xecuting program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x801054db, 0x0) 10:27:46 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x2}}}, 0x48) [ 2005.104460][T10476] XFS (loop3): SB sanity check failed [ 2005.109945][T10476] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2005.123582][T10476] XFS (loop3): Unmount and run xfs_repair [ 2005.129493][T10476] XFS (loop3): First 128 bytes of corrupted metadata buffer: 10:27:46 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x2}}}, 0x48) [ 2005.176342][T10476] 00000000: 58 46 53 42 00 00 10 00 00 00 be ba ed fe 10 00 XFSB............ [ 2005.217101][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2005.249665][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2005.273323][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2005.283045][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2005.320468][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2005.349634][ T1220] XFS (loop4): SB sanity check failed [ 2005.352174][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 10:27:46 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x2}}}, 0x48) [ 2005.360301][ T1220] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2005.399611][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2005.419876][ T1220] XFS (loop4): Unmount and run xfs_repair [ 2005.435425][T16811] XFS (loop3): SB validate failed with error -117. [ 2005.454904][ T1220] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2005.463518][ T1220] 00000000: 58 46 53 42 00 00 10 00 00 00 00 6c 00 00 10 00 XFSB.......l.... [ 2005.472719][ T1220] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2005.483509][ T1220] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2005.493157][ T1220] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2005.503077][ T1220] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2005.512402][ T1220] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2005.521624][ T1220] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2005.544480][ T1220] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2005.553696][T16841] XFS (loop4): SB validate failed with error -117. [ 2005.560850][T16861] XFS (loop5): SB sanity check failed [ 2005.566539][T16861] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2005.578862][T16861] XFS (loop5): Unmount and run xfs_repair [ 2005.603034][T16861] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2005.617560][T16861] 00000000: 58 46 53 42 00 00 10 00 00 00 24 00 00 00 10 00 XFSB......$..... [ 2005.626789][T16861] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2005.641864][T16861] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 10:27:46 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000407ff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:46 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x2}}}, 0x48) 10:27:46 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x2}}}, 0x48) 10:27:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0xc0045878, 0x0) [ 2005.666706][T16861] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2005.681728][T16861] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2005.690799][T16861] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2005.734794][T16861] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 10:27:46 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000740000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2005.825636][T16861] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2005.840887][T16861] XFS (loop5): SB validate failed with error -117. [ 2005.883616][T10476] XFS (loop3): SB sanity check failed [ 2005.889196][T10476] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2005.902040][T10476] XFS (loop3): Unmount and run xfs_repair [ 2005.907975][T10476] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2005.916028][T10476] 00000000: 58 46 53 42 00 00 10 00 00 00 00 04 07 ff 10 00 XFSB............ [ 2005.925102][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2005.934619][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2005.943989][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2005.953306][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2005.979116][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2005.988313][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2005.997396][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2006.006467][T16911] XFS (loop3): SB validate failed with error -117. 10:27:47 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000328000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x2}}}, 0x48) 10:27:47 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x2}}}, 0x48) 10:27:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0xc0045878, 0x0) [ 2006.195851][T10476] XFS (loop4): SB sanity check failed [ 2006.218998][T10476] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:27:47 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000fff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2006.260169][T10476] XFS (loop4): Unmount and run xfs_repair [ 2006.269537][T10476] XFS (loop4): First 128 bytes of corrupted metadata buffer: 10:27:47 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x2}}}, 0x48) [ 2006.310704][T10476] 00000000: 58 46 53 42 00 00 10 00 00 00 00 74 00 00 10 00 XFSB.......t.... [ 2006.328312][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:27:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x2}}}, 0x48) [ 2006.376201][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2006.388708][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2006.397806][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2006.406975][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2006.416073][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2006.416085][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2006.416154][T16929] XFS (loop4): SB validate failed with error -117. [ 2006.435334][T16969] XFS (loop5): SB sanity check failed [ 2006.457652][T16969] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2006.499795][T16969] XFS (loop5): Unmount and run xfs_repair [ 2006.512741][T16969] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2006.528656][T16969] 00000000: 58 46 53 42 00 00 10 00 00 03 28 00 00 00 10 00 XFSB......(..... 10:27:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0xc0189436, 0x0) [ 2006.575587][T16969] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:27:47 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x2}}}, 0x48) 10:27:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x2}}}, 0x48) [ 2006.636336][T16974] XFS (loop3): SB sanity check failed [ 2006.674512][T16974] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:27:47 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000007a0000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2006.689226][T16969] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2006.726563][T16969] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2006.738057][T16974] XFS (loop3): Unmount and run xfs_repair [ 2006.748276][T16969] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2006.757556][T16974] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2006.774442][T16969] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2006.790991][T16974] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 0f ff 10 00 XFSB............ [ 2006.809570][T16969] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2006.818676][T16974] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:27:47 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x2}}}, 0x48) [ 2006.840093][T16969] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2006.871806][T16974] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2006.892667][T16969] XFS (loop5): SB validate failed with error -117. [ 2006.920556][T16974] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2006.941226][T16974] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2006.951230][T16974] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2006.960475][T16974] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2006.970927][T16974] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2006.980426][T16974] XFS (loop3): SB validate failed with error -117. [ 2007.018317][ T1231] XFS (loop4): SB sanity check failed [ 2007.031852][ T1231] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:27:48 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000030000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:48 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x2}}}, 0x48) 10:27:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x2}}}, 0x48) [ 2007.104378][ T1231] XFS (loop4): Unmount and run xfs_repair [ 2007.129302][ T1231] XFS (loop4): First 128 bytes of corrupted metadata buffer: 10:27:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0xc020660b, 0x0) 10:27:48 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000f9fdffff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2007.155898][ T1231] 00000000: 58 46 53 42 00 00 10 00 00 00 00 7a 00 00 10 00 XFSB.......z.... [ 2007.166747][ T1231] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2007.176068][ T1231] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 10:27:48 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x2}}}, 0x48) 10:27:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x2}}}, 0x48) [ 2007.257850][ T1231] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2007.288415][ T1231] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2007.364124][ T1231] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2007.410505][ T1231] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2007.432898][ T1231] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2007.446871][T17026] XFS (loop4): SB validate failed with error -117. 10:27:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x2}}}, 0x48) [ 2007.460592][T17062] XFS (loop5): SB sanity check failed [ 2007.465996][T17062] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:27:48 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x2}}}, 0x48) [ 2007.520372][T17062] XFS (loop5): Unmount and run xfs_repair [ 2007.526153][T17062] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2007.530418][T17078] XFS (loop3): SB sanity check failed [ 2007.534517][T17062] 00000000: 58 46 53 42 00 00 10 00 00 00 30 00 00 00 10 00 XFSB......0..... [ 2007.541192][T17078] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:27:48 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000002800000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2007.648460][T17078] XFS (loop3): Unmount and run xfs_repair [ 2007.660355][T17062] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2007.667873][T17078] XFS (loop3): First 128 bytes of corrupted metadata buffer: 10:27:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x4000) 10:27:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x2}}}, 0x48) [ 2007.698462][T17062] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2007.705194][T17078] 00000000: 58 46 53 42 00 00 10 00 00 00 f9 fd ff ff 10 00 XFSB............ [ 2007.709143][T17062] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2007.727147][T17062] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2007.735556][T17078] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2007.753572][T17078] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2007.778415][T17062] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2007.785652][T17078] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2007.838634][T17078] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2007.839152][T17062] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2007.896389][T17062] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2007.899414][T17078] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2007.905953][T17062] XFS (loop5): SB validate failed with error -117. [ 2007.926963][T17078] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2007.936639][T17078] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2007.946253][T17078] XFS (loop3): SB validate failed with error -117. [ 2007.947164][T17127] XFS (loop4): SB sanity check failed [ 2007.960606][T17127] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2007.996004][T17127] XFS (loop4): Unmount and run xfs_repair [ 2008.002569][T17127] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2008.011305][T17127] 00000000: 58 46 53 42 00 00 10 00 00 00 02 80 00 00 10 00 XFSB............ [ 2008.021014][T17127] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2008.030412][T17127] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 10:27:49 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000034000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:49 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x2}}}, 0x48) 10:27:49 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x2}}}, 0x48) 10:27:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x60ff) [ 2008.076200][T17127] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2008.085857][T17127] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2008.096389][T17127] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2008.105908][T17127] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 10:27:49 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000007fffffff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:49 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x2}}}, 0x48) [ 2008.183623][T17127] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 10:27:49 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x2}}}, 0x48) [ 2008.225290][T17127] XFS (loop4): SB validate failed with error -117. [ 2008.266990][T10476] XFS (loop5): SB sanity check failed [ 2008.272707][T10476] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2008.289824][T10476] XFS (loop5): Unmount and run xfs_repair [ 2008.302046][T10476] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2008.309569][T10476] 00000000: 58 46 53 42 00 00 10 00 00 00 34 00 00 00 10 00 XFSB......4..... [ 2008.318654][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2008.327979][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2008.337006][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 10:27:49 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000003800000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2008.385818][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 10:27:49 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x2}}}, 0x48) 10:27:49 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x2}}}, 0x48) [ 2008.447850][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2008.491928][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2008.520714][T17189] XFS (loop3): SB sanity check failed [ 2008.526351][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2008.527010][T17189] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2008.547744][T17162] XFS (loop5): SB validate failed with error -117. [ 2008.568932][T17189] XFS (loop3): Unmount and run xfs_repair 10:27:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x7400) [ 2008.595003][T17189] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2008.614802][T17189] 00000000: 58 46 53 42 00 00 10 00 00 00 7f ff ff ff 10 00 XFSB............ [ 2008.629636][T17189] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2008.639222][T17189] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2008.652918][T17189] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2008.668981][T17202] XFS (loop4): SB sanity check failed 10:27:49 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x2}}}, 0x48) [ 2008.687399][T17202] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2008.776655][T17189] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2008.782067][T17202] XFS (loop4): Unmount and run xfs_repair [ 2008.788787][T17189] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2008.808726][T17202] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2008.857306][T17202] 00000000: 58 46 53 42 00 00 10 00 00 00 03 80 00 00 10 00 XFSB............ 10:27:49 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000036000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:49 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x2}}}, 0x48) 10:27:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x9400) [ 2008.903185][T17189] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2008.933576][T17189] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2008.942439][T17202] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:27:50 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x2}}}, 0x48) [ 2008.942454][T17202] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2008.942466][T17202] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2008.942478][T17202] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2008.942490][T17202] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2008.942502][T17202] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2008.942514][T17202] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2008.942576][T17202] XFS (loop4): SB validate failed with error -117. [ 2009.012874][T17189] XFS (loop3): SB validate failed with error -117. 10:27:50 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000008cffffff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:50 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x2}}}, 0x48) 10:27:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x207100) 10:27:50 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x2}}}, 0x48) 10:27:50 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000003a00000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2009.297975][ T1220] XFS (loop5): SB sanity check failed [ 2009.303669][ T1220] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2009.343159][ T1220] XFS (loop5): Unmount and run xfs_repair 10:27:50 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000e4ffffff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:50 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x2}}}, 0x48) [ 2009.426005][ T1220] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2009.456751][ T1220] 00000000: 58 46 53 42 00 00 10 00 00 00 36 00 00 00 10 00 XFSB......6..... 10:27:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x400000) [ 2009.491753][ T1220] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2009.527384][ T1220] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2009.563216][ T1220] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2009.579231][ T1220] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2009.651432][ T1220] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2009.680310][ T1220] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2009.702150][T17325] XFS (loop3): SB sanity check failed [ 2009.703455][ T1220] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2009.725962][T17325] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2009.734481][T17254] XFS (loop5): SB validate failed with error -117. [ 2009.753982][T17306] XFS (loop4): SB sanity check failed [ 2009.765160][T17306] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2009.776341][T17325] XFS (loop3): Unmount and run xfs_repair [ 2009.791444][T17306] XFS (loop4): Unmount and run xfs_repair [ 2009.797341][T17325] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2009.797694][T17306] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2009.814573][T17306] 00000000: 58 46 53 42 00 00 10 00 00 00 03 a0 00 00 10 00 XFSB............ [ 2009.824066][T17325] 00000000: 58 46 53 42 00 00 10 00 00 00 e4 ff ff ff 10 00 XFSB............ [ 2009.824945][T17306] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2009.833531][T17325] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2009.851057][T17325] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2009.867870][T17306] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2009.869268][T17325] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2009.885645][T17306] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2009.885657][T17306] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2009.885668][T17306] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2009.885693][T17306] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2009.885704][T17306] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2009.885737][T17306] XFS (loop4): SB validate failed with error -117. [ 2009.917150][T17325] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2009.945941][T17325] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 10:27:51 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000038000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:51 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x2}}}, 0x48) 10:27:51 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x2}}}, 0x48) 10:27:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x50a000) [ 2009.954862][T17325] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2009.963793][T17325] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2009.972882][T17325] XFS (loop3): SB validate failed with error -117. 10:27:51 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x2}}}, 0x48) 10:27:51 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x2}}}, 0x48) 10:27:51 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000f6ffffff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x709000) 10:27:51 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000002ac0000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:51 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x2}}}, 0x48) [ 2010.288424][T17372] XFS (loop5): SB sanity check failed [ 2010.310450][T17372] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:27:51 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x2}}}, 0x48) [ 2010.376912][T17372] XFS (loop5): Unmount and run xfs_repair [ 2010.401817][T17372] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2010.464145][T17388] XFS (loop3): SB sanity check failed [ 2010.473365][T17372] 00000000: 58 46 53 42 00 00 10 00 00 00 38 00 00 00 10 00 XFSB......8..... [ 2010.478079][T17388] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:27:51 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x2}}}, 0x48) [ 2010.520914][T17372] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2010.529800][T17372] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2010.541069][T10476] XFS (loop4): SB sanity check failed [ 2010.548824][T10476] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2010.560952][T17388] XFS (loop3): Unmount and run xfs_repair [ 2010.570783][T17372] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2010.582043][T17388] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2010.616149][T10476] XFS (loop4): Unmount and run xfs_repair [ 2010.620510][T17388] 00000000: 58 46 53 42 00 00 10 00 00 00 f6 ff ff ff 10 00 XFSB............ [ 2010.648818][T10476] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2010.656793][T17388] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2010.662376][T10476] 00000000: 58 46 53 42 00 00 10 00 00 00 02 ac 00 00 10 00 XFSB............ [ 2010.685511][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2010.701270][T17372] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2010.715866][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2010.716961][T17388] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2010.725133][T17372] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2010.746576][T17388] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2010.754558][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2010.771716][T17388] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2010.772098][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2010.789831][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2010.791466][T17388] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2010.804806][T17372] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2010.813657][T17388] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2010.822464][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2010.825859][T17388] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2010.834394][T17372] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2010.843910][T17388] XFS (loop3): SB validate failed with error -117. [ 2010.858266][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2010.868769][T17415] XFS (loop4): SB validate failed with error -117. [ 2010.869153][T17372] XFS (loop5): SB validate failed with error -117. 10:27:52 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000003c000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x712000) 10:27:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x2}}}, 0x48) 10:27:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x2}}}, 0x48) 10:27:52 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000000000000010000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:52 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000c40000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x2}}}, 0x48) 10:27:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x2}}}, 0x48) 10:27:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x740000) 10:27:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x2}}}, 0x48) 10:27:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x2}}}, 0x48) [ 2011.398584][ T1220] XFS (loop5): SB sanity check failed [ 2011.404708][ T1220] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2011.462706][ T1220] XFS (loop5): Unmount and run xfs_repair [ 2011.485343][ T1220] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2011.486101][T17477] XFS (loop3): SB sanity check failed [ 2011.524248][ T1220] 00000000: 58 46 53 42 00 00 10 00 00 00 3c 00 00 00 10 00 XFSB......<..... [ 2011.526643][T17477] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2011.561081][T17477] XFS (loop3): Unmount and run xfs_repair [ 2011.568568][T17492] XFS (loop4): SB sanity check failed [ 2011.578716][T17492] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2011.580583][T17477] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2011.598555][ T1220] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2011.607612][T17492] XFS (loop4): Unmount and run xfs_repair 10:27:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x2}}}, 0x48) [ 2011.625440][T17492] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2011.625647][ T1220] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2011.640340][T17492] 00000000: 58 46 53 42 00 00 10 00 00 00 00 c4 00 00 10 00 XFSB............ [ 2011.655913][ T1220] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2011.661944][T17492] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2011.676842][T17492] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2011.687162][T17477] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 00 00 XFSB............ [ 2011.701601][ T1220] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2011.703474][T17477] 00000010: 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2011.728969][T17477] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2011.738199][T17492] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2011.747346][T17477] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2011.747355][ T1220] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2011.747372][ T1220] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2011.758611][T17492] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2011.776264][ T1220] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2011.789118][T17477] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2011.793739][T17468] XFS (loop5): SB validate failed with error -117. [ 2011.802102][T17477] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2011.810218][T17492] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2011.817128][T17477] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2011.826583][T17492] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2011.841229][T17477] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2011.846340][T17492] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2011.860504][T17477] XFS (loop3): SB validate failed with error -117. [ 2011.873924][T17492] XFS (loop4): SB validate failed with error -117. 10:27:53 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000003f000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:53 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x2}}}, 0x48) 10:27:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x2}}}, 0x48) 10:27:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x907000) 10:27:53 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000001d4a38000000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:53 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000002c80000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}, 0xffffffffffffffff, 0x2}}, 0x48) 10:27:53 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}, 0xffffffffffffffff, 0x2}}, 0x48) [ 2012.198787][T10476] XFS (loop5): SB sanity check failed [ 2012.222853][T10476] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:27:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x940000) [ 2012.257553][T10476] XFS (loop5): Unmount and run xfs_repair 10:27:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}, 0xffffffffffffffff, 0x2000000}}, 0x48) [ 2012.307900][T10476] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2012.345022][T10476] 00000000: 58 46 53 42 00 00 10 00 00 00 3f 00 00 00 10 00 XFSB......?..... [ 2012.387434][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2012.396704][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2012.434144][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2012.493085][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 10:27:53 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}, 0xffffffffffffffff, 0x2000000}}, 0x48) 10:27:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0xa05000) [ 2012.542895][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2012.584796][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2012.625968][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2012.673475][T17563] XFS (loop5): SB validate failed with error -117. [ 2012.677190][T17580] XFS (loop3): SB sanity check failed [ 2012.689417][T17596] XFS (loop4): SB sanity check failed [ 2012.696456][T17580] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2012.718808][T17596] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2012.734027][T17580] XFS (loop3): Unmount and run xfs_repair [ 2012.752144][T17596] XFS (loop4): Unmount and run xfs_repair [ 2012.757975][T17580] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2012.765646][T17596] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2012.779535][T17580] 00000000: 58 46 53 42 00 00 10 00 00 00 00 1d 4a 38 00 00 XFSB........J8.. [ 2012.796573][T17596] 00000000: 58 46 53 42 00 00 10 00 00 00 02 c8 00 00 10 00 XFSB............ [ 2012.836640][T17580] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2012.845956][T17596] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2012.845969][T17596] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2012.845980][T17596] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2012.845991][T17596] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2012.846002][T17596] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2012.846013][T17596] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2012.846023][T17596] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2012.846056][T17596] XFS (loop4): SB validate failed with error -117. [ 2012.919716][T17580] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2012.946537][T17580] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2012.968511][T17580] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2012.978105][T17580] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2012.987447][T17580] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 10:27:54 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000040000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}, 0xffffffffffffffff, 0x200000000000000}}, 0x48) 10:27:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}, 0xffffffffffffffff, 0x200000000000000}}, 0x48) 10:27:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x20000000) [ 2012.997062][T17580] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2013.006110][T17580] XFS (loop3): SB validate failed with error -117. [ 2013.162568][T17647] XFS (loop3): SB sanity check failed [ 2013.171328][T17647] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2013.194731][T17647] XFS (loop3): Unmount and run xfs_repair [ 2013.214347][T17647] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2013.224169][T17647] 00000000: 58 46 53 42 00 00 10 00 00 00 00 1d 4a 38 00 00 XFSB........J8.. [ 2013.236876][T17647] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2013.246589][T17647] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2013.255574][T17647] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2013.298797][T17647] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2013.363987][T17647] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2013.386288][T17647] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2013.397792][T17647] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2013.418645][T17647] XFS (loop3): SB validate failed with error -117. [ 2013.425732][T17660] XFS (loop5): SB sanity check failed [ 2013.431503][T17660] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2013.443785][T17660] XFS (loop5): Unmount and run xfs_repair [ 2013.449500][T17660] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2013.456935][T17660] 00000000: 58 46 53 42 00 00 10 00 00 00 40 00 00 00 10 00 XFSB......@..... 10:27:54 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000000010000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:54 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000003d40000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff}}, 0x48) 10:27:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff}}, 0x48) 10:27:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0xff600000) [ 2013.465854][T17660] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2013.474808][T17660] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 10:27:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x7) [ 2013.521309][T17660] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2013.531576][T17660] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2013.541620][T17660] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2013.558094][T17660] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 10:27:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x7) [ 2013.616049][T17660] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2013.646613][T17660] XFS (loop5): SB validate failed with error -117. [ 2013.695128][T17694] XFS (loop4): SB sanity check failed 10:27:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x2000000000) [ 2013.719636][T17694] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2013.738433][T17694] XFS (loop4): Unmount and run xfs_repair [ 2013.754137][T17694] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2013.768274][T17694] 00000000: 58 46 53 42 00 00 10 00 00 00 03 d4 00 00 10 00 XFSB............ [ 2013.805289][T17694] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2013.844006][T17694] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2013.853348][T17694] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2013.873805][T17694] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2013.891473][T17713] XFS (loop3): Mounting V4 Filesystem [ 2013.914150][T17694] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2013.915847][T17713] XFS (loop3): totally zeroed log [ 2013.927176][T17694] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2013.937708][T17713] XFS (loop3): Failed to read root inode 0x100000000080, error 22 [ 2013.942143][T17694] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2013.961609][T17694] XFS (loop4): SB validate failed with error -117. 10:27:55 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000008840000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:55 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x20000688) 10:27:55 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x20000688) 10:27:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x400000000000) 10:27:55 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000000020000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:55 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7, @loopback, 0x5}, {0xa, 0x1, 0x3ff, @remote, 0x2}}}, 0xee) 10:27:55 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x0, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x2000}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 10:27:55 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000003e40000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x60ffffffffff) 10:27:55 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001820000000000000000000001809000002000000009b4a49152bdac1932cf1e9bf12ddf3a9f534ef394d24c6000d6a81bb04d0e463ec108637349a284ba56d5cc62f0d87bbf95eac18372cdaf4689112a0e868820f1e4ac4528a9990c955a10387be85adf57e8c971cf7f9b608810d6cc5247cbabe7fc366cd990451827a365f92fbb0670f36304ce4d915a4e39f2822fea8a3b89f23fe574e3974d5d0bae9d670e725c013a22ccbf7524011f22d0607e3fe"], &(0x7f00000000c0)=""/193, 0xad, 0xc1, 0x1}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff41, 0xfa00, {0x1, 0x0, 0x40000000013f, 0x3}}, 0x1a6) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:27:55 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x10000, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f00000002c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x2096, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any='access=any'}, {@version_u='version=9p2000.u'}, {@afid={'afid', 0x3d, 0x7}}, {@cache_fscache='cache=fscache'}, {@aname={'aname', 0x3d, '!selfDppp0'}}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/infiniband/rdma_cm\x00'}}, {@euid_gt={'euid>', r2}}, {@fowner_gt={'fowner>', r3}}]}}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2014.398914][T17770] XFS (loop5): SB sanity check failed [ 2014.404710][T17770] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2014.435160][T17770] XFS (loop5): Unmount and run xfs_repair [ 2014.435180][T17770] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2014.455689][T17770] 00000000: 58 46 53 42 00 00 10 00 00 88 40 00 00 00 10 00 XFSB......@..... [ 2014.465231][T17770] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2014.481048][T17770] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2014.580557][T17770] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 10:27:55 executing program 0: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x2, 0x40000) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x8) r0 = getpid() perf_event_open(0x0, r0, 0x40800005, 0xffffffffffffff9c, 0x6) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2014.629353][T17770] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2014.700438][ T1231] XFS (loop4): SB sanity check failed [ 2014.710067][T17770] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2014.724610][ T1231] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2014.754731][T17801] XFS (loop3): Mounting V4 Filesystem [ 2014.765926][T17770] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2014.780085][T17770] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2014.788911][ T1231] XFS (loop4): Unmount and run xfs_repair [ 2014.807970][T17801] XFS (loop3): totally zeroed log [ 2014.810074][ T1231] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2014.815562][T17770] XFS (loop5): SB validate failed with error -117. [ 2014.839600][T17801] XFS (loop3): Failed to read root inode 0x100000000080, error 22 [ 2014.849452][ T1231] 00000000: 58 46 53 42 00 00 10 00 00 00 03 e4 00 00 10 00 XFSB............ [ 2014.868105][ T1231] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2014.877483][ T1231] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2014.886847][ T1231] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2014.896195][ T1231] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2014.905126][ T1231] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2014.914076][ T1231] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2014.922969][ T1231] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2014.931935][T17795] XFS (loop4): SB validate failed with error -117. 10:27:56 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000144000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:56 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8) ioprio_set$uid(0x3, r0, 0xffff) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:27:56 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @ipv4={[], [], @local}, 0x2}}}, 0x48) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20000, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000000c0)=""/123) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x7ff, 0x81, 0x7fffffff, 0x6, 0x3ff, 0x7fff, 0xc5}, 0x1c) 10:27:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x740000000000) 10:27:56 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000000030000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:56 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @loopback, 0x2}}}, 0x48) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) connect$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x2, 0x8, 0x9, 0x4}, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000006c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0xe8) r4 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@multicast2, @in6=@mcast2, 0x4e20, 0x4f, 0x4e21, 0x10000, 0xa, 0x20, 0x20, 0xbf, r3, r4}, {0x3, 0x40f, 0x5b, 0x1, 0x0, 0x3ff, 0x7f, 0x8001}, {0x3, 0xfff, 0x5, 0x3f}, 0x800, 0x6e6bba, 0x0, 0x1, 0x1, 0x3}, {{@in=@multicast1, 0x4d4, 0xff}, 0x2, @in6=@mcast2, 0x3504, 0x3, 0x0, 0x3, 0x40, 0x26df, 0x1}}, 0xe8) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@remote={[], 0x2}, 0x8, 'ip6erspan0\x00'}) 10:27:56 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x800, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040), 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:27:56 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000001e80000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x7fffffffefff) [ 2015.291468][T17862] XFS (loop5): SB sanity check failed [ 2015.304079][T17862] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2015.320249][T17862] XFS (loop5): Unmount and run xfs_repair 10:27:56 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffc6f, 0xfa00, {0x2, 0x0, 0x8000000000000, 0x2}}, 0xfffffffffffffe24) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2015.354426][T17862] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2015.407919][T17862] 00000000: 58 46 53 42 00 00 10 00 00 01 44 00 00 00 10 00 XFSB......D..... 10:27:56 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2015.467345][T17862] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2015.500079][T17885] XFS (loop3): Mounting V4 Filesystem [ 2015.520532][T17862] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2015.540709][T17885] XFS (loop3): totally zeroed log [ 2015.558275][T17862] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 10:27:56 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x8000, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000006c0)={0x6, {{0x2, 0x4e23, @broadcast}}, 0x1, 0x5, [{{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e21, @remote}}]}, 0x310) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r2}}, 0xc) [ 2015.575853][T17885] XFS (loop3): Failed to read root inode 0x100000000080, error 22 [ 2015.591883][ T1231] XFS (loop4): SB sanity check failed [ 2015.597662][ T1231] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2015.610066][T17862] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2015.642398][T17862] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2015.662020][T17862] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2015.662858][ T1231] XFS (loop4): Unmount and run xfs_repair [ 2015.693653][ T1231] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2015.699427][T17862] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2015.703263][ T1231] 00000000: 58 46 53 42 00 00 10 00 00 00 01 e8 00 00 10 00 XFSB............ [ 2015.721244][ T1231] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2015.729483][T17862] XFS (loop5): SB validate failed with error -117. [ 2015.731196][ T1231] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2015.745965][ T1231] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2015.755358][ T1231] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2015.764393][ T1231] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2015.773344][ T1231] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2015.782345][ T1231] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2015.791355][T17900] XFS (loop4): SB validate failed with error -117. 10:27:57 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:27:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x940000000000) 10:27:57 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) 10:27:57 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000048000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:57 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000000040000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:57 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000003e80000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:57 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) recvmmsg(0xffffffffffffff9c, &(0x7f00000074c0)=[{{&(0x7f0000000040)=@nl=@proc, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/164, 0xa4}], 0x1, &(0x7f00000001c0)=""/49, 0x31}, 0x101}, {{&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f00000003c0)=""/215, 0xd7}], 0x2, &(0x7f00000004c0)=""/127, 0x7f}, 0x8}, {{&(0x7f0000000540)=@nfc, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/45, 0x2d}, {&(0x7f00000006c0)=""/200, 0xc8}], 0x2, &(0x7f00000007c0)=""/194, 0xc2}, 0x1}, {{&(0x7f00000008c0)=@rc, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000940)=""/113, 0x71}, {&(0x7f0000000600)=""/45, 0x2d}, {&(0x7f00000009c0)=""/206, 0xce}], 0x3, &(0x7f0000000b00)=""/33, 0x21}, 0x9}, {{&(0x7f0000000b40)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000bc0)=""/85, 0x55}, {&(0x7f0000000c40)=""/30, 0x1e}, {&(0x7f0000000c80)=""/170, 0xaa}, {&(0x7f0000000d40)=""/171, 0xab}, {&(0x7f0000000e00)=""/235, 0xeb}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/228, 0xe4}, {&(0x7f0000002000)=""/91, 0x5b}], 0x8, &(0x7f0000002100)=""/75, 0x4b}, 0x10001}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002180)=""/18, 0x12}, {&(0x7f00000021c0)=""/26, 0x1a}], 0x2, &(0x7f0000002240)=""/149, 0x95}, 0x8000}, {{&(0x7f0000002300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000003740)=[{&(0x7f0000002380)=""/211, 0xd3}, {&(0x7f0000002480)=""/151, 0x97}, {&(0x7f0000002540)=""/44, 0x2c}, {&(0x7f0000002580)=""/240, 0xf0}, {&(0x7f0000002680)=""/180, 0xb4}, {&(0x7f0000002740)=""/4096, 0x1000}], 0x6, &(0x7f00000037c0)=""/130, 0x82}, 0x333}, {{&(0x7f0000003880)=@nfc, 0x80, &(0x7f0000004a00)=[{&(0x7f0000003900)=""/251, 0xfb}, {&(0x7f0000003a00)=""/4096, 0x1000}], 0x2, &(0x7f0000004a40)=""/197, 0xc5}, 0x5b}, {{&(0x7f0000004b40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000006140)=[{&(0x7f0000004bc0)=""/190, 0xbe}, {&(0x7f0000004c80)=""/60, 0x3c}, {&(0x7f0000004cc0)=""/209, 0xd1}, {&(0x7f0000004dc0)=""/4096, 0x1000}, {&(0x7f0000005dc0)=""/137, 0x89}, {&(0x7f0000005e80)=""/247, 0xf7}, {&(0x7f0000005f80)=""/138, 0x8a}, {&(0x7f0000006040)=""/193, 0xc1}], 0x8}, 0xb46}, {{&(0x7f00000061c0)=@can, 0x80, &(0x7f0000006480)=[{&(0x7f0000006240)=""/249, 0xf9}, {&(0x7f0000006340)}, {&(0x7f0000006380)=""/197, 0xc5}], 0x3, &(0x7f00000064c0)=""/4096, 0x1000}, 0x6165}], 0xa, 0x60, &(0x7f0000007740)) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000007780)={0x7, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}}}, 0x108) mknod$loop(&(0x7f0000000000)='./file0\x00', 0xb10, 0x0) 10:27:57 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0xffffffffffffff66, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2016.159170][T17952] XFS (loop3): Mounting V4 Filesystem [ 2016.176918][T17952] XFS (loop3): totally zeroed log [ 2016.193832][T17952] XFS (loop3): Failed to read root inode 0x100000000080, error 22 10:27:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x20710000000000) [ 2016.232899][T17959] XFS (loop5): SB sanity check failed [ 2016.238571][T17959] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2016.305393][T17959] XFS (loop5): Unmount and run xfs_repair [ 2016.311890][T17959] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2016.319472][T17959] 00000000: 58 46 53 42 00 00 10 00 00 00 48 00 00 00 10 00 XFSB......H..... [ 2016.330005][T17959] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2016.349053][T17959] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2016.380628][T17959] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2016.418564][T17983] XFS (loop4): SB sanity check failed 10:27:57 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) pread64(r0, &(0x7f0000000100)=""/73, 0x49, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000000)=0x600000000000, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3, 0x6}}, 0x10) [ 2016.430556][T17983] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:27:57 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:27:57 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000000050000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2016.472454][T17959] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2016.538907][T17959] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2016.547449][T17983] XFS (loop4): Unmount and run xfs_repair [ 2016.568936][T17983] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2016.574217][T17959] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 10:27:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x90700000000000) [ 2016.603833][T17983] 00000000: 58 46 53 42 00 00 10 00 00 00 03 e8 00 00 10 00 XFSB............ [ 2016.660496][T17959] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2016.676899][T17983] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2016.710226][T17959] XFS (loop5): SB validate failed with error -117. [ 2016.723839][T17983] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 10:27:57 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x14, 0xfa00, {0x0, 0x0, 0x117}}, 0xffffffffffffffeb) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, {0xa, 0xfffffffffffffffc, 0x3ff, @remote, 0x2}}}, 0x48) 10:27:57 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x801, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x101053, r1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040)={0xffffffffffffffff}, 0x4, {0xa, 0x4e24, 0x8, @local, 0x7}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18) [ 2016.754716][T17983] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2016.769894][T17983] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2016.783729][T17983] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2016.793121][T17983] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2016.802430][T17983] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2016.813110][T18022] XFS (loop3): Mounting V4 Filesystem [ 2016.860867][T18022] XFS (loop3): totally zeroed log [ 2016.896647][T18022] XFS (loop3): Failed to read root inode 0x100000000080, error 22 [ 2016.914116][T17983] XFS (loop4): SB validate failed with error -117. 