failed with error -117. [ 1249.510669] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1249.517412] XFS (loop3): SB sanity check failed [ 1249.529887] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1249.532796] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1249.551371] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1249.559655] XFS (loop3): Unmount and run xfs_repair [ 1249.560122] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1249.573216] XFS (loop4): SB validate failed with error -117. [ 1249.583431] XFS (loop0): Invalid superblock magic number [ 1249.607856] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1249.633506] 00000000: 58 46 53 42 00 00 10 00 00 00 00 10 00 00 09 00 XFSB............ [ 1249.642548] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:50:16 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:50:17 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000810000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1249.651696] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1249.660610] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1249.677712] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1249.697199] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 03:50:17 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 1249.718163] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1249.729260] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1249.755889] XFS (loop3): SB validate failed with error -117. 03:50:17 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000001436800000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:17 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000002300000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:17 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410003802000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:50:17 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1250.070745] XFS (loop5): Mounting V4 Filesystem [ 1250.096047] XFS (loop0): Invalid superblock magic number [ 1250.107479] XFS (loop5): totally zeroed log [ 1250.135767] XFS (loop5): Failed to read root inode 0x100000000080, error 22 03:50:17 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 1250.221022] XFS (loop3): SB sanity check failed [ 1250.227585] XFS (loop4): SB sanity check failed [ 1250.232372] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1250.244229] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1250.256680] XFS (loop4): Unmount and run xfs_repair [ 1250.260178] XFS (loop3): Unmount and run xfs_repair [ 1250.267476] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1250.274700] 00000000: 58 46 53 42 00 00 10 00 00 00 00 23 00 00 09 00 XFSB.......#.... [ 1250.283169] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1250.291100] XFS (loop2): SB sanity check failed [ 1250.296051] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1250.311225] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1250.315527] 00000000: 58 46 53 42 00 00 10 00 00 01 43 68 00 00 09 00 XFSB......Ch.... [ 1250.321144] XFS (loop2): Unmount and run xfs_repair [ 1250.361006] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1250.379347] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1250.402444] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:50:17 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f8000000000000000400000100000000080000000000000008100000000000000820000000100001000000000010000003f000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1250.429515] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1250.440181] 00000000: 58 46 53 42 03 b4 10 00 38 02 00 00 00 00 09 00 XFSB....8....... [ 1250.454259] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:50:17 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1250.484461] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1250.492086] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1250.494813] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1250.509508] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1250.517704] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1250.517718] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1250.517729] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1250.517740] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1250.517751] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1250.517788] XFS (loop2): SB validate failed with error -117. [ 1250.544142] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1250.568442] XFS (loop0): Invalid superblock magic number [ 1250.586719] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1250.595753] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1250.635477] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1250.654172] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1250.662346] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1250.670616] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1250.691468] XFS (loop3): SB validate failed with error -117. 03:50:18 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1250.750345] XFS (loop4): SB validate failed with error -117. 03:50:18 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410008002000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:50:18 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000004a00000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1250.902807] XFS (loop5): Mounting V4 Filesystem 03:50:18 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000001436900000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1250.939703] XFS (loop5): totally zeroed log 03:50:18 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 1250.967570] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1251.128890] XFS (loop2): SB sanity check failed [ 1251.150967] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1251.165149] XFS (loop3): SB sanity check failed [ 1251.170077] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1251.202687] XFS (loop3): Unmount and run xfs_repair [ 1251.208107] XFS (loop2): Unmount and run xfs_repair [ 1251.215718] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1251.255754] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1251.281877] 00000000: 58 46 53 42 00 00 10 00 00 00 00 4a 00 00 09 00 XFSB.......J.... [ 1251.295546] 00000000: 58 46 53 42 03 b4 10 00 80 02 00 00 00 00 09 00 XFSB............ 03:50:18 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000880000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1251.308148] XFS (loop0): Invalid superblock magic number [ 1251.319119] XFS (loop4): SB sanity check failed [ 1251.322294] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1251.332341] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1251.354299] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1251.357133] XFS (loop4): Unmount and run xfs_repair [ 1251.368181] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1251.371981] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1251.375353] 00000000: 58 46 53 42 00 00 10 00 00 01 43 69 00 00 09 00 XFSB......Ci.... [ 