10:27:58 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000004c000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0xa0500000000000) 10:27:58 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000003ec0000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:58 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000640)={0x3, 0xffffffffffffff89, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback, 0x4000}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:27:58 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x4000400000000142, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40080, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x110, r2, 0x600, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1000}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x560}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2a44044f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2fc}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfd}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:27:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0xffefffffff7f0000) 10:27:58 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000000060000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:58 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x400000, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000)=0x8, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="020538000000bd077eaf7960debffd6eeba7000000007d58b480992309", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000080)=0xc) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400002, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000180)={{0x3}, 0x8, 0x8, 0x5}) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={r3, 0x7ff, 0x7, 0x7f}, 0x10) 10:27:58 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x6, @ipv4={[], [], @multicast1}}, {0xa, 0x4e20, 0x8, @remote, 0x1}, r1}}, 0x48) [ 2017.339336][T10476] XFS (loop5): SB sanity check failed [ 2017.353832][T10476] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2017.367814][T10476] XFS (loop5): Unmount and run xfs_repair [ 2017.373714][T10476] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2017.390026][T10476] 00000000: 58 46 53 42 00 00 10 00 00 00 4c 00 00 00 10 00 XFSB......L..... [ 2017.398887][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2017.398899][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2017.398926][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2017.398937][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 10:27:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0xffffffffff600000) [ 2017.398949][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2017.398959][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2017.398974][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2017.420735][T18067] XFS (loop5): SB validate failed with error -117. 10:27:58 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000024e000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2017.576272][T18086] XFS (loop4): SB sanity check failed [ 2017.600656][T18086] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:27:58 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)=0xfff, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:27:58 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2017.701858][T18086] XFS (loop4): Unmount and run xfs_repair [ 2017.714138][T18086] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2017.741775][T18086] 00000000: 58 46 53 42 00 00 10 00 00 00 03 ec 00 00 10 00 XFSB............ [ 2017.792568][T18086] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2017.831929][T18109] XFS (loop3): Mounting V4 Filesystem [ 2017.860790][T18086] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2017.861357][T18109] XFS (loop3): totally zeroed log [ 2017.897587][T18086] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 10:27:58 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0xe0, "83f29051c0d808b874a39b1ece7ec3fa2774fa583cc1ca1e1426b6fa0c8e651fcf962e35cc774f9c9d66405afcca08b8d3b8454f3c0a4fb1c33139647d1966c635b61c357aa8838992882b37e64e046076be4da3541b7e4034b20105d3569e2256eac797f83f7399b2d82b6fd7c35f44336dd4dfe6f44009e254494929b1af1cb43f4459eb428b8451a14816db074e71c9f07ac41a4ff45cf60550b2ad103daf82be3e90464f74f44d507902247a544b1bef3f3258b1a90dab26a6fff6155127541169b61aeb6a00d9c059d64ee1c66ac760fa870b3f2b26155bcc9a80fc4f0f"}, &(0x7f0000000080)=0xe8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={r1, 0x10001}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r3, 0x400454d4, 0x0) [ 2017.908592][T18086] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2017.909714][T18132] XFS (loop5): SB sanity check failed [ 2017.952685][T18132] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2017.963869][T18086] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2017.982153][T18109] XFS (loop3): Failed to read root inode 0x100000000080, error 22 [ 2018.012368][T18132] XFS (loop5): Unmount and run xfs_repair [ 2018.026767][T18132] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2018.040436][T18086] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2018.060648][T18132] 00000000: 58 46 53 42 00 00 10 00 00 02 4e 00 00 00 10 00 XFSB......N..... [ 2018.070368][T18086] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2018.079389][T18132] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2018.106133][T18086] XFS (loop4): SB validate failed with error -117. [ 2018.121337][T18132] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2018.132182][T18132] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2018.141227][T18132] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2018.150459][T18132] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2018.159416][T18132] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2018.199342][T18132] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2018.209228][T18132] XFS (loop5): SB validate failed with error -117. 10:27:59 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000c0ed0000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:59 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0xffffffffffffff2d) r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x103, 0x400100) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x1, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400, 0x0) 10:27:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) 10:27:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000080)=0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) 10:27:59 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000000070000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:59 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000054000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:27:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000140)={0x4, "772e97588103d3603a87ab3a8d2c91be81d802580791edd5df8b9dae5e577a4c", 0x7, 0x4, 0x1000, 0x100000000, 0x12, 0x7, 0x100000000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) 10:27:59 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0x40, 0x31}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) stat(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000a40)=0x2) r6 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000540)=0xc) r8 = getuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getgid() fstat(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getegid() getresgid(&(0x7f0000000900)=0x0, &(0x7f0000000940), &(0x7f0000000980)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="02000000010000000000000002000200", @ANYRES32=r2, @ANYBLOB="02000300", @ANYRES32=r3, @ANYBLOB="02000300", @ANYRES32=r4, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="02000500", @ANYRES32=r6, @ANYBLOB="02000000", @ANYRES32=r7, @ANYBLOB="02000100", @ANYRES32=r8, @ANYBLOB="02000000", @ANYRES32=r9, @ANYBLOB="02000500", @ANYRES32=r10, @ANYBLOB="02000200", @ANYRES32=r11, @ANYBLOB="040001000000000008000700", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r14, @ANYBLOB="08000400", @ANYRES32=r15, @ANYBLOB="080003006a9f514ddf2b94a27ef1da2de7d01225ab5c8c6c5af8422b40611a40a3c4a52ca8c2a73b8da5a3a9be09d989ad71aa3013f3a4286d9512886a4f07", @ANYRES32=r16, @ANYBLOB="10000400000000002000020000000000"], 0x9c, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000009c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000c00)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x1, r17, 0x1c, 0x1, @in={0x2, 0x4e23, @remote}}}, 0xa0) 10:27:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1) 10:27:59 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000000080000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2018.502431][T18199] XFS (loop4): SB sanity check failed [ 2018.519313][T18199] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:27:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0xffffffff80000000, 0x2, 0x20, &(0x7f0000ffb000/0x4000)=nil}) 10:27:59 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x28100, 0x0) sendmsg$rds(r1, &(0x7f0000003e80)={&(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)=""/150, 0x96}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000200)=""/42, 0x2a}], 0x3, &(0x7f0000003c40)=ANY=[@ANYBLOB="48000000000000001401000001000000fdffffff08000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0010000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f00000016c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0010000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='x\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000026c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0010000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff00000000000000"], @ANYBLOB="0400000000000000020000000000000001f0ffffffffffff480000000000000014010000010000008100000001040000", @ANYPTR=&(0x7f00000004c0)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000600)=ANY=[@ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="dd00000000000000", @ANYPTR=&(0x7f00000036c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='b\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="020000000000000020000000000000000000ffffffffffff30000000000000001401000003000000", @ANYPTR=&(0x7f0000003740)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000003780)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="3200000000000000580000000000000014010000080000000002000006000000", @ANYPTR=&(0x7f00000037c0)=ANY=[@ANYBLOB="f035000000000000"], @ANYPTR=&(0x7f0000003800)=ANY=[@ANYBLOB="0100000000000000"], @ANYBLOB="050000000000000000000000000000000000000000000000400000000000000008000000000000000800000000000000580000000000000014010000070000007415000002000000", @ANYPTR=&(0x7f0000003840)=ANY=[@ANYBLOB="0600000000000000"], @ANYPTR=&(0x7f0000003880)=ANY=[@ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="e0ffffffffffffff00000000000000000700000000000000030000000000130014f4976aab72b9d6fe00000000000000480000000000000014010000010000008000000001000000", @ANYPTR=&(0x7f00000038c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='W\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000003b80)=ANY=[@ANYPTR=&(0x7f0000003940)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="e800000000000000", @ANYPTR=&(0x7f0000003a40)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000003a80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="e800000000000000"], @ANYBLOB="0300000000000000dd1eddab603bcbf9030d00000000000058000000000000001401000008000000f700000000000000", @ANYPTR=&(0x7f0000003bc0)=ANY=[@ANYBLOB="240e000000000000"], @ANYPTR=&(0x7f0000003c00)=ANY=[@ANYBLOB="0100000000000000"], @ANYBLOB="090000000000000009000000000000000700000000000000010000000000000004000000000000000500000000000000"], 0x210, 0x40894}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2018.713134][T18199] XFS (loop4): Unmount and run xfs_repair [ 2018.788112][T10476] XFS (loop5): SB sanity check failed [ 2018.793057][T18199] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2018.794791][T10476] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2018.801429][T18199] 00000000: 58 46 53 42 00 00 10 00 00 00 c0 ed 00 00 10 00 XFSB............ [ 2018.822187][T18199] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2018.834969][T18199] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2018.844535][T18199] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2018.869879][T18199] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2018.890009][T10476] XFS (loop5): Unmount and run xfs_repair [ 2018.904496][T18199] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2018.905854][T10476] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2018.916771][T18199] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2018.942664][T10476] 00000000: 58 46 53 42 00 00 10 00 00 00 54 00 00 00 10 00 XFSB......T..... [ 2018.952168][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2018.960805][T18199] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2018.961843][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2018.979287][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2018.980192][T18199] XFS (loop4): SB validate failed with error -117. [ 2018.994680][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2018.994693][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2018.994704][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2018.994715][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2018.994968][T18231] XFS (loop5): SB validate failed with error -117. [ 2019.039215][T18229] XFS (loop3): Mounting V4 Filesystem [ 2019.051555][T18229] XFS (loop3): totally zeroed log [ 2019.056983][T18229] XFS (loop3): Failed to read root inode 0x100000000080, error 22 10:28:00 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000003f00000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x48c0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x100}) 10:28:00 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x3, @mcast1, 0x7}, r1}}, 0x30) 10:28:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) 10:28:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)={0xfff, 0xff, 0xfffffffffffffff7, 0x0, 0x7, 0x8, 0xffff, 0x5c4d, 0x3, 0xffffffff, 0x82, 0x8a, 0x0, 0x4, 0x5cfe, 0x400, 0x0, 0x5, 0x5}) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback, 0xfffffffffffffffd}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:00 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000060000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:00 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000000090000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:00 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0xffffffffffffffff, @loopback, 0x8}}, [0x6, 0x9, 0x1200000, 0xfffffffffffffffe, 0x40, 0x100000001, 0x4, 0x8, 0x4, 0x1, 0x0, 0x3ff, 0x1, 0x1000]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000001c0)=r2, 0x4) [ 2019.390738][T18302] QAT: Invalid ioctl [ 2019.399534][T18302] QAT: Invalid ioctl [ 2019.428891][T18302] QAT: Invalid ioctl [ 2019.434965][T18284] XFS (loop4): SB sanity check failed 10:28:00 executing program 2: socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x100, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) 10:28:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0xffffff90, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000040)={0x1000, &(0x7f00000006c0)="aa421e71a5d923a7a2dee5705eb1c30c6af5bf49bd7a50b305a3954ba21ace8626c753456633f7984dd3f6e18f5fb106b619b94589c4b87446173bde07ecd2c3400ac566048781aea4ea11032ef3a69c23f7e589c9df30474784c7af85c65ae7c22472f78e237520e9f26153fe3bd67330046903b5dfcfb72aa16724b1e1bd6b9591fff14d529ea7a4e68245fcfa72bee90dbbee6640500986a5ddd29900e798ee84ec9eec0cc2c29de080413c68cba63ae569ec08498a8d05f95c7aad82bc54f5facf619d9d432a757e09192488b0e8ac6485ea5100fce9ded112895c10b2096f0b3a6294038e8a3857cc1c4bb5796d3964e87651ff877eb8a015c2c3696fd3a8ff1cfb2967387344a05678b9129925e09b7cceb891e50390dd505ad41637f810a992cc41c28efe94450ac4b5f544086bf5c32109d017e8fe9c1bbbf6b2651cb481f0c738ba4e5315c19174613d138d68718d560d60c0dfd9346fd41865dbbaef781eabdcfc305d07740db6eb810ddefd3591d5481bfdcaa6bc696e061b758cfacc310b3b4bf99a6601097a473fdd8ae9d73226569563b7d1974f28a5da9de77b4d7775b77b85a1e0b2402cca620e0434ba9a7c544cc909b45546e8585364f926ef6155612d1f22f5bd5506113610f4a845270dda613895dda9a4a0f2a906f30ac8acff17568937ab543c021eae79ac72292258f3aaf33429711bb9b36658b5b341fce327576a14aa3195254ce145febd3a9bdf20843959458ae787e020e623871ff7695538de3be86918797c688fe23938b0225336d79b51887511cb8ef08a784cb5d1f9aa76c77e20608ae73001690baebe6e07388385b9946ccc755e4fbecf87e23230310762bdbfa4ce85dc7146afafc2dc252cb035019dbfafd1ba0833a6507bf70940b34b9d9d9df9cdb8222ba6b411bbcff4bf3fb2a2e010661a031d94ae3e36aed74308a2e29b7d1c4b76c1df61d64054e7c2cc25a862c6f2254ad028a6b1299fc96db3fc16a845232ec694fd90f2173431e449c35de106e7cea1a586a837755f7809dc7b60eea19a6467f000c5b6123f675f0fdc8826d502064667305ec80e64b56d9015aab358227f0c939a1d2e042db1e5700d06ab43a808353bf88d9b387c63afafd74fa30b10900993880c0a49695121bd0dfaf274892e71feed749b4525e1c10ff31ea5c0c745fb29ee61c206d080282e6794e223f35603aa6828aae7d63facc8260f0d26de0f84305a4c559bc4163498400e1978e5bdd582ef417b049eb42b447b0c6174a415c274286a7184c82029b2e8b95993ab32d4d6ac967c4a751e47d5004316414d7aa76b8e21054c976eb71d3c12b7b4e3f806663afd0cb33c8545ca40325e4d47ff044706ba7cf9449d93146f6584af6099bac1602f9b2d622dcb4b4bccd82946c4588a7db8ce8d0ac330db74ca88947b384ce33d773a6d8dc40840c21db5f137110a7b22cbdb1c5b2dbf21e65c930bab86783382fc728f324cd4db2e620cbc79b8fdde80209b769ab4f98c587cef95b51683135c340c219ff388cc1249fd112203dbe32810cc8eef1816ea800ed8582620faaf6bea45ea5e3b94d35ffcb92f053955c1e40307ca6c0f99f1520e97ed46c5320b4f51b5aad3a2511d02588796e0749f0fbaa064ce3a754f7dcdf11e2d03959f3bc0de3b6b2f3ee8a7d2484340c4ad9be0856b048383f8a401696d0f8b9f9d3977f27154367d9ed175dce1e03c91553fb515fcda32e0ecbb466700e22f075033aa9881b28639f8e931b10d5e516782c5607672eb6b21226d7eed2bdd3e4449e2ec39bbee7c654dccd2be1048a5dff2fa2b4514b88f5550912ee924e3a81682e23322d3f47be5c9e0bb378ea1b739721b76c47414a7c1169698381069f48b1a5d8387b895fbeea49174ec471e8afa1d0684d912464b89ff036555381e0017696b0c42f01f30435ca92b953466fad833b395cc99ef739b43aca2d90b3f61383b754e4f803c842e1bbe7140f51aa77e5059ba18599b1ffcf5605e18f5cc11c551738d8355e589b0fc84439b72b1e572ffbe8e9d83e50bec586d4f3bb56c3797c75704082f52dac32fc0cb107794ee9a23cd93c3480d184cb1371183f659c5fa67d72ef7910078e60c313653c9758745cac45c150a067ba762aad1ea0ba10a843c5972f7f2bd608a69f76ec1036d2ab9ecb5710e3e0786eb1d6a09e475c52c9ee558342952c8f5149a1bd26147722ba81acae8ed9fcd391879de5020bc3e0250f4347ca65fa277d58d61e2651039b0b9e3a4da3b55469fbf1f80063f75db9ac2470044fc1480d4109240c5820b29561121e48dd71d0c7b5e027e8f88293f1281516735923f2921bf701eda05e6c8b91a351af66feaf6d73928a717ee308bcfbe0164b5ee247b3a1285c272a71606ef14a0359b9e50e3d5a2c6e6055273cbd8056dae2a79e26d4347812bcd4cf5e57270ec883b0710fabee95d2113d9a865dab4cd2f1ce479f2e0bb9dcf396a0a8d393a997691cf5b603bed3689ff2771f6781ce506843b507536ba8f0a7d1a2d4b65b7201ddeddfb7640592e6a61dcd18f0cc8f263a7e262748425bc9246eac5b25781dd9b6e310385a8e2cfe183d244777a7bdbc5626aa025073202ab905d7f0da5851555abef91cbc499420b4e0e424f7df99bd0dd962ad2aced8cf13f17881bbb8cbc724659b4a4d625a1c129ea66b33fd9f4540661cc98f2453fbeb61e29e079859dc82baaa6e6ea38560856ea6edb53d377b8a1ae04e6e57ccb9d945e0dba86ecc5853dc83570053a15ea18abc6161d597fad778cbe8127324bf27c39b86ea40cb8037bc469550987f32305d88c571dade53bd7bc449429daa8ce6108f34fe32a0d8748768098efd61cfce72e371c528bae27fae7b5e51037727a2471d9576977db73a308215c618e28df46338664e22d0f24250e2fd53a701afa7bd970c02a30958527f0ef7bc1365cce153d448aacbe580c93ff317b6cb41306344c47cbbd453f38da6c711ccd6adcd4959bff8a92e2de874c9dacf1562e91b1cc527b6d096aaf0cde1c9db0bdc95795d6b5dcb4b9a1e5f19b9821a9b870407323715c915b5aa3dc42a52f05b16b238fdf725c2c306eba196e8b4c1dbc7799386d67241e94377852f4f7f4a4a504fcd1dc093aa77ccded098152490980987bda6d23d41c283f3d0d8494983adf2ab0db7aa679cbeff574ee95baed8a1579a5cd28eba0457252c8dbaac2b21bce5181bfbd9194c20ee58ec3766df2bbaa74988ea4fd352730f3c049c64acb8a87d61e78cc983db25cd62605ed857564a3e3b9f52b3c18f8d5cfb54b2c3608eebf97912dd3233e4b74f760b26aa0e3d0365e05963920ca7dc54634eadcef5f6d69a33d132ea642c0e7a24bc4742ae2a7d65d755aeec3e66442b2ffbd644714ed4b8599f38d9ee18835fccd57ef419122d57a5b9e809b683336973d54229f1dc98b8852c34667e9d60d371f0647e3cb3637b316b4ed5e8002b146c36508ff5711b7ff83e846b0b7a2182f0755e91ecaa09131f53ce96524f6343940336236f61f2e2259a4c4d4d714f51c94446e502d8b7f1ee867faa486f3518dbd9f983ba1d8c36b82fcb897c6f418e90b6a8aaea8979899ee161eca4b1bafd36bcc8cabddf7f5c05fb0396a145380b0a038d684cbf3bcd3c99bb28506e1be15d9a1c956db7fec9606bfcdb89435a6bb0a8d0770cb32c86866f336c6732275817ea828ea38d2a6535bedc4703c1c09736e2fd291d470a5dc1d628507fdac37c216efcd95874436fe3cbc8e7428c99251d624cc941d4e5d657f14ccfd5e0bb9ca82f447debc5258324870dbc42515f28ea3d154541b8a7e9f8e86108d32a61c4c70f973b8ff99a11487ac4fece912e490ce0f03b5f1ad3f49b04f3bc11dc10cc73be67286cf8769e9c7cbf2c61ade971a2adccc83e0af906f957c162165336e99f9d7ea9d56dff6a3aec7d957d0b7610ba62b2be5595d505da4f064dcb65b2b903cff617e534e9b956bcb1f5872c8e99cdced1fd5b55e8f709bccd40e873d92bebd24cd6fbeab1d6dae44412b51f6d733046e5cb7e1f0f991642faa6efd06886e97b450b98c99834a282385ca8981080445f5161aa5e3473fe2ffebfa976d0fc9bd34799d1c5b46c354e9fac2b95a825ec8037542fa2a27f0f467f9a76dfd99479c035bd583dde6ef9352370b48d202197dec952aaff3b15ec88190a542eb5b26797fc0b4c1842dbcb3bc2c534d1a486811e424555fd6f6166f767036512bc4e34d335717a23c33d83c3eee1d4952bdd91e2a2703a9a501c58748665af95075d56e4d7bea4d6c37e232dbe4fff8726a8da040bab6d48e920d579b265a5981fe2470af2b83f7115cd345eaa01b7ecf8a33e6251e2b1fe58091d15430444ea60229cf3f2316f5e480e9155fa1ab227d5927032c75fafa3eca06d4a9e8c71fa28394d39daafe90a45c7b8d1cc6716316f093d82163f8512433726146eed1e6385473d1d1a1f3129ba3a6f01c69ff4d181daf0193b84591d82f105f066f00a4786f5c00925950c2e6c12eafc2208ddd13b9a4d5a47426074c464ce2c919ab2ebe5481c2a6d7cdfc56470c4c8cf2cdc24b5fc9564b11952467604a1e38c42aff85dd5e57de79ab9a96d532d2fdea9800e37c9b081ac7756600a2b2ed093c4c28021d3fce6509e45501d74a35620c8c6fecde19a6c3a19674cb0cc569426916a514bfda8613f8ba4f75a31abaa7880f6c3e12cc3473641d31375b0d2381acbddd8a96c61958aceeb389ce475dc31a4a23e6c12d059cc303c5855315662b8106de901653feeecaccd9f0e278cdae00b97f80ad2ac0fe83045be001006bf1f87ccc8ea72d933a9fb646ecb99e3d809e6099cfd43160f1a75651a10c3e73c42af03ce0d7dbd4ce0277f1ae46dd54a032c0f77bab74cb5d493a41bb77255d5a301d9465825058255e00c08b976e706794a22c36c39a77d8c17db14395290b3786893ad2151cfed0e92df16b2bb43418fa7d8481e4a562cc2173d6c186c99acba45896992b199e63ef4b534cef35052515851f2b1c9a2c6390b9d806609fcbc6084f78cb1357996777631ba188bf829695b731ee7cd1bfab695891458c12902addda3a31225fff8c8b06596410984b119ef6109a64b5f1415c5593b44e5590c31e149b99bb2f7a8186106ffc6786f14a2a7979491eb793b9a49f5a6cfe3914f408593b7da41ed9ec817a16b8b447eb0c0d774b57c28e53b266bf9cc77e8bf36ec5ec079bf8a47084079c3bd18b219e14704d6d9607da084ac9fcb5bbb51a863d6851627a107e11765bdade9d36044223cb943485f95b71bc1eaf25f3fdf8b45f387adb80aa956b18ccd31954e985457536d4a2588217b0b7167a06207b8abba3199ef6f4dee438bb1de35997ef358bba59826c4f3d01bd138af6979999d2fe1ed0434473addf4003318c0f1f13ac2cbd94cb9bd79469a3aafc9bca7beba6f746c0953c0e4dd4b0385603ee66785f107bc3ddbeb7cd2a79c701f207fc16fda1885ec6f92dd9331bfb25b1576afe83b89d508d0079b261f21c18fadc7bc2d1c95b61d08d3924a5ca8c74f414fe87b8e19d0475984d4ad9923d09b3b171c6d7c897c9ea02e21edbe700a019486a0fdb4f0eb9e8d2c8c8fe403488cc218ee7f14d1f1b4fdd84ea06c8d216a3ed973483c887f6e8d210a4d17d947ab7badf9da2f63ba09823dcb28d961173659cdf923b7952bfd249b0b20a86136e1e7525935d4a706573b4793456e6b32e07294cfed02bee64101aa268a94182f6"}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2019.442731][T18284] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2019.454925][T18314] QAT: Invalid ioctl [ 2019.459082][T18284] XFS (loop4): Unmount and run xfs_repair [ 2019.478786][T18284] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2019.507819][T18284] 00000000: 58 46 53 42 00 00 10 00 00 00 03 f0 00 00 10 00 XFSB............ [ 2019.517352][T18284] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2019.620085][T18284] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2019.642845][T18284] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2019.663149][T18284] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 10:28:00 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2019.690982][T18284] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2019.732446][T10476] XFS (loop5): SB sanity check failed [ 2019.738361][T10476] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback, 0x8133}, {0xa, 0x4e20, 0x3ff, @remote, 0x2}}}, 0x48) [ 2019.789381][T18284] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2019.804537][T10476] XFS (loop5): Unmount and run xfs_repair [ 2019.824163][T10476] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2019.850991][T18330] XFS (loop3): Mounting V4 Filesystem [ 2019.863797][T18330] XFS (loop3): totally zeroed log [ 2019.875830][T10476] 00000000: 58 46 53 42 00 00 10 00 00 00 60 00 00 00 10 00 XFSB......`..... [ 2019.886225][T18330] XFS (loop3): Failed to read root inode 0x100000000080, error 22 [ 2019.902306][T18284] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2019.914280][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2019.933583][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2019.940854][T18284] XFS (loop4): SB validate failed with error -117. [ 2019.950950][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2019.963049][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2019.972340][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2019.981538][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2019.990598][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2020.004635][T18310] XFS (loop5): SB validate failed with error -117. 10:28:01 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000003fc0000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:01 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) syncfs(r0) 10:28:01 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffffffffffff9f) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20000, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x7f, 0x402000) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:01 executing program 2: socketpair$unix(0x1, 0x43, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet6_buf(r1, 0x29, 0x44, &(0x7f0000000080)=""/65, &(0x7f0000000140)=0x41) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) 10:28:01 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000a0000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:01 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000064000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:01 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket(0x7, 0xf, 0x557b00) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) 10:28:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@empty, @in6, 0x4e23, 0x8001, 0x4e23, 0x47, 0xa, 0xa0, 0x0, 0x32, r3, r4}, {0x4000, 0x9, 0x7, 0x1000, 0x8, 0x80, 0x6, 0x100000001}, {0xfffffffffffffffa, 0x8, 0x8, 0xba9}, 0x9, 0x6e6bb9, 0x2, 0x1, 0x3, 0x3}, {{@in6, 0x4d4, 0xff}, 0xa, @in=@rand_addr=0x2850, 0x3504, 0x7, 0x3, 0x7, 0xb545, 0x6, 0x1b97}}, 0xe8) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d4, 0x0) 10:28:01 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/hci\x00') ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x80000000000, @loopback}, {0xa, 0x0, 0x3ff, @mcast2, 0xe0}}}, 0x48) [ 2020.380365][T18385] XFS (loop3): Mounting V4 Filesystem [ 2020.389650][T18385] XFS (loop3): totally zeroed log [ 2020.395384][T18385] XFS (loop3): Failed to read root inode 0x100000000080, error 22 [ 2020.506833][T18415] XFS (loop5): SB sanity check failed [ 2020.527192][T18415] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:01 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x610000, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() fcntl$setown(r0, 0x8, r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x8, 0x1, 0x7, 0x9}, {0x8, 0x80000001, 0x4, 0xc0e0}, {0x6, 0x9, 0x4, 0x5}, {0x8, 0x6, 0xffffffff00000000}]}, 0x10) ioctl$TUNSETOFFLOAD(r4, 0x400454d4, 0x0) 10:28:01 executing program 0: r0 = socket$inet6(0xa, 0x800, 0x7f) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e24, 0x0, @remote, 0x6}}}, &(0x7f00000001c0)=0x84) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0) readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)=""/205, 0xcd) mq_getsetattr(r3, &(0x7f0000000200)={0x40, 0x7a229451, 0x1ff, 0x2, 0x6, 0x8, 0x8000, 0x1ff}, &(0x7f0000000240)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/qat_adf_ctl\x00', 0x100, 0x0) socket$key(0xf, 0x3, 0x2) recvmsg$kcm(r4, &(0x7f0000000880)={&(0x7f00000006c0)=@nfc, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/5, 0x5}, {&(0x7f0000000740)=""/170, 0xaa}], 0x2, &(0x7f0000000840)=""/55, 0x37}, 0x20) [ 2020.615420][ T1231] XFS (loop4): SB sanity check failed [ 2020.632929][ T1231] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2020.669259][T18415] XFS (loop5): Unmount and run xfs_repair [ 2020.704593][T18415] XFS (loop5): First 128 bytes of corrupted metadata buffer: 10:28:01 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000b0000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2020.714721][ T1231] XFS (loop4): Unmount and run xfs_repair [ 2020.743742][ T1231] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2020.756715][T18415] 00000000: 58 46 53 42 00 00 10 00 00 00 64 00 00 00 10 00 XFSB......d..... [ 2020.767280][ T1231] 00000000: 58 46 53 42 00 00 10 00 00 00 03 fc 00 00 10 00 XFSB............ [ 2020.776969][T18415] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2020.786319][ T1231] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2020.795716][T18415] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2020.807109][ T1231] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2020.823408][T18415] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2020.853236][ T1231] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2020.853657][T18415] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2020.902924][ T1231] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2020.920171][T18415] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2020.931820][ T1231] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2020.943244][T18415] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2020.964489][ T1231] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2020.977171][T18415] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2020.993812][ T1231] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2020.996338][T18415] XFS (loop5): SB validate failed with error -117. [ 2021.020481][T18402] XFS (loop4): SB validate failed with error -117. [ 2021.049008][T18465] XFS (loop3): Mounting V4 Filesystem [ 2021.058362][T18465] XFS (loop3): totally zeroed log [ 2021.077507][T18465] XFS (loop3): Failed to read root inode 0x100000000080, error 22 10:28:02 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000000fff0000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:02 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x121100) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000340)={0xf, 0x8, 0xfa00, {r1, 0x17}}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000040)={0x6, 0x8004, 0x3, 0x2, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x8e51}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000140)={r4, 0x40, 0x4, 0x5, 0xd44, 0xfff, 0x7, 0x1000, {r5, @in={{0x2, 0x4e24, @remote}}, 0x2, 0xcca5, 0x100000000, 0x8, 0x5}}, &(0x7f0000000200)=0xb0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x77f) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x638a8bb9db5be63f, 0x0) write$eventfd(r2, &(0x7f00000000c0)=0xe7c, 0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000200)={0x8000, 0x2, 0x278, 0x1, &(0x7f0000000140)=[{}, {}]}) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 10:28:02 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000068000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:02 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000c0000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x40001, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000300)={r3, @in={{0x2, 0x4e22, @loopback}}}, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chroot(&(0x7f0000000140)='./file0\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cachefiles\x00', 0x101482, 0x0) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) getsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) 10:28:02 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffcc4, 0xfa00, {0x0, 0x0, 0x400000000142}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2021.505206][T18519] XFS (loop4): SB sanity check failed [ 2021.516501][T18519] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2021.590308][T10476] XFS (loop5): SB sanity check failed [ 2021.593634][T18519] XFS (loop4): Unmount and run xfs_repair [ 2021.595825][T10476] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2021.595840][T10476] XFS (loop5): Unmount and run xfs_repair [ 2021.640084][T18519] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2021.663363][T18519] 00000000: 58 46 53 42 00 00 10 00 00 00 0f ff 00 00 10 00 XFSB............ [ 2021.702563][T10476] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2021.721147][T18519] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:02 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0xb3, "e500785b9f5675cca162ffb14b74d1996e99f7780231e126e2c294f67d626fb9d44a0239ca0609acc090c0cc6ca3b50ba5007642273d42cd98b2f35993b00ea7aac90a56608cf0cfaa270bc285d65df9b6c092d96dfa97835f78c9df1f44c5b15940b516767e5c297ce591e15de93297d0130f93bd9972c4a64f28a1432c0e93b16118550b1dee4a8af843b9e37783365ad1b61b291f8909b4b1cab0178421dc87de9174d95a1ebd84b0b52de7ca5411ef6238"}, &(0x7f0000000300)=0xbb) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000480)={r1, 0xeb, "0898fa2d0025554566b792d9c7698151df2ffbcdcb449fbea3cdf31aa4328ef30c4e11773ceac9066080e9db38aad60c0d8f6b3d9c4d153c57258db9d3a7ceb3a6d91171c09d65bc2cc8a4d31e285837e2ecb3a278be84883e9c0b6e597e6500dde5721d9fbf75b828e69fc81b05aed32ce7adda0af577f0ab1c30c0b191435d3ad6cce36ca7958c6068459ebcb2895a97a31bb42dd33a222dd5f5151c01f3f0d3a89f0a0e8582c7d253b5853fe4f9a6a0edc76212c8eff1efeaedc06c18453169695c8d5b05ad563e0826cf8e20856d6f0d43155477aa2c22b279438ce530d93d8d1b42261c8c3ca3d42a"}, &(0x7f0000000340)=0xf3) tee(r0, r0, 0x1, 0x9) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x800, @empty, 0x9}}, 0x5, 0xb6dc, 0x2, 0xb67, 0x10}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000001c0)={r3, 0x8000, 0x90, "24bb4f42914ae362a8c5209dd064315fbf41ad65a997653829b85238a080b955decc5d86afd1c13e472f0631d8a1f13af03a9c2880af86715dbbed332df9b6deff2aca830d493055af52731c671edd945b14e4b038da9526b7b8a9a0887ac15c9c0f235a4eb12d0cea21a49793728289812863894d40d9ffed37e28806adba9e1d2cc486db2326d0eefee459532caddd"}, 0x98) r4 = socket$tipc(0x1e, 0x5, 0x0) preadv(r4, &(0x7f00000005c0), 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) write$smack_current(r2, &(0x7f00000002c0)='trusted!vboxnet1keyring\x00', 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback, 0xfffffffffffffffe}, {0xa, 0x0, 0x3ff, @remote, 0x2}, r6}}, 0x48) 10:28:02 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x95) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000080)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4000, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2021.751282][T10476] 00000000: 58 46 53 42 00 00 10 00 00 00 68 00 00 00 10 00 XFSB......h..... [ 2021.770434][T18519] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2021.784540][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2021.795783][T18539] XFS (loop3): Mounting V4 Filesystem [ 2021.821922][T18519] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2021.833639][T18539] XFS (loop3): totally zeroed log [ 2021.850203][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2021.875334][T18539] XFS (loop3): Failed to read root inode 0x100000000080, error 22 [ 2021.889353][T18519] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2021.903365][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2021.922866][T18519] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2021.936635][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 10:28:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x22) sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000000040)="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", 0xff}, {&(0x7f0000000140)="206db2b7412d05b92caa6dc4effc2518466cb903bd63b0ad48a6bbedb30d5f51059075d490c098c39c1bc9cdffd841e27a46888c1c08f860bff9498c90b9e690d989e7b21d1b82293f36d797946c7d4b6e75991f8bfe0276426d72405a6c7a7b1451b8a327c007ca2eb89eb92e3dda05e5f26dd1f4d10fc9f647f86f09fe436f8e6af333827c6aec4935cb331d60bf8435d6a6eab0a35cfe7fb536cd7bef86e8fcbcba973e6e8230fecd9a3ba03343b7e7ffa58ee1", 0xb5}], 0x3, &(0x7f00000016c0)=[@iv={0x108, 0x117, 0x2, 0xf1, "ee51c3d620cb025a3e494e76c0badfd020994ca1de569c2cc637a7c315d67676af52ecccf23d8853ccc3bd79cd3b113aa627304bdc63bdf0264fefc7a9ad37166fa94929f39c22615fdb8f75714e6e82065aa67a3322b9368eaaec99a145d41e43483a557851c560dd4f86bc274799c1508b98509ee7a5b6fa770c95f9f00a500727792761afbd0c9b62015f86922d2eef7e1909cbcd64ddbcba3a20097c242d8797f45ad70e4cd9a3261ccd4cb4b9fe8eb5fc05169765451bf13387abd83649eda44704d18077216cd689a88edfefc3ab6cfe23ee7e8316f498ff076f7b9b44a564a1b11d12150f04f894bd09df07d52e"}, @iv={0xf8, 0x117, 0x2, 0xdd, "22b9e8fa10ef8d08c289164209d0a661e27b9008e5c7e1173ba1dc0abcfa56d6b4a416cfcee138794604599af3b47ce9a4df5050ffc8d08c66358e375bea1139e55400b89b0abd6ddd4c2b75dead89a4bca6b35f3ba8d585eeecc255d3638d974f6d3310ccc877613ca27fd8bf45889388ac719804141a7c24fe5724c238367a8ffe583da5c71ade94fad3352ddc0ec38c470a834d1fdfc6487fc7d5bea64abb911d5a62cf4228866df7f2dbb1255bce2a397f1c1feac0f34cb3e9e91d84bc0ca143c84f9606d7c916f26fa6b19c144d0ba70c39d5db8af624c6a10449"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x18, 0x117, 0x2, 0x4, "3d74ceea"}, @iv={0x40, 0x117, 0x2, 0x29, "7c5364528efc78653533101a2947a65233d911e1ec2092ac359a02fb0aff7651472f9a00def174728c"}, @iv={0x110, 0x117, 0x2, 0xf7, "57367b27cf7047aaac47d5e962fcb6d7aa0d83994c14bb3dc5641e984a524a4b24c37cd08db75373011e7b853a01a325cf0c1b6c5bb34b70f936a20e98f70a8ded6caae7671512f0408cbc4c41409bf4bdd9baddb1a69739ad6352c772591b3f371b1b73a0710be766e925d837cfacd730539a740776af0429b8185225016341e819a535795c5e28ea264a3731d23ce789748095367e08cf3e57b37eba3e5eb79ad4dc79f93557a08ff1e46f0dc60c83613921d22d3257da345d66a4a59f1dc2ff10afb4bf3249ecb335b05e07b1e27183e62f17a92bc2ed48d83b24a5663ed4557c95b619fa6d6e1e5c615622f06e3124a56cd4dacacd"}, @iv={0x110, 0x117, 0x2, 0xfb, "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"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18, 0x117, 0x3, 0x1}], 0x4d8, 0x4}, 0x4040000) [ 2021.967367][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2021.980084][T18519] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2021.986359][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2021.999887][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2022.012462][T18519] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2022.015896][T18513] XFS (loop5): SB validate failed with error -117. [ 2022.038231][T18519] XFS (loop4): SB validate failed with error -117. 10:28:03 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000007b070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:03 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:03 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000d0000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000080)={0x240000000, "309d9df85d1c3f12b896701e28209a9ea8dbc1dd0cb321a705f836ec86bdc535", 0x2, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400000400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) 10:28:03 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000006c000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x6) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000100), 0x4) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000740)={0x3c5d, 0xfffffffffffffff7, 0x4, 0x7, 0x4, [{0x1, 0x1823, 0x8, 0x0, 0x0, 0x2}, {0x1, 0x8000, 0x7, 0x0, 0x0, 0x4}, {0x1, 0xbe3, 0x5, 0x0, 0x0, 0x201}, {0x800, 0x7f, 0x800, 0x0, 0x0, 0x2000}]}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x70002, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x0, 0xfffffffffffffffe, 0xc7, 0x26, @buffer={0x0, 0x8c, &(0x7f0000000180)=""/140}, &(0x7f00000003c0)="f8bcab3dc91cad302618268fa2dd1bea0ece659b8f53e87b00d3b9027173fd1d66c2edda0fb1f425442525d54e149b4c21f911db42d598bc436a938a8285dba5acaea216fc2f5d4140c52b33c4327106e80e1a1d3997e483dd1fb5d532e4eddc519f2a9a1dc668a6bfdfe52e7cc7e945818f119b9faabb874939bb3774a0695b2019338f96efee926f68c5af5b1c8a4270da8b33ac817c9dd0c9a4ba06b7db2b739f5ced5ca3ce7307182afc3cfbcc0fd7ce211f0536ce5c67f38b41928f0fc5db5e765f1919df", &(0x7f00000004c0)=""/213, 0x7fffffff, 0x10000, 0x0, &(0x7f0000000240)}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000006c0)={{0xa, 0x4e24, 0x9, @remote, 0x200}, {0xa, 0x4e20, 0x40, @dev={0xfe, 0x80, [], 0xf}, 0x2}, 0x10001, [0x10001, 0x5, 0xfffffffffffffc00, 0x0, 0x9, 0x7, 0x1, 0x6]}, 0x5c) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) link(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f00000005c0)) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000140)=0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:03 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x7, @remote, 0x1}, {0xa, 0x4e24, 0x1, @mcast2, 0x5}, r1, 0x4}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x6, @loopback, 0x80}, {0xa, 0x4e21, 0x3ff, @remote, 0x2}, r1}}, 0x48) 10:28:03 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2022.465460][T18618] XFS (loop4): SB sanity check failed [ 2022.480299][T18618] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2022.596955][T18618] XFS (loop4): Unmount and run xfs_repair [ 2022.624203][T18618] XFS (loop4): First 128 bytes of corrupted metadata buffer: 10:28:03 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='projid_map\x00') ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'irlan0\x00', 0x2}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xc0c00, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x11) [ 2022.650678][T18618] 00000000: 58 46 53 42 00 00 10 00 00 00 7b 07 01 00 10 00 XFSB......{..... [ 2022.661384][T18618] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2022.682320][T18630] XFS (loop3): Mounting V4 Filesystem [ 2022.683904][T18618] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 10:28:03 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e26, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2022.724465][T18630] XFS (loop3): totally zeroed log [ 2022.740607][T18630] XFS (loop3): Failed to read root inode 0x100000000080, error 22 [ 2022.755207][T18618] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 10:28:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2022.775897][T18618] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2022.791273][T18657] XFS (loop5): SB sanity check failed [ 2022.796828][T18657] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2022.807254][T18618] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2022.838857][T18618] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2022.844316][T18657] XFS (loop5): Unmount and run xfs_repair [ 2022.855487][T18657] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2022.863617][T18657] 00000000: 58 46 53 42 00 00 10 00 00 00 6c 00 00 00 10 00 XFSB......l..... [ 2022.873045][T18657] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2022.882375][T18657] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2022.888352][T18618] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2022.916083][T18657] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2022.947630][T18618] XFS (loop4): SB validate failed with error -117. [ 2022.971730][T18657] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2022.999354][T18657] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2023.024331][T18657] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2023.033837][T18657] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2023.057005][T18657] XFS (loop5): SB validate failed with error -117. 10:28:04 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000007c070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x54040, 0x0) dup3(r1, r1, 0x80000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000180)=0x8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) r6 = getgid() write$FUSE_ENTRY(r3, &(0x7f00000003c0)={0x90, 0x0, 0x3, {0x6, 0x3, 0xd561, 0x0, 0xb5, 0x4, {0x6, 0x64a, 0x2, 0x7, 0x3f, 0x0, 0x5, 0x4, 0x7f, 0x75dab740, 0xf1, r5, r6, 0x0, 0x6}}}, 0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={r4, 0x1}, &(0x7f0000000240)=0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r7, 0x400454d4, 0x0) 10:28:04 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000e0000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x40000000013f}}, 0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000080)=0x5b13) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2023.353216][ T1231] XFS (loop4): SB sanity check failed [ 2023.358741][ T1231] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:04 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000006e000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000040)={'gretap0\x00'}) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="000000000000fcdbdf2506000000"], 0x1}}, 0xc0) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000400)={{{@in6, @in6=@remote}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xe8) getsockopt(r1, 0x114, 0x2710, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0xc08) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) fcntl$setpipe(r0, 0x407, 0x34) 10:28:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x8080, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'ip6gre0\x00', 0x200}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8001) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000080)) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000200)={{0xfff, 0x3fffffff8000, 0x1, 0x9, 0xffffffff, 0xfff}, 0x0, 0x1, 0xfff, 0x7fff, 0x3c55e4cd, "75ded6a57631e5771c06ac0935d66298df311ef41b992ae9ec856efb6b760da08e20f49a417d3183f8e9b52a0852d1bdf1617bd2d458161259b7ed5e20337fe57833f0943529efbf69cc05cb664e0dbc9a7baecb51dba7602649058c2e83e6bbc0cfeb2c44a01ac8f8da847705c1eadc16abac40ca3959363faca6acbb554d73"}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'irlan0\x00', 0x8010}) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) [ 2023.457437][ T1231] XFS (loop4): Unmount and run xfs_repair [ 2023.476161][ T1231] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2023.493523][ T1231] 00000000: 58 46 53 42 00 00 10 00 00 00 7c 07 01 00 10 00 XFSB......|..... [ 2023.504100][ T1231] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2023.519700][T18753] Unknown ioctl 1074025689 [ 2023.530515][ T1231] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2023.543198][T18761] Unknown ioctl 1074025689 10:28:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000040)={0x1ff, 0xff}, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x2000) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000080)=0x65, 0x4) [ 2023.570778][ T1231] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 10:28:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000340)={0x5, 0x7, 0xffffffffffffff03, 0x4, 0x3}) sendmsg$kcm(r1, &(0x7f0000000300)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0xc005, @local, 0x1}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)="352c455d0438e67a47c4a0828b83a52575c9be9584b8336d5dd1bd1250ffafa6f36195b0bfed37ce25c53434ebc9247aeeda81fc61e5d2fd6fc673caedaf712d49c1fff368d1d5eca36ae371679e7976286eaab37f2ceb", 0x57}, {&(0x7f0000000140)="0cadc52e74dbd27644c0f7bc94730d5cc57057c8b255a9a76a46661aa66bd6dbaa9bfef0894bb67be982e2c65ed1f219a4c5fd534d780dd37592414d0c5412ff0cb676f8f9d0be0b12fde67c360a6a73da2ccb27ebd23385e3714048323eaaf80f19779340fc0f6ce7ca1b49be0a0fb747f9926c0794498d2c4842", 0x7b}, {&(0x7f00000003c0)="dcb61a3706e1f88a0a4c6d6778d5327a4e01ef35058a317fb3aa4c657617d698c8d0d1046f1354fc43ddaec3917ca83c68312c0b7e7ef68e1b21c832b73bb0a38eed4ee4aedf95e877e9d42312528f8e85a057e456fabcbd1499ac445ba37c8cdd2544c3b12a2a84711d4b130df44ec1cf6f6dd874f5d0032686cc26fda04301d0e28bd48c0a8e678f1144bfd0ef595e567106e02aa7ef636b9a2718da8c4975236428d9bfa0d29ffa5469257e46c30438e1e974dfaf7261062854a9bc2fbf0c2c1b478707fedb52c6a03a6eed86fd99ce515b757bf7aee5d30e28435ead0916320a01fe241a19b711074ca12a4f7b3f753eded6a5864f", 0xf7}, {&(0x7f00000001c0)="808c09e7050a536dc10f0577eacb44007103f67d0f9bab47571ac765df5174f3e9c790ccaef38d6447b88b5c1fbaaadca2503ff8c891edf6144e3fafe0493d49c79d2ae4c8de8f9b033f0fcb362e135788899056cdfa9f29ae3aa9fac0347c92569d34cde98398cd0af533294757e66d4fc657a1165fc96926960c32dbfee185b37e93fa9768a4c6b33a63f44c062f6be3d05ee31a8ac571641758322f03314ea7c977035cb630138456dfda4ee2c4004be705125a6f3b589814", 0xba}], 0x4}, 0x20000841) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f0000001040)="ea", 0x1}], 0x1, 0x0) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0x4) close(r3) close(r2) syncfs(r0) 10:28:04 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x3, 0x2) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000200)=""/37) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0412d4192e4a00040000d2fe54ccf5fc"], 0x10, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) [ 2023.630059][ T1231] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2023.661967][T18759] XFS (loop5): SB sanity check failed [ 2023.667564][T18759] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x7, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2023.701552][ T1231] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2023.737707][ T1231] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2023.751347][T18759] XFS (loop5): Unmount and run xfs_repair [ 2023.763856][ T1231] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2023.778110][T18759] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2023.791495][T18724] XFS (loop4): SB validate failed with error -117. [ 2023.801943][T18725] XFS (loop3): Mounting V4 Filesystem [ 2023.818129][T18759] 00000000: 58 46 53 42 00 00 10 00 00 00 6e 00 00 00 10 00 XFSB......n..... [ 2023.818146][T18759] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2023.843222][T18725] XFS (loop3): totally zeroed log [ 2023.853169][T18725] XFS (loop3): Failed to read root inode 0x100000000080, error 22 [ 2023.861839][T18759] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2023.875176][T18759] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2023.913563][T18759] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2023.923224][T18759] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2023.932945][T18759] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2023.947113][T18759] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2023.957043][T18759] XFS (loop5): SB validate failed with error -117. [ 2024.051850][T18725] XFS (loop3): Mounting V4 Filesystem [ 2024.065707][T10476] XFS (loop4): SB sanity check failed [ 2024.071468][T10476] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2024.083850][T10476] XFS (loop4): Unmount and run xfs_repair [ 2024.087082][T18725] XFS (loop3): totally zeroed log [ 2024.089728][T10476] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2024.102267][T10476] 00000000: 58 46 53 42 00 00 10 00 00 00 7c 07 01 00 10 00 XFSB......|..... [ 2024.108560][T18725] XFS (loop3): Failed to read root inode 0x100000000080, error 22 [ 2024.111358][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2024.128079][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2024.137151][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2024.146196][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2024.155272][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2024.165189][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2024.177446][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2024.186528][T18724] XFS (loop4): SB validate failed with error -117. 10:28:05 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000007d070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:05 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4800, 0x0) connect$netrom(r1, &(0x7f0000000080)={{0x3, @null, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000100)={0x3, 0x5, 'client1\x00', 0xffffffff80000000, "f0b62514e2e6e8ef", "9595ab176080bc3fa0cba00c4ea9b0b960b51ca185cb80eaface726647388487", 0xff, 0x8}) 10:28:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400203) prctl$PR_GET_DUMPABLE(0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) 10:28:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffe87, 0xfa00, {0x2, 0x0, 0x40000000013f}}, 0x20) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x4000)=nil) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:05 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000074000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:05 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000000000f0000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0xffffffffffffff38, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x4e24, 0x3ff, @remote, 0x200000000000002}}}, 0x48) 10:28:05 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x100003, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) 10:28:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) eventfd(0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x214180, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000100)={0x4, 0x3, 0x4, 0xd3c, &(0x7f0000000040)=[{}, {}, {}]}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:05 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote, 0x6}}}, 0x2a) [ 2024.744693][T18856] XFS (loop3): Mounting V4 Filesystem [ 2024.784629][T18859] XFS (loop4): SB sanity check failed [ 2024.796834][T18856] XFS (loop3): totally zeroed log 10:28:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000200)) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) [ 2024.820687][T18859] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2024.857714][T18856] XFS (loop3): Failed to read root inode 0x100000000080, error 22 [ 2024.898424][T18859] XFS (loop4): Unmount and run xfs_repair [ 2024.915022][T18859] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2024.916067][T18890] XFS (loop5): SB sanity check failed [ 2024.922817][T18859] 00000000: 58 46 53 42 00 00 10 00 00 00 7d 07 01 00 10 00 XFSB......}..... [ 2024.937175][T18890] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2024.957255][T18890] XFS (loop5): Unmount and run xfs_repair [ 2024.968904][T18890] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2024.977713][T18859] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2024.990289][T18890] 00000000: 58 46 53 42 00 00 10 00 00 00 74 00 00 00 10 00 XFSB......t..... [ 2025.036880][T18859] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2025.037587][T18890] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2025.072855][T18890] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2025.108062][T18859] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2025.121364][T18890] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2025.130209][T18859] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2025.140922][T18859] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2025.148041][T18890] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2025.151454][T18859] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2025.162170][T18890] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2025.167732][T18859] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2025.184431][T18890] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2025.187427][T18859] XFS (loop4): SB validate failed with error -117. [ 2025.202148][T18890] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2025.219081][T18890] XFS (loop5): SB validate failed with error -117. 10:28:06 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000007e070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:06 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1000, 0x103800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x3}}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:06 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x400, 0x2) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000140)={0x48f9, 0x7}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000000c0)) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x0, 0xc3eb, 0x5, 0x9, 0x100000000, 0x4}) ioctl$FS_IOC_FSGETXATTR(r3, 0xc0c0583b, &(0x7f0000000040)={0x4}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:06 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000117f200f0000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:06 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000374000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:06 executing program 2: io_setup(0x8c, &(0x7f0000000000)=0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) io_cancel(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xf, 0x40, r1, &(0x7f0000000140)="ebf2143ebd13d3ec83d3743c8ca8f1afbc70a1da1963dc975922c5337adfb98992953088c1d6fc4a215deb38d07715cb100203214779b95ac33cef24b4fa6e33dd951cba2cc160", 0x47, 0xfff, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r3, 0x400454d4, 0x0) 10:28:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'ip_vti0\x00', {0x2, 0x4e20, @rand_addr=0xffffffffffffff7f}}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x2, 0x2744, "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", 0xa, 0x7, 0x1, 0x100, 0x80000001, 0x8001, 0x8, 0x1}, r1}}, 0x120) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) 10:28:06 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x3d, 0xfa00, {0x0, 0x0, 0x40000000013c, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2025.659235][ T1231] XFS (loop3): SB sanity check failed [ 2025.665116][ T1231] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2025.714559][ T1231] XFS (loop3): Unmount and run xfs_repair [ 2025.720916][ T1231] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2025.736970][ T1231] 00000000: 58 46 53 42 00 00 10 00 00 00 00 11 7f 20 0f 00 XFSB......... .. 10:28:06 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2) accept4$netrom(r2, 0x0, &(0x7f0000000080), 0x80800) [ 2025.781266][T18952] XFS (loop4): SB sanity check failed [ 2025.790197][ T1231] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2025.790629][T18952] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2025.820110][T18952] XFS (loop4): Unmount and run xfs_repair [ 2025.831844][T18952] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2025.841149][T18975] XFS (loop5): SB sanity check failed [ 2025.846802][T18975] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x8, 0x82000) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000140)) unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2e4c, 0x280200) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000100)={0x1, 0x3f}) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x9, 0x7, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1f}) [ 2025.878106][ T1231] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2025.896908][T18975] XFS (loop5): Unmount and run xfs_repair [ 2025.907354][T18952] 00000000: 58 46 53 42 00 00 10 00 00 00 7e 07 01 00 10 00 XFSB......~..... [ 2025.913221][ T1231] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2025.926804][ T1231] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2025.956063][ T1231] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2025.960465][T18975] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2025.978391][ T1231] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 10:28:07 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x400000, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000080)={0x7, "53d8a48211bda5bf27d545e9ac458aab6c67a32d7229c41ac59b9e11e1feef88", 0x3, 0x1021, 0x6, 0x5, 0x2, 0x7, 0xcac3, 0x81}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) setxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)=@md5={0x1, "846f25c08cfc7848585daa193d4ce8b8"}, 0x11, 0x2) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f00000001c0)) [ 2025.997904][T18952] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2026.004980][ T1231] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2026.021163][T18975] 00000000: 58 46 53 42 00 00 10 00 00 03 74 00 00 00 10 00 XFSB......t..... [ 2026.031666][T18975] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2026.040873][T18949] XFS (loop3): SB validate failed with error -117. [ 2026.053918][T18975] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2026.059474][T18952] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2026.069074][T18975] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2026.082105][T18975] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2026.091576][T18952] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 10:28:07 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x84000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, 0x0) memfd_create(&(0x7f0000000140), 0x200000000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) readv(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)=""/68, 0x44}], 0x2) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81003) syz_open_dev$ndb(&(0x7f0000000280)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) getgid() syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x14000000000, 0x1e1040) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r5 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x7f, 0x0) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f00000000c0)={0xb293, 0x1, 0x12fc}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r3, 0x400454d4, 0x0) [ 2026.106116][T18975] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2026.117454][T18952] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2026.143289][T18952] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2026.158064][T18975] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2026.174445][T18952] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2026.196903][T18952] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2026.206844][T18975] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2026.216264][T18952] XFS (loop4): SB validate failed with error -117. [ 2026.223796][T18975] XFS (loop5): SB validate failed with error -117. 10:28:07 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000007f070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:07 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8001, 0x4880) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6e71}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x16}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xeca}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf9c}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xf1cd4ca2bd95680e}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0xec}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:07 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'bond_slave_1\x00', 0x600}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:07 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000020000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:07 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000007a000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:07 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x200) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x18002, 0x0) r4 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xff, 0x2000) ioctl$RTC_UIE_OFF(r1, 0x7004) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000100)={0x1, 0x4, [{r1, 0x0, 0x1000000004000}, {r2, 0x0, 0x100000000, 0x100003000}, {r3, 0x0, 0x2000, 0x100000000}, {r4, 0x0, 0xfffffffffffff000, 0x4000}]}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffe89, 0xfa00, {0x0, 0x0, 0x40000001013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x4000000040}}}, 0x48) r6 = getpid() syz_open_procfs(r6, &(0x7f0000000000)='attr/current\x00') 10:28:07 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffe6f, 0xfa00, {0x4, 0x0, 0x40000000013f, 0x5}}, 0x4bbb9072a4e806b2) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x82080) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2026.597273][T19035] XFS (loop3): SB sanity check failed [ 2026.632742][T19035] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2026.704741][T19045] XFS (loop4): SB sanity check failed [ 2026.718069][T19045] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2026.748371][T19035] XFS (loop3): Unmount and run xfs_repair [ 2026.780754][T19035] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2026.802217][T19045] XFS (loop4): Unmount and run xfs_repair [ 2026.814510][T19035] 00000000: 58 46 53 42 00 00 10 00 00 00 00 02 00 00 10 00 XFSB............ [ 2026.828631][T19045] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2026.836548][T19045] 00000000: 58 46 53 42 00 00 10 00 00 00 7f 07 01 00 10 00 XFSB............ [ 2026.838525][T19074] XFS (loop5): SB sanity check failed [ 2026.846056][T19035] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2026.862808][T19045] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2026.873734][T19045] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2026.890061][T19035] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 10:28:07 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x400000) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x7}, 0x20) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfd3d, &(0x7f00000001c0), 0x12f}, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000003c0)=@hopopts={0x0, 0x38, [], [@calipso={0x7, 0x48, {0x0, 0x10, 0x45, 0x2, [0x9, 0xc3f, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5, 0x401, 0x1412]}}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x50e0}, @hao={0xc9, 0x10, @local}, @generic={0x5, 0xf4, "2e4b2aa160ab2b0ef7e16f461a1782f7f602183de97d6273ba1d8999395b3da1322c4368e819dc71d5e3305d1baffeaca63b825c0f1fb6fb71a5a7fff3f429fa69c88f01a6b48d52973da8d537650e7ed173f230175356305e9000b1f739dfaf99bfb03bcd341ca098dc18986a15cd0fdf386534e12dbc7b21b5a612580c26fb95d763eda1781883cbbc141cdcb8d2b35ec0f4b917e06fa86b1970ec09d88700342bf4765b7f94404f5acc3d9a32503aaeccf891eae8fc29b096005f9af1bfdab28f94f76a61edce4ca2700b06347651bcd780ae4e56cfafcf458da396337ed4fb8fdbbe3eeeb1eb8b15e1f07cc18ed2f01433dd"}, @generic={0x1, 0x68, "dc1fb15b2f727834ad0322593181e28a5d82a4327403fa184be73de44387f11ebfa0b10c138765f51f1183e7f89485d6374d9758d50a3b6793f039c9409529fa8de38ef6778cc2bc321df4391893f34f30c9ed4b43a0822c03d8bbbdfe40f7150a52b957a23592b5"}]}, 0x1d0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2026.899662][T19045] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2026.901928][T19074] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2026.908971][T19035] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2026.941795][T19045] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2026.960230][T19074] XFS (loop5): Unmount and run xfs_repair [ 2026.977893][T19074] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2026.986709][T19045] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2026.998412][T19035] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2027.027220][T19074] 00000000: 58 46 53 42 00 00 10 00 00 00 7a 00 00 00 10 00 XFSB......z..... [ 2027.038196][T19045] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2027.063123][T19035] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2027.074924][T19074] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2027.086485][T19045] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2027.104370][T19074] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2027.115876][T19035] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 10:28:08 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = socket$inet(0x2, 0x6, 0x0) listen(r1, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3) [ 2027.143810][T19045] XFS (loop4): SB validate failed with error -117. [ 2027.168500][T19074] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2027.196138][T19035] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2027.220229][T19074] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2027.239899][T19074] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2027.249655][T19074] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2027.284304][T19074] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 10:28:08 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000080070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2027.303552][T19035] XFS (loop3): SB validate failed with error -117. [ 2027.311082][T19074] XFS (loop5): SB validate failed with error -117. 10:28:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000000)={0x4009, 0x7fff, 0x5, 0x8}) membarrier(0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x11) 10:28:08 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000017c000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:08 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:08 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x10000, 0x4200) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000000c0)={0x100000000, 0x7, 0x3, 0x0, 0x79169088, 0x28}) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x8, 0x35, 0x1}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:08 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000030000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:08 executing program 1: r0 = msgget(0x2, 0x80) stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getuid() getgroups(0x1, &(0x7f00000001c0)=[0xee00]) r5 = getpgid(0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000200)=0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000002c0)={{0x448f, r1, r2, r3, r4, 0x100, 0x20}, 0x6cf5, 0x401, 0x2, 0xec, 0x3, 0x7, r5, r6}) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) chdir(&(0x7f0000000000)='./file1\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @empty, 0x2}}}, 0x48) 10:28:08 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='\x00') getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=0x0, &(0x7f0000000180)=0x4) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/null\x00', 0x20000, 0x0) bind$rose(r2, &(0x7f0000001c40)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x1, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x40) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000001c0)=r1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) sendmsg(r0, &(0x7f0000001bc0)={&(0x7f00000002c0)=@ll={0x11, 0x1b, r3, 0x1, 0x8, 0x6, @local}, 0x80, &(0x7f0000000340)=[{&(0x7f00000004c0)="facc379bdf66bcd75e8552265112abe2dfebd1d9bcc70209d4535e733a6c1ee198ce6245d2d374be669daae02b16fb67f682b9b5d38894b4265c88941be336bd4639df679da88f5b47d64a00b942307b5c28a4e40e", 0x55}, {&(0x7f0000000540)="4eed119db92f33a1c9b2f79ae4fd9c742597449950ff4e5be30983cb4153dc04f17219f7c6d2e33b72c2b45bf767958d420d33bfac3666a4d9dbf341dd9daf016c9a32b44fba8aa85658edbb97493418a04c07cc01047955f4fa9a8e861bcc2e41d4fe3cb3a5a5aaf5e7bbb4cbc84dfec9e7c368fdf03be597646cf1725a291849bec11f56959ac4e10839e0dc080cd0b2ccfb9821acc9e82daa490f13bfaae4dd5d62995e56ea75f767081705ba12be87133d01374261f8228d3ed19ef6ddd416c6ef88e358cb4f7ef39a45f8d021f3f03de70c91791fbe8176", 0xda}, {&(0x7f00000006c0)="3cc9279eaf1c8e6ad98de75d969c5f7105cafcdc12ef4aedb7cee739b950b2d036ea917dc47c134357a6807cfbebd270add4be96f62dfee7a695fe6f55f7917eca3579b60c304920d2e365955d1fccba", 0x50}, {&(0x7f0000000740)="640553ad91e2a527ed60999b444802e60df24929121f7027e108bb124678910fe392224e3744d3d4cc3b2ab9e789c495ab1bd21b271aa12af2252e5787e58b1104a2512078f5285f8a29c327565f4cf080fdf9d975cd2d4a984ad6698120ee", 0x5f}], 0x4, &(0x7f00000007c0)=[{0x70, 0x10c, 0x2, "f86a8740b5aa0ba33bf7b1042671da327553ab40cd61eb1f2f34e178aae2ac2519426c4ab7de4b8a29b1f22a63e8e8fb00073970cf5e99d5e4413f981872375289857f715ba965053b13c1cc7495a8744fcbb0aa01caab11f9"}, {0x50, 0x11b, 0x1, "226b34222b017d0dc9b4705430198c0d4916d0eacd26ee39856c4ed5a79973b6a912f56a686b05872dcdd29aca65f2899c1661ed5c601b39dae74e"}, {0xb0, 0x111, 0x6, "6e90c79fec60cdc73643d3a34abc57f2026c429bcd5086ecca2b7852e0fcf530db7e6be69c86c4d60fb684fdea2defb5221a7575843376f070aa64e97c831e9917f35c309a223e85ba8febec8efeb4bda60fdc7106268b8bb40731225bb9fba09f9174816d06b5abf1429ea0e001b1d7a53f7007f8210b68b89020d982a25f28d3d5d98b6e929e60f0e2906b139fa2b48819ecd7c2c854d96e"}, {0x28, 0x1ff, 0x6, "2e91924f2427a4fe27e7dda9fa1edfb7870f7595875e2d"}, {0xe8, 0x11b, 0x100000001, "c336a8365a6d62763057f241f326f66124100659ce25f13eb8790693ce78ba66a6e6f901fbe28bc309a376eeea062e1a284b33ef5735ed03977083ae83f81f4bcf19aa3786265faed9a5b180976d2d65210e386a365912c318c83b585d770036e9d62af41781136955f27e5555d9ecfdb4f65d39d6f5fdda0ae25242aaaf8cc34e81d6cb2bf998831efbbbd9ca0391d1f98147decfc58003530ee29ed12c994006eddb49d8e364484da9306e937a07344bfcd4ccffbfe09af91d4f63f09d1b31de24f380a0c8fd39159755c5b6502e81ec10987b"}, {0x70, 0x114, 0x2, "8f4a4f1aa5ddf6a3039089cc6a7aa581b6d247fa2fcbe0f5d8eb041bd451540b335043f6727e5c7951c8c4df17d5f891c27484b30ec0d2e74c98c65e1853f2492d97c6c0bde5ea9a0dbe09b1efcc8f184dea15100cec3415bdaeff"}, {0xf8, 0x107, 0x4, "d35d2c1fdfa936d9cec0f268993341b6043cd538033329634afae199247a777bf2f906902493982f669ee2f1d02da948de40925f1c094137278c48ba4762891416e4ba99f12fd8c259f44597f9a2937e3a1a455cf29984e3ebc3f21c9ea6db8e51734a4a12614d53d9fbacc94a7e793dfb1db7c743c901ce127f3f251778f1613bb2f7e7743465ce700ec00d548798b5fcbe0a73fcf9985b541d1055a13cbc80a1ce3e8b05c64d5dfc9853c68cb1a50915467c871785fd8f82166be72057b348ac07701f65e0e425273c09e52b0dd2e5569b513153dc36577d78c6da222d872455c249eb"}, {0x1010, 0x117, 0x8, "7711647612382a5d07fb21aa9d0e3db50b131bf267a81e3869a0d52e31388e1119cd7c39dc15e7b81d151c366ef6785f3a96439b7a6381558bee088f869f87814bc72c82634b1136f96c5aac37d48f42e03c74eadf13e5ad16774fe9618ad447053cf086f5c6484507783eb74572ad2971a06bbca1722a956c5a5f4a03c8e9c7bba9a35dd679158f325823c981684f67ef3439dbad1ff34c68d41912142de8bf7488ece54f3f4721b2b96f9918d5198cc8e9040c7f1793172ee713e673363dc87f9d040b09195c3f9a6a7f5fcdb792e45e1e60eb60d3a7bff0a9e6ee54a2af1c78062f0000da02758a2ca7005cebf7d9d73b192e8cf2ceac432e1708a31a98bcd1ec9e320c94682e714d5198c898f631d61a15f5ffdea2a40288b1f3f2973e099500ec07f6827c6f8d74d3257227ab0c6e921e44fdbb2cbdb0afd791ba2104393222e2dc62d97cd548d41b9f55465c6d6ce6d5ea8b143bddc612b944c248e17b76f5f923ea38c4fd74cf120018465e3274251b99bdcf940838701272f9fc76e9feaaa49fe604bc2477057fdac17fbae2cd4cce36f505dfb47123295173ca4690f94f50421ce4477f95221c7b9b2843cc790d7a1bbd11983c664ab3122d971034d125dc9d91630356094a85bac20187b112cab065595df357eb64b5fed90ab2af9b266129ed2fe526ff16c05ee0b6de6214607b6465ce4a103598812f9812e8b5e34b3712c7e847ebbd98d053c423bb66fb5df2657f6991008237da023dd1ae3dad5e329af38e61b910eaa909a63a434579b566ccec1caab979729fe0f8577e465da0e6fb7b5539a4848ad20518de77c7821df70737f18c6e97964e99f0a926d47ed05de722b57142d9e7bd5652fffdec8f92e760cc09712d9d49fe4339a65777fff15ef7aea487b21e55a68068715cb18042451f03675a48127f940579490106aaf9ce3182073cd820ccd06126020c26cc6e3a305501925df7e40c7d0670704908699470e10557a0b5a501f884dbc082d53de17e10bbf96fb169958882acc8435bb52886de6fec25b00f2e36662971a2e4d4010f49e07c4dfb1828d58bc87552eb0045caa3aceffccaa4329a05b29eb09fe757b72a5bff75d2d07f438902eb3b04ff69fb7edca82b6b0297a7b9d0b60c5b0e4a936d9a4e5162f7d9fdac5657bc4ca9b567a6ee9134e62172fcccef30568177cf73ed49017dd39b92751fb19b48b32050039b9f20fdbce82e1732e7dafdee94c55dc6c55a74cb8bdbafed900893ed7b9adee34979fea2716f706be4b3c60a1d355cb2db613862f6e661a16daa8ed3621ea8f87f3ca21d2d1fea4cd6b66ded7fe35a46bde502ead91192a9077e831bc69124691aff062c0ae525c365a2e46e2303513f760e8f11c717faf5fbc5bf2c79dcc882ccdf7074314457083d8f969029ec1e8cbd235e49d960a101adb96bf134171df3906011701793c4fecf94ef60651c02dc3ce956477db65f3115e66fd57b85e81a2db108c0578b414511b4fd05b564c25972339490210070b16c805232bd3737c252c04d682356b9b48ab96b1cc80d1a36f0ffc6cc68500b0eb4a514a1b989965b3534bf16a3ee5798da1796a5a585cf6c2da0a23597ea6ce9e124885b212eb8ec277e6b5f749481e931d68248544886fa8d02f370415168c8ea2b1066f118b1b1ec80e5c334fbff4018352cacca69559984eed4386cc7109373aa353e4b66060fb700beeaa7306492a6f30e1603275d2eda489d502b4e1ecc1bdda1d6cd1bb2f5c7292de5b847806c51ac45027299df2fdd15f2f00937bea00944398f5e5b6f25c896432a193a86a30ed486d92c656d1f86ed57f67c959a346e189d59f4d6fe0833dd9efc49763b3af297bcadb7f995a3139c637255e00eed0d540fb32e3b43314598e4a3be586799220f642733cc81183ea0bc6590f9e1812adda46c6192b1c726edc96bfe0255bead6444fcf870b3f15baa068f95e7785a84161c950ea104ac15580ba4cc3ea43c9fed8096a5b49c523a79e162387240d841ed232bfdbcef758cc2e914e33e1d57f840ac87356506fab369538056aa1bb0dc61e84cfcce05f4ba82abbc6783faf76e7099c903a82ccb6a2ccb49c5571ef49b3ae18ab1e20aa7a7d9ea0ec09cba037fe2e7bf0b29ce8d57ff8c23cc1ae9ed16e080a8201a915e6c8033200ff38395577732b873b9a12c0bcb811d3cace48e2291f04d6b50cf871e8c1a61dba159ffd65386c05c45157417c3ef6613436b3700b1c435897f7c6283841195b7ade84b7ca3e439a04cc80054a4e1be045f5915528e01993e51c011784f10d4f955f7b016193e0a88646eeeb17c3546225e336ba41d3ac081e08be1a3646b5d1ad72c890e821cd1fad0fa76dfaae92ca53cef11bdf2203dcedd76ee1387e104b8f226cb91ad09eb3918f2df74528e5164ef4dd2fc0de16611cbc13b2e7280f76fad43f6c872078ed2cc3a33945cb842a7d36cdb1cf7ccbbf8bc945349d68b40dd46414fcb1e8235d238dc98a99b4a2b602864a42e9048d9d8bcdaba0e3dc2c01fcc5a0222438c4b1276b4164d40b89fe72087f6408db57d1f79c9592dcab5294da03e8b8230a8f474c97fa9cfbcdd45b0fa6d75dc782953dc0f3bdc9e44a8a7ae93b0bde345b336cf68af5a7875741bcc754ef190b63343940f72909798cffbf98b0367e9d9672dffac7146fed0468c69938965c9b37332e0866da2cc4f797ebc5d99250260caf2ba17849f7e07d6c13e28c539de1d354a0d3d02400fc44ea7840cd512202119540a50f5b58ed0ed72fe9a7450a836196b7debe018cd3ebe8d53baadfa374109dad7c5bd1ce6340215dee808c70ce408152fd678508ca00184804b100cc99c8e726f940fcfcc2a38c4b21e1f823cee4a80f1c1ad685a92af2e6a7e805de5db177e3edeb78e2461be186b3a7c36640b8f8919186a6e99f8fd2022e217f667d957b9264c453385f9137a806b95dac563bb59d67f702783baca9ee16afdec57c438357daa9c93dc2a6875c19781c69d64edd45161c71cdaab95840e4f0aa669c36fa7fc363c7d5b18b50ba7dd1925f9d926d37ece3490d31932212ec39360b94f74d078f5fb8465bbb58cc2289499d7c7965372367907238f9c8d6e267442ddc356d596d53e56e5f0825206de2128a122bb58a6ca616e049fa4e6c7f54b8a6ae640a2cfecda91950285e0eb8725521772018bbb62a6608051921ced0a72164928b602e62a4d58fa75cda6c1705dcdfee9d95d4fe6832357ae2ff1b7d9e9b13046d98498e4a122bbe9e4141db7507c6ac741294aff1ae500a4582ec6ae3045a96b996255544bffcb513aa4f48fbe34ee34954f75baa08e0a1139f1c1c1ba60f847998d91b3181ac2cde52ac6460e2c7ca09d10f25864aad09feb87411c9aa40929af004a0678155d934a7da496464a331e408e20c68f6948114103abe6689b56a1cd9b9dfd77044cb15ee21c9c3870d9e2a350dfb4d299c90e62632072e578df8afe66bc2190f17d97aa6803bc1805f81106ebe40866d5efb4ec7bde09450b02094fba041711603e4b2c0d7a515b143ddd1921293c8fa6e00e80413d85ad28b3e264bba23f0124675612d145b24450347f72c340e86b5c1c481c52b397837eef183ee4ad449c12f344202d8c2b2a91e74ab1576f78fc6f61797637cecbb187be74a118ee071b011a02ba3716cf753d2ab180c939cea4d7a0ccd6bbf0049c87d07ca605e485896db942d6ec10e044f74f42c88b4f3f1c72ac71fb50a846a3f407941fdceea9e6890c8eb856c2be53feaf99b3c918b475110d5ab36d60bc8dae248bd766da66fa15625b8bc16f40c02dfe11fba41a0d24fbbe164f404c1a899034111721fb7b47afc4318324fba13883ddcd5f50c7843e6b9d121cb9b80e6381c867b803212086c1eda4c09358f72f3fe529dccd8838a7e579716d5ad10eb11464b2ad921724c1f462969b426ad21e84ef4a35d6f21c4625b404e481f7baf521138b5509997e3f504d9f9b2231d5c024a0aa70e4af0eb2a1b1972be823d7b5947827ec81444a0a9171e65a62bff31dc9f9bfff5c7a95689b52ad1fa74188e5bf65e0b467f487269f4c6e72982b4dd19a71aadaf5eb67a9e01be9348dc5f991743d28c6616ff162d75b90861907f9c30dbc48be69db098fe62d65bd7f04f304fd6949fb081d63b4406348fea7fd1ef07be2b9db4d217bf404279c4d4c8329a1b975989f8c573227e6c8a44116865b460631d2210a796026184eb0b8c540964642ad8dcda9563f999bfee890c050fe5896a009f6d9cab18aced22ea86c7ac09286e0b3c479cb003df396d85489f7097e8bf608038c46e9be8a02c5fabbb5504bfe0feeb0f2f8830ec3bd5f6ce83d10c0ed331a763a11ff532e04391a792c76e0c22def6475fbc06ff1ecdda5a6397eebf372924816bed3f1eaa0f22897e86c1bd1ab5e7ba29c7cbad0f2657e645a85d91a3fd8a4f5505fe343e768c0252fafcbc1b3af8e8739877a9c253c16c0b8f08b78beef8036d96b60c351d2c854e4b98181825d61ad71f70aa9e9e79cd34e7a302eaeea1335d6c13b550d3a03efac99a5c0f788bebfd3abe8ae47fd885e2dc721f0fc3d23efcc73a5d458c4f4ea5c2a504d9b50ae10b35fe933a606067b849494f6dc6056e65ecb51a7f5b156f07dddac7d227770d03fc4c6ed2a5ef017ac3bee9198db57df87effbfb09e619a0a3809ab29c0e29fe088e9883bb86e9f55dedd328cb6e3e787736eeacd6d91925f6a0928855eb1e985b98c041d3c5cd73715cb5c5ec0abdedaea2a6e862593877b4ea9250a61f245f3a7fc853813b35926a07f10b1be1356dbfe3a26fd4d7e6761f4fa7eda694e13d7390af31e2838bf2faf0d46c6b24933d96ec292c34502439986e8404a0ab70c580e3fdd2a9ab35874802827b4181badc43d9925d56088fdd5c343a960f635207bcfd6087c380d22f3d7e34176bd17eaa277c8b03977b8b4e57bf3b5e19c29e92e02e4b0165dfddfbe320370c9659ba8a194246169864860b6e8891fe40d8687449120cb4eff459530e6d588f37fdc5914c33c8ee8978aa73414ef464293768ae12afd6c49f4bfc9ffcea86cb85be18a25e2fa6e733744c2a8ba33080b6991794b711d2ec9467996a234f3732924bc4e849e567936f7b31473304e39678b08488edeb953dc1b6e2308132768958a9ac6b49f909ca187bf6eae2b60500f9ccd42df0cda75fcf41bf2486df3dda071dcff33dc7bfb46bfcfdb868dbb2015bd0998efe05dd150adaf75db88462f796e9c12e9871ce9ec5d1431df463d32ed9bc245758fdaa85c2d56dea63354e7a6fb458a267a04048f084a502de083fe7c6f959b832a218b13fae3c443ee338fa4d9af978fd41f29dd42e33c2b464a2b96af7062b8124ec2ffe3437d4869fb740e8530d3f36846719eef3e305edb42e5018f5bd983d34e210eb12d6d83a623ff0a24c273521b7842f88933559ca4d37221c33cecc0247624dee39efd0be20990ce00c7f756008b8c79eea571647d0cc5aa9021c03ad10d291f26092de8222967b72cf900b78e9e69f23da5786b01be5129781a7b5f9e27cc551017154d8b5dfd16f37444c64df797d38e866b5c5196892c526b52a8cfe089279386f6e151ea19f0c19bd4831a5ee3f6e4251ab484ad40817ba49fcad60c450d9fa63ae25e56fef0f0e29e33afa6c7f5ca94b8c3a0a22f40e51f2cc3216d122cc7b76a0f2b375aa0b5a37f0a45bce4d0263e8d5b2c3e7d8a6be5f795cfb139b4809b67bc437dfe33b25d3"}], 0x13f8}, 0x0) write$P9_RAUTH(r2, &(0x7f0000001c80)={0x14, 0x67, 0x1, {0x4e, 0x4, 0x2}}, 0x14) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_names\x00') ioctl$RTC_AIE_OFF(r4, 0x7002) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000001cc0)=0x1e3c7a86a6c16026) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000040)) [ 2027.795645][T19133] XFS (loop4): SB sanity check failed [ 2027.805897][T19141] XFS (loop3): SB sanity check failed [ 2027.817135][T19133] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2027.820525][T19141] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 2027.885981][T19148] XFS (loop5): SB sanity check failed [ 2027.911853][T19148] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2027.922397][T19133] XFS (loop4): Unmount and run xfs_repair 10:28:09 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) fcntl$addseals(r0, 0x409, 0x2) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) [ 2027.944139][T19133] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2027.953957][T19141] XFS (loop3): Unmount and run xfs_repair [ 2027.975375][T19148] XFS (loop5): Unmount and run xfs_repair [ 2027.982423][T19133] 00000000: 58 46 53 42 00 00 10 00 00 00 80 07 01 00 10 00 XFSB............ [ 2028.004941][T19141] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2028.024773][T19148] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2028.037114][T19133] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2028.037338][T19141] 00000000: 58 46 53 42 00 00 10 00 00 00 00 03 00 00 10 00 XFSB............ [ 2028.056701][T19148] 00000000: 58 46 53 42 00 00 10 00 00 01 7c 00 00 00 10 00 XFSB......|..... [ 2028.066172][T19148] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2028.069151][T19133] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2028.075310][T19148] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2028.084292][T19141] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2028.094853][T19148] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2028.113093][T19133] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2028.120445][T19148] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2028.128575][T19141] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2028.140214][T19133] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 10:28:09 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0xffffffffffffff0d) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:09 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2028.146847][T19141] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2028.149244][T19133] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2028.159015][T19141] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2028.177642][T19148] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2028.189619][T19133] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2028.220045][T19141] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2028.228908][T19141] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2028.231149][T19148] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2028.250126][T19133] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2028.275780][T19133] XFS (loop4): SB validate failed with error -117. [ 2028.278409][T19148] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2028.302197][T19148] XFS (loop5): SB validate failed with error -117. [ 2028.334600][T19141] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2028.347453][T19141] XFS (loop3): SB validate failed with error -117. 10:28:09 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000081070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000080)) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) 10:28:09 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r1, 0x6}, 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) write$P9_RSYMLINK(r0, &(0x7f0000000100)={0x14, 0x11, 0x1, {0x8, 0x1, 0x3}}, 0x14) 10:28:09 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:09 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000007e000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:09 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000040000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:09 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) madvise(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:09 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040)=0x3ff, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) recvfrom$inet(r1, &(0x7f0000000140)=""/89, 0x59, 0x100, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000080)=""/165) 10:28:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x4, 0x100) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x1) 10:28:09 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x13f, 0x1000}}, 0x20) lsetxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)=@v2={0x7, 0x1, 0x12, 0x5, 0x8d, "37999efe6debb40492d9cc5f89b6b8e0368ed3f4cf3328c82145286f772796d77998c5b8c37605729e5b9b14dbb4ebfbcae927b5a0cba4018289cde80fc66406ef943119b12e49d2cea29d50e1d063901a1d3bbdad25a92b4788ad251be474a7160bca924751a6ff6fdee12ee838b39a6ee1227cfbc80469c9dd041dfccdd4d81869ccfb8e9103e8b11a7c1965"}, 0x97, 0x1) 10:28:09 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) [ 2028.815678][T19252] XFS (loop4): SB sanity check failed [ 2028.837018][T19245] XFS (loop5): SB sanity check failed [ 2028.850253][T19252] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2028.862827][T19245] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2028.878191][T19260] XFS (loop3): SB sanity check failed [ 2028.896836][T19252] XFS (loop4): Unmount and run xfs_repair [ 2028.903077][T19245] XFS (loop5): Unmount and run xfs_repair 10:28:09 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x4067d, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) [ 2028.914019][T19260] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2028.930141][T19245] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2028.937685][T19252] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2028.961915][T19245] 00000000: 58 46 53 42 00 00 10 00 00 00 7e 00 00 00 10 00 XFSB......~..... [ 2028.974485][T19252] 00000000: 58 46 53 42 00 00 10 00 00 00 81 07 01 00 10 00 XFSB............ [ 2028.988556][T19245] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2029.010161][T19252] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2029.024673][T19260] XFS (loop3): Unmount and run xfs_repair [ 2029.030867][T19245] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2029.039875][T19252] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2029.049047][T19260] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2029.056655][T19252] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2029.065937][T19245] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2029.074991][T19260] 00000000: 58 46 53 42 00 00 10 00 00 00 00 04 00 00 10 00 XFSB............ [ 2029.090246][T19252] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2029.099324][T19245] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2029.109191][T19260] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2029.118249][T19252] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2029.127271][T19245] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2029.136267][T19260] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2029.145273][T19252] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2029.154292][T19245] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2029.163295][T19260] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2029.175132][T19252] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2029.185487][T19245] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2029.204244][T19260] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2029.218235][T19252] XFS (loop4): SB validate failed with error -117. [ 2029.225118][T19245] XFS (loop5): SB validate failed with error -117. [ 2029.225932][T19260] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2029.241829][T19260] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2029.253182][T19260] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2029.270111][T19260] XFS (loop3): SB validate failed with error -117. [ 2029.508071][T10476] XFS (loop3): SB sanity check failed [ 2029.514439][T10476] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2029.537614][T10476] XFS (loop3): Unmount and run xfs_repair [ 2029.543701][T10476] XFS (loop3): First 128 bytes of corrupted metadata buffer: 10:28:10 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000082070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:10 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1005}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x4, @loopback, 0xffff}, {0xa, 0x4e22, 0x1, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x24}}, 0x7f}, r1, 0x80000000}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:10 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000240)={0x0, r0, 0x7, 0x4, 0x1f, 0x8}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x9, 0xeef, 0x1, 0x101, 0x3, 0xb5f3, 0x5}, &(0x7f0000000100)={0x7fffffff, 0x9, 0x6, 0xd5, 0x2, 0x8, 0x100000001, 0x3ff}, &(0x7f0000000140)={0x7722, 0x1, 0x12, 0x2, 0x9, 0x4, 0xed, 0x9}, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000200)={&(0x7f00000001c0)={0x3315}, 0x8}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 10:28:10 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000280000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x341000, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) [ 2029.551396][T10476] 00000000: 58 46 53 42 00 00 10 00 00 00 00 04 00 00 10 00 XFSB............ [ 2029.567197][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2029.620233][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2029.629372][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2029.686235][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2029.696026][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2029.706421][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2029.733633][T19328] XFS (loop5): SB sanity check failed [ 2029.748537][T19328] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2029.776095][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2029.778841][T19328] XFS (loop5): Unmount and run xfs_repair [ 2029.795482][T19260] XFS (loop3): SB validate failed with error -117. [ 2029.816014][T19345] XFS (loop4): SB sanity check failed [ 2029.822434][T19345] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2029.827309][T19328] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2029.834818][T19345] XFS (loop4): Unmount and run xfs_repair [ 2029.848051][T19345] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2029.848949][T19328] 00000000: 58 46 53 42 00 00 10 00 00 02 80 00 00 00 10 00 XFSB............ [ 2029.864747][T19345] 00000000: 58 46 53 42 00 00 10 00 00 00 82 07 01 00 10 00 XFSB............ 10:28:10 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000050000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:10 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = dup2(r0, r0) mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x1490, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:10 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x84000) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x1, @null, @netrom={'nr', 0x0}, 0x101, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, 0x6, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2029.893720][T19328] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2029.905943][T19345] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2029.927410][T19328] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 10:28:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) prctl$PR_GET_SECUREBITS(0x1b) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) [ 2029.943944][T19328] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2029.949801][T19345] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2029.969502][T19328] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2029.971712][T19345] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2029.979519][T19328] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2030.030106][T19345] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2030.047061][T19328] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 10:28:11 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x335, 0xfa00, {0x0, 0x0, 0x40000000013f, 0xfffffffffffffffd}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @empty, 0x2}}}, 0x48) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000080)={0xa, &(0x7f0000000040)=[{0x6, 0xea92}, {0xb, 0x8}, {0x3ebe, 0x5}, {0x5, 0xff}, {0x6, 0x10000}, {0x7fffffff, 0x3}, {0x5, 0x13ee9acc}, {0x19a, 0x5}, {0x2, 0x7}, {0x80000000, 0x101}]}) 10:28:11 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}, 0xffffffffffffffff, 0x40000000}}, 0x48) [ 2030.076660][T19328] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2030.097995][T19345] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2030.108540][T19345] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2030.117683][T19328] XFS (loop5): SB validate failed with error -117. [ 2030.156142][T19382] XFS (loop3): SB sanity check failed [ 2030.165666][T19382] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2030.175236][T19345] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2030.178401][T19389] Unknown ioctl 19303 [ 2030.196720][T19382] XFS (loop3): Unmount and run xfs_repair [ 2030.197681][T19345] XFS (loop4): SB validate failed with error -117. [ 2030.209663][T19382] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2030.225491][T19382] 00000000: 58 46 53 42 00 00 10 00 00 00 00 05 00 00 10 00 XFSB............ [ 2030.235995][T19399] Unknown ioctl 19303 [ 2030.240016][T19382] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2030.240029][T19382] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2030.240041][T19382] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2030.240053][T19382] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2030.240064][T19382] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2030.240076][T19382] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2030.240094][T19382] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2030.270928][T19382] XFS (loop3): SB validate failed with error -117. 10:28:11 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000003a0000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:11 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000083070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x9) 10:28:11 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:11 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000060000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:11 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:11 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f00000000c0)=0x8, 0x4) write$binfmt_elf32(r1, 0x0, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000140)="9881f0ef12bb369e2a66165e283c9c5d02a477bd76ac045d5a696fe8b9d40162759e2ea3769db0f7831e776a80ba4a114272355edfbf799d85e1179e5766c414b6edd3565564b945a9c8da5132204b24412d56ca6130bfea435677df8f5e6b8349154dbbda1d7020dcf707b7c823c82bca18a141cec6ecb80e02bf3a57db9b9487e90a738676fa86d8cc4398ebe7da0076216f5a5b5e63bc1f2c33cec56b63fedfb8f8ae7096bcac21e275d6021208dd95e67abb729f4943f0b4d8cd4099fbaea6abf70adf8af657addb487c4fda9a00a4d62e32804c120ca7e72ccde2c31dd6fc4a43ee3579f7f8b5b6da2074eda4793c47c41f", 0xf4) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x40000000000037f, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0xfffffffffffffffd, 0x3ff, @remote, 0x2}}}, 0x48) [ 2030.625558][T10476] XFS (loop5): SB sanity check failed [ 2030.631573][T10476] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:11 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0xe8, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2030.711351][T10476] XFS (loop5): Unmount and run xfs_repair [ 2030.743511][T10476] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2030.759108][T19437] XFS (loop3): SB sanity check failed [ 2030.765272][T10476] 00000000: 58 46 53 42 00 00 10 00 00 03 a0 00 00 00 10 00 XFSB............ [ 2030.769899][T19437] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2030.805292][T19434] XFS (loop4): SB sanity check failed [ 2030.838837][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2030.842683][T19434] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:11 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x12000) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:11 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000100)={r2, 0x1}) 10:28:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) [ 2030.885206][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2030.897899][T19437] XFS (loop3): Unmount and run xfs_repair [ 2030.909236][T19437] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2030.927116][T19437] 00000000: 58 46 53 42 00 00 10 00 00 00 00 06 00 00 10 00 XFSB............ [ 2030.939670][T19434] XFS (loop4): Unmount and run xfs_repair [ 2030.956635][T19434] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2030.968740][T19437] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2030.969558][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2030.988096][T19434] 00000000: 58 46 53 42 00 00 10 00 00 00 83 07 01 00 10 00 XFSB............ [ 2030.997561][T19437] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2031.035751][T19437] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2031.038585][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2031.054038][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2031.056921][T19434] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2031.065279][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2031.080346][T19437] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2031.100594][T19434] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2031.115509][T19437] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2031.118119][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 10:28:12 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xffffffffffffff7f, 0x2100) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x8, 0x70bd25, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x6, 0x1f, 0x80000001, 0x401}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2031.134720][T19434] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2031.138732][T19437] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2031.155715][T19434] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2031.170464][T19434] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2031.171624][T19415] XFS (loop5): SB validate failed with error -117. [ 2031.215437][T19434] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2031.238299][T19437] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2031.270376][T19437] XFS (loop3): SB validate failed with error -117. [ 2031.288035][T19434] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 10:28:12 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x7, 0xfffffffffffffff7, 0x3}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2031.316148][T19434] XFS (loop4): SB validate failed with error -117. 