1251.386989] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1251.392669] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1251.408144] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1251.416665] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1251.417821] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1251.425168] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1251.439457] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1251.442841] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1251.455840] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1251.459161] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1251.494250] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:50:18 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, 0x0) [ 1251.514678] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1251.519014] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1251.522923] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1251.522964] XFS (loop4): SB validate failed with error -117. [ 1251.546757] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1251.551094] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1251.563737] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1251.567779] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1251.573513] XFS (loop2): SB validate failed with error -117. 03:50:18 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1251.613708] XFS (loop3): SB validate failed with error -117. [ 1251.746092] XFS (loop5): Mounting V4 Filesystem 03:50:19 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410008c02000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1251.771864] XFS (loop5): totally zeroed log [ 1251.785253] XFS (loop5): Failed to read root inode 0x100000000080, error 22 03:50:19 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000006400000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:19 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000001436a00000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:19 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1251.866884] XFS (loop0): Invalid superblock magic number 03:50:19 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, 0x0) 03:50:19 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000106c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1252.168946] XFS (loop3): SB sanity check failed [ 1252.175803] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1252.190569] XFS (loop3): Unmount and run xfs_repair [ 1252.196539] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1252.204946] 00000000: 58 46 53 42 00 00 10 00 00 00 00 64 00 00 09 00 XFSB.......d.... [ 1252.213484] XFS (loop2): SB sanity check failed [ 1252.213867] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1252.222919] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1252.229049] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1252.248100] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1252.257459] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1252.267861] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1252.276954] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1252.286254] XFS (loop0): Invalid superblock magic number [ 1252.299420] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1252.333141] XFS (loop4): SB sanity check failed [ 1252.338840] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1252.352558] XFS (loop2): Unmount and run xfs_repair [ 1252.368159] XFS (loop2): First 128 bytes of corrupted metadata buffer: 03:50:19 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, 0x0) [ 1252.384769] XFS (loop3): SB validate failed with error -117. [ 1252.407677] 00000000: 58 46 53 42 03 b4 10 00 8c 02 00 00 00 00 09 00 XFSB............ [ 1252.412539] XFS (loop4): Unmount and run xfs_repair 03:50:19 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1252.447373] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1252.458691] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1252.468375] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1252.482172] 00000000: 58 46 53 42 00 00 10 00 00 01 43 6a 00 00 09 00 XFSB......Cj.... [ 1252.494736] XFS (loop5): Mounting V4 Filesystem [ 1252.505271] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1252.521290] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1252.531213] XFS (loop5): totally zeroed log [ 1252.547525] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1252.552870] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1252.562962] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1252.585250] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:50:19 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000006e00000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1252.600180] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1252.619764] XFS (loop2): SB validate failed with error -117. [ 1252.638765] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1252.647537] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1252.656174] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1252.669780] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1252.702814] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1252.723017] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1252.734401] XFS (loop4): SB validate failed with error -117. [ 1252.736648] XFS (loop0): Invalid superblock magic number 03:50:20 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:50:20 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b41000ba02000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:50:20 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)}], 0x0, 0x0) [ 1252.958774] XFS (loop3): SB sanity check failed 03:50:20 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000206c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:20 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000001436b00000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1252.991897] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1253.052311] XFS (loop3): Unmount and run xfs_repair 03:50:20 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1253.108081] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1253.132683] 00000000: 58 46 53 42 00 00 10 00 00 00 00 6e 00 00 09 00 XFSB.......n.... 03:50:20 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b41000da02000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1253.160118] XFS (loop0): Invalid superblock magic number [ 1253.194248] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1253.215096] XFS (loop5): Mounting V4 Filesystem [ 1253.229745] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1253.239260] XFS (loop5): totally zeroed log [ 1253.246368] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1253.295503] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1253.311497] XFS (loop4): SB sanity check failed [ 1253.322607] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1253.331888] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1253.338113] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 03:50:20 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)}], 0x0, 0x0) [ 1253.391809] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1253.400422] XFS (loop4): Unmount and run xfs_repair [ 1253.434121] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1253.440643] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1253.449594] 00000000: 58 46 53 42 00 00 10 00 00 01 43 6b 00 00 09 00 XFSB......Ck.... 03:50:20 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:50:20 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000306c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1253.474406] XFS (loop3): SB validate failed with error -117. [ 1253.488418] XFS (loop2): SB sanity check failed [ 1253.507604] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1253.516618] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1253.520627] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 03:50:20 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000007e00000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1253.574155] XFS (loop2): Unmount and run xfs_repair [ 1253.579601] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1253.602303] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1253.620715] 00000000: 58 46 53 42 03 b4 10 00 da 02 00 00 00 00 09 00 XFSB............ [ 1253.622351] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1253.637566] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1253.637752] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1253.652437] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1253.663135] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1253.678844] XFS (loop4): SB validate failed with error -117. [ 1253.689512] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1253.703217] XFS (loop0): Invalid superblock magic number [ 1253.711556] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:50:21 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1253.778834] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:50:21 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000006c00000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:21 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)}], 0x0, 0x0) [ 1253.872539] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1253.913058] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1253.955219] XFS (loop5): Mounting V4 Filesystem [ 1253.974475] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1253.985045] XFS (loop3): SB sanity check failed [ 1253.989998] XFS (loop5): totally zeroed log [ 1253.990050] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1253.994554] XFS (loop2): SB validate failed with error -117. [ 1254.012823] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1254.060881] XFS (loop3): Unmount and run xfs_repair 03:50:21 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000880000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1254.119793] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1254.128022] XFS (loop4): SB sanity check failed [ 1254.133098] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1254.160361] XFS (loop4): Unmount and run xfs_repair [ 1254.198230] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1254.213734] XFS (loop0): Invalid superblock magic number 03:50:21 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b41000dc02000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1254.239645] 00000000: 58 46 53 42 00 00 10 00 00 00 00 6c 00 00 09 00 XFSB.......l.... [ 1254.243009] 00000000: 58 46 53 42 00 00 10 00 00 00 00 7e 00 00 09 00 XFSB.......~.... [ 1254.261280] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:50:21 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 1254.282858] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1254.290559] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1254.295297] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1254.313696] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1254.331182] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 03:50:21 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000406c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1254.348459] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1254.364284] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1254.372634] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1254.384316] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 03:50:21 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f8000000000000000400000100000000080000000000000008100000000000000820000000100001000000000010000003f000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:21 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000", 0x3f}], 0x0, 0x0) [ 1254.431298] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1254.450868] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1254.481620] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1254.482341] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1254.502011] XFS (loop3): SB validate failed with error -117. [ 1254.512260] XFS (loop4): SB validate failed with error -117. 03:50:21 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410007e00000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1254.572133] XFS (loop2): SB sanity check failed [ 1254.589533] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1254.627821] XFS (loop2): Unmount and run xfs_repair [ 1254.633395] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1254.642347] 00000000: 58 46 53 42 03 b4 10 00 dc 02 00 00 00 00 09 00 XFSB............ [ 1254.684942] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1254.716466] XFS (loop5): Mounting V4 Filesystem 03:50:22 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000030006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:22 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000c300000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:22 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000001436c00000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1254.760349] XFS (loop5): totally zeroed log [ 1254.765614] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1254.815414] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1254.828797] XFS (loop0): device supports 512 byte sectors (not 0) [ 1254.857043] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1254.874082] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1254.882782] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:50:22 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000010006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1254.900778] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1254.910178] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1254.926793] XFS (loop2): SB validate failed with error -117. 03:50:22 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000", 0x3f}], 0x0, 0x0) [ 1255.104532] XFS (loop3): SB sanity check failed 03:50:22 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100081000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:22 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b41000de02000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) [ 1255.131177] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 03:50:22 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000806c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1255.174780] XFS (loop3): Unmount and run xfs_repair [ 1255.188005] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1255.207469] 00000000: 58 46 53 42 00 00 10 00 00 00 00 c3 00 00 09 00 XFSB............ [ 1255.216917] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ 03:50:22 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000300000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1255.228910] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1255.259347] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1255.267692] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 03:50:22 executing program 1 (fault-call:11 fault-nth:0): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1255.276486] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1255.285031] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1255.293379] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1255.302593] XFS (loop3): SB validate failed with error -117. [ 1255.308609] XFS (loop4): SB sanity check failed [ 1255.320964] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1255.337350] XFS (loop4): Unmount and run xfs_repair [ 1255.342479] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1255.350015] 00000000: 58 46 53 42 00 00 10 00 00 01 43 6c 00 00 09 00 XFSB......Cl.... [ 1255.358328] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1255.366505] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1255.366515] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1255.366525] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1255.366536] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1255.400711] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1255.437921] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1255.453221] XFS (loop4): SB validate failed with error -117. [ 1255.463751] XFS (loop0): device supports 512 byte sectors (not 0) 03:50:22 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:50:22 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000c400000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:23 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000001436d00000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 03:50:23 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000", 0x3f}], 0x0, 0x0) [ 1255.700927] XFS (loop2): SB sanity check failed [ 1255.712707] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1255.754133] XFS (loop5): Mounting V4 Filesystem [ 1255.759619] XFS (loop5): log size 2154561536 bytes too large, maximum size is 2136997888 bytes [ 1255.784114] XFS (loop5): Log size out of supported range. [ 1255.791251] XFS (loop5): Continuing onwards, but if log hangs are experienced then please report this message in the bug report. [ 1255.832238] XFS (loop2): Unmount and run xfs_repair [ 1255.851357] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1255.881426] 00000000: 58 46 53 42 03 b4 10 00 de 02 00 00 00 00 09 00 XFSB............ [ 1255.895025] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1255.895276] XFS (loop5): totally zeroed log [ 1255.903461] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1255.922880] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1255.947026] XFS (loop5): Failed to read root inode 0x100000000080, error 22 [ 1255.955671] XFS (loop0): device supports 512 byte sectors (not 0) [ 1255.956049] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1255.962372] XFS (loop3): SB sanity check failed [ 1255.976056] XFS (loop4): SB sanity check failed [ 1255.980822] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1255.991092] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1256.000454] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1256.008464] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1256.012408] XFS (loop4): Unmount and run xfs_repair [ 1256.020337] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1256.033509] XFS (loop3): Unmount and run xfs_repair [ 1256.034203] XFS (loop2): SB validate failed with error -117. [ 1256.050473] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1256.057558] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1256.057881] 00000000: 58 46 53 42 00 00 10 00 00 01 43 6d 00 00 09 00 XFSB......Cm.... [ 1256.074235] 00000000: 58 46 53 42 00 00 10 00 00 00 00 c4 00 00 09 00 XFSB............ [ 1256.074378] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1256.082492] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1256.082502] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1256.082514] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1256.082525] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1256.082537] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1256.082548] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1256.082559] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1256.082595] XFS (loop3): SB validate failed with error -117. [ 1256.153959] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1256.162921] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1256.171120] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1256.179424] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1256.188095] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 03:50:23 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f8000000000000000400000100000000080000000000000008100000000000000820000000100001000000000010000", 0x5e}], 0x0, 0x0) [ 1256.188108] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1256.188145] XFS (loop4): SB validate failed with error -117. 03:50:23 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x2, 0x0) 03:50:23 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534203b410000003000000000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c09", 0x7a}], 0x0, 0x0) 03:50:23 executing program 3: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000180)=""/144) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000f400000900000000000000000000fcbe0000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 1256.444974] XFS (loop0): device supports 512 byte sectors (not 0) 03:50:23 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x5421, 0x0) [ 1256.747790] XFS (loop3): SB sanity check failed [ 1256.752754] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1256.809963] XFS (loop3): Unmount and run xfs_repair [ 1256.816495] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1256.823155] 00000000: 58 46 53 42 00 00 10 00 00 00 00 f4 00 00 09 00 XFSB............ [ 1256.825384] XFS (loop2): SB sanity check failed [ 1256.836627] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 1256.838137] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1256.848336] XFS (loop2): Unmount and run xfs_repair [ 1256.861471] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 1256.862549] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1256.868633] 00000000: 58 46 53 42 03 b4 10 00 00 03 00 00 00 00 09 00 XFSB............ [ 1256.882049] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1256.884913] 00000010: 00 00 00 00 00 00 00 00 00 fc be 00 00 00 00 00 ................ [ 1256.893924] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1256.901558] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1256.916766] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1256.917912] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 1256.929759] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1256.935008] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1256.949124] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1256.952444] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1256.960049] XFS (loop3): SB validate failed with error -117. [ 1256.973506] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1256.982883] 00000070: 00 00 00 00 00 00 00 00 0c 09 00 00 00 00 00 00 ................ [ 1256.994112] XFS (loop2): SB validate failed with error -117.