10:28:12 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000084070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:12 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000002ac000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:12 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x117, 0xfffffffffffffffc}}, 0xffffff2a) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x103001) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)={0x364, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x35f0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8001, @mcast1, 0x100000000}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_NODE={0x40, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x118}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xbf}]}, @TIPC_NLA_BEARER={0x6c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x300000000000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'ifb0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffffff07}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x78, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffff7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xe0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8000, @empty, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7fff, @remote, 0x80000000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0xa0, &(0x7f0000000040)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e21, 0x772, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0x3f, @loopback, 0x5}, @in6={0xa, 0x4e23, 0x3ff, @local}, @in6={0xa, 0x4e24, 0x4, @remote, 0x67e9}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r3, 0x1}, &(0x7f00000001c0)=0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:12 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x10000000000006}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) 10:28:12 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000070000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:12 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000100)={0xc0000000, 0x102, "0428621f0279ca7841b5500e2344f41d8bf91ef0d4531458ba6b81bbcf181bf4", 0x9, 0x1f40, 0x200, 0x0, 0x8001, 0x4f, 0x8, 0x0, [0x7fff, 0x6, 0x8, 0xb4]}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x0, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x82000, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000340)="8646b77a7c9f7332429bdf5b21abe317ac55f16572644f2190e5be3b787907f3c5dc025a7a93d72b08f5d649564e56ea434cf7e155006874558b7f74fffe67baa7ea4325ec3f6c17d2b8a24771b08d4ee40deb165befdedd602cb95800f24fa73816be53cc90cc70d143b328076845bbf19e30701c5c8a751f02310fc54d75a3ac55de9dfd57739297156a3692077961da844a251e5963c6360d208db7b270f61d8e00520796717d47e78b7188209871193c35", 0xb3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x20000, 0x10) getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000240), &(0x7f00000002c0)=0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000400)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000440)=0x20, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:12 executing program 0: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000080)=0x0) r1 = getpgid(r0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x80000, 0x0) perf_event_open(0x0, r1, 0x2, r2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x20000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x33cf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, 0x0, &(0x7f0000000280), 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000400)) unshare(0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000340)='./file0\x00', 0x8, 0x2) setfsgid(0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0xfffffffffffffffd) close(r3) clone(0x10020000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = getpid() setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000380), 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000700)=0xe8) setreuid(0x0, r7) sched_setscheduler(r6, 0x5, &(0x7f0000000200)) sendto$inet(r5, &(0x7f0000000740)="9a000000007fffffff8621a6ac285a9142dc181bdf05a26c3f4267c186fed372ca597f7ea341a4e5fedfc1e58616f1bf000000000000000089b229c8266c5be94924396752319318d5a8a0016034c36391906a22b94dc77c97905f44894fe33cda649baa2e724ad388101bd9e17f5a457ededc88f744886d3c51ed821d0dbdde99eb24a7500c117ce405c9cf9cdcefad0529c145bb8481a34eb2e34b8fb56cb9d5f67df12742a147543a0e5a5933c9d69e507bf39e40ddf8982438ab5dc738086808c67b6f0ff392ef8f8e54ff7c13bd1a4af88b2a384a2eab5110963899db", 0x110, 0x0, 0x0, 0x1b4) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) r8 = socket$inet6(0x10, 0x3, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) sendmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f0000010000)="5500000020007fafb72d00b2a4a2809302000000030343ee6b26236925000a0000000000130000008848a3c728f1c46b7b31afdc1338d5440000000000000000000000088daa7227c43ab8220000bf0c00157400d4", 0x55}], 0x1}, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2031.618041][T19519] XFS (loop5): SB sanity check failed 10:28:12 executing program 2: socketpair$unix(0x1, 0x20000000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) [ 2031.708263][T19519] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2031.730336][T19519] XFS (loop5): Unmount and run xfs_repair [ 2031.752657][T19534] XFS (loop3): SB sanity check failed [ 2031.760390][T19534] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2031.774241][T19519] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2031.783112][T19535] XFS (loop4): SB sanity check failed [ 2031.788681][T19535] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:12 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2031.825113][T19534] XFS (loop3): Unmount and run xfs_repair [ 2031.869672][T19534] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2031.879542][T19519] 00000000: 58 46 53 42 00 00 10 00 00 02 ac 00 00 00 10 00 XFSB............ [ 2031.894493][T19535] XFS (loop4): Unmount and run xfs_repair [ 2031.904996][T19534] 00000000: 58 46 53 42 00 00 10 00 00 00 00 07 00 00 10 00 XFSB............ [ 2031.940496][T19535] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2031.944564][T19534] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2031.948150][T19519] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:13 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) clone(0x34000, &(0x7f00000006c0)="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", &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)="1800ae93a040f0cdd6c6db4be7f3ea27d623d2f09a13f9f732c86dbc8a470c11abbca680558d962ec37169e8079a86681fae1527eb4d15b0fea4bb8e5535474869b512fa098df32d4bc5b2cae0a2ea9538861d39ad69a07618b6082a7839e3bbf57611aaac0ec31aeca830223fe7aad49c2eb27cf5f5dfaa671209bcba859ff636852d7512ec5c2b6e390716ce4e46124a7656bf33299845417b3b5831a3bf92ca8471565f4df69849af6ce2386b870702be9845f1714e") write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000640)={0x3, 0xff92, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000080)=0x1ff) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) [ 2032.012064][T19535] 00000000: 58 46 53 42 00 00 10 00 00 00 84 07 01 00 10 00 XFSB............ [ 2032.017672][T19534] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2032.066516][T19519] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2032.075578][T19535] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2032.106144][T19534] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2032.110034][T19519] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2032.129917][T19535] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2032.144040][T19519] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2032.157468][T19534] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2032.158785][T19535] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2032.175815][T19519] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2032.184920][T19519] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2032.190421][T19534] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2032.194615][T19535] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2032.213401][T19519] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2032.222490][T19519] XFS (loop5): SB validate failed with error -117. [ 2032.223132][T19535] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2032.238375][T19535] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2032.247849][T19535] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2032.252527][T19534] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2032.257386][T19535] XFS (loop4): SB validate failed with error -117. [ 2032.284273][T19534] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2032.288277][T19563] netlink: 'syz-executor0': attribute type 10 has an invalid length. [ 2032.306026][T19563] netlink: 17 bytes leftover after parsing attributes in process `syz-executor0'. [ 2032.313242][T19534] XFS (loop3): SB validate failed with error -117. 10:28:13 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000085070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) inotify_init1(0x80000) 10:28:13 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000c4000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:13 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000080000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:13 executing program 2: socketpair$unix(0x1, 0x1000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x5, 0x42000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x100000000, 0x1, 0x2, 0x5, 0x64, 0x8, 0xffffffffffffffff, 0x401, 0x0}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r2, 0x9}, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x87=\xc0\xe8\x00', 0x200}) ioctl$TUNSETOFFLOAD(r3, 0x400454d4, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_PPC_ALLOCATE_HTAB(r4, 0xc004aea7, &(0x7f0000000080)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x71, 0x400000) [ 2032.548301][T19563] netlink: 'syz-executor0': attribute type 10 has an invalid length. [ 2032.563126][T19563] netlink: 17 bytes leftover after parsing attributes in process `syz-executor0'. 10:28:13 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000080)={0x4, 0x8, 0xfa00, {r1, 0x7f}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x48010, r2, 0x0) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="24010000", @ANYRES16=r3, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x80c1}, 0x8000) [ 2032.822496][T19624] XFS (loop4): SB sanity check failed [ 2032.828824][T19624] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2032.846804][T19622] XFS (loop5): SB sanity check failed [ 2032.862087][T19618] XFS (loop3): SB sanity check failed [ 2032.867820][T19618] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2032.881983][T19624] XFS (loop4): Unmount and run xfs_repair [ 2032.882654][T19622] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2032.888055][T19624] XFS (loop4): First 128 bytes of corrupted metadata buffer: 10:28:13 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), r1, 0x1}}, 0x18) [ 2032.919254][T19618] XFS (loop3): Unmount and run xfs_repair [ 2032.935590][T19622] XFS (loop5): Unmount and run xfs_repair [ 2032.946478][T19618] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2032.954134][T19624] 00000000: 58 46 53 42 00 00 10 00 00 00 85 07 01 00 10 00 XFSB............ 10:28:14 executing program 1: r0 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0xd7f, 0x4c0000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) r2 = syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x5, 0x80) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000440)={0x12, 0x10, 0xfa00, {&(0x7f0000000300), r1, r2}}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xfe, 0xf4, &(0x7f0000000040)="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", &(0x7f0000000140)=""/244, 0x6}, 0x28) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2032.967357][T19624] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2032.982723][T19622] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2033.007401][T19618] 00000000: 58 46 53 42 00 00 10 00 00 00 00 08 00 00 10 00 XFSB............ [ 2033.041590][T19624] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2033.053604][T19622] 00000000: 58 46 53 42 00 00 10 00 00 00 c4 00 00 00 10 00 XFSB............ [ 2033.077178][T19624] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 10:28:14 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffd9b, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2033.087544][T19622] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2033.087976][T19618] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2033.102465][T19624] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2033.123220][T19622] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2033.132550][T19622] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2033.145156][T19622] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2033.156877][T19624] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2033.169266][T19622] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2033.175788][T19618] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2033.178368][T19624] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2033.196821][T19622] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2033.213900][T19622] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2033.224263][T19624] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2033.225225][T19618] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 10:28:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7fff, 0x80240) r3 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) [ 2033.233407][T19622] XFS (loop5): SB validate failed with error -117. [ 2033.248945][T19624] XFS (loop4): SB validate failed with error -117. [ 2033.257461][T19618] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2033.288540][T19618] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2033.309260][T19618] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2033.334195][T19618] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2033.348274][T19618] XFS (loop3): SB validate failed with error -117. 10:28:14 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000086070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:14 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x101000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x74, r2, 0x22, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x10) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="eaff72f619df0851b9cb2789a5ffb65186246c1794b0e4436574e2f8c13af9c7486505951645a20e13ec2d81017fbfb7d67871aa78676267be30d69129cd307f4be5f44c8ed3727ef6c9f26d1f94a54af91d03c4ba064880a5b53c2c980c99cc12ce91b97cad8ca8730670b37f73ef5b13d161bba9d9005dd2673ca35b67980fd608cf7f8146b83eb11f82c117dbd2356ac99e99fb34549916c675a7c699664efdb91cfd2aa84b9c6f42064492fe306c30c9fa9fab49ed36dc29e593021fe362f6df", 0xc2}], 0x1) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f00000003c0)) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x101000, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f00000006c0)=""/4096) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0xffffffffffffff8d, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x4e24, 0x3ff}}}, 0x19) 10:28:14 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:14 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000090000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x20600, 0x0) getpeername$inet(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) 10:28:14 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000002c8000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:14 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x125180) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000180)) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000080)={0x4, 0x3}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000100)="40295a986eac5bb0aefbb095b333cf577b54f7c35384395313027f9e1173e4b465d474b3414884342c25183b83749486a4f52ceec3ffbe5bd2ff97d110ec6e566cbad4f89bd111cedf1bec897fbdeab22bf5") write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) write$P9_RSETATTR(r1, &(0x7f00000000c0)={0x7, 0x1b, 0x2}, 0x7) [ 2033.677578][ T1231] XFS (loop5): SB sanity check failed [ 2033.695330][ T1231] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:14 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x80000, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 2033.752540][ T1231] XFS (loop5): Unmount and run xfs_repair [ 2033.774232][ T1231] XFS (loop5): First 128 bytes of corrupted metadata buffer: 10:28:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4400, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x501100, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000000c0)=r2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r3, 0x400454d4, 0x0) [ 2033.805350][T10476] XFS (loop4): SB sanity check failed [ 2033.806793][ T1231] 00000000: 58 46 53 42 00 00 10 00 00 02 c8 00 00 00 10 00 XFSB............ [ 2033.811477][T10476] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2033.831953][ T1231] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2033.857744][T19739] XFS (loop3): SB sanity check failed [ 2033.858943][ T1231] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2033.863858][T19739] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:15 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0xeb, @remote, 0x6}}, 0x8, 0x6}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r2, 0x4}, 0x8) [ 2033.930157][T19739] XFS (loop3): Unmount and run xfs_repair [ 2033.943082][T19739] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2033.945992][T10476] XFS (loop4): Unmount and run xfs_repair [ 2033.966349][ T1231] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2033.977892][T19739] 00000000: 58 46 53 42 00 00 10 00 00 00 00 09 00 00 10 00 XFSB............ [ 2033.994512][T10476] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2034.005166][ T1231] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2034.023185][T10476] 00000000: 58 46 53 42 00 00 10 00 00 00 86 07 01 00 10 00 XFSB............ [ 2034.031147][T19739] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2034.042697][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2034.052069][T19739] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2034.061876][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2034.066130][ T1231] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 10:28:15 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @mcast1}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000040)={0x1, {0x9, 0x7, 0x8, 0x9000000000}}) [ 2034.072091][T19739] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2034.089140][ T1231] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2034.095633][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2034.113128][T19739] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2034.119498][ T1231] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2034.124302][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2034.139391][T19709] XFS (loop5): SB validate failed with error -117. [ 2034.145018][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2034.155961][T19739] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2034.165194][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 10:28:15 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x10000, 0x0) [ 2034.174430][T19739] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2034.184383][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2034.193790][T19739] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2034.203038][T19720] XFS (loop4): SB validate failed with error -117. [ 2034.208999][T19739] XFS (loop3): SB validate failed with error -117. 10:28:15 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000087070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:15 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x220040, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x1, 0x4) 10:28:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="5260fab47da72bae59b4215ca793c871d116f5c97029d6ed27818c8ddb52da6e4c329a539809b3c6a245d78fa1c980e67168ac53e8d1bc792d50c7e8076dbb2a3575293787a260", 0x47}, {&(0x7f0000000140)="5515c5561b5ed3c91d9424481f1f1f6b5f5489ab9cf8937420f9b38a690db9cb0ab9d96f811543fe462931dcfb00651f4a318e53c33c4d929a9bfff1b3b36aeebfd3b8de180825b78d4f92fd4ce32ee89236b6ceff170fbb2d3e05df1048738fa77f25bdb6", 0x65}, {&(0x7f0000000200)="0b183d71286c3209dc4cfc4e516c6029b1d03902692952cb0139dc7fae384f60be8138131591fb4868dd56a7549c6a3972e6259aeb9c9c69aafc585cc3953222f0ea125770557b8ef9e6049fde53e83f1f96b5c0781f32af47f9822d16ef565107eb7d918fd3b85aebffb6d392ded002dba7e8c8369a86069aff73683aba90ac74c9d2b8d237703b965f93e0bb7ba7c3d9895ec366d6fc5c14c72247357d6259e7ca7d6b60769be12e622cc82c8fb8e0f41dec2952e558e8294722414f9cb9d42cf2784562acfddacb7148c882ef97a1ac3161096ee0c3bb5be29abd34facddadebe98", 0xe3}, {&(0x7f0000000300)="6b500d3b1a3519839688fead75a5651a588e93adea0d07d93df196c3cb905c36914299d0920455f5548355172ee38a967fc3a206d3cd5253106d611c812c37ce59cf07432842a1b39307e3447e232cdc6b0eea436a99c9f35f57be06a3ba8ce37e55b075efdff714fb4feb3772f08bf3c5f611c5de9386505b372d76abc059e8450d0a6f418b1b04f07e34fa1aa94813bfe6f2bedbc4624a224288324e6f708a6cefa24feec05190825e7fdb20ad9b017fcc31e07ada77", 0xb7}, {&(0x7f0000000000)="2326f3179bca4b9597107d8d", 0xc}, {&(0x7f00000003c0)="5c0e6572a91aba2abc3dd6f5f439fea6adaa6447c3167966e576049afdaf9cce5427c5fb2b0c04f2d5696d3ac9aff35743f495031d829c318ba3634f56e86a70f6126661f8061e1dc166d3923694ec4db41d22f694c48585b7e21c5986059a4d5dea4a4d349d16029cfb7340141a98f39bac87f429e4f0b6caf43059960a9fe6aa08610d35dfa1bc19a2c022414bc76b20567641ca075bc5fd45a01169b1d8ae8c95c3e5b302007325d5d533a68787f7066728a99a5dbdfca2430d133000e6790d07677815e9acb34746e7eeefc46a64aeff6c0d303b445b28c4496630", 0xdd}, {&(0x7f00000004c0)="9529adcd390b0df317ebfaabb15584b2734991339003179078b2357f582e60ec41a2d9e66c36cd7a938e193d937ce5d9e5478bf6017cd31416bbf3a987d209008255932d7d5d9c7f00e4e96dd4b74048431df97dce627c408934fd4df64456b731cc525969f37ff84653c5aa85d34ac358c08fd2c16ea2004b23929bbec64ccc41d2094b", 0x84}], 0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) 10:28:15 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000a0000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:15 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:15 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000d0000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:15 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x200) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f00000000c0)={0x414e}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) open(&(0x7f0000000080)='./file0\x00', 0x4000, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10000, 0x0) 10:28:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x6e, 0x0, 0x9, 0x7, 0xc0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x400, 0x0) connect$vsock_dgram(r3, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) getpeername$ax25(r3, &(0x7f0000000140)={{0x3, @rose}, [@default, @default, @remote, @rose, @netrom, @bcast, @netrom, @rose]}, &(0x7f0000000200)=0x48) 10:28:15 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x5, 0x8000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x2, @remote, 0x4df}}, 0x6, 0xb, 0xd343, 0x100, 0x6}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e24, 0x0, @mcast2, 0x463e}}, 0xc670, 0x8}, &(0x7f0000000240)=0x90) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) 10:28:15 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000003e4000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:15 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00000003c0)={0x0, {0x2, 0x4e22, @rand_addr=0x3}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e20, @local}, 0x1a, 0x0, 0x0, 0x0, 0x80000001, &(0x7f0000000300)='bcsf0\x00', 0x9, 0x0, 0x387f}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x1, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000080)={0x1, 0xae33}) 10:28:15 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4400, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000180)={0xfffffffffffffff9, 0xc0000393, &(0x7f00000006c0)="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", &(0x7f0000000080)="4a1c3a96e7d93e4ceb87afe691a3848f5f63fc697edcea1357e0c3c0cecaf3a30676d0f6f8961992a7d6abc253a4906c7df83c26ae5c8388e51761f62e683bc07a1dfdac804ec2981bc3b5524f0eb2c3eff2a244d5d214b3bc07f2db8abd7e0ec7fc5876efb3186a2f3b9bd870cedb0590a1e7ffd5279c1e929f749ff68889f79d3715152927f915d66c76e993c343f353020c313dea02d16c8cef70a6e4f8ffd33eea7c0053353222d9520766abc109d2eb1ded76e608e268533287da9d229a8967f4d45f793abd9d1b12e2b36bf0fd3bf50907e84b49dff76f", 0x1000, 0xda}) [ 2034.860832][T19835] XFS (loop3): SB sanity check failed [ 2034.873620][T19835] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2034.954066][T19841] XFS (loop4): SB sanity check failed [ 2034.971465][T19841] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2034.989807][T19835] XFS (loop3): Unmount and run xfs_repair [ 2035.042207][T19835] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2035.048667][T19841] XFS (loop4): Unmount and run xfs_repair [ 2035.055874][T19835] 00000000: 58 46 53 42 00 00 10 00 00 00 00 0a 00 00 10 00 XFSB............ [ 2035.084421][T19841] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2035.101302][T19835] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2035.110931][T19841] 00000000: 58 46 53 42 00 00 10 00 00 00 87 07 01 00 10 00 XFSB............ [ 2035.120051][T19835] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2035.132543][T19864] XFS (loop5): SB sanity check failed [ 2035.150238][T19864] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2035.162341][T19841] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2035.176622][T19835] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2035.197211][T19864] XFS (loop5): Unmount and run xfs_repair [ 2035.203299][T19835] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2035.220074][T19841] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2035.228933][T19841] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2035.238045][T19864] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2035.246743][T19835] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2035.261272][T19864] 00000000: 58 46 53 42 00 00 10 00 00 03 e4 00 00 00 10 00 XFSB............ [ 2035.267937][T19835] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2035.270512][T19841] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2035.279191][T19835] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2035.297215][T19835] XFS (loop3): SB validate failed with error -117. [ 2035.297247][T19841] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2035.304052][T19864] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2035.319626][T19841] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2035.324618][T19864] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2035.333135][T19841] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2035.340052][T19864] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2035.355309][T19841] XFS (loop4): SB validate failed with error -117. [ 2035.357978][T19864] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2035.373339][T19864] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2035.382491][T19864] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2035.391440][T19864] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2035.391478][T19864] XFS (loop5): SB validate failed with error -117. [ 2035.589016][ T1231] XFS (loop3): SB sanity check failed [ 2035.594562][ T1231] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:16 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000088070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f00000000c0)=0x6, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x3ff, 0x1, 0x7d, 0x5097, 0x4}, &(0x7f0000000140)=0x98) rt_sigreturn() getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={r3, 0x0, 0x20, 0x7}, &(0x7f00000002c0)=0x18) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x2) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vfio/vfio\x00', 0x400, 0x0) write$FUSE_STATFS(r4, &(0x7f0000000340)={0x60, 0x0, 0x1, {{0x100, 0xc5f2, 0x3, 0x5aed, 0x1000, 0xffffffff, 0x9af, 0x2}}}, 0x60) 10:28:16 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x12b) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2035.654227][ T1231] XFS (loop3): Unmount and run xfs_repair [ 2035.689262][ T1231] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2035.706945][ T1231] 00000000: 58 46 53 42 00 00 10 00 00 00 00 0a 00 00 10 00 XFSB............ [ 2035.748595][ T1231] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2035.776323][ T1231] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2035.793795][ T1231] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2035.804219][ T1231] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2035.817337][ T1231] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2035.861813][ T1231] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2035.901290][ T1231] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 10:28:17 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000003e8000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:17 executing program 1: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) modify_ldt$read(0x0, &(0x7f0000000000)=""/165, 0xa5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:17 executing program 0: mq_open(&(0x7f0000000080)='\':*\x00', 0x0, 0xb, &(0x7f00000000c0)={0x6, 0xf48, 0x8d73, 0x200, 0x5, 0x1ca, 0x7, 0x7ff}) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback, 0x800000}, {0xa, 0x0, 0x4003ff, @remote, 0x2}, 0xffffffffffffffff, 0x7fff}}, 0x48) [ 2035.921308][T19835] XFS (loop3): SB validate failed with error -117. 10:28:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) 10:28:17 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000d0000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2036.000809][T10476] XFS (loop4): SB sanity check failed [ 2036.006243][T10476] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:17 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2036.044091][T10476] XFS (loop4): Unmount and run xfs_repair [ 2036.060616][T10476] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2036.068225][T10476] 00000000: 58 46 53 42 00 00 10 00 00 00 88 07 01 00 10 00 XFSB............ [ 2036.094111][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:17 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000100)={[], 0x8, 0x9, 0x3, 0x0, 0x1, 0x6000, 0x6000, [], 0x1}) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2036.136831][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2036.199317][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2036.230395][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2036.260433][T19947] XFS (loop5): SB sanity check failed [ 2036.273528][T19947] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2036.287125][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2036.296823][T19956] XFS (loop3): SB sanity check failed 10:28:17 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe9b, 0xfa00, {0x0, 0x0, 0x40000000013d, 0x7}}, 0xfe) pipe2$9p(&(0x7f0000000040), 0x800) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2036.312673][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2036.326427][T19947] XFS (loop5): Unmount and run xfs_repair [ 2036.329486][T19956] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2036.336394][T19947] XFS (loop5): First 128 bytes of corrupted metadata buffer: 10:28:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)={0x0, @aes256, 0x3, "80357cf5208f77b6"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) [ 2036.355308][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2036.379319][T19925] XFS (loop4): SB validate failed with error -117. [ 2036.405800][T19947] 00000000: 58 46 53 42 00 00 10 00 00 03 e8 00 00 00 10 00 XFSB............ [ 2036.417677][T19956] XFS (loop3): Unmount and run xfs_repair [ 2036.444323][T19956] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2036.444863][T19947] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2036.473299][T19956] 00000000: 58 46 53 42 00 00 10 00 00 00 00 0d 00 00 10 00 XFSB............ [ 2036.487401][T19947] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2036.502564][T19956] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2036.516358][T19947] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2036.536770][T19956] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2036.564585][T19947] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2036.574995][T19956] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2036.584198][T19947] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2036.593918][T19956] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 10:28:17 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000089070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:17 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x7}}, 0x20) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x54000, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000100)) ioctl$TCGETS(r1, 0x5401, &(0x7f00000000c0)) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x6, 0x4) 10:28:17 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000840)='/dev/hwrng\x00', 0x200000, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x400000, 0x0) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000880)={0x3ff, 0x2}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2036.608475][T19947] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2036.640508][T19947] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2036.666864][T19956] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2036.685280][T19956] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2036.694909][T19956] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2036.715857][T19956] XFS (loop3): SB validate failed with error -117. [ 2036.717038][T19947] XFS (loop5): SB validate failed with error -117. [ 2036.778078][T10476] XFS (loop4): SB sanity check failed [ 2036.786337][T10476] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2036.802193][T10476] XFS (loop4): Unmount and run xfs_repair [ 2036.807910][T10476] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2036.816953][T10476] 00000000: 58 46 53 42 00 00 10 00 00 00 89 07 01 00 10 00 XFSB............ [ 2036.828803][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2036.839006][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2036.848371][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2036.857342][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2036.866283][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2036.875220][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2036.884123][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2036.894015][T20014] XFS (loop4): SB validate failed with error -117. 10:28:18 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000001ec000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:18 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x2, 0x1) ioctl$TIOCSTI(r0, 0x5412, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000200)='./file0\x00', 0x0, 0x8}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) 10:28:18 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0xfffffffffffff997, @remote, 0x2}}}, 0x48) 10:28:18 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat6\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000200)=0x101) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x4c}}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000002c0)={0x1bc, 0x200, 0x0, 0x0, 0x6}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 10:28:18 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000e0000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:18 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x800, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xe) r1 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) fremovexattr(r1, &(0x7f0000000300)=@random={'security.', 'wlan0wlan0\x00'}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x401, 0x1, 0x7fffffff, 0xc5b, 0xfffffffffffffffc}, 0xc) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x2, 0x2}, {0x9, 0x60}]}, 0x14, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000001c0)=0xff, r2, 0x0, 0x0, 0x1}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000140)={0x12, 0xdf87, 0x2f, &(0x7f0000000100)="d080f415e2a02b6a01afaf93c0ab880641042cadade4f403cea330fd2c026a443657339257b30ba09ada88dc6941e0"}) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0xffffffff80000001) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:18 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000008a070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:18 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200200) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000080)=0x4) open$dir(&(0x7f0000000000)='./file0\x00', 0x80040, 0x120) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x1605}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) [ 2037.346781][T20046] XFS (loop5): SB sanity check failed [ 2037.355376][T20046] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2037.380207][T20046] XFS (loop5): Unmount and run xfs_repair [ 2037.387520][T20046] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2037.395635][T20046] 00000000: 58 46 53 42 00 00 10 00 00 01 ec 00 00 00 10 00 XFSB............ [ 2037.405141][T20046] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2037.414704][T20046] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 10:28:18 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x81, 0x8000) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000040)={0x40, 0x5}) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) [ 2037.446662][T20046] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 10:28:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xfffffffffffffffe, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x40a000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) sendto$packet(r2, &(0x7f0000000200)="3d2d9fc1aed2a4aa9363d01de896ef5db434b6c090ae1a31cba059ddbdef4f0bd49729ff41e0e7cd216dba4c8d34308fbd1af118f45da658893e51426e8dc3808e391f92f78186151f83b922bc598e1cfd8d07fc715530ea38a6bad7f4546976d70ddafd991916d1d2add972210a9b171f4e778e49ba3e81bcf880a75a2f44c46576c998d0f95404bd913dbc802f25fe918baabe436ab1dc72e87557a6784794dbda2df67f2b4ec69396db82d2189d1c5bc26afe9c", 0xb5, 0x11, &(0x7f00000003c0)={0x11, 0x4, r3, 0x1, 0x9, 0x6, @random="0fe10a279f15"}, 0x14) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x8000002) 10:28:18 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x2, 0xc0000) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000002c0)={0x9, [0xf1, 0x8001, 0x1, 0x81, 0x0, 0xa24, 0xd01b, 0x6, 0x8]}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000100)={0x3, [0xff, 0x20, 0x7]}, &(0x7f0000000140)=0xa) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000240)={0x1000, 0x1ff, 0x6, 0x7fffffff}, 0x6) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x20000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0xae48, 0x1f, 0x4, 'queue1\x00', 0x2}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2037.509650][ T1231] XFS (loop3): SB sanity check failed [ 2037.542520][ T1231] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2037.572303][T20046] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2037.582906][T20066] XFS (loop4): SB sanity check failed [ 2037.595468][T20066] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2037.633635][ T1231] XFS (loop3): Unmount and run xfs_repair [ 2037.646382][T20066] XFS (loop4): Unmount and run xfs_repair [ 2037.652718][T20046] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2037.659284][ T1231] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2037.680033][ T1231] 00000000: 58 46 53 42 00 00 10 00 00 00 00 0e 00 00 10 00 XFSB............ [ 2037.689077][T20066] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2037.698723][T20046] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2037.708213][T20066] 00000000: 58 46 53 42 00 00 10 00 00 00 8a 07 01 00 10 00 XFSB............ [ 2037.718630][ T1231] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2037.728037][T20046] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2037.734657][T20066] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2037.749854][T20046] XFS (loop5): SB validate failed with error -117. [ 2037.757155][ T1231] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2037.772003][ T1231] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2037.785938][T20066] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2037.795547][ T1231] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2037.805160][T20066] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2037.814387][ T1231] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2037.823475][T20066] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2037.832516][ T1231] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2037.841548][T20066] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2037.850606][ T1231] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2037.850705][T20072] XFS (loop3): SB validate failed with error -117. [ 2037.866385][T20066] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2037.876511][T20066] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2037.886337][T20066] XFS (loop4): SB validate failed with error -117. [ 2037.966694][ T1231] XFS (loop5): SB sanity check failed [ 2037.972383][ T1231] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2037.984587][ T1231] XFS (loop5): Unmount and run xfs_repair [ 2037.990405][ T1231] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2037.997785][ T1231] 00000000: 58 46 53 42 00 00 10 00 00 01 ec 00 00 00 10 00 XFSB............ [ 2038.006717][ T1231] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2038.015621][ T1231] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2038.024528][ T1231] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2038.033443][ T1231] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2038.042357][ T1231] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2038.051385][ T1231] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2038.060380][ T1231] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2038.069291][T20122] XFS (loop5): SB validate failed with error -117. 10:28:19 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000003ec000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:19 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x6, 0x1, 0x4, 0x7bf2c5e47b034b6, {}, {0x3, 0xc, 0x6, 0xeac, 0x9, 0x9, "cfba007d"}, 0x7, 0x2, @planes=&(0x7f0000000000)={0x286, 0x0, @mem_offset=0x3, 0x7f}, 0x4}) socketpair$unix(0x1, 0x1000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) 10:28:19 executing program 1: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560284470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0xfffffddc, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0xe) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:19 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000140000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:19 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000008b070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000093f}}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffff9c, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=""/181, 0xb5, 0xffffffffffffffff}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x1f) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005400)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000005600)={&(0x7f00000053c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000055c0)={&(0x7f0000005440)={0x150, r3, 0x10a, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffff7}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x26fc}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5e}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x91}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9526}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d01}]}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r1, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x8000000000000000, 0x3ff, @remote, 0x2}, 0xffffffffffffffff, 0x4}}, 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0xfffffffffffffffd) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0, 0x9}]}) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000180)={'gre0\x00', 0x100000001}) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000140)={0x6}) 10:28:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x10) [ 2038.514845][T20160] XFS (loop3): SB sanity check failed [ 2038.529256][T20159] XFS (loop5): SB sanity check failed [ 2038.535098][T20160] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2038.535110][T20160] XFS (loop3): Unmount and run xfs_repair [ 2038.535122][T20160] XFS (loop3): First 128 bytes of corrupted metadata buffer: 10:28:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="0012385831bffc0fc2ea0023afb593e84bd429b66296b0ccd2c1d571fb807f53ba345dc2c5d2dda84461097a1fd9253d4fbf50f11672101ef4920ccceaecc7e6e65783b234682c4b7e84e04ad973681ff53c6cfe33c989057002f94a4830f94cfdaf326e4cd63686927d1b650bfc53fd23cace6b28bb7e2657e04828306167f4cd31cb837a73f9e569ff9dd89e1a13a4ddfb6a0e810b6cc2bde27d5cf3474bb0ecd16d37edbaf030af16f48f42ba7e68958a", 0xb2}], 0x1, 0x2) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x400000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x6, @remote, 0x2}}}, 0x48) exit(0x8000) [ 2038.535139][T20160] 00000000: 58 46 53 42 00 00 10 00 00 00 00 14 00 00 10 00 XFSB............ [ 2038.535154][T20160] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2038.535167][T20160] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2038.535181][T20160] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2038.535193][T20160] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2038.535207][T20160] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2038.535219][T20160] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2038.535233][T20160] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2038.535267][T20160] XFS (loop3): SB validate failed with error -117. [ 2038.593369][T10476] XFS (loop4): SB sanity check failed [ 2038.641549][T10476] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2038.662491][T10476] XFS (loop4): Unmount and run xfs_repair [ 2038.669452][T10476] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2038.677173][T10476] 00000000: 58 46 53 42 00 00 10 00 00 00 8b 07 01 00 10 00 XFSB............ [ 2038.686584][T20159] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2038.698693][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fe) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000080)={0x1, r0, 0x1}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) [ 2038.707787][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2038.716740][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2038.726051][T20159] XFS (loop5): Unmount and run xfs_repair [ 2038.732103][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2038.737311][T20159] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2038.741569][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2038.749278][T20159] 00000000: 58 46 53 42 00 00 10 00 00 03 ec 00 00 00 10 00 XFSB............ [ 2038.757598][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2038.757611][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2038.757683][T20155] XFS (loop4): SB validate failed with error -117. [ 2038.775741][T20159] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2038.796106][T20159] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2038.819253][T20159] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2038.828389][T20159] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2038.841944][T20159] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2038.853111][T20159] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2038.864028][T20159] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2038.875635][T20159] XFS (loop5): SB validate failed with error -117. 10:28:20 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000180000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:20 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000008c070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x400000, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000200)={0x0, 0x5, 0x100000000, &(0x7f00000001c0)=0xf89d}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x113, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), r2, 0x40}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x100000184, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:20 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000c0ed000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x100) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fd) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x1, 0x6, [@local, @remote, @broadcast, @random="1d9bd4047f2b", @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}]}) 10:28:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2039.317297][T20221] XFS (loop3): SB sanity check failed [ 2039.327152][T20238] XFS (loop5): SB sanity check failed [ 2039.327425][T20221] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2039.346557][T20238] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2039.359609][T20221] XFS (loop3): Unmount and run xfs_repair 10:28:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) [ 2039.367783][T20221] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2039.375998][T20221] 00000000: 58 46 53 42 00 00 10 00 00 00 00 18 00 00 10 00 XFSB............ [ 2039.385418][T20221] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2039.438949][T20221] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2039.460301][T20238] XFS (loop5): Unmount and run xfs_repair [ 2039.480277][T20238] XFS (loop5): First 128 bytes of corrupted metadata buffer: 10:28:20 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x7, 0x1a, 0x1, "743009b422af92f78283a3840dba63694d98c65836fd35aa70c4964cef6eba8d7d5259546f5e3e2217999be55f86ad9f413ffcc5058e65c5bfdff1992b91a6d2", "718d7c775d12f03d94a101bfafd8a9f4db6c6af580525763d3b4783716c347f0", [0x1, 0x7]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000640)={0x3, 0x22a, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0xfffffffffffffffe, 0x3ff, @remote, 0x8}}}, 0x48) [ 2039.488321][T20251] XFS (loop4): SB sanity check failed [ 2039.494823][T20251] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2039.506973][T20238] 00000000: 58 46 53 42 00 00 10 00 00 c0 ed 00 00 00 10 00 XFSB............ [ 2039.528117][T20221] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 10:28:20 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x80001) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000080)={r1, 0x4}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xfffffffffffffffc, @loopback, 0x200000000}, {0xa, 0x2, 0x3ff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}, 0xffffffffffffffff, 0xfffffffffffffffc}}, 0x48) [ 2039.551289][T20238] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2039.577364][T20251] XFS (loop4): Unmount and run xfs_repair [ 2039.592012][T20221] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2039.635766][T20251] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2039.650312][T20238] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2039.669604][T20221] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2039.687671][T20251] 00000000: 58 46 53 42 00 00 10 00 00 00 8c 07 01 00 10 00 XFSB............ [ 2039.700214][T20221] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2039.702879][T20251] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2039.710724][T20238] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2039.718744][T20251] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2039.733224][T20221] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2039.756449][T20221] XFS (loop3): SB validate failed with error -117. [ 2039.767998][T20238] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2039.777839][T20251] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 10:28:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x8, 0x4000) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x101602, 0x24) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000200)={'nat\x00', 0x0, 0x3, 0x73, [], 0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)=""/115}, &(0x7f0000000000)=0x78) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:20 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) 10:28:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x882, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000200)=r3) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) lsetxattr$trusted_overlay_opaque(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x1) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)=0xfffffffffffffffa) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) fadvise64(r0, 0x0, 0x66a, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r4}}, 0xc) [ 2039.779833][T20238] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2039.805552][T20251] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2039.816371][T20238] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2039.817435][T20251] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2039.828029][T20238] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2039.834713][T20251] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2039.852739][T20238] XFS (loop5): SB validate failed with error -117. [ 2039.852940][T20251] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2039.859545][T20251] XFS (loop4): SB validate failed with error -117. [ 2039.997447][T20307] QAT: Invalid ioctl [ 2040.009794][T20318] QAT: Invalid ioctl [ 2040.042610][T20238] XFS (loop5): SB sanity check failed 10:28:21 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000001b0000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2040.065799][T20238] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2040.078256][T20238] XFS (loop5): Unmount and run xfs_repair [ 2040.096149][T20238] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2040.103973][T20238] 00000000: 58 46 53 42 00 00 10 00 00 c0 ed 00 00 00 10 00 XFSB............ [ 2040.143394][T20238] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:21 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000008d070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) syz_execute_func(&(0x7f0000000000)="f340ad8f68789e64780c0ec4a145603fc441cdc2120ec481d77c695241ab410ffcfec40111f8820000000040f679f66436410fde9014000000") write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) [ 2040.186351][T20238] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2040.197597][T20238] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2040.247479][T20238] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2040.258609][T20238] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2040.268420][T20238] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2040.278095][T20238] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2040.287424][T20238] XFS (loop5): SB validate failed with error -117. 10:28:21 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000003f0000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:21 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockname$ax25(r0, &(0x7f00000000c0)={{0x3, @bcast}, [@netrom, @default, @bcast, @null, @bcast, @remote, @netrom, @netrom]}, &(0x7f0000000140)=0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="bfc7771ff4195beba327b09686954d7fa48f3b9d5613aa3b5349957d6c7c1a15d31a5614e1dd9c71a02d5b3734e0261606c83ac3b97ffbb7f985604ec7f5755a278ecc27fb03fc52462ef8b91f1d81", 0x4f}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'veth0\x00', 0x2000}) accept4(r0, &(0x7f0000000140)=@x25, &(0x7f00000000c0)=0x80, 0x800) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x1) 10:28:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000040)) [ 2040.455035][T20335] XFS (loop4): SB sanity check failed [ 2040.466854][T20335] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2040.481672][T17057] XFS (loop3): SB sanity check failed [ 2040.492401][T17057] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:21 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2040.514509][T20335] XFS (loop4): Unmount and run xfs_repair 10:28:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = getpgrp(0xffffffffffffffff) migrate_pages(r1, 0x9, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x984) [ 2040.583830][T17057] XFS (loop3): Unmount and run xfs_repair [ 2040.599700][T20335] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2040.617390][T17057] XFS (loop3): First 128 bytes of corrupted metadata buffer: 10:28:21 executing program 2: r0 = accept4$alg(0xffffffffffffff9c, 0x0, 0x0, 0x80000) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:checkpolicy_exec_t:s0\x00', 0x28, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) [ 2040.664861][T17057] 00000000: 58 46 53 42 00 00 10 00 00 00 00 1b 00 00 10 00 XFSB............ [ 2040.674033][T20335] 00000000: 58 46 53 42 00 00 10 00 00 00 8d 07 01 00 10 00 XFSB............ [ 2040.674046][T20335] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2040.674058][T20335] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2040.674075][T20335] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 10:28:21 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0xeb3f5fec69ff0d2e}}, 0x12) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2040.765562][T20372] XFS (loop5): SB sanity check failed [ 2040.781872][T17057] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2040.798535][T20372] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2040.829337][T17057] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2040.835574][T20335] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2040.858497][T17057] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2040.869747][T20372] XFS (loop5): Unmount and run xfs_repair 10:28:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000100)=""/220) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v1={0x1000000, [{0x7, 0x8}]}, 0xc, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r2 = openat(r1, &(0x7f0000000200)='./file0\x00', 0x181480, 0x4) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000240)) [ 2040.876245][T17057] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2040.876255][T20335] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2040.876271][T20335] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2040.885842][T20372] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2040.903828][T17057] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2040.927873][T17057] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2040.949150][T20372] 00000000: 58 46 53 42 00 00 10 00 00 03 f0 00 00 00 10 00 XFSB............ [ 2040.949566][T20335] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2040.959706][T17057] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2040.991958][T20372] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2041.001540][T20327] XFS (loop3): SB validate failed with error -117. [ 2041.018159][T20335] XFS (loop4): SB validate failed with error -117. [ 2041.019139][T20372] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2041.040325][T20372] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2041.084321][T20372] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2041.098513][T20372] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2041.109604][T20372] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2041.129080][T20372] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2041.153233][T20372] XFS (loop5): SB validate failed with error -117. 10:28:22 executing program 0: socket$inet_dccp(0x2, 0x6, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0xffffffc9, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x7}, {0xa, 0x1, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:22 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000008e070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080)=0x92, 0x4) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) 10:28:22 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000003fc000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:22 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000040)={0x5, 0x3ff}) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) 10:28:22 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000230000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:22 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7f, 0x82000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x12, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x1000}}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x71b, @loopback}, {0xa, 0x4e21, 0x100000003ff, @remote}, r1, 0x4}}, 0x30c) 10:28:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x200, 0x404000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000280)={0xd, @raw_data="b881451311596c34aef23f5192ee8e869b25eea5893e5bb0772d8c18cd7fff874c848235ae46c700b7de9e4becf7aab111e2eddefcdd090aaa6047adba0be46dc9a0e5b95a9027903d1e09b4e343abef1c48f7d1ba1075eae49c25026a06a8a01e3b55fd7053702ccd949870881ca96f45466031d502b23cba7adeec91464db51f0ac084a0edcbf33a08adcfdbe0dbef8034fb561e1992a3cecc27f5b1e0e2e5a25f5435c9f2f7e439f1d926ea81fa605de43a9b946c215761421af73a6670967bbdd79dfc28c862"}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x5) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) r3 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x2, 0x2) bind$isdn_base(r3, &(0x7f0000000240)={0x22, 0x6, 0xe0, 0x9, 0xffff}, 0x6) fanotify_mark(r3, 0x10, 0x8, r3, &(0x7f0000000200)='./file0\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000000c0)) [ 2041.467450][T20430] XFS (loop4): SB sanity check failed [ 2041.490967][T20430] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) setsockopt$inet6_int(r1, 0x29, 0xc9, &(0x7f0000000000)=0x2, 0x3) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) [ 2041.545229][T20430] XFS (loop4): Unmount and run xfs_repair [ 2041.580378][T20430] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2041.624785][T20430] 00000000: 58 46 53 42 00 00 10 00 00 00 8e 07 01 00 10 00 XFSB............ [ 2041.662605][T10476] XFS (loop3): SB sanity check failed 10:28:22 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:22 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x20000, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0x10000, 0x9, 0x3, 0xffffffffffff1759, 0x2, 0x80000001, 0x101, 0x7fffffff, 0x8, 0x7, 0x8, 0x9, 0x7fffffff, 0x8, 0x3, 0x400, 0x0, 0x2, 0xfc3, 0x4, 0x20, 0x0, 0x1, 0x1, 0x8, 0x571e, 0x3, 0x9, 0x718, 0x7, 0x8, 0x6]}) setsockopt(r1, 0x0, 0x4, &(0x7f00000002c0)="94fe5b211905553c6a8c7fa4106210d1af5dc60ca68db2411c827668cf55078ac5c26b87700b43db20d0d54b15cf7ad2bb3c171d055f014e43110b08d3203d16511f626e620592e97ad084b97a5fd26474067830d50eb5bed0e207ea1085b64e9cb567ee51d4639b805d590a6aa59a2a5949ad6d0d29aa23d8b7cfb16ea08b31062577ba547c77198ce2aaeade70c8dbc2d6e7ca6f86d213c6d6f83a2cd04657ac99353714e15c029c44fe0bb0c852e0", 0xb0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4600000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c000000190014012df2d48d5492f0a209801403fe02ff030024000070000800582adab736dcace5cbfa432b14756fb0f8e0e4711971622fd37598d995dd4934739a1e1109b5bbbeaccdc8c00578f9b382635c74ba26b757b0350eeb94684b734d6bf65b9f31362029468200650e621dfbfbfcc67a5080e326eca6b776fc5f2d9fce2e589fe06bac27d618d0"], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) [ 2041.669107][T10476] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2041.686969][T20430] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2041.707331][T20430] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2041.736906][T20430] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2041.764033][T20466] XFS (loop5): SB sanity check failed [ 2041.766562][T20430] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2041.769600][T20466] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2041.801061][T10476] XFS (loop3): Unmount and run xfs_repair [ 2041.817722][T20430] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2041.823488][T10476] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2041.853027][T10476] 00000000: 58 46 53 42 00 00 10 00 00 00 00 23 00 00 10 00 XFSB.......#.... [ 2041.855649][T20430] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2041.862547][T20466] XFS (loop5): Unmount and run xfs_repair [ 2041.877234][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2041.886727][T20466] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2041.889532][T20430] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 10:28:23 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='tGTJ', @ANYRES16=r2, @ANYBLOB="000427bd7000ffdbdf250b000000080006007c1a000008000600000800000800050006000000080005000800000014000300080007004e23000008000500000000810800060001010000240001000800080062f3ffff080009003d000000080001000a0000000800060072720000"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000340)={r3}) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0xec, r2, 0x37, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9c0}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7b}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x44800) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2041.909032][T20466] 00000000: 58 46 53 42 00 00 10 00 00 03 fc 00 00 00 10 00 XFSB............ [ 2041.919730][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2041.945433][T20466] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x40000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) [ 2041.956781][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2041.959928][T20430] XFS (loop4): SB validate failed with error -117. [ 2041.983316][T20466] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2041.994086][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2042.016451][T20466] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2042.030849][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2042.047254][T20466] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2042.056624][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2042.066440][T20466] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2042.076419][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2042.085794][T20466] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2042.104297][T20450] XFS (loop3): SB validate failed with error -117. [ 2042.135716][T20466] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2042.151895][T20466] XFS (loop5): SB validate failed with error -117. 10:28:23 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000008f070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:23 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x3, 0xfa00, {0x0, 0x0, 0x40000000013f, 0x1007}}, 0xfffffffffffffc4f) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x500) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x10801, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:23 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000fff000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000240)='\xc8\xa8ptp'}, 0xfffffc36) r1 = memfd_create(&(0x7f0000000140)='\xc8\xa8ptp', 0x0) pwritev(r1, &(0x7f0000000340), 0x1a9, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x11) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:23 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000340000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup(r0) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) fsync(r4) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000080)={0x1, 0x20}, 0x2) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) 10:28:23 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000040)) [ 2042.549223][T20539] QAT: Invalid ioctl [ 2042.568285][T20544] QAT: Invalid ioctl 10:28:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup2(r1, r0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d4, 0x0) 10:28:23 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}, r1}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000180)={{0x2, 0x4e20, @remote}, {0x1}, 0x14, {0x2, 0x4e23, @multicast2}, 'veth0_to_hsr\x00'}) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) [ 2042.714243][T20531] XFS (loop4): SB sanity check failed [ 2042.719701][T20531] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2042.744431][T20538] XFS (loop5): SB sanity check failed [ 2042.749939][T20538] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2042.791961][T20538] XFS (loop5): Unmount and run xfs_repair [ 2042.797963][T20538] XFS (loop5): First 128 bytes of corrupted metadata buffer: 10:28:23 executing program 2: socketpair$unix(0x1, 0x10001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='irlan0\x00'}, 0x30) openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x80, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x40200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) setsockopt(r0, 0x20, 0x0, &(0x7f00000001c0)="aa20174c5150874440360f8b155362e2c9e08cde4a2783dc6ce8ad99156eef462c3dde0397447318e4a3414b8ce28f7e2f526462fd072ed444ae171b79da42216f484710784fd7a5f5d9b613e40dd25490e64d702866f482e7e093df0fe51f9a98054f266ebbc1d4b3c9142607f19999f5a41e1337ecbc533df9236a94fb29a4d1c9e6ed89e963198b90ea44232690f8f2f2fc87f12fe1c5fcbfef35590fd3359eb8879747af7cc5c850974e59bdc5b25577c5bcae80a63b5a7dc1dd", 0xbc) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) [ 2042.832855][T20538] 00000000: 58 46 53 42 00 00 10 00 00 0f ff 00 00 00 10 00 XFSB............ [ 2042.843360][T20531] XFS (loop4): Unmount and run xfs_repair [ 2042.858731][T20531] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2042.867683][T20538] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x402200, 0x0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000100)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x4000000000000000, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000040)) [ 2042.899874][T20538] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2042.912434][ T1231] XFS (loop3): SB sanity check failed [ 2042.919026][ T1231] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2042.935219][T20531] 00000000: 58 46 53 42 00 00 10 00 00 00 8f 07 01 00 10 00 XFSB............ [ 2042.948151][T20538] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2042.958718][ T1231] XFS (loop3): Unmount and run xfs_repair [ 2042.967376][T20531] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2042.978164][T20538] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2042.987483][ T1231] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2043.003964][T20531] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2043.020805][ T1231] 00000000: 58 46 53 42 00 00 10 00 00 00 00 34 00 00 10 00 XFSB.......4.... [ 2043.030402][T20538] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2043.044159][ T1231] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2043.054843][T20538] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2043.064162][T20531] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2043.073528][ T1231] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2043.082898][T20538] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2043.092324][T20531] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2043.101870][ T1231] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2043.111375][T20538] XFS (loop5): SB validate failed with error -117. [ 2043.119353][T20531] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2043.128903][ T1231] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2043.138444][ T1231] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 10:28:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) io_setup(0x851, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0xfffffffffffffe53) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2043.148264][T20531] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2043.157797][ T1231] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2043.167518][T20531] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2043.177602][ T1231] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2043.187188][T20561] XFS (loop3): SB validate failed with error -117. [ 2043.195220][T20531] XFS (loop4): SB validate failed with error -117. 10:28:24 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000090070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:24 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x386) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000080)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000200)="805e30936ad12ee49078af6b6a3b7ef4ae19572eade7929f3216220655fbe1e94d36570a71b197cad150f94fe2008d16bca63a4113067b03eed31b8ca43f136dafe529c41c2c316334c16b0be1336df48597adb4d3fc0766c20e4802cfde61e72a662eb72982c56e7841887be7204fb0d591947f59386d9e6bbf6beeb876030a8445a3271fb3114f7581c8d9a29e0c9784541e0f38f04d9b7620308f03b24f8d891884c04662238727922099458af51e55c012bef4273ff3afecc1084f0dcc8c85d3c16016565ef8465f30da9532be2aa3b174f2a49a4bac", 0xd8}, {&(0x7f0000000000)="b5d522b68592a4e82198ca1cc24d7a7a80e1fdc8", 0x14}, {&(0x7f0000000300)="1f6736f31de2e766ea2031363fb8e033be5341e8a89223846171d0fbf7e5e2c8fece86a14751add62d3500442abf4eb948392b732897b2fe3b31843f50a2cf6b99ebb9025a02a9c010caa006cbcc6c8f76d0f0e91e03bfa189f89d552f347f399a18af54cd8dc9a85aed7a60f7a2b08e422a40ca8eff4d7266d29147ffcaa99c6757324be3d02167f2b3064ba13b7038b70ab40f7122ae36e00b155b32ad2b9b92f577a7f75286850dde2c0580d67810326837bccdba8424b945fef3f87ccb681b1b04b97a072a68deac7bd4092570ba2210c522fc84a2c7073ae2912f3bd5cce33ab0edfc53d2fd7215e867874e11f121", 0xf1}, {&(0x7f0000000400)="1c328c0331249bf4bc4e8ae1ca56dc5a9ed08c62a081717b96bd8b6c045754f3475bdc0ad17f1b5bda1181c620483ca50134230ec9849760f3e9d7de50f0fd686743109d0c8745d479c877d65090e8a738f1e7494d95ef4af2a5199527476b5f3db5806b9ead97cf34a2b621a9f422aba4a4531c3bf831402eb092afcc04eadd385d067914c429f854a6bc07bdef12d36ac0167078bbce72", 0x98}, {&(0x7f0000000140)}, {&(0x7f00000004c0)="08c916b4211bb7d5b394615ee1aa7aca1130125ff5cac2854a29c9e1925560af22a80a2c13f291ef1299fa056e25c406653f228fc9cc26882460da23e3f91f459dca28f349b2e4c6cdcb85dfb605397c4833c167440eb5c0b1e69cb38178f303edc23d71d59ad615b3f4ff0ba32f01598ea6339352bd9234d6ea8246660fa110b9ffe1c662acfbe60c6699ec7d9e2af97f94e7f6479e12208de8e85fe54327369f9a9d489354e95eb7558b979b4cd1f48a4814d6952552e1a9fb590c6d60f7e95b046a866b62c92f92b730409739fd5e3a8942251c6a8bd0e3", 0xd9}], 0x6, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], 0x1258}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0xfc, 0x8000) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000018c0)=0x1f) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) 10:28:24 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000360000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:24 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000003207010000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x88480, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000100)={0x18, 0xf, 0x1, {{0xb8, 0x4, 0x6}, 0x4c90}}, 0x18) r2 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000040)={0x100000000, 0x80000001}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000000)={@ipv4={[], [], @remote}, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000300)={@remote, @loopback, @remote, 0x0, 0x2cb0c381, 0xd628, 0x100, 0x2, 0x400000, r3}) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f00000001c0)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e24, @rand_addr=0x5}, {0x2, 0x4e23, @remote}, 0x8, 0x0, 0x0, 0x0, 0x9ac, &(0x7f0000000080)='veth0_to_bridge\x00', 0x32, 0x100000001, 0x4}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000180), 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2043.539490][T20627] QAT: Invalid ioctl 10:28:24 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f00000005c0)=[0xee01]) fstat(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000740)={{}, {}, [{0x2, 0x3, r1}, {0x2, 0x5, r2}, {0x2, 0x0, r3}, {0x2, 0x4, r4}, {0x2, 0x5, r5}], {}, [{0x8, 0x7, r6}, {0x8, 0x7, r7}, {0x8, 0x1, r8}], {0x10, 0x3}, {0x20, 0x2}}, 0x64, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @mcast2}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x402000, 0x0) [ 2043.609037][T20627] QAT: Invalid ioctl 10:28:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) 10:28:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x40) r1 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x101000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x4, 0xeb5, 0x9, 0x0, 0x1}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x200000, 0x8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10000, 0x40) renameat(r2, &(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000180)='./file0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000240), &(0x7f00000002c0)=0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x1002}, r4}}, 0x48) [ 2043.729053][T20626] XFS (loop3): SB sanity check failed [ 2043.744659][T20626] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2043.757533][T20624] XFS (loop5): SB sanity check failed [ 2043.763814][T20632] XFS (loop4): SB sanity check failed [ 2043.776477][T20624] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2043.790106][T20632] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2043.800433][T20626] XFS (loop3): Unmount and run xfs_repair [ 2043.822447][T20626] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2043.823089][T20632] XFS (loop4): Unmount and run xfs_repair [ 2043.850681][T20626] 00000000: 58 46 53 42 00 00 10 00 00 00 00 36 00 00 10 00 XFSB.......6.... [ 2043.861308][T20624] XFS (loop5): Unmount and run xfs_repair [ 2043.870172][T20632] XFS (loop4): First 128 bytes of corrupted metadata buffer: 10:28:25 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x408000, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x6) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2043.890870][T20624] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2043.899533][T20632] 00000000: 58 46 53 42 00 00 10 00 00 00 90 07 01 00 10 00 XFSB............ [ 2043.910043][T20626] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2043.928203][T20624] 00000000: 58 46 53 42 00 00 10 00 00 32 07 01 00 00 10 00 XFSB.....2...... [ 2043.966707][T20626] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2043.986876][T20632] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2043.996075][T20624] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2044.000566][T20626] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 10:28:25 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}, 0x48) 10:28:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xf5, 0x9, &(0x7f0000000200)="fa67c2c40437c9ecf79d486fc83d2d886c4e5042a1e13cd7026b34df282631acdc5905e979b2ab126d552858b360943fea9c64dc1bfcc25d26fb129bb40c978395b432c388125d3b91395500c562dc0eb5d1cd6ccfda8f20e9635e26f9f2b032db7430e11b65feefbcccec8a1489846e6ba67ce0c95c04249b60b6770e9886d3973afc1db9e4acafaed55fbaf8080d58eadf4db1e941080f08d647092388edd3bc3d40662e52b4755af8ce099916f1ca31fbf91499d9614b7c0828108f71fdaa64b92ac7ff96034b9d3fc8800e93c7aca0ff4ccb8b29b20d74df9482d3af0e7cec12ebf511ce9c902c518c38c3a09caab36c236479", &(0x7f0000000080)=""/9, 0x10001}, 0x28) fchmod(r1, 0x18a) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) signalfd4(r0, &(0x7f0000000040)={0x6}, 0x8, 0x0) [ 2044.013651][T20624] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2044.031246][T20632] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2044.060214][T20624] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2044.074980][T20626] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2044.102026][T20626] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2044.102479][T20632] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2044.111364][T20624] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2044.134198][T20626] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2044.144090][T20626] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2044.144272][T20632] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2044.153410][T20624] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2044.171490][T20626] XFS (loop3): SB validate failed with error -117. [ 2044.178356][T20624] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2044.195878][T20624] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2044.196620][T20632] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2044.216444][T20624] XFS (loop5): SB validate failed with error -117. [ 2044.230492][T20632] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2044.242233][T20632] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2044.251380][T20632] XFS (loop4): SB validate failed with error -117. 10:28:25 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000091070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:25 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x44000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000040)=0xcb, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2801, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) 10:28:25 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:25 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000380000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:25 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000003307010000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:25 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:25 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2044.623039][T20715] XFS (loop5): SB sanity check failed [ 2044.638500][T20715] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2044.666433][T20715] XFS (loop5): Unmount and run xfs_repair 10:28:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'irlan\xd1\x90\x85i%\xcb\xbeO\x19\xb33', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0xfffffffffffffffe) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080), r3, 0x0, 0x2, 0x4}}, 0x20) [ 2044.715550][T20715] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2044.735714][T20727] XFS (loop3): SB sanity check failed [ 2044.741457][T20727] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2044.772326][T20738] XFS (loop4): SB sanity check failed [ 2044.791605][T20738] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2044.800088][T20715] 00000000: 58 46 53 42 00 00 10 00 00 33 07 01 00 00 10 00 XFSB.....3...... 10:28:25 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4002, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffd22, 0xfa00, {0x3, 0x0, 0x40000200013f, 0x1}}, 0xffffff28) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2044.819798][T20727] XFS (loop3): Unmount and run xfs_repair [ 2044.830606][T20715] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2044.845162][T20727] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2044.849637][T20738] XFS (loop4): Unmount and run xfs_repair 10:28:25 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2044.864796][T20715] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2044.880237][T20738] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2044.881341][T20727] 00000000: 58 46 53 42 00 00 10 00 00 00 00 38 00 00 10 00 XFSB.......8.... 10:28:26 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x204000) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000140)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'irlan0\x00', 0x801}) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) r3 = getpgrp(0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x10000, 0x9, 0xfffffffffffff801, 0x4, 0x0, 0x27775ea8, 0x80000, 0x2, 0xab, 0x1, 0x5, 0x9, 0x504, 0x1ff, 0x9, 0x6, 0xe3, 0xffffffffffffffff, 0x0, 0x4, 0x7f, 0x6, 0xffffffffffff9943, 0x2d8, 0x2, 0x0, 0x4, 0x5, 0x7, 0x3, 0x4, 0x0, 0x80000000, 0x81, 0x8, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x1, 0x8}, 0x400, 0x0, 0xfff, 0xf, 0xe2bc, 0x2, 0x1}, r3, 0x0, 0xffffffffffffff9c, 0xb) [ 2044.921082][T20738] 00000000: 58 46 53 42 00 00 10 00 00 00 91 07 01 00 10 00 XFSB............ [ 2044.934727][T20715] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2044.944244][T20738] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2044.957787][T20727] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2044.978668][T20715] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2044.990243][T20727] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2045.006153][T20715] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2045.023338][T20738] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2045.027367][T20715] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2045.032564][T20727] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2045.058991][T20715] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2045.060076][T20738] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2045.070577][T20727] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2045.077397][T20715] XFS (loop5): SB validate failed with error -117. [ 2045.105411][T20727] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2045.115454][T20738] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2045.120621][T20727] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2045.133548][T20727] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2045.173000][T20727] XFS (loop3): SB validate failed with error -117. [ 2045.181909][T20738] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2045.210141][T20738] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2045.225920][T20738] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2045.235727][T20738] XFS (loop4): SB validate failed with error -117. [ 2045.358701][T20738] XFS (loop4): SB sanity check failed [ 2045.364415][T20738] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2045.376713][T20738] XFS (loop4): Unmount and run xfs_repair [ 2045.402601][T20738] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2045.416008][T20738] 00000000: 58 46 53 42 00 00 10 00 00 00 91 07 01 00 10 00 XFSB............ [ 2045.432635][T20738] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2045.447991][T20738] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2045.457483][T20738] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2045.471525][T20738] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2045.481098][T20738] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2045.490249][T20738] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2045.506571][T20738] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2045.518423][T20738] XFS (loop4): SB validate failed with error -117. 10:28:26 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000092070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0x100000001, "e5ebe44ad63a4db445aee799f64d7354bd7915fb40672adec71355d6a447c788", 0x1, 0x4, 0x45c0, 0x10, 0xa}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:26 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x86, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x13f, 0xb}}, 0x20) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000080)={0x4, 0x4, 0x6c, 0x7, 0x1d, 0xc226}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x7) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x3, 0x2, 0x2, 0x2}) 10:28:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) 10:28:26 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000003407010000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:26 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000480000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:26 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x101, 0x400000) ioctl$TCSBRKP(r1, 0x5425, 0x3ff) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) [ 2045.763001][T20813] XFS (loop3): SB sanity check failed [ 2045.773988][T20813] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2045.797344][T20813] XFS (loop3): Unmount and run xfs_repair [ 2045.804789][T20834] XFS (loop4): SB sanity check failed [ 2045.811991][T20834] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2045.812046][ T1231] XFS (loop5): SB sanity check failed [ 2045.824296][T20813] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2045.841370][T20834] XFS (loop4): Unmount and run xfs_repair [ 2045.851805][T20813] 00000000: 58 46 53 42 00 00 10 00 00 00 00 48 00 00 10 00 XFSB.......H.... [ 2045.873653][T20834] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2045.896095][T20834] 00000000: 58 46 53 42 00 00 10 00 00 00 92 07 01 00 10 00 XFSB............ [ 2045.903369][ T1231] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x199000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0x9, {{0x2, 0x4e24, @multicast1}}}, 0x88) sendto$ax25(r1, &(0x7f0000000040)="adafa50d7e", 0x5, 0x40000, &(0x7f0000000080)={{0x3, @null, 0x5}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) fcntl$getown(r0, 0x9) [ 2045.912454][T20813] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:27 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffffd6, 0xfa00, {0x2, 0x0, 0x13f}}, 0x16) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x13f}}, 0x20) [ 2045.949292][T20834] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2045.972022][T20813] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2045.983498][ T1231] XFS (loop5): Unmount and run xfs_repair [ 2045.987401][T20834] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 10:28:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x841, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x2, 'client0\x00', 0x1, "eb7cba42a8f8a39d", "2fdef9220ed639dcc34112a2ea4e15ba670b4c34ca5f9075f4f23919d396ed37", 0x5, 0x9}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) bind$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@random={'trusted.', '/dev/net/tun\x00'}, &(0x7f00000002c0)=""/4096, 0x1000) [ 2046.013737][ T1231] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2046.016633][T20813] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2046.038461][T20834] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2046.059795][ T1231] 00000000: 58 46 53 42 00 00 10 00 00 34 07 01 00 00 10 00 XFSB.....4...... [ 2046.062474][T20834] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2046.079277][T20813] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2046.089009][T20813] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2046.096068][ T1231] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2046.099416][T20834] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2046.107015][T20813] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2046.136401][T20834] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2046.148870][ T1231] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 10:28:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="023201de050000000000051500000000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000003c0), &(0x7f0000000400)=0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x106, 0x100b}}, 0x20) lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.upper\x00', &(0x7f0000000340)={0x0, 0xfb, 0x37, 0x1, 0xcb2, "e49f7b12e39f16b2a9a80e29021f6b69", "6bf3dcda81f1147f1d43f22589e22ddd5f323679496d192c4a5c6c7defe9ebbfb5d0"}, 0x37, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0xfffffffffffffd00, 0xfa00, {{0xa, 0x4e23, 0x40, @local, 0xbef}, {0xa, 0x4e23, 0x400, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffffffffffffe}, r2}}, 0x231) [ 2046.153428][T20834] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2046.179377][T20834] XFS (loop4): SB validate failed with error -117. [ 2046.182979][T20813] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2046.195553][ T1231] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2046.217382][ T1231] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2046.234917][T20813] XFS (loop3): SB validate failed with error -117. [ 2046.247441][ T1231] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2046.256716][ T1231] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2046.266161][ T1231] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2046.280879][T20816] XFS (loop5): SB validate failed with error -117. 10:28:27 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000200100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:27 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4e0400, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x3, 0xfa00, {0x7, 0x0, 0x40000000013f}}, 0xcc) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x0, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x5, 0x5, {"842d6267a4802f0bd282eeae823905a3"}, 0x9, 0x1, 0x8}}}, 0x90) ioctl$TUNSETOFFLOAD(r3, 0x400454d4, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x48c500, 0x0) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000380)) fsetxattr$security_smack_transmute(r0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x3) ioctl$SG_GET_LOW_DMA(r5, 0x227a, &(0x7f0000000200)) 10:28:27 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000004c0000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2046.494474][T20898] XFS (loop5): SB sanity check failed [ 2046.524097][T20898] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2046.563738][T20898] XFS (loop5): Unmount and run xfs_repair [ 2046.569704][T20898] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2046.578003][T20898] 00000000: 58 46 53 42 00 00 10 00 00 34 07 01 00 00 10 00 XFSB.....4...... [ 2046.587010][T20898] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2046.610149][T20898] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2046.661836][T20898] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2046.687921][T20898] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2046.725084][T20898] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2046.736894][T20898] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2046.737282][T20916] XFS (loop3): SB sanity check failed [ 2046.746190][T20898] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2046.752674][T20916] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2046.772600][T20916] XFS (loop3): Unmount and run xfs_repair [ 2046.778067][T20898] XFS (loop5): SB validate failed with error -117. [ 2046.778434][T20916] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2046.797197][T20916] 00000000: 58 46 53 42 00 00 10 00 00 00 00 4c 00 00 10 00 XFSB.......L.... [ 2046.816871][T20916] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2046.827003][T20916] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2046.836632][T20916] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2046.846329][T20916] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2046.855456][T20916] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2046.864631][T20916] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 10:28:27 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000003507010000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000340)={0x8f, 0x0, [0x2]}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 10:28:27 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) getpriority(0x3, r0) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000000c0)={@empty, @initdev}, &(0x7f0000000100)=0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f0000000240)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) flistxattr(r2, &(0x7f00000001c0)=""/71, 0x47) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x3) 10:28:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x2) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x42180, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) [ 2046.873895][T20916] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2046.883042][T20916] XFS (loop3): SB validate failed with error -117. [ 2046.890912][T20932] XFS (loop4): SB sanity check failed [ 2046.901348][T20932] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2046.922716][T20932] XFS (loop4): Unmount and run xfs_repair [ 2046.928653][T20932] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2046.938490][T20932] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 02 00 10 00 XFSB............ [ 2046.947589][T20932] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:28 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) write$UHID_INPUT(r1, &(0x7f00000006c0)={0x8, "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", 0x1000}, 0x1006) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000040)={0x1, 0x1, 'client0\x00', 0x4, "926eba597457b040", "1eea589c4b43fa219a724c0b81c5bfa04ce22c5488907a49c08dcb7534384ed2", 0x8, 0x1}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2046.984429][T20932] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2046.994831][T20932] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2047.004237][T20932] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2047.013420][T20932] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 10:28:28 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000600000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2047.093305][T20932] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2047.110087][T20932] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2047.119559][T20932] XFS (loop4): SB validate failed with error -117. 10:28:28 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, r2, 0xff}}, 0x48) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000002c0)=0xc) openat$cgroup_ro(r1, &(0x7f00000003c0)='cgroup.events\x00', 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f0000000300)={0x7c, 0x7d, 0x2, {{0x0, 0x5e, 0x3, 0x0, {0x22, 0x4, 0x7}, 0x84080000, 0x80, 0xf9a, 0xfffffffffffffffa, 0x9, '/dev/dsp\x00', 0x18, '/dev/infiniband/rdma_cm\x00', 0x2, ',^', 0x8, 'security'}, 0x9, '/dev/dsp\x00', r3, r4, r5}}, 0x7c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) syz_open_dev$radio(&(0x7f0000000400)='/dev/radio#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x8000) pwrite64(r2, &(0x7f00000001c0)="df27394c79e0af1dc5085ecdff42cd6f4c35adafdf011e7331b0b74d2d87644910e9860a28a17085f954a955b0da70fb7305a1048fdc3c32fce73b7cc08004d3f34df1b696e7f62230f8088b0bc0713b2344a80f77f57b752500316159f2fc77be5f0fdb2bd8049398a99230872ca614dc6df935c1c2f07c220143d211fa4c4e21e39768a16cd57f3e261ccd3ceb691107052f5020bdebc0e8d61067acf608f62d447f", 0xa3, 0x0) ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000180)=0xfffffffffffffff9) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000000)='bcsh0\x00'}) renameat2(r2, &(0x7f0000000280)='./file0\x00', r2, &(0x7f00000002c0)='./file0\x00', 0x2) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 10:28:28 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000030490200100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2047.316248][T20963] XFS (loop5): SB sanity check failed [ 2047.334124][T20963] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r0, 0x400, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) bind$packet(r3, &(0x7f0000000140)={0x11, 0x10, r4, 0x1, 0xfd7b, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) [ 2047.375992][T20963] XFS (loop5): Unmount and run xfs_repair [ 2047.390376][T20975] XFS (loop3): SB sanity check failed [ 2047.408149][T20975] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2047.420427][T20963] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2047.441681][T20963] 00000000: 58 46 53 42 00 00 10 00 00 35 07 01 00 00 10 00 XFSB.....5...... [ 2047.447434][T20975] XFS (loop3): Unmount and run xfs_repair [ 2047.450832][T20963] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2047.473995][T20975] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2047.474051][T20963] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2047.487650][T20975] 00000000: 58 46 53 42 00 00 10 00 00 00 00 60 00 00 10 00 XFSB.......`.... [ 2047.493654][T20963] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2047.546224][T20963] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2047.548890][T20975] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2047.627493][T20998] FAT-fs (loop1): bogus number of reserved sectors [ 2047.642441][T20963] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2047.659577][T20998] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2047.680690][T20963] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2047.688562][T20975] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2047.697508][T20963] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2047.707826][T20963] XFS (loop5): SB validate failed with error -117. [ 2047.717100][T21008] XFS (loop4): SB sanity check failed [ 2047.732841][T21008] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2047.759820][T20975] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2047.776415][T21008] XFS (loop4): Unmount and run xfs_repair 10:28:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xae) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x42800, 0x0) faccessat(r1, &(0x7f0000000080)='./file0\x00', 0x9a, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) [ 2047.799748][T20975] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2047.810478][T21008] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2047.836692][T20975] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 10:28:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/73) [ 2047.871410][T21008] 00000000: 58 46 53 42 00 00 10 00 00 00 30 49 02 00 10 00 XFSB......0I.... [ 2047.877070][T20975] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2047.892536][T21008] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2047.902603][T21008] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 10:28:29 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000003607010000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2047.939866][T21008] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2047.976136][T20975] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 10:28:29 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfec0) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x4}}, 0x10, 0x0}, 0x0) [ 2047.993552][T21008] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2048.002962][T21008] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2048.012861][T20975] XFS (loop3): SB validate failed with error -117. [ 2048.019866][T21008] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2048.061920][T21008] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2048.073231][T21008] XFS (loop4): SB validate failed with error -117. 10:28:29 executing program 0: syz_open_dev$usb(0x0, 0x0, 0x0) inotify_init1(0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) getuid() clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0xfec0) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x4}}, 0x10, 0x0}, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:28:29 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(r0, 0x11) kexec_load(0xb02fc301000000, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0), 0x2, 0xa4356000, 0x1000000}], 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)=0x6) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000a40)=""/130) r2 = syz_open_dev$dspn(0x0, 0x8, 0x0) syz_genetlink_get_family_id$tipc2(0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0xfff, &(0x7f00000004c0)) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000008c0)={0xf, @pix_mp={0xff, 0x3, 0x42303159, 0x4, 0xf, [{0x3, 0x21a}, {0xfffffffffffffffd, 0x8}, {0x40, 0x2}, {0x7, 0x3}, {0x519, 0x3f}, {0x0, 0x6}, {0x3, 0x8}, {0x8001}], 0x0, 0xfffffffffffffff7, 0x8, 0x2, 0x6}}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)=0xfffffffffffffffa, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000280)={0x1}, 0xc) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)) fcntl$getownex(r0, 0x10, &(0x7f0000000340)) write$P9_RREAD(r1, &(0x7f00000001c0)={0xbc, 0x75, 0x2, {0xb1, "106c3e2803461c3bff56697b3f08e668a12b396597b20729a9e0347f1d98e54ab7dadebb0b3b44519a4de2c5ab3f365bcdf9a90bcd70b3d47dade57ef86f13978803d51c3c227d1ab01a764bf0cc4407abc01edffa4144a8a45f79db49aad803a9c063f256f529cc16cc0156da61b6b880fe9317efd0a23cb388329a828b5ca6e173e1444d5d123a56284b03990964da874815e0aa745532290e8b856421bdc15c37a2e308c4b1a397c8b60417fdaf139e"}}, 0xbc) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, 0x0) write$P9_RAUTH(r1, &(0x7f0000000300)={0x14, 0x67, 0x1}, 0x14) 10:28:29 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000680000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x4040, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000200)={r3, 0x3, 0x1000, "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"}, 0x1008) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) 10:28:29 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000400100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:29 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, r2, 0xff}}, 0x48) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000002c0)=0xc) openat$cgroup_ro(r1, &(0x7f00000003c0)='cgroup.events\x00', 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f0000000300)={0x7c, 0x7d, 0x2, {{0x0, 0x5e, 0x3, 0x0, {0x22, 0x4, 0x7}, 0x84080000, 0x80, 0xf9a, 0xfffffffffffffffa, 0x9, '/dev/dsp\x00', 0x18, '/dev/infiniband/rdma_cm\x00', 0x2, ',^', 0x8, 'security'}, 0x9, '/dev/dsp\x00', r3, r4, r5}}, 0x7c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) syz_open_dev$radio(&(0x7f0000000400)='/dev/radio#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2048.445487][T21059] XFS (loop5): SB sanity check failed [ 2048.458187][T21059] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2048.472815][T21062] XFS (loop3): SB sanity check failed [ 2048.482014][T21062] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2048.524582][T21059] XFS (loop5): Unmount and run xfs_repair [ 2048.531434][T21059] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2048.554115][T21059] 00000000: 58 46 53 42 00 00 10 00 00 36 07 01 00 00 10 00 XFSB.....6...... [ 2048.568399][T21062] XFS (loop3): Unmount and run xfs_repair [ 2048.581916][T21062] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2048.589891][T21059] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2048.600259][T21062] 00000000: 58 46 53 42 00 00 10 00 00 00 00 68 00 00 10 00 XFSB.......h.... [ 2048.616931][T21059] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2048.627347][T21059] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2048.637658][T21062] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2048.647675][T21059] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 10:28:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) sendmsg$nl_generic(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) [ 2048.681363][T21062] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2048.715930][T21059] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2048.725923][T21093] XFS (loop4): SB sanity check failed [ 2048.732723][T21093] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2048.745931][T21062] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2048.787416][T21059] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2048.809297][T21062] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2048.820186][T21093] XFS (loop4): Unmount and run xfs_repair [ 2048.826105][T21093] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2048.831637][T21059] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2048.849001][T21062] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2048.858363][T21093] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 04 00 10 00 XFSB............ [ 2048.874922][T21059] XFS (loop5): SB validate failed with error -117. [ 2048.885942][T21062] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2048.909282][T21062] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2048.918716][T21093] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000080)={0x80000001}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) faccessat(r2, &(0x7f00000000c0)='./file0\x00', 0x100, 0x400) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0xfffffffffffffffd) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000140)={0x0, 0x7, 0x600f}) [ 2048.946783][T21062] XFS (loop3): SB validate failed with error -117. [ 2048.978537][T21093] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2049.012731][T21093] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2049.043556][T21093] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 10:28:30 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(r0, 0x11) kexec_load(0xb02fc301000000, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0), 0x2, 0xa4356000, 0x1000000}], 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)=0x6) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000a40)=""/130) r2 = syz_open_dev$dspn(0x0, 0x8, 0x0) syz_genetlink_get_family_id$tipc2(0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0xfff, &(0x7f00000004c0)) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000008c0)={0xf, @pix_mp={0xff, 0x3, 0x42303159, 0x4, 0xf, [{0x3, 0x21a}, {0xfffffffffffffffd, 0x8}, {0x40, 0x2}, {0x7, 0x3}, {0x519, 0x3f}, {0x0, 0x6}, {0x3, 0x8}, {0x8001}], 0x0, 0xfffffffffffffff7, 0x8, 0x2, 0x6}}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)=0xfffffffffffffffa, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000280)={0x1}, 0xc) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)) fcntl$getownex(r0, 0x10, &(0x7f0000000340)) write$P9_RREAD(r1, &(0x7f00000001c0)={0xbc, 0x75, 0x2, {0xb1, "106c3e2803461c3bff56697b3f08e668a12b396597b20729a9e0347f1d98e54ab7dadebb0b3b44519a4de2c5ab3f365bcdf9a90bcd70b3d47dade57ef86f13978803d51c3c227d1ab01a764bf0cc4407abc01edffa4144a8a45f79db49aad803a9c063f256f529cc16cc0156da61b6b880fe9317efd0a23cb388329a828b5ca6e173e1444d5d123a56284b03990964da874815e0aa745532290e8b856421bdc15c37a2e308c4b1a397c8b60417fdaf139e"}}, 0xbc) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, 0x0) write$P9_RAUTH(r1, &(0x7f0000000300)={0x14, 0x67, 0x1}, 0x14) [ 2049.105043][T21093] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2049.143410][T21093] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 10:28:30 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000006c0000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:30 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000003707010000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2049.253856][T21093] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2049.343850][T21093] XFS (loop4): SB validate failed with error -117. 10:28:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'trusted.', '{\x00'}, &(0x7f0000000200)=""/241, 0xf1) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) 10:28:30 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000ff070400100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2049.534664][T21132] XFS (loop3): SB sanity check failed [ 2049.542753][T21132] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2049.603126][T21132] XFS (loop3): Unmount and run xfs_repair [ 2049.634583][T17057] XFS (loop5): SB sanity check failed [ 2049.640234][T17057] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2049.640244][T17057] XFS (loop5): Unmount and run xfs_repair [ 2049.640254][T17057] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2049.640276][T17057] 00000000: 58 46 53 42 00 00 10 00 00 37 07 01 00 00 10 00 XFSB.....7...... [ 2049.655864][T21132] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2049.706134][T21132] 00000000: 58 46 53 42 00 00 10 00 00 00 00 6c 00 00 10 00 XFSB.......l.... [ 2049.715265][T17057] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2049.718243][T21132] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2049.740333][T21132] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2049.764999][T17057] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2049.781131][T21132] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2049.805057][T21156] XFS (loop4): SB sanity check failed 10:28:30 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, r2, 0xff}}, 0x48) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000002c0)=0xc) openat$cgroup_ro(r1, &(0x7f00000003c0)='cgroup.events\x00', 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f0000000300)={0x7c, 0x7d, 0x2, {{0x0, 0x5e, 0x3, 0x0, {0x22, 0x4, 0x7}, 0x84080000, 0x80, 0xf9a, 0xfffffffffffffffa, 0x9, '/dev/dsp\x00', 0x18, '/dev/infiniband/rdma_cm\x00', 0x2, ',^', 0x8, 'security'}, 0x9, '/dev/dsp\x00', r3, r4, r5}}, 0x7c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) syz_open_dev$radio(&(0x7f0000000400)='/dev/radio#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2049.815594][T21156] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2049.823610][T17057] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2049.840114][T21132] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2049.870536][T21132] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2049.879532][T21156] XFS (loop4): Unmount and run xfs_repair [ 2049.885618][T21156] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2049.893193][T17057] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2049.902370][T21156] 00000000: 58 46 53 42 00 00 10 00 00 00 ff 07 04 00 10 00 XFSB............ [ 2049.911448][T17057] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2049.920577][T21156] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2049.929532][T21132] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2049.938531][T17057] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2049.947921][T21156] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2049.957170][T17057] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2049.966548][T21156] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2049.975861][T21130] XFS (loop5): SB validate failed with error -117. [ 2049.976878][T21132] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2049.993175][T21156] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2050.002623][T21156] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2050.030361][T21156] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 10:28:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101400, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='rdma.max\x00', 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000140)={0x8, 0x4, 0x2, 0xffff, 0x1, [{0x5, 0x100000001, 0xffffffff, 0x0, 0x0, 0x100}]}) [ 2050.072117][T21132] XFS (loop3): SB validate failed with error -117. [ 2050.090099][T21156] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2050.138129][T21156] XFS (loop4): SB validate failed with error -117. 10:28:31 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000003807010000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:31 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000740000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2050.290426][T21178] IPVS: ftp: loaded support on port[0] = 21 10:28:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x2) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x0) 10:28:31 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000e00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2050.528824][T21181] XFS (loop5): SB sanity check failed [ 2050.534881][T21181] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:31 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000003307010000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2050.571677][T21191] XFS (loop3): SB sanity check failed [ 2050.571725][ T3048] device bridge_slave_1 left promiscuous mode [ 2050.579713][T21191] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2050.587137][ T3048] bridge0: port 2(bridge_slave_1) entered disabled state [ 2050.605292][T21181] XFS (loop5): Unmount and run xfs_repair [ 2050.611805][T21191] XFS (loop3): Unmount and run xfs_repair [ 2050.632726][T21191] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2050.642336][ T3048] device bridge_slave_0 left promiscuous mode [ 2050.651993][T21181] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2050.659688][ T3048] bridge0: port 1(bridge_slave_0) entered disabled state [ 2050.685133][T21191] 00000000: 58 46 53 42 00 00 10 00 00 00 00 74 00 00 10 00 XFSB.......t.... [ 2050.701584][T21181] 00000000: 58 46 53 42 00 00 10 00 00 38 07 01 00 00 10 00 XFSB.....8...... [ 2050.709779][T21191] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2050.719603][T21191] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2050.735248][T21191] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2050.746118][T21181] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2050.757301][T21191] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2050.766771][T21181] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2050.774043][T21191] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2050.789381][T21191] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2050.810932][T21181] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2050.830142][T21181] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2050.834643][T21191] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2050.870967][T21181] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2050.917495][T21191] XFS (loop3): SB validate failed with error -117. [ 2050.926843][T21181] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2050.936294][T17057] XFS (loop4): SB sanity check failed [ 2050.941944][T17057] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2050.964890][T21181] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2050.974585][T17057] XFS (loop4): Unmount and run xfs_repair [ 2050.982906][T21220] XFS (loop1): SB sanity check failed [ 2050.991055][T21220] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2051.007676][T17057] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2051.017243][T21181] XFS (loop5): SB validate failed with error -117. [ 2051.024302][T17057] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 0e 00 10 00 XFSB............ [ 2051.033678][T21220] XFS (loop1): Unmount and run xfs_repair [ 2051.039663][T17057] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2051.049307][T21220] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 2051.057270][T17057] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2051.067586][T21220] 00000000: 58 46 53 42 00 00 10 00 00 33 07 01 00 00 10 00 XFSB.....3...... [ 2051.076745][T17057] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2051.077956][T21220] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2051.085998][T17057] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2051.086019][T17057] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2051.104739][T21220] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2051.113089][T17057] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2051.131107][T17057] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2051.131531][T21220] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2051.140361][T21217] XFS (loop4): SB validate failed with error -117. [ 2051.158618][ T3048] device hsr_slave_1 left promiscuous mode [ 2051.167208][T21220] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2051.178581][T21220] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2051.188071][T21220] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2051.197612][T21220] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2051.207145][T21220] XFS (loop1): SB validate failed with error -117. [ 2051.240266][ T3048] device hsr_slave_0 left promiscuous mode [ 2051.308309][ T3048] team0 (unregistering): Port device team_slave_1 removed [ 2051.326745][ T3048] team0 (unregistering): Port device team_slave_0 removed 10:28:32 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000003907010000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:32 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}, r1}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000180)={{0x2, 0x4e20, @remote}, {0x1}, 0x14, {0x2, 0x4e23, @multicast2}, 'veth0_to_hsr\x00'}) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) [ 2051.395703][ T3048] bond0 (unregistering): Releasing backup interface bond_slave_1 10:28:32 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000007a0000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:32 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000003600100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2051.489502][ T3048] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2051.615910][T21257] XFS (loop5): SB sanity check failed [ 2051.630134][T17057] XFS (loop3): SB sanity check failed [ 2051.635577][T17057] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2051.635587][T17057] XFS (loop3): Unmount and run xfs_repair [ 2051.635612][T17057] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2051.635631][T17057] 00000000: 58 46 53 42 00 00 10 00 00 00 00 7a 00 00 10 00 XFSB.......z.... [ 2051.666599][T21257] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2051.720389][T21257] XFS (loop5): Unmount and run xfs_repair [ 2051.721076][T17057] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2051.735256][T17057] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2051.735268][T17057] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2051.735280][T17057] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2051.735295][T17057] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2051.747951][T21257] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2051.753423][T17057] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2051.771551][T17057] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2051.787748][T21264] XFS (loop3): SB validate failed with error -117. [ 2051.810177][T21257] 00000000: 58 46 53 42 00 00 10 00 00 39 07 01 00 00 10 00 XFSB.....9...... [ 2051.831924][T21257] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2051.889005][T21257] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2051.898887][T21283] XFS (loop4): SB sanity check failed [ 2051.905123][T21283] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2051.927053][T21283] XFS (loop4): Unmount and run xfs_repair [ 2051.941894][T21283] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2051.949811][T21257] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2051.963083][T21283] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 36 00 10 00 XFSB........6... [ 2051.972149][T21283] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2051.972162][T21283] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2051.972174][T21283] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2051.972186][T21283] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2051.972197][T21283] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2051.972215][T21283] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2051.990098][T21257] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2052.008281][T21283] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2052.063201][T21257] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2052.078064][T21257] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2052.078081][T21257] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2052.103609][T21283] XFS (loop4): SB validate failed with error -117. [ 2052.124553][ T3048] bond0 (unregistering): Released all slaves [ 2052.134406][T21257] XFS (loop5): SB validate failed with error -117. [ 2052.337999][ T1231] XFS (loop5): SB sanity check failed [ 2052.338038][ T1231] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2052.440903][T21178] chnl_net:caif_netlink_parms(): no params data found [ 2052.442621][ T1231] XFS (loop5): Unmount and run xfs_repair [ 2052.456864][ T1231] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2052.464657][ T1231] 00000000: 58 46 53 42 00 00 10 00 00 39 07 01 00 00 10 00 XFSB.....9...... [ 2052.474224][ T1231] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2052.483944][ T1231] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2052.501984][ T1231] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2052.512744][ T1231] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2052.523313][ T1231] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2052.535687][ T1231] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2052.546807][ T1231] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2052.556121][T21257] XFS (loop5): SB validate failed with error -117. [ 2052.598660][T21178] bridge0: port 1(bridge_slave_0) entered blocking state [ 2052.607058][T21178] bridge0: port 1(bridge_slave_0) entered disabled state [ 2052.615221][T21178] device bridge_slave_0 entered promiscuous mode [ 2052.635298][T21178] bridge0: port 2(bridge_slave_1) entered blocking state [ 2052.650192][T21178] bridge0: port 2(bridge_slave_1) entered disabled state [ 2052.658289][T21178] device bridge_slave_1 entered promiscuous mode [ 2052.681752][T21178] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2052.692048][T21178] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2052.713749][T21178] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2052.721957][T21178] team0: Port device team_slave_0 added [ 2052.728259][T21178] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2052.736487][T21178] team0: Port device team_slave_1 added [ 2052.742640][T21178] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2052.750861][T21178] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2052.813187][T21178] device hsr_slave_0 entered promiscuous mode [ 2052.860265][T21178] device hsr_slave_1 entered promiscuous mode [ 2052.920593][T21178] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2052.928333][T21178] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2052.946402][T21178] bridge0: port 2(bridge_slave_1) entered blocking state [ 2052.953511][T21178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2052.960922][T21178] bridge0: port 1(bridge_slave_0) entered blocking state [ 2052.968000][T21178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2053.016016][T21178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2053.027012][T21178] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2053.038103][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2053.047583][ T1231] bridge0: port 1(bridge_slave_0) entered disabled state [ 2053.055930][ T1231] bridge0: port 2(bridge_slave_1) entered disabled state [ 2053.073730][T21178] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2053.080915][T21178] 8021q: adding VLAN 0 to HW filter on device team0 [ 2053.092796][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2053.101688][ T1231] bridge0: port 1(bridge_slave_0) entered blocking state [ 2053.108767][ T1231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2053.126424][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2053.134968][ T1220] bridge0: port 2(bridge_slave_1) entered blocking state [ 2053.142103][ T1220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2053.177646][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2053.186614][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2053.208500][T21178] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2053.219802][T21178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2053.231562][T21178] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2053.239352][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2053.248415][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2053.257564][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2053.279607][T21178] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2053.294354][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2053.315250][T21178] 8021q: adding VLAN 0 to HW filter on device batadv0 10:28:35 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, r2, 0xff}}, 0x48) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000002c0)=0xc) openat$cgroup_ro(r1, &(0x7f00000003c0)='cgroup.events\x00', 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f0000000300)={0x7c, 0x7d, 0x2, {{0x0, 0x5e, 0x3, 0x0, {0x22, 0x4, 0x7}, 0x84080000, 0x80, 0xf9a, 0xfffffffffffffffa, 0x9, '/dev/dsp\x00', 0x18, '/dev/infiniband/rdma_cm\x00', 0x2, ',^', 0x8, 'security'}, 0x9, '/dev/dsp\x00', r3, r4, r5}}, 0x7c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) syz_open_dev$radio(&(0x7f0000000400)='/dev/radio#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}, r1}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000180)={{0x2, 0x4e20, @remote}, {0x1}, 0x14, {0x2, 0x4e23, @multicast2}, 'veth0_to_hsr\x00'}) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) 10:28:35 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000c40000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x3) timer_create(0x7, &(0x7f0000000380)={0x0, 0x18, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000400)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000580)={r4, 0xfffb, "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"}, &(0x7f0000000540)=0x152) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f00000000c0)={0xb, 0x102, 0x6, {0x74, 0x6, 0x1234, 0xf71d}}) 10:28:35 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000008000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:35 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000003a07010000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2054.086485][T21333] XFS (loop4): SB sanity check failed [ 2054.124476][T21333] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}, r1}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000180)={{0x2, 0x4e20, @remote}, {0x1}, 0x14, {0x2, 0x4e23, @multicast2}, 'veth0_to_hsr\x00'}) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) [ 2054.160721][T21333] XFS (loop4): Unmount and run xfs_repair [ 2054.192982][T21337] XFS (loop5): SB sanity check failed [ 2054.199248][T21333] XFS (loop4): First 128 bytes of corrupted metadata buffer: 10:28:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x20040, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0xc0000010}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x200000, 0x0) [ 2054.199409][T21335] XFS (loop3): SB sanity check failed [ 2054.214053][T21337] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2054.226787][T21333] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 80 00 10 00 XFSB............ [ 2054.238949][T21335] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2054.251025][T21333] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2054.270622][T21337] XFS (loop5): Unmount and run xfs_repair [ 2054.277606][T21337] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2054.286314][T21333] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2054.297174][T21335] XFS (loop3): Unmount and run xfs_repair 10:28:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}, r1}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000180)={{0x2, 0x4e20, @remote}, {0x1}, 0x14, {0x2, 0x4e23, @multicast2}, 'veth0_to_hsr\x00'}) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) [ 2054.319544][T21337] 00000000: 58 46 53 42 00 00 10 00 00 3a 07 01 00 00 10 00 XFSB.....:...... [ 2054.330255][T21335] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2054.346790][T21333] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2054.356711][T21337] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2054.373269][T21335] 00000000: 58 46 53 42 00 00 10 00 00 00 00 c4 00 00 10 00 XFSB............ [ 2054.382789][T21337] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2054.392562][T21333] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2054.401934][T21335] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2054.411433][T21337] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2054.420750][T21333] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2054.429692][T21335] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2054.439056][T21337] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2054.448383][T21333] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2054.457708][T21337] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2054.467277][T21335] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2054.476655][T21333] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2054.486905][T21337] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2054.490129][T21335] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2054.496234][T21337] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2054.514125][T21333] XFS (loop4): SB validate failed with error -117. 10:28:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}, r1}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000180)={{0x2, 0x4e20, @remote}, {0x1}, 0x14, {0x2, 0x4e23, @multicast2}, 'veth0_to_hsr\x00'}) [ 2054.523414][T21337] XFS (loop5): SB validate failed with error -117. [ 2054.531081][T21335] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2054.542074][T21335] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2054.551671][T21335] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2054.561884][T21335] XFS (loop3): SB validate failed with error -117. 10:28:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_OFLAGS={0x8, 0x3, 0x59}]]}}}]}, 0x3c}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r4, 0x5}, &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) 10:28:35 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000080969800100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:35 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, r2, 0xff}}, 0x48) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000002c0)=0xc) openat$cgroup_ro(r1, &(0x7f00000003c0)='cgroup.events\x00', 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f0000000300)={0x7c, 0x7d, 0x2, {{0x0, 0x5e, 0x3, 0x0, {0x22, 0x4, 0x7}, 0x84080000, 0x80, 0xf9a, 0xfffffffffffffffa, 0x9, '/dev/dsp\x00', 0x18, '/dev/infiniband/rdma_cm\x00', 0x2, ',^', 0x8, 'security'}, 0x9, '/dev/dsp\x00', r3, r4, r5}}, 0x7c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) syz_open_dev$radio(&(0x7f0000000400)='/dev/radio#\x00', 0x0, 0x2) 10:28:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}, r1}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2054.774565][T21401] netlink: 'syz-executor2': attribute type 3 has an invalid length. [ 2054.805382][T21405] netlink: 'syz-executor2': attribute type 3 has an invalid length. 10:28:35 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000c60000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}, r1}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) 10:28:35 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000003b07010000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:36 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8400, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000140)={0xa, 0x8, 0x6}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000180)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x1) [ 2054.984965][ T1220] XFS (loop4): SB sanity check failed [ 2054.990637][ T1220] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2055.002995][ T1220] XFS (loop4): Unmount and run xfs_repair [ 2055.008829][ T1220] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2055.016880][ T1220] 00000000: 58 46 53 42 00 00 10 00 00 00 80 96 98 00 10 00 XFSB............ [ 2055.062861][ T1220] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2055.072554][ T1220] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2055.082082][ T1220] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2055.096153][ T1220] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 10:28:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}, r1}}, 0x30) [ 2055.119988][ T1220] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2055.128854][ T1220] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2055.142745][ T1220] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2055.189531][T21404] XFS (loop4): SB validate failed with error -117. [ 2055.201598][T21438] QAT: Invalid ioctl [ 2055.223875][T21438] QAT: Invalid ioctl [ 2055.233576][T21438] QAT: Invalid ioctl [ 2055.238829][T21438] QAT: Invalid ioctl [ 2055.246800][T21448] QAT: Invalid ioctl [ 2055.258711][T21448] QAT: Invalid ioctl [ 2055.290790][T10476] XFS (loop3): SB sanity check failed [ 2055.324633][T10476] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:36 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000001100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2055.369013][T10476] XFS (loop3): Unmount and run xfs_repair [ 2055.369433][T21436] XFS (loop5): SB sanity check failed [ 2055.384042][T10476] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2055.395888][T10476] 00000000: 58 46 53 42 00 00 10 00 00 00 00 c6 00 00 10 00 XFSB............ [ 2055.405121][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x1ffffe, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) [ 2055.406453][T21436] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2055.420427][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2055.451988][T21436] XFS (loop5): Unmount and run xfs_repair [ 2055.457912][T21436] XFS (loop5): First 128 bytes of corrupted metadata buffer: 10:28:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) socket$rds(0x15, 0x5, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}, r1}}, 0x30) [ 2055.470426][T21436] 00000000: 58 46 53 42 00 00 10 00 00 3b 07 01 00 00 10 00 XFSB.....;...... [ 2055.506249][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 10:28:36 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, r2, 0xff}}, 0x48) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000002c0)=0xc) openat$cgroup_ro(r1, &(0x7f00000003c0)='cgroup.events\x00', 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f0000000300)={0x7c, 0x7d, 0x2, {{0x0, 0x5e, 0x3, 0x0, {0x22, 0x4, 0x7}, 0x84080000, 0x80, 0xf9a, 0xfffffffffffffffa, 0x9, '/dev/dsp\x00', 0x18, '/dev/infiniband/rdma_cm\x00', 0x2, ',^', 0x8, 'security'}, 0x9, '/dev/dsp\x00', r3, r4, r5}}, 0x7c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) [ 2055.523077][T21436] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2055.537380][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2055.552317][T21436] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2055.561476][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 10:28:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) r2 = fcntl$dupfd(r1, 0x406, r1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000140)={r3, 0xaada, 0x20, 0x6, 0x100000001}, &(0x7f0000000180)=0x18) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) [ 2055.561488][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2055.561499][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2055.561583][T21433] XFS (loop3): SB validate failed with error -117. [ 2055.597173][T21436] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2055.670837][T21436] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 10:28:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}, r1}}, 0x30) [ 2055.716683][T21436] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2055.733528][T21436] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2055.745295][T21436] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2055.754934][T21436] XFS (loop5): SB validate failed with error -117. [ 2055.782477][T21466] XFS (loop4): SB sanity check failed [ 2055.789251][T21466] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2055.810475][T21466] XFS (loop4): Unmount and run xfs_repair [ 2055.816394][T21466] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2055.825176][T21466] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 01 10 00 XFSB............ [ 2055.834491][T21466] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2055.843699][T21466] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2055.852910][T21466] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2055.862200][T21466] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2055.871487][T21466] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 10:28:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}}}, 0x30) [ 2055.881156][T21466] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2055.890315][T21466] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2055.899399][T21466] XFS (loop4): SB validate failed with error -117. 10:28:37 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000c70000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:37 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400202) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="02581f926769f309423ee28ef2a4879cc59601fa4a15831eb6b20993ff933c824c91bdd5f9e0d4a33e1ff88fd5c2bb4a339c24a5efa63e9106241994bcfa4920ef59f2209b0cc076b96426eeed7276065ed8576ec7fdf99b3b1c471cedb2dc771fc73ef066b777016e7818ce1dd491948a88eb002baf1a3a155cd13581ec9c1c6a6820a98bd16ac33ffd01f048274276c944c19ce3fa94f253e03dda530ace71d11d97f1"], 0x13, 0x3) ioctl$TUNSETOFFLOAD(r0, 0x400454d4, 0x0) 10:28:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}}}, 0x30) 10:28:37 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000003c07010000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:37 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000002100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x10000, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000180)={0x10, 0x17, 0xfff, {0x7, './file0'}}, 0x10) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x7fff, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0xc000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r2, &(0x7f00000003c0)="e86af56311996f6c54fed7abd4083db3ed63925317ce5de812b4d34bec1427bd01412037e74b835e7bbe33e12017f01acbefb4ae6fb49776588c33f5a374027cd18807cb58a4b66374667e55d8474633166e011e84970315bb3f05222c209f44482c402c3fa151a0ff769e28fe96f7e808bf22a0759b965f4f8e7b57f26b8d03735815859814a87438f6d36df8ea55d281b63eab4178ee4e6b54d0a424c7454170790bedce4fa123225fa9663d3d307b873eefd60b98e39b2847d2c4bb2fbb1a083c08b5287a15fe8b1b27", &(0x7f0000000300)=""/153}, 0x13) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r3, 0x400454d4, 0x0) 10:28:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}}}, 0x30) 10:28:37 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, r2, 0xff}}, 0x48) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000002c0)=0xc) openat$cgroup_ro(r1, &(0x7f00000003c0)='cgroup.events\x00', 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f0000000300)={0x7c, 0x7d, 0x2, {{0x0, 0x5e, 0x3, 0x0, {0x22, 0x4, 0x7}, 0x84080000, 0x80, 0xf9a, 0xfffffffffffffffa, 0x9, '/dev/dsp\x00', 0x18, '/dev/infiniband/rdma_cm\x00', 0x2, ',^', 0x8, 'security'}, 0x9, '/dev/dsp\x00', r3, r4, r5}}, 0x7c) 10:28:37 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}, r0}}, 0x30) 10:28:37 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) fsetxattr(r1, &(0x7f0000000000)=@random={'os2.', '\x00'}, &(0x7f0000000080)='irlan0\x00', 0x7, 0x1) [ 2056.439432][T21513] XFS (loop3): SB sanity check failed [ 2056.448192][T21513] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2056.489369][T21513] XFS (loop3): Unmount and run xfs_repair [ 2056.523356][T21513] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2056.532129][T21535] XFS (loop4): SB sanity check failed [ 2056.540210][T21513] 00000000: 58 46 53 42 00 00 10 00 00 00 00 c7 00 00 10 00 XFSB............ [ 2056.550248][T21535] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2056.566520][T21513] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2056.575861][T21535] XFS (loop4): Unmount and run xfs_repair [ 2056.582735][T21534] XFS (loop5): SB sanity check failed 10:28:37 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}, r0}}, 0x30) [ 2056.588423][T21534] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2056.601737][T21513] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2056.630303][T21535] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2056.659417][T21513] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2056.681877][T21535] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 02 10 00 XFSB............ [ 2056.683348][T21534] XFS (loop5): Unmount and run xfs_repair [ 2056.707586][T21513] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2056.728396][T21534] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2056.739344][T21513] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2056.758145][T21535] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2056.764102][T21534] 00000000: 58 46 53 42 00 00 10 00 00 3c 07 01 00 00 10 00 XFSB.....<...... [ 2056.778650][T21513] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2056.797219][T21535] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 10:28:37 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}, r0}}, 0x30) [ 2056.802827][T21513] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2056.815926][T21535] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2056.829842][T21534] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2056.859564][T21535] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2056.860347][T21513] XFS (loop3): SB validate failed with error -117. [ 2056.877584][T21535] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2056.896322][T21534] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2056.922017][T21535] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2056.943573][T21534] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2056.972472][T21534] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2056.979866][T21535] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2056.981807][T21534] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2056.997215][T21535] XFS (loop4): SB validate failed with error -117. [ 2057.006522][T21534] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 10:28:38 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000c80000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000000)=0x2800009bda) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x3ff}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000002c0)={r4, 0xb2, "bc2341f5c9e65aab7916332ac80888801ef0612ee6ee6ef3bea2ed3268b63c41df38aa40d8dea7addc549be24f2ead92873e3a367afd42d723ce57174f80ea497389ec761de4a339e9907582bb883e5931cc43a7c3dab75084637cc8456f275d91d021491cd946956f99e27e680e38aaca4f33a841b40a975d631ae1f8865a04ccfcebee4e2bb8a12d57c46ec61c5512362331c2f121003979f20388cb05c787c6248b35b8417bf09ca97f20562132c9840f"}, &(0x7f0000000380)=0xba) syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x3, 0x210000) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) r6 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x80001) openat$cgroup_ro(r6, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) 10:28:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}, r1}}, 0x30) [ 2057.048967][T21534] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2057.097834][T21534] XFS (loop5): SB validate failed with error -117. 10:28:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, r2, 0xff}}, 0x48) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f00000002c0)=0xc) openat$cgroup_ro(r1, &(0x7f00000003c0)='cgroup.events\x00', 0x0, 0x0) 10:28:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}, r1}}, 0x30) 10:28:38 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000003d07010000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:38 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000003100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000000c0)={0x20, 0x0, 0x8, {0x3, 0x4, 0xfffffffffffffff7, 0x9}}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) pipe2(&(0x7f0000000000), 0x4800) 10:28:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, r2, 0xff}}, 0x48) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f00000002c0)=0xc) 10:28:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}, r1}}, 0x30) [ 2057.332633][T21595] XFS (loop3): SB sanity check failed [ 2057.348738][T21595] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2057.369647][T21595] XFS (loop3): Unmount and run xfs_repair [ 2057.375493][T21595] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2057.382902][T21595] 00000000: 58 46 53 42 00 00 10 00 00 00 00 c8 00 00 10 00 XFSB............ [ 2057.391821][T21595] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2057.400939][T21595] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2057.409773][T21595] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2057.418700][T21595] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2057.427616][T21595] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2057.436498][T21595] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2057.445404][T21595] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2057.454324][T21595] XFS (loop3): SB validate failed with error -117. 10:28:38 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x5, 0x3, 0x2}}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) 10:28:38 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000c90000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}, r1}}, 0x30) 10:28:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, r2, 0xff}}, 0x48) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) getegid() [ 2057.783120][T21624] XFS (loop5): SB sanity check failed [ 2057.809544][T21624] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2057.857412][T21631] XFS (loop4): SB sanity check failed [ 2057.864306][T21631] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2057.905488][T21624] XFS (loop5): Unmount and run xfs_repair [ 2057.925750][T21631] XFS (loop4): Unmount and run xfs_repair [ 2057.937570][T21624] XFS (loop5): First 128 bytes of corrupted metadata buffer: 10:28:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}, r1}}, 0x30) [ 2057.963252][T21624] 00000000: 58 46 53 42 00 00 10 00 00 3d 07 01 00 00 10 00 XFSB.....=...... [ 2057.972660][T21624] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2057.974029][T21631] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2057.981895][T21624] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2057.998399][T21624] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2058.008173][T21624] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2058.018631][T21624] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2058.028039][T21624] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2058.036894][T21631] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 03 10 00 XFSB............ [ 2058.036907][T21631] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2058.036919][T21631] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2058.036932][T21631] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2058.036944][T21631] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2058.036956][T21631] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2058.036969][T21631] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2058.036981][T21631] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 10:28:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, r2, 0xff}}, 0x48) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) [ 2058.037096][T21631] XFS (loop4): SB validate failed with error -117. [ 2058.120091][T21624] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2058.129240][T21624] XFS (loop5): SB validate failed with error -117. [ 2058.136063][ T1220] XFS (loop3): SB sanity check failed [ 2058.141709][ T1220] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2058.154225][ T1220] XFS (loop3): Unmount and run xfs_repair [ 2058.160338][ T1220] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2058.168225][ T1220] 00000000: 58 46 53 42 00 00 10 00 00 00 00 c9 00 00 10 00 XFSB............ [ 2058.177726][ T1220] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2058.186814][ T1220] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2058.195877][ T1220] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 10:28:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}, r1}}, 0x30) [ 2058.242999][ T1220] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2058.257470][ T1220] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2058.266990][ T1220] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2058.276139][ T1220] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2058.285339][T21655] XFS (loop3): SB validate failed with error -117. 10:28:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000200)="b449e9f329b950debb3615e21770e9705e63c3761179fbdf0936221cc04a3f043e446f6c60bfc38bcf3d1c5994b0e1f64b5e886b955688d85a19f8ef35569f39f17668e62092487ee19629aa53009c06634d7dfb98cf5ef706dd6673c6f5205d00cc2087eff883dfd04a6be37741e6abfa40ad5683206ee8bedea950bd8bb6050fc399ed7b8fd75a05", 0x89, r0}, 0x68) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) io_setup(0x9, &(0x7f0000000000)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) io_cancel(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x3, r2, &(0x7f0000000140)="7469063b0c4a69a4", 0x8, 0x8001, 0x0, 0x2, r4}, &(0x7f0000000300)) ioctl$TUNSETOFFLOAD(r2, 0x400454d4, 0x0) 10:28:39 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000004100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, r2, 0xff}}, 0x48) 10:28:39 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000003e07010000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}}}, 0x30) 10:28:39 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000ca0000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}}}, 0x30) 10:28:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) [ 2058.629815][ T1220] XFS (loop4): SB sanity check failed [ 2058.636122][ T1220] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2058.666801][ T1220] XFS (loop4): Unmount and run xfs_repair [ 2058.672693][ T1220] XFS (loop4): First 128 bytes of corrupted metadata buffer: 10:28:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}}}, 0x30) [ 2058.686534][ T1220] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 04 10 00 XFSB............ [ 2058.703561][ T1220] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:39 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) [ 2058.815714][ T1220] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2058.837378][ T1220] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 10:28:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) [ 2058.901540][ T1220] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 10:28:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}, r1}}, 0x30) [ 2058.963092][ T1220] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2059.000446][T21742] XFS (loop5): SB sanity check failed [ 2059.005989][T21742] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2059.026067][T21739] XFS (loop3): SB sanity check failed [ 2059.026974][ T1220] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2059.032393][T21739] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2059.046712][T21742] XFS (loop5): Unmount and run xfs_repair [ 2059.058193][ T1220] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2059.087844][T21742] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2059.108037][T21739] XFS (loop3): Unmount and run xfs_repair [ 2059.114577][T21708] XFS (loop4): SB validate failed with error -117. [ 2059.114800][T21742] 00000000: 58 46 53 42 00 00 10 00 00 3e 07 01 00 00 10 00 XFSB.....>...... 10:28:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) [ 2059.131720][T21739] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2059.139372][T21739] 00000000: 58 46 53 42 00 00 10 00 00 00 00 ca 00 00 10 00 XFSB............ [ 2059.151187][T21742] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2059.160814][T21739] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2059.175156][T21742] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2059.180315][T21739] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2059.193409][T21742] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2059.209840][T21742] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2059.236189][T21739] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2059.258608][T21739] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2059.283040][T21742] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2059.292923][T21742] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2059.302257][T21742] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2059.303744][T21739] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2059.314707][T21742] XFS (loop5): SB validate failed with error -117. [ 2059.329678][T21739] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 10:28:40 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000005100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}}}, 0x30) [ 2059.372823][T21739] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2059.388051][T21739] XFS (loop3): SB validate failed with error -117. [ 2059.487310][ T1220] XFS (loop5): SB sanity check failed [ 2059.493605][ T1220] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2059.505538][ T1220] XFS (loop5): Unmount and run xfs_repair [ 2059.511796][ T1220] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2059.519246][ T1220] 00000000: 58 46 53 42 00 00 10 00 00 3e 07 01 00 00 10 00 XFSB.....>...... [ 2059.528262][ T1220] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2059.537257][ T1220] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2059.546386][ T1220] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2059.555287][ T1220] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2059.564702][ T1220] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2059.573633][ T1220] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2059.582538][ T1220] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2059.591551][T21742] XFS (loop5): SB validate failed with error -117. 10:28:40 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000003f07010000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:40 executing program 2: socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) [ 2059.743310][ T1220] XFS (loop4): SB sanity check failed [ 2059.748857][ T1220] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2059.761939][ T1220] XFS (loop4): Unmount and run xfs_repair [ 2059.767792][ T1220] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2059.775566][ T1220] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 05 10 00 XFSB............ [ 2059.784486][ T1220] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:40 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000007c0100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, r1, 0xff}}, 0x48) 10:28:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}}}, 0x30) [ 2059.793583][ T1220] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2059.793596][ T1220] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2059.793607][ T1220] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2059.793617][ T1220] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2059.793633][ T1220] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 10:28:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000200)={"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"}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) 10:28:41 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}}}, 0x30) [ 2059.903345][ T1220] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2059.931364][T21797] XFS (loop4): SB validate failed with error -117. 10:28:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, r1, 0xff}}, 0x48) [ 2060.098158][T21834] XFS (loop5): SB sanity check failed [ 2060.109609][T21834] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:41 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000006100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:41 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}}}, 0x30) [ 2060.153772][T21834] XFS (loop5): Unmount and run xfs_repair [ 2060.159903][T21834] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2060.175320][T21833] XFS (loop3): SB sanity check failed [ 2060.186205][T21833] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:41 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, r0, 0xff}}, 0x48) [ 2060.213993][T21834] 00000000: 58 46 53 42 00 00 10 00 00 3f 07 01 00 00 10 00 XFSB.....?...... [ 2060.237455][T21834] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2060.246452][T21833] XFS (loop3): Unmount and run xfs_repair [ 2060.250320][T21834] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2060.261482][T21833] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2060.267590][T21834] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2060.277931][T21833] 00000000: 58 46 53 42 00 00 10 00 00 00 00 7c 01 00 10 00 XFSB.......|.... [ 2060.278740][T21834] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2060.295947][T21833] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2060.309739][T21834] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2060.353168][T21833] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2060.361514][T21834] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2060.379592][T21834] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 10:28:41 executing program 2: socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x6) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000140)) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x80, 0x401) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000180)) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="8d000000ec00000005000000c863c6f6b700bf9ea7c59edee2a5978109159cea7149bc768b9e5431915d72ec719e6f2cfcc592a975a1d009a4a9ea5f450a6c4747f3d476330b3ee30fcc8b32d2bc0a48f45defc2b673279e3ddb2d97b615756b4cf512d1adc356b03e58d85ebd69fa2a64c3c99de2589dd8709b3ce26b872c9b4ed8b1b8057e5587ccb228e2c91ceb0fa20000000000000000"]) [ 2060.404561][T21834] XFS (loop5): SB validate failed with error -117. [ 2060.434371][T21833] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2060.480271][T21833] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2060.500436][T21833] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2060.509652][T21833] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2060.520323][T21833] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2060.529204][T21833] XFS (loop3): SB validate failed with error -117. [ 2060.643154][T21875] XFS (loop4): SB sanity check failed [ 2060.649234][T21875] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:41 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000004007010000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:41 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}}}, 0x30) [ 2060.693014][T21875] XFS (loop4): Unmount and run xfs_repair [ 2060.698907][T21875] XFS (loop4): First 128 bytes of corrupted metadata buffer: 10:28:41 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000800100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:41 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, r0, 0xff}}, 0x48) [ 2060.753589][T21875] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 06 10 00 XFSB............ 10:28:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x40000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) 10:28:41 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, r0, 0xff}}, 0x48) 10:28:41 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}}}, 0x30) [ 2060.816873][T21875] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2060.831190][T21875] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2060.853419][T21875] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2060.918724][T21875] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2060.991912][T21875] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2061.044446][ T1220] XFS (loop5): SB sanity check failed [ 2061.049864][ T1220] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2061.049874][ T1220] XFS (loop5): Unmount and run xfs_repair [ 2061.049885][ T1220] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2061.049898][ T1220] 00000000: 58 46 53 42 00 00 10 00 00 40 07 01 00 00 10 00 XFSB.....@...... [ 2061.049916][ T1220] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:42 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, r1, 0xff}}, 0x48) [ 2061.064153][T21875] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2061.105865][T21917] XFS (loop3): SB sanity check failed [ 2061.112952][T21917] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2061.131125][ T1220] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2061.148599][T21917] XFS (loop3): Unmount and run xfs_repair [ 2061.164842][T21917] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2061.179439][ T1220] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2061.199610][T21875] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2061.212944][ T1220] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2061.228615][T21917] 00000000: 58 46 53 42 00 00 10 00 00 00 00 80 01 00 10 00 XFSB............ [ 2061.239899][ T1220] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2061.267038][ T1220] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2061.283045][T21875] XFS (loop4): SB validate failed with error -117. [ 2061.292138][T21917] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2061.308151][ T1220] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2061.326269][T21917] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2061.348176][T21917] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2061.357256][T21919] XFS (loop5): SB validate failed with error -117. 10:28:42 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000007100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}}}, 0x30) 10:28:42 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, r1, 0xff}}, 0x48) 10:28:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x129000) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400203) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) [ 2061.389666][T21917] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2061.405845][T21917] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2061.480135][T21917] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 10:28:42 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000004107010000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}}}, 0x30) [ 2061.570168][T21917] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2061.615581][T21917] XFS (loop3): SB validate failed with error -117. [ 2061.725690][T10476] XFS (loop4): SB sanity check failed [ 2061.731447][T10476] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2061.755276][T10476] XFS (loop4): Unmount and run xfs_repair [ 2061.761461][T10476] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2061.768928][T10476] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 07 10 00 XFSB............ [ 2061.789177][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:42 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000e80100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:42 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, r1, 0xff}}, 0x48) 10:28:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local, 0xa5}}}, 0x30) 10:28:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/sequencer2\x00', 0x80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001a80)={0x0, r1, 0x0, 0xffffffffffffffa7, &(0x7f0000001d00)='\xfe\xf6\xe5i\xc6\xb0l\x85\xc0\xd1\x00\xe8\xc3;\xbc\"\x9a\xa9D\xac7\xc2ka+\x85\x1d9\xec\x18~B\x14\x89Q\x8e\xaf\xae\xe1.m\nZ\xea\x9f\x1c\xe2\x8b4FvB'}, 0x30) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001ac0)={{{@in6=@ipv4={[], [], @remote}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000001bc0)=0xe8) r4 = getgid() r5 = getpgrp(0x0) r6 = geteuid() getgroups(0x1, &(0x7f0000001c00)=[0xee00]) sendmsg$unix(r0, &(0x7f0000001c80)={&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001980)=[{&(0x7f00000004c0)="548042490e61f93fa3e507b7092010c3988d869cb00ffbbfd9cef3bd5ea79171053917345ba5933384e4adfe23499eac99872b7576a91a04902af70bfa40a5c076d911f569302d67a22117bb0d4ccaab26906f6f589af8dee7bac9b2d2fa0f840340577b98d91933a6347312ec3af6be65aecbba77fb75400748530876bee58d3a57989c83821b8ea8d90a0a21360084708dad5befd1c7de6a5f23abbbce779563fc6a1e41529787159d6e754b883520defabe5d32a0622307a86a170755f597637113fd189fb469f61fe8dfafdfc0f54c55014ebfe7bc3afa875a3daba153a93c956e89b9b3074761a566367e", 0xed}, {&(0x7f00000005c0)="a84e20d0ef8e42b704926b527f28bde81c7e3d4618f03b87ed5e299223c152ab8f87056536c684446652164fc5dfb710aa4504e662670ad39558a7150f33713676ba68", 0x43}, {&(0x7f0000000640)="c71852c5e4e72ed3aecfccd46a73590f228c87669b101f1af6de56d9b1ae5950da2a22cd37765d536f0bcc7062db1984a93c0e054c36ba541d9b9f5def62beee781076f14d37e6fe83e437643ccae4ba9b99", 0x52}, {&(0x7f00000006c0)="23c30ea92e102b388e3a8b687c6516191c6f3825ec3e944601746491a73ad44fa3f4c455ea8733c0ad58ce98248011eeeb1ce520e84be11b8b4de43b9a6be831b354e3a90fe24c4da3393c2294556fa064feb70e5d", 0x55}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="113a5c51138ead3bea380f2546f62da833d59d539a6705d23daba4ca1bd1151c27540e70cf5c98d7b4f26c52bfd01ce4e3bf31d12eb303c540f35662910380544d486d2fe1235295bb7209604604416c7edcdf6b08927b1f0ffb3454cb5208e2caec5ad4bbce4fd39b63228f72ebaee0cc3b521e462325fbbe", 0x79}, {&(0x7f00000017c0)="e41665ec0378e1bd2a6b6da4b12bb06fb28acf0e277f6397bc3e9592658af79135ca062c0b693d3d2e9d48a41b77899e808da61307802eb8c1b350698f9c9343b68c2a7316774fd97e8ffeacd6d4dfe9edec9837c29d01669654dd1b0d03dfef9d1209777aed4be5e448f15e2700687eaafcd369e9ed9b4dd4240a7df002cb43798e64cfcabbc0cb7ea6572aeab7785ec6149a821454df149fb6dc8c73835b40eed90ff6e003bec3b2324e31d5176e91e0dc99178a908262b3ff2000c0de23f50e4dbefce9929ec8627e2b7ca141c4315a687afaea242ecaf1", 0xd9}, {&(0x7f00000018c0)="e8f581", 0x3}, {&(0x7f0000001900)="eed28efa8691db6707fbeb6d3d3126b4e6dab20b414cb4de01fe601ab473fcd140a4106a3e9f40c3808a7869079271771d2a8e4dd0bcb7527c1159abeb3b699d1c4caf1b2353f22b9dc7d64fc5b684cff5a8", 0x52}], 0x9, &(0x7f0000001c40)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x40, 0x800}, 0x4) r8 = getpgrp(0xffffffffffffffff) sched_setparam(r8, &(0x7f0000000400)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) r10 = socket(0x1d, 0xb, 0x2a2d) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') ioctl$TUNDETACHFILTER(r9, 0x401054d6, 0x0) clone(0x10000000, &(0x7f0000000200)="42d3e863204971f8d92cbd087f929202f2614610a5ba09e3a1338523ecb8234a26af31470dd697ffe7ac7760c5b6fad7d57fd82252d5caa404b52ff6d3f721841f40ff3a30af6431203ae247e399787283d671181420b5389563d79c64e7aafdba2a165fa2452340204ad26caa2c0e432f1d916c0881228c1a5aaf0b42569ff6424a19c3d31249ee79ff8dff29", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="0cd0ba97ea4982f0e1f69e07e560d76d40116417eeecba24b9541875c0df5c69f07f48098773f2d0c443398d468cf9fb507ca69997b22a0320ccf0b29a3848e088493ddb53194be8dc8f3c2382e0ec79807b1e082e9da14f8f3b3288b17e70eee419c0adda2c84d476c37eb5b88acdfc49a7986b4726e77f5170853b925e79b28abe4446a5f9468b93ff2d1a550e08fc891caa8098159ecdf0") sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r10, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r11, 0x200, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40040) ioctl$TUNSETOFFLOAD(r9, 0x400454d4, 0x0) [ 2061.817303][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2061.835383][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2061.848731][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2061.892269][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 10:28:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 10:28:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, r1, 0xff}}, 0x48) [ 2061.949478][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2061.958957][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2061.973543][T21972] XFS (loop4): SB validate failed with error -117. [ 2061.982279][T21999] XFS (loop5): SB sanity check failed [ 2061.987693][T21999] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2062.044297][T21999] XFS (loop5): Unmount and run xfs_repair [ 2062.051178][T21999] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2062.058733][T21999] 00000000: 58 46 53 42 00 00 10 00 00 41 07 01 00 00 10 00 XFSB.....A...... [ 2062.106792][T21999] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2062.130978][T22019] XFS (loop3): SB sanity check failed [ 2062.136505][T22019] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2062.166543][T21999] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2062.175883][T22019] XFS (loop3): Unmount and run xfs_repair [ 2062.182796][T21999] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2062.212626][T22019] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2062.239841][T22019] 00000000: 58 46 53 42 00 00 10 00 00 00 00 e8 01 00 10 00 XFSB............ 10:28:43 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000008100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 10:28:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, r1, 0xff}}, 0x48) [ 2062.255913][T21999] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2062.272587][T22019] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2062.309500][T21999] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2062.320938][T22019] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2062.329393][T21999] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2062.339202][T22019] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2062.371475][T22019] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2062.382394][T21999] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 10:28:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, r1, 0xff}}, 0x48) [ 2062.449095][T22019] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2062.460464][T21999] XFS (loop5): SB validate failed with error -117. [ 2062.505318][T22019] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2062.534040][T22019] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2062.570415][T22019] XFS (loop3): SB validate failed with error -117. [ 2062.635346][T10476] XFS (loop4): SB sanity check failed [ 2062.641622][T10476] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2062.653554][T10476] XFS (loop4): Unmount and run xfs_repair [ 2062.659273][T10476] XFS (loop4): First 128 bytes of corrupted metadata buffer: 10:28:43 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000004207010000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) [ 2062.686479][T10476] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 08 10 00 XFSB............ [ 2062.699774][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2062.708716][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2062.717812][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2062.726731][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2062.735855][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2062.735867][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2062.735878][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2062.735946][T22061] XFS (loop4): SB validate failed with error -117. 10:28:43 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000ec0100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) 10:28:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) 10:28:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x6, @local, 0xa5}}}, 0x30) 10:28:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) 10:28:44 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000009100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x400000, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000200)={0x0, 0x5, 0x100000000, &(0x7f00000001c0)=0xf89d}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x113, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), r2, 0x40}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x100000184, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:44 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x6, @local, 0xa5}}}, 0x30) [ 2063.153152][T22104] XFS (loop5): SB sanity check failed [ 2063.180583][T22104] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) [ 2063.212628][T22102] XFS (loop3): SB sanity check failed [ 2063.232860][T22104] XFS (loop5): Unmount and run xfs_repair [ 2063.248733][T22104] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2063.253002][T22102] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2063.289116][T22104] 00000000: 58 46 53 42 00 00 10 00 00 42 07 01 00 00 10 00 XFSB.....B...... [ 2063.320227][T22104] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2063.339473][T22102] XFS (loop3): Unmount and run xfs_repair [ 2063.346503][T22128] XFS (loop4): SB sanity check failed [ 2063.352032][T22104] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2063.361341][T22102] XFS (loop3): First 128 bytes of corrupted metadata buffer: 10:28:44 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x6, @local, 0xa5}}}, 0x30) [ 2063.380035][T22128] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2063.398131][T22102] 00000000: 58 46 53 42 00 00 10 00 00 00 00 ec 01 00 10 00 XFSB............ [ 2063.417403][T22104] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2063.437690][T22102] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2063.456347][T22128] XFS (loop4): Unmount and run xfs_repair [ 2063.470076][T22104] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2063.470160][T22128] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2063.487878][T22102] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2063.495290][T22104] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2063.503120][T22102] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2063.540079][T22128] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 09 10 00 XFSB............ [ 2063.562534][T22102] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2063.570124][T22128] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2063.581600][T22104] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2063.596208][T22102] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2063.605639][T22128] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2063.619256][T22104] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2063.645399][T22128] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2063.646468][T22102] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2063.658017][T22104] XFS (loop5): SB validate failed with error -117. [ 2063.670160][T22128] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2063.692082][T22128] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2063.725038][T22102] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2063.737059][T22128] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2063.749468][T22102] XFS (loop3): SB validate failed with error -117. [ 2063.799247][T22128] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2063.820319][T22128] XFS (loop4): SB validate failed with error -117. 10:28:45 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000004307010000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @local, 0xa5}}}, 0x30) 10:28:45 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x400000, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000200)={0x0, 0x5, 0x100000000, &(0x7f00000001c0)=0xf89d}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x113, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), r2, 0x40}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x100000184, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:45 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000004e0200100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:45 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, r1, 0xff}}, 0x48) 10:28:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @local, 0xa5}}}, 0x30) 10:28:45 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) 10:28:45 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000000000000a100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:45 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x400000, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000200)={0x0, 0x5, 0x100000000, &(0x7f00000001c0)=0xf89d}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x113, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), r2, 0x40}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x100000184, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2064.352740][ T1220] XFS (loop3): SB sanity check failed [ 2064.358458][ T1220] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2064.391844][T22179] XFS (loop5): SB sanity check failed 10:28:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @local, 0xa5}}}, 0x30) [ 2064.397278][T22179] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2064.433680][ T1220] XFS (loop3): Unmount and run xfs_repair 10:28:45 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) 10:28:45 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x400000, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000200)={0x0, 0x5, 0x100000000, &(0x7f00000001c0)=0xf89d}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x113, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), r2, 0x40}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x100000184, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) [ 2064.510443][T22179] XFS (loop5): Unmount and run xfs_repair [ 2064.516639][ T1220] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2064.545821][T22179] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2064.577437][ T1220] 00000000: 58 46 53 42 00 00 10 00 00 00 00 4e 02 00 10 00 XFSB.......N.... [ 2064.620817][ T1220] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2064.640249][T22179] 00000000: 58 46 53 42 00 00 10 00 00 43 07 01 00 00 10 00 XFSB.....C...... [ 2064.662853][ T1220] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2064.696555][ T1220] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2064.703482][T22179] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2064.751527][ T1220] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2064.767783][T22179] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2064.793507][ T1220] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2064.829808][ T1220] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2064.839743][T22179] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2064.881742][ T1220] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2064.894927][T22179] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2064.903333][T22170] XFS (loop3): SB validate failed with error -117. [ 2064.913493][T22209] XFS (loop4): SB sanity check failed [ 2064.919026][T22209] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2064.938388][T22179] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2064.961908][T22209] XFS (loop4): Unmount and run xfs_repair [ 2064.975362][T22179] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2064.975609][T22209] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2064.988320][T22179] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2064.992664][T22209] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 0a 10 00 XFSB............ [ 2065.005005][T22179] XFS (loop5): SB validate failed with error -117. [ 2065.044047][T22209] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2065.062897][T22209] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2065.073124][T22209] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2065.082611][T22209] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 10:28:46 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) 10:28:46 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local}}}, 0x30) 10:28:46 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x400000, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000200)={0x0, 0x5, 0x100000000, &(0x7f00000001c0)=0xf89d}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x113, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), r2, 0x40}}, 0x18) 10:28:46 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000004407010000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:46 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000300100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2065.092172][T22209] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2065.102727][T22209] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2065.111812][T22209] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2065.124149][T22209] XFS (loop4): SB validate failed with error -117. 10:28:46 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000000000000d100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:46 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local}}}, 0x30) 10:28:46 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) 10:28:46 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x400000, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000200)={0x0, 0x5, 0x100000000, &(0x7f00000001c0)=0xf89d}) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x40}}, 0x18) [ 2065.433353][T22261] XFS (loop3): SB sanity check failed [ 2065.482149][T22261] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2065.525651][T22267] XFS (loop5): SB sanity check failed [ 2065.526465][T22261] XFS (loop3): Unmount and run xfs_repair [ 2065.534884][T22267] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2065.538339][T22261] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2065.556565][T22267] XFS (loop5): Unmount and run xfs_repair 10:28:46 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @local}}}, 0x30) 10:28:46 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) [ 2065.579874][T22267] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2065.580629][T22261] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 03 00 10 00 XFSB............ [ 2065.604521][T22267] 00000000: 58 46 53 42 00 00 10 00 00 44 07 01 00 00 10 00 XFSB.....D...... [ 2065.617417][T22261] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:46 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x400000, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x40}}, 0x18) [ 2065.639491][T22267] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2065.647785][T22261] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2065.675172][T22288] XFS (loop4): SB sanity check failed [ 2065.689659][T22267] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2065.706627][T22288] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2065.726299][T22267] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2065.733220][T22261] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2065.750294][T22261] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2065.751016][T22267] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2065.759292][T22288] XFS (loop4): Unmount and run xfs_repair [ 2065.768641][T22267] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2065.780992][T22288] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2065.790135][T22267] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2065.791158][T22288] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 0d 10 00 XFSB............ [ 2065.799448][T22267] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2065.808365][T22261] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2065.828273][T22288] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:46 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x40}}, 0x18) 10:28:46 executing program 1: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560284470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0xfffffddc, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0xe) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2065.837706][T22288] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2065.847270][T22288] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2065.861828][T22261] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2065.870288][T22267] XFS (loop5): SB validate failed with error -117. [ 2065.892673][T22288] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2065.924238][T22288] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2065.928084][T22261] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 10:28:47 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) [ 2065.943552][T22288] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2065.954102][T22261] XFS (loop3): SB validate failed with error -117. [ 2065.963228][T22288] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2065.972734][T22288] XFS (loop4): SB validate failed with error -117. 10:28:47 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000020000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:47 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000280300100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:47 executing program 2: write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x40}}, 0x18) 10:28:47 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000018100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:47 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) 10:28:47 executing program 2: write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x40}}, 0x18) [ 2066.361229][T22348] XFS (loop5): SB sanity check failed [ 2066.383888][T22348] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:47 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) [ 2066.488477][T22348] XFS (loop5): Unmount and run xfs_repair [ 2066.497441][T22363] XFS (loop3): SB sanity check failed [ 2066.524859][T22348] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2066.525223][T22363] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2066.568280][T22348] 00000000: 58 46 53 42 00 00 10 00 00 00 00 02 00 00 10 00 XFSB............ 10:28:47 executing program 2: write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x40}}, 0x18) 10:28:47 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) [ 2066.595700][T22348] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2066.608778][T22348] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2066.624369][T22377] XFS (loop4): SB sanity check failed [ 2066.638965][T22363] XFS (loop3): Unmount and run xfs_repair [ 2066.642545][T22377] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2066.670164][T22348] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2066.680294][T22363] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2066.696580][T22348] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2066.698000][T22377] XFS (loop4): Unmount and run xfs_repair [ 2066.707260][T22363] 00000000: 58 46 53 42 00 00 10 00 00 00 00 28 03 00 10 00 XFSB.......(.... [ 2066.721190][T22348] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2066.730646][T22363] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:47 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) [ 2066.739718][T22348] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2066.757156][T22377] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2066.767452][T22377] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 18 10 00 XFSB............ [ 2066.783981][T22377] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560284470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0xfffffddc, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0xe) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) 10:28:47 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x40}}, 0x18) [ 2066.812931][T22348] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2066.824983][T22363] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2066.857284][T22377] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2066.871397][T22348] XFS (loop5): SB validate failed with error -117. [ 2066.900104][T22377] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2066.914480][T22363] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2066.936238][T22377] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2066.945367][T22363] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2066.952374][T22377] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2066.961534][T22363] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2067.017785][T22377] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2067.019690][T22363] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2067.050624][T22363] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 10:28:48 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000003049020000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2067.070039][T22377] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2067.071165][T22363] XFS (loop3): SB validate failed with error -117. [ 2067.091965][T22377] XFS (loop4): SB validate failed with error -117. 10:28:48 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000740300100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:48 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x40}}, 0x18) [ 2067.280106][T17057] XFS (loop5): SB sanity check failed [ 2067.290280][T17057] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:48 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000000000001b100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) [ 2067.335444][T17057] XFS (loop5): Unmount and run xfs_repair 10:28:48 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x40}}, 0x18) [ 2067.376607][T17057] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2067.394001][T17057] 00000000: 58 46 53 42 00 00 10 00 00 30 49 02 00 00 10 00 XFSB.....0I..... [ 2067.408157][T17057] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) [ 2067.426645][T17057] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2067.436022][T17057] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2067.448508][T17057] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2067.463212][T17057] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2067.520716][T17057] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2067.572560][T17057] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 10:28:48 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x40}}, 0x18) 10:28:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) [ 2067.628970][T22424] XFS (loop5): SB validate failed with error -117. [ 2067.636655][T17057] XFS (loop3): SB sanity check failed [ 2067.655429][T17057] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2067.674919][T17057] XFS (loop3): Unmount and run xfs_repair [ 2067.681558][T17057] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2067.689056][T17057] 00000000: 58 46 53 42 00 00 10 00 00 00 00 74 03 00 10 00 XFSB.......t.... [ 2067.698382][T17057] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2067.707925][T17057] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2067.716971][T17057] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 10:28:48 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000d0000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2067.740441][T17057] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2067.745520][T22471] XFS (loop4): SB sanity check failed [ 2067.751067][T17057] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2067.764251][T22471] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2067.764570][T17057] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2067.779568][T22471] XFS (loop4): Unmount and run xfs_repair [ 2067.785416][T17057] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2067.797542][T22471] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2067.807536][T22452] XFS (loop3): SB validate failed with error -117. [ 2067.811164][T22471] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 1b 10 00 XFSB............ [ 2067.829851][T22471] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2067.924219][T22471] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 10:28:49 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x40}}, 0x18) [ 2067.968980][T22471] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 10:28:49 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 10:28:49 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000ffff030000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:49 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000a00300100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2068.076060][T22471] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2068.105910][T22471] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 10:28:49 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x40}}, 0x18) [ 2068.145180][T22471] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2068.202097][T22493] XFS (loop1): SB sanity check failed [ 2068.207552][T22493] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2068.253290][T22471] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2068.278608][T22493] XFS (loop1): Unmount and run xfs_repair [ 2068.310772][T22471] XFS (loop4): SB validate failed with error -117. [ 2068.335495][T22493] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 2068.352803][T22493] 00000000: 58 46 53 42 00 00 10 00 00 00 00 0d 00 00 10 00 XFSB............ [ 2068.353708][T22522] XFS (loop3): SB sanity check failed [ 2068.362076][T22493] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2068.377439][T22493] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2068.387101][T22493] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2068.404159][T22522] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2068.412995][T22493] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2068.425219][T22522] XFS (loop3): Unmount and run xfs_repair [ 2068.432073][T22522] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2068.447371][T22524] XFS (loop5): SB sanity check failed [ 2068.453155][T22524] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2068.477602][T22493] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2068.486405][T22524] XFS (loop5): Unmount and run xfs_repair [ 2068.501971][T22524] XFS (loop5): First 128 bytes of corrupted metadata buffer: 10:28:49 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000020100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:49 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 10:28:49 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0) [ 2068.514472][T22524] 00000000: 58 46 53 42 00 00 10 00 00 ff ff 03 00 00 10 00 XFSB............ [ 2068.525796][T22522] 00000000: 58 46 53 42 00 00 10 00 00 00 00 a0 03 00 10 00 XFSB............ [ 2068.554645][T22493] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2068.569715][T22524] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2068.598914][T22524] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2068.601675][T22522] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:49 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) [ 2068.616045][T22493] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2068.630089][T22522] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2068.644568][T22524] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2068.657428][T22524] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 10:28:49 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0) [ 2068.673153][T22493] XFS (loop1): SB validate failed with error -117. [ 2068.685697][T22524] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2068.697395][T22522] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2068.713997][T22522] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2068.717597][T22524] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2068.734290][T22522] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2068.765595][T22522] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2068.770029][T22524] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2068.790317][T22522] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2068.799842][T22522] XFS (loop3): SB validate failed with error -117. 10:28:49 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) [ 2068.852343][T22524] XFS (loop5): SB validate failed with error -117. 10:28:49 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000088070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:49 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0) [ 2068.934202][T17057] XFS (loop4): SB sanity check failed [ 2068.942464][T17057] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2068.956926][T17057] XFS (loop4): Unmount and run xfs_repair [ 2068.962852][T17057] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2068.970740][T17057] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 20 10 00 XFSB......... .. 10:28:50 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) [ 2068.979859][T17057] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2068.988894][T17057] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2068.997886][T17057] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2069.014384][T17057] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2069.023345][T17057] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2069.032335][T17057] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2069.041222][T17057] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2069.050626][T22558] XFS (loop4): SB validate failed with error -117. 10:28:50 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000040000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:50 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000e40300100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:50 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x40}}, 0x18) [ 2069.298173][T22591] XFS (loop1): SB sanity check failed [ 2069.310181][T22591] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:50 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) 10:28:50 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000001020100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2069.460540][T22591] XFS (loop1): Unmount and run xfs_repair [ 2069.500606][T22614] XFS (loop5): SB sanity check failed [ 2069.506038][T22614] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2069.536402][T22591] XFS (loop1): First 128 bytes of corrupted metadata buffer: 10:28:50 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) [ 2069.563104][T22621] XFS (loop3): SB sanity check failed [ 2069.572436][T22591] 00000000: 58 46 53 42 00 00 10 00 00 00 88 07 01 00 10 00 XFSB............ [ 2069.593247][T22621] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:50 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x40}}, 0x18) [ 2069.598769][T22591] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2069.631338][T22614] XFS (loop5): Unmount and run xfs_repair [ 2069.655462][T22614] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2069.667974][T22621] XFS (loop3): Unmount and run xfs_repair [ 2069.684820][T22591] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2069.698916][T22621] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2069.724043][T22614] 00000000: 58 46 53 42 00 00 10 00 00 00 00 04 00 00 10 00 XFSB............ [ 2069.746453][T22591] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2069.758780][T22591] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2069.761391][T22621] 00000000: 58 46 53 42 00 00 10 00 00 00 00 e4 03 00 10 00 XFSB............ [ 2069.767988][T22614] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2069.780730][T22621] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2069.792897][T22591] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 10:28:50 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x40}}, 0x18) [ 2069.795602][T22621] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2069.813887][T22621] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2069.832845][T22591] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2069.841777][T22621] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 10:28:50 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) [ 2069.851296][T22614] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2069.861543][T22647] XFS (loop4): SB sanity check failed [ 2069.865766][T22591] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2069.886271][T22614] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2069.895973][T22647] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2069.913550][T22591] XFS (loop1): SB validate failed with error -117. [ 2069.920387][T22621] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2069.934550][T22614] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2069.956093][T22621] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2069.958306][T22614] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2069.978620][T22621] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2069.979014][T22647] XFS (loop4): Unmount and run xfs_repair [ 2069.998505][T22614] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2070.013096][T22614] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2070.017872][T22621] XFS (loop3): SB validate failed with error -117. [ 2070.023014][T22647] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2070.041795][T22614] XFS (loop5): SB validate failed with error -117. [ 2070.049437][T22647] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 10 20 10 00 XFSB......... .. [ 2070.077397][T22647] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2070.092524][T22647] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2070.113561][T22647] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2070.122952][T22647] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2070.132292][T22647] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2070.141207][T22647] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2070.141220][T22647] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2070.141256][T22647] XFS (loop4): SB validate failed with error -117. 10:28:51 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), r1, 0x1}}, 0x18) 10:28:51 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 10:28:51 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) 10:28:51 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000ff07040000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:51 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000e80300100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:51 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) 10:28:51 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 10:28:51 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000022100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:51 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), r1, 0x1}}, 0x18) 10:28:51 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback}, {0xa, 0x4e23, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) 10:28:51 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), r1, 0x1}}, 0x18) [ 2070.695248][T22702] XFS (loop5): SB sanity check failed [ 2070.707932][T22702] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2070.732439][T22702] XFS (loop5): Unmount and run xfs_repair 10:28:51 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 2070.770248][T22702] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2070.792957][T22702] 00000000: 58 46 53 42 00 00 10 00 00 ff 07 04 00 00 10 00 XFSB............ [ 2070.851377][T22702] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2070.888101][T22728] XFS (loop4): SB sanity check failed [ 2070.894473][T22726] XFS (loop3): SB sanity check failed 10:28:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x0, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) [ 2070.896965][T22728] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2070.902860][T22726] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2070.937429][T22702] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2070.954089][T22726] XFS (loop3): Unmount and run xfs_repair [ 2070.960270][T22726] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2070.976725][T22702] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2070.990886][T22728] XFS (loop4): Unmount and run xfs_repair [ 2070.999554][T22726] 00000000: 58 46 53 42 00 00 10 00 00 00 00 e8 03 00 10 00 XFSB............ [ 2071.011221][T22728] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2071.017687][T22726] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2071.027979][T22702] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2071.042959][T22726] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 10:28:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x1}}, 0x18) 10:28:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 2071.051794][T22728] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 22 10 00 XFSB.........".. [ 2071.059790][T22702] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2071.080068][T22702] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2071.089103][T22702] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2071.100091][T22726] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2071.129312][T22728] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2071.163342][T22728] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2071.176900][T22702] XFS (loop5): SB validate failed with error -117. [ 2071.199293][T22726] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2071.213290][T22728] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2071.245341][T22728] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2071.264629][T22728] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2071.274403][T22726] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2071.283586][T22728] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 10:28:52 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000070000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2071.292702][T22728] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2071.298356][T22726] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2071.301831][T22728] XFS (loop4): SB validate failed with error -117. [ 2071.317568][T22726] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2071.326697][T22726] XFS (loop3): SB validate failed with error -117. 10:28:52 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000ec0300100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x0, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) 10:28:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), r1, 0x1}}, 0x18) 10:28:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 10:28:52 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000023100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x0, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) 10:28:52 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 10:28:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), r1, 0x1}}, 0x18) [ 2071.640637][T17057] XFS (loop5): SB sanity check failed [ 2071.646095][T17057] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2071.662948][T17057] XFS (loop5): Unmount and run xfs_repair [ 2071.670906][T17057] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2071.688198][T17057] 00000000: 58 46 53 42 00 00 10 00 00 00 00 07 00 00 10 00 XFSB............ [ 2071.754554][T17057] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x0, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) [ 2071.810453][T17057] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2071.823869][T17057] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2071.838024][T17057] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2071.848529][T17057] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 10:28:52 executing program 2: write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 2071.858402][T17057] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2071.886058][T17057] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2071.897856][T22828] XFS (loop3): SB sanity check failed [ 2071.903619][T22828] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2071.916660][T22787] XFS (loop5): SB validate failed with error -117. [ 2071.926245][T22802] XFS (loop4): SB sanity check failed [ 2071.931928][T22802] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2071.949900][T22828] XFS (loop3): Unmount and run xfs_repair 10:28:53 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), r0, 0x1}}, 0x18) [ 2071.957237][T22828] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2071.967608][T22802] XFS (loop4): Unmount and run xfs_repair [ 2071.980546][T22828] 00000000: 58 46 53 42 00 00 10 00 00 00 00 ec 03 00 10 00 XFSB............ [ 2072.001131][T22802] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2072.018214][T22828] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2072.060050][T22802] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 23 10 00 XFSB.........#.. [ 2072.096101][T22828] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 10:28:53 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000000e0000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2072.110835][T22802] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2072.121324][T22828] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2072.137641][T22802] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2072.147446][T22828] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2072.173691][T22802] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2072.184905][T22828] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2072.198548][T22828] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2072.216306][T22802] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2072.225575][T22828] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2072.228797][T22802] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2072.236032][T22828] XFS (loop3): SB validate failed with error -117. [ 2072.251377][T22802] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2072.262152][T22802] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2072.272211][T22802] XFS (loop4): SB validate failed with error -117. [ 2072.326179][T22863] XFS (loop5): SB sanity check failed [ 2072.332073][T22863] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2072.344161][T22863] XFS (loop5): Unmount and run xfs_repair [ 2072.350172][T22863] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2072.357662][T22863] 00000000: 58 46 53 42 00 00 10 00 00 00 00 0e 00 00 10 00 XFSB............ [ 2072.366802][T22863] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2072.375826][T22863] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2072.375839][T22863] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2072.375850][T22863] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2072.375862][T22863] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2072.375874][T22863] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2072.375886][T22863] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2072.375924][T22863] XFS (loop5): SB validate failed with error -117. 10:28:53 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000f00300100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x0, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) 10:28:53 executing program 2: write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 10:28:53 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), r0, 0x1}}, 0x18) 10:28:53 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000026100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:53 executing program 2: write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 10:28:53 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), r0, 0x1}}, 0x18) 10:28:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x0, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) 10:28:53 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000360000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:53 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 10:28:53 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), r1, 0x1}}, 0x18) [ 2072.795442][T22894] XFS (loop4): SB sanity check failed [ 2072.832720][T22894] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2}, 0xffffffffffffffff, 0xff}}, 0x48) [ 2072.859784][T22898] XFS (loop3): SB sanity check failed [ 2072.900046][T22894] XFS (loop4): Unmount and run xfs_repair [ 2072.900126][T22898] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2072.930106][T22898] XFS (loop3): Unmount and run xfs_repair [ 2072.936218][T22898] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2072.963601][T22914] XFS (loop5): SB sanity check failed [ 2072.974913][T22898] 00000000: 58 46 53 42 00 00 10 00 00 00 00 f0 03 00 10 00 XFSB............ [ 2072.980269][T22914] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2072.995816][T22894] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2073.008969][T22898] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2073.030210][T22894] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 26 10 00 XFSB.........&.. [ 2073.035902][T22898] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2073.048217][T22894] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2073.048229][T22894] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2073.048240][T22894] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2073.048250][T22894] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2073.048265][T22894] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2073.082506][T22898] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2073.131673][T22914] XFS (loop5): Unmount and run xfs_repair [ 2073.137409][T22914] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2073.167331][T22914] 00000000: 58 46 53 42 00 00 10 00 00 00 00 36 00 00 10 00 XFSB.......6.... [ 2073.185856][T22914] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2073.193229][T22898] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2073.206711][T22898] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2073.213199][T22894] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2073.218667][T22898] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2073.230951][T22914] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2073.243880][T22894] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2073.249244][T22898] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2073.256050][T22894] XFS (loop4): SB validate failed with error -117. [ 2073.268717][T22914] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2073.291643][T22914] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2073.293101][T22898] XFS (loop3): SB validate failed with error -117. [ 2073.302308][T22914] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2073.317208][T22914] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2073.326455][T22914] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2073.336283][T22914] XFS (loop5): SB validate failed with error -117. [ 2073.496171][T22955] XFS (loop3): SB sanity check failed [ 2073.504571][T22955] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2073.517110][T22955] XFS (loop3): Unmount and run xfs_repair [ 2073.525606][T22955] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2073.534902][T22955] 00000000: 58 46 53 42 00 00 10 00 00 00 00 f0 03 00 10 00 XFSB............ [ 2073.546227][T22955] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2073.578359][T22955] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2073.588134][T22955] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2073.617595][T22955] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2073.646127][T22955] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2073.655572][T22955] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2073.664823][T22955] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2073.674937][T22955] XFS (loop3): SB validate failed with error -117. 10:28:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), r1, 0x1}}, 0x18) 10:28:54 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 10:28:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2}, 0xffffffffffffffff, 0xff}}, 0x48) 10:28:54 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000027100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:54 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000fc0300100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:54 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000007e0000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:54 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 10:28:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), r1, 0x1}}, 0x18) 10:28:55 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2}, 0xffffffffffffffff, 0xff}}, 0x48) [ 2073.910613][T22981] XFS (loop5): SB sanity check failed [ 2073.916186][T22981] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2073.942237][T22981] XFS (loop5): Unmount and run xfs_repair [ 2073.961342][ T1220] XFS (loop4): SB sanity check failed [ 2073.967261][ T1220] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2073.984702][T22981] XFS (loop5): First 128 bytes of corrupted metadata buffer: 10:28:55 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), r1, 0x1}}, 0x18) 10:28:55 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 2074.007721][T23004] XFS (loop3): SB sanity check failed [ 2074.015428][T23004] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2074.020297][T22981] 00000000: 58 46 53 42 00 00 10 00 00 00 00 7e 00 00 10 00 XFSB.......~.... [ 2074.070070][ T1220] XFS (loop4): Unmount and run xfs_repair [ 2074.080175][T23004] XFS (loop3): Unmount and run xfs_repair [ 2074.085912][T23004] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2074.089920][ T1220] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2074.096855][T22981] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:55 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}}}, 0x48) [ 2074.114501][T22981] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2074.123982][T22981] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2074.134052][T22981] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2074.139567][ T1220] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 27 10 00 XFSB.........'.. [ 2074.144247][T22981] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2074.152484][ T1220] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2074.162805][T23004] 00000000: 58 46 53 42 00 00 10 00 00 00 00 fc 03 00 10 00 XFSB............ [ 2074.170405][ T1220] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2074.210662][T23004] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:55 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x1}}, 0x18) [ 2074.219530][T23004] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2074.228822][T22981] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2074.238930][T22981] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2074.248972][ T1220] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2074.258341][T22981] XFS (loop5): SB validate failed with error -117. 10:28:55 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 2074.265245][ T1220] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 10:28:55 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}}}, 0x48) [ 2074.293261][ T1220] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2074.308860][ T1220] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2074.321672][ T1220] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2074.331338][T23004] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2074.350195][T23004] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2074.375922][T23004] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2074.381238][T22989] XFS (loop4): SB validate failed with error -117. [ 2074.415414][T23004] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2074.449624][T23004] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2074.466798][T23004] XFS (loop3): SB validate failed with error -117. 10:28:55 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000800000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2074.668138][T23062] XFS (loop5): SB sanity check failed [ 2074.699516][T23062] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2074.713853][T23062] XFS (loop5): Unmount and run xfs_repair [ 2074.719611][T23062] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2074.734348][T23062] 00000000: 58 46 53 42 00 00 10 00 00 00 00 80 00 00 10 00 XFSB............ [ 2074.748258][T23062] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:28:55 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000500100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:55 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) 10:28:55 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), r1, 0x1}}, 0x18) 10:28:55 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x4e23, 0x2, @empty, 0x7}}}, 0x48) 10:28:55 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000029100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2074.760582][T23062] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2074.769446][T23062] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2074.790673][T23062] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2074.828674][T23062] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2074.851201][T23062] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2074.861544][T23062] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 10:28:55 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x1}}, 0x18) [ 2074.877367][T23062] XFS (loop5): SB validate failed with error -117. 10:28:56 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @loopback, 0x7392}, {0xa, 0x0, 0x2, @empty, 0x7}, 0xffffffffffffffff, 0xff}}, 0x48) 10:28:56 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0) [ 2074.996891][T23088] XFS (loop4): SB sanity check failed [ 2075.015784][T23088] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:56 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x1}}, 0x18) 10:28:56 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000008096980000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2075.107535][T23088] XFS (loop4): Unmount and run xfs_repair [ 2075.135745][T23108] XFS (loop3): SB sanity check failed 10:28:56 executing program 0: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000080)=0x0) r1 = getpgid(r0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x80000, 0x0) perf_event_open(0x0, r1, 0x2, r2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x20000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x33cf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, 0x0, &(0x7f0000000280), 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000400)) unshare(0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000340)='./file0\x00', 0x8, 0x2) setfsgid(0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0xfffffffffffffffd) close(r3) clone(0x10020000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = getpid() setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000380), 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000700)=0xe8) setreuid(0x0, r7) sched_setscheduler(r6, 0x5, &(0x7f0000000200)) sendto$inet(r5, &(0x7f0000000740)="9a000000007fffffff8621a6ac285a9142dc181bdf05a26c3f4267c186fed372ca597f7ea341a4e5fedfc1e58616f1bf000000000000000089b229c8266c5be94924396752319318d5a8a0016034c36391906a22b94dc77c97905f44894fe33cda649baa2e724ad388101bd9e17f5a457ededc88f744886d3c51ed821d0dbdde99eb24a7500c117ce405c9cf9cdcefad0529c145bb8481a34eb2e34b8fb56cb9d5f67df12742a147543a0e5a5933c9d69e507bf39e40ddf8982438ab5dc738086808c67b6f0ff392ef8f8e54ff7c13bd1a4af88b2a384a2eab5110963899db", 0x110, 0x0, 0x0, 0x1b4) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) r8 = socket$inet6(0x10, 0x3, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) sendmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f0000010000)="5500000020007fafb72d00b2a4a2809302000000030343ee6b26236925000a0000000000130000008848a3c728f1c46b7b31afdc1338d5440000000000000000000000088daa7227c43ab8220000bf0c00157400d4", 0x55}], 0x1}, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2075.152812][T23108] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2075.157586][T23088] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2075.174178][T23108] XFS (loop3): Unmount and run xfs_repair [ 2075.183588][T23088] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 29 10 00 XFSB.........).. [ 2075.196436][T23108] XFS (loop3): First 128 bytes of corrupted metadata buffer: 10:28:56 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0) [ 2075.204253][T23088] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2075.214555][T23108] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 05 00 10 00 XFSB............ [ 2075.237591][T23088] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2075.248086][T23108] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2075.264258][T23088] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2075.274046][T23108] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2075.295943][T23088] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2075.322489][T23108] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2075.367177][T23108] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2075.387482][T23088] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2075.405499][T23108] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2075.421113][T23088] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2075.443170][T23108] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2075.452398][T23088] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2075.464625][T23108] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2075.475160][T23088] XFS (loop4): SB validate failed with error -117. [ 2075.483000][T23108] XFS (loop3): SB validate failed with error -117. [ 2075.563048][T23149] XFS (loop5): SB sanity check failed [ 2075.578557][T23149] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2075.640031][T23149] XFS (loop5): Unmount and run xfs_repair [ 2075.645953][T23149] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2075.679192][T23149] 00000000: 58 46 53 42 00 00 10 00 00 80 96 98 00 00 10 00 XFSB............ [ 2075.695534][T23149] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2075.696691][T23144] netlink: 'syz-executor0': attribute type 10 has an invalid length. [ 2075.704999][T23149] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2075.705012][T23149] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2075.705039][T23149] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 10:28:56 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x1}}, 0x18) 10:28:56 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, 0x0, 0x0) 10:28:56 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000024930100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:56 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000600100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2075.743396][T23149] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2075.752984][T23149] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2075.763701][T23149] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2075.776041][T23149] XFS (loop5): SB validate failed with error -117. [ 2075.784933][T23144] netlink: 17 bytes leftover after parsing attributes in process `syz-executor0'. 10:28:56 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000003ffff00000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:56 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x84000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$PPPIOCSFLAGS(r1, 0x40047459, 0x0) memfd_create(&(0x7f0000000140), 0x200000000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) readv(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)=""/68, 0x44}], 0x2) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81003) syz_open_dev$ndb(&(0x7f0000000280)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) getgid() syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x14000000000, 0x1e1040) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r5 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x7f, 0x0) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f00000000c0)={0xb293, 0x1, 0x12fc}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r3, 0x400454d4, 0x0) 10:28:57 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) [ 2076.048346][T10476] XFS (loop4): SB sanity check failed [ 2076.063734][T10476] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:57 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) [ 2076.142812][T23180] XFS (loop3): SB sanity check failed [ 2076.155272][T23180] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2076.177219][T23199] XFS (loop5): SB sanity check failed [ 2076.182890][T10476] XFS (loop4): Unmount and run xfs_repair [ 2076.196607][T23180] XFS (loop3): Unmount and run xfs_repair [ 2076.197602][T23199] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2076.219067][T10476] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2076.235704][T23180] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2076.248733][T10476] 00000000: 58 46 53 42 00 00 10 00 00 00 00 02 49 30 10 00 XFSB........I0.. [ 2076.251075][T23199] XFS (loop5): Unmount and run xfs_repair [ 2076.258407][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2076.273056][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2076.282678][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2076.292102][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2076.301567][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2076.310981][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2076.320167][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2076.334165][T23180] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 06 00 10 00 XFSB............ 10:28:57 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10}, 0x18) [ 2076.360143][T23174] XFS (loop4): SB validate failed with error -117. [ 2076.413864][T23199] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2076.420164][T23180] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2076.437625][T23180] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2076.446926][T23180] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 10:28:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x400000) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x7}, 0x20) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfd3d, &(0x7f00000001c0), 0x12f}, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000003c0)=@hopopts={0x0, 0x38, [], [@calipso={0x7, 0x48, {0x0, 0x10, 0x45, 0x2, [0x9, 0xc3f, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5, 0x401, 0x1412]}}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x50e0}, @hao={0xc9, 0x10, @local}, @generic={0x5, 0xf4, "2e4b2aa160ab2b0ef7e16f461a1782f7f602183de97d6273ba1d8999395b3da1322c4368e819dc71d5e3305d1baffeaca63b825c0f1fb6fb71a5a7fff3f429fa69c88f01a6b48d52973da8d537650e7ed173f230175356305e9000b1f739dfaf99bfb03bcd341ca098dc18986a15cd0fdf386534e12dbc7b21b5a612580c26fb95d763eda1781883cbbc141cdcb8d2b35ec0f4b917e06fa86b1970ec09d88700342bf4765b7f94404f5acc3d9a32503aaeccf891eae8fc29b096005f9af1bfdab28f94f76a61edce4ca2700b06347651bcd780ae4e56cfafcf458da396337ed4fb8fdbbe3eeeb1eb8b15e1f07cc18ed2f01433dd"}, @generic={0x1, 0x68, "dc1fb15b2f727834ad0322593181e28a5d82a4327403fa184be73de44387f11ebfa0b10c138765f51f1183e7f89485d6374d9758d50a3b6793f039c9409529fa8de38ef6778cc2bc321df4391893f34f30c9ed4b43a0822c03d8bbbdfe40f7150a52b957a23592b5"}]}, 0x1d0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2076.457964][T23199] 00000000: 58 46 53 42 00 00 10 00 00 3f ff f0 00 00 10 00 XFSB.....?...... [ 2076.462795][T23180] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2076.499285][T23180] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2076.520451][T23199] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2076.544573][T23199] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 10:28:57 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000040)={'gretap0\x00'}) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="000000000000fcdbdf2506000000"], 0x1}}, 0xc0) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000400)={{{@in6, @in6=@remote}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xe8) getsockopt(r1, 0x114, 0x2710, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0xc08) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) [ 2076.567482][T23199] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2076.587380][T23199] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2076.611122][T23180] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 10:28:57 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000034100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:57 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000007b070100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2076.616614][T23199] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2076.636847][T23199] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2076.646192][T23199] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2076.655510][T23199] XFS (loop5): SB validate failed with error -117. [ 2076.712612][T23180] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2076.737464][T23180] XFS (loop3): SB validate failed with error -117. 10:28:57 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:58 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000700100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2076.963814][T23250] XFS (loop1): SB sanity check failed [ 2076.984573][T23250] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2077.030136][T23250] XFS (loop1): Unmount and run xfs_repair [ 2077.041769][T23250] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 2077.053142][T23255] XFS (loop4): SB sanity check failed [ 2077.058829][T23255] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2077.067076][T23250] 00000000: 58 46 53 42 00 00 10 00 00 00 7b 07 01 00 10 00 XFSB......{..... 10:28:58 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000000080000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2077.090357][T23255] XFS (loop4): Unmount and run xfs_repair [ 2077.096806][T23250] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2077.115976][T23255] XFS (loop4): First 128 bytes of corrupted metadata buffer: 10:28:58 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) pread64(r0, &(0x7f0000000100)=""/73, 0x49, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000000)=0x600000000000, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3, 0x6}}, 0x10) [ 2077.132187][T23255] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 34 10 00 XFSB.........4.. [ 2077.143464][T23250] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2077.168654][T23255] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2077.193170][T23250] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2077.204935][T23269] XFS (loop5): SB sanity check failed [ 2077.219322][T23269] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2077.260693][T23255] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2077.277504][T23250] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2077.288722][T23255] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2077.311354][T23285] XFS (loop3): SB sanity check failed [ 2077.317016][T23285] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2077.344385][T23269] XFS (loop5): Unmount and run xfs_repair [ 2077.365899][T23255] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2077.368087][T23250] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2077.391178][T23269] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2077.399896][T23255] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2077.406226][T23285] XFS (loop3): Unmount and run xfs_repair [ 2077.415658][T23293] XFS (loop2): Mounting V4 Filesystem [ 2077.421314][T23255] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2077.423135][T23285] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2077.437377][T23293] XFS (loop2): totally zeroed log [ 2077.438265][T23269] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 01 00 10 00 XFSB............ [ 2077.455297][T23250] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 10:28:58 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) pread64(r0, &(0x7f0000000100)=""/73, 0x49, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000000)=0x600000000000, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3, 0x6}}, 0x10) [ 2077.458097][T23255] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2077.466747][T23250] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2077.473379][T23285] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 07 00 10 00 XFSB............ [ 2077.497506][T23293] XFS (loop2): Failed to read root inode 0x100000000080, error 22 [ 2077.497515][T23269] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2077.497569][T23269] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2077.505731][T23255] XFS (loop4): SB validate failed with error -117. [ 2077.530067][T23250] XFS (loop1): SB validate failed with error -117. [ 2077.539880][T23285] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2077.559190][T23285] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2077.571335][T23285] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2077.582225][T23285] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2077.591613][T23285] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2077.596106][T23269] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2077.601582][T23285] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2077.619094][T23269] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2077.619486][T23285] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2077.636116][T23269] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2077.637738][T23285] XFS (loop3): SB validate failed with error -117. 10:28:58 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) pread64(r0, &(0x7f0000000100)=""/73, 0x49, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000000)=0x600000000000, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3, 0x6}}, 0x10) [ 2077.662731][T23269] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2077.677140][T23269] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2077.706963][T23269] XFS (loop5): SB validate failed with error -117. 10:28:58 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) pread64(r0, &(0x7f0000000100)=""/73, 0x49, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000000)=0x600000000000, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) 10:28:58 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x8000, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000006c0)={0x6, {{0x2, 0x4e23, @broadcast}}, 0x1, 0x5, [{{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e21, @remote}}]}, 0x310) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r2}}, 0xc) 10:28:59 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000035100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:59 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="58465342000010000000fffffff6100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:59 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000200100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) pread64(r0, &(0x7f0000000100)=""/73, 0x49, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000000)=0x600000000000, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2, 0x6}}, 0x10) 10:28:59 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000900100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:28:59 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x8000, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000006c0)={0x6, {{0x2, 0x4e23, @broadcast}}, 0x1, 0x5, [{{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e21, @remote}}]}, 0x310) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r2}}, 0xc) [ 2078.247293][T10476] XFS (loop4): SB sanity check failed [ 2078.253199][T10476] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:28:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) pread64(r0, &(0x7f0000000100)=""/73, 0x49, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000000)=0x600000000000, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2, 0x6}}, 0x10) [ 2078.313354][T23348] XFS (loop5): SB sanity check failed [ 2078.319310][T23348] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2078.349116][T23369] XFS (loop3): SB sanity check failed [ 2078.354277][T23348] XFS (loop5): Unmount and run xfs_repair [ 2078.365502][T10476] XFS (loop4): Unmount and run xfs_repair [ 2078.372679][T23369] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2078.374747][T23348] XFS (loop5): First 128 bytes of corrupted metadata buffer: 10:28:59 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x8000, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000006c0)={0x6, {{0x2, 0x4e23, @broadcast}}, 0x1, 0x5, [{{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e21, @remote}}]}, 0x310) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r2}}, 0xc) [ 2078.414577][T10476] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2078.431211][T10476] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 35 10 00 XFSB.........5.. 10:28:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) pread64(r0, &(0x7f0000000100)=""/73, 0x49, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000000)=0x600000000000, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2, 0x6}}, 0x10) [ 2078.464847][T23369] XFS (loop3): Unmount and run xfs_repair [ 2078.478190][T23348] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 02 00 10 00 XFSB............ [ 2078.481375][T23369] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2078.513452][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2078.516293][T23348] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2078.533999][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2078.550510][T23369] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 09 00 10 00 XFSB............ 10:28:59 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x8000, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000006c0)={0x6, {{0x2, 0x4e23, @broadcast}}, 0x1, 0x5, [{{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e21, @remote}}]}, 0x310) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4}, 0xc) [ 2078.560200][T23369] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2078.561101][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2078.586581][T23348] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2078.588658][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2078.605102][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 10:28:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) pread64(r0, &(0x7f0000000100)=""/73, 0x49, 0x0) dup2(r0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0x6}}, 0x10) [ 2078.611466][T23369] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2078.622971][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2078.622985][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2078.623060][T23342] XFS (loop4): SB validate failed with error -117. [ 2078.648380][T23348] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2078.650372][T23352] XFS (loop2): SB sanity check failed [ 2078.672975][T23352] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2078.675084][T23348] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2078.694869][T23369] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2078.722056][T23369] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2078.736065][T23348] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2078.741222][T23369] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2078.746998][T23348] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2078.758909][T23352] XFS (loop2): Unmount and run xfs_repair 10:28:59 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x8000, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000006c0)={0x6, {{0x2, 0x4e23, @broadcast}}, 0x1, 0x5, [{{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e21, @remote}}]}, 0x310) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4}, 0xc) [ 2078.766781][T23369] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2078.778146][T23352] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 2078.789177][T23348] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2078.815952][T23348] XFS (loop5): SB validate failed with error -117. [ 2078.817579][T23352] 00000000: 58 46 53 42 00 00 10 00 00 00 ff ff ff f6 10 00 XFSB............ [ 2078.831956][T23369] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2078.848038][T23352] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2078.861000][T23352] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2078.870324][T23352] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2078.870717][T23369] XFS (loop3): SB validate failed with error -117. [ 2078.879463][T23352] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2078.895516][T23352] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2078.919661][T23352] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 10:29:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) pread64(r0, &(0x7f0000000100)=""/73, 0x49, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0x6}}, 0x10) [ 2078.980560][T23352] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2079.041485][T23352] XFS (loop2): SB validate failed with error -117. 10:29:00 executing program 2: 10:29:00 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000038100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:00 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x8000, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000006c0)={0x6, {{0x2, 0x4e23, @broadcast}}, 0x1, 0x5, [{{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e21, @remote}}]}, 0x310) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4}, 0xc) 10:29:00 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000300100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0x6}}, 0x10) 10:29:00 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000a00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:00 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x8000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r1}}, 0xc) 10:29:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0x6}}, 0x10) 10:29:00 executing program 2: [ 2079.346332][ T1220] XFS (loop5): SB sanity check failed [ 2079.356649][ T1220] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:29:00 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000640)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x0, 0x3ff, @remote, 0x2}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r1}}, 0xc) 10:29:00 executing program 2: [ 2079.462096][ T1220] XFS (loop5): Unmount and run xfs_repair [ 2079.498390][ T1220] XFS (loop5): First 128 bytes of corrupted metadata buffer: 10:29:00 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r0, 0x6}}, 0x10) [ 2079.558611][ T1220] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 03 00 10 00 XFSB............ [ 2079.620527][ T1220] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:29:00 executing program 2: [ 2079.661003][ T1220] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2079.689477][ T1220] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2079.741944][ T1220] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2079.762159][ T1220] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2079.775056][ T1220] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2079.804118][ T1220] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2079.830294][T23443] XFS (loop5): SB validate failed with error -117. [ 2079.837294][T23454] XFS (loop3): SB sanity check failed [ 2079.849229][T23440] XFS (loop4): SB sanity check failed [ 2079.855911][T23440] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2079.868011][T23454] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2079.887087][T23440] XFS (loop4): Unmount and run xfs_repair [ 2079.893184][T23454] XFS (loop3): Unmount and run xfs_repair [ 2079.898993][T23454] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2079.912572][T23440] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2079.912969][T23454] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 0a 00 10 00 XFSB............ [ 2079.920683][T23440] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 38 10 00 XFSB.........8.. [ 2079.930904][T23454] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2079.938829][T23440] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2079.952586][T23454] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2079.961489][T23440] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2079.968167][T23454] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2079.973942][T23440] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2079.988364][T23454] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2079.992916][T23440] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2080.009380][T23454] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2080.018354][T23454] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2080.043444][T23440] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2080.069633][T23440] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2080.092550][T23454] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2080.103999][T23440] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2080.105032][T23454] XFS (loop3): SB validate failed with error -117. [ 2080.134554][T23440] XFS (loop4): SB validate failed with error -117. 10:29:01 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000000000033c100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:01 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r0, 0x6}}, 0x10) 10:29:01 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r1}}, 0xc) 10:29:01 executing program 2: 10:29:01 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000400100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:01 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000d00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:01 executing program 2: 10:29:01 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r0, 0x6}}, 0x10) 10:29:01 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r1}}, 0xc) [ 2080.412071][T23528] XFS (loop5): SB sanity check failed [ 2080.462246][T23528] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2080.481121][T23524] XFS (loop3): SB sanity check failed 10:29:01 executing program 2: [ 2080.503200][T23524] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2080.514585][T23528] XFS (loop5): Unmount and run xfs_repair [ 2080.546397][T23538] XFS (loop4): SB sanity check failed [ 2080.552074][T23524] XFS (loop3): Unmount and run xfs_repair [ 2080.556871][T23538] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2080.570539][T23524] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2080.579259][T23528] XFS (loop5): First 128 bytes of corrupted metadata buffer: 10:29:01 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0x6}}, 0x10) [ 2080.607043][T23524] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 0d 00 10 00 XFSB............ [ 2080.633677][T23528] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 04 00 10 00 XFSB............ [ 2080.655288][T23538] XFS (loop4): Unmount and run xfs_repair [ 2080.666032][T23524] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2080.694746][T23528] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:29:01 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r1}}, 0xc) [ 2080.700245][T23538] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2080.723908][T23538] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 03 3c 10 00 XFSB.........<.. [ 2080.746481][T23538] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2080.750087][T23524] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2080.764038][T23538] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2080.773718][T23538] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2080.780466][T23528] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2080.783159][T23538] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2080.800590][T23538] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2080.807958][T23524] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2080.823834][T23528] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2080.835938][T23538] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2080.844685][T23524] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2080.845110][T23528] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2080.867539][T23524] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2080.879836][T23538] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2080.886916][T23524] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2080.898295][T23538] XFS (loop4): SB validate failed with error -117. [ 2080.911802][T23524] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2080.915304][T23528] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2080.926370][T23524] XFS (loop3): SB validate failed with error -117. [ 2080.930154][T23528] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2080.945388][T23528] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2080.954317][T23528] XFS (loop5): SB validate failed with error -117. 10:29:02 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000000000003f100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x400000a77, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x9) close(r1) 10:29:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0x6}}, 0x10) 10:29:02 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r1}}, 0xc) 10:29:02 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000500100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:02 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000e00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0x6}}, 0x10) 10:29:02 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r0}}, 0xc) 10:29:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0x6}}, 0x10) 10:29:02 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r0}}, 0xc) [ 2081.400767][T23603] XFS (loop5): SB sanity check failed [ 2081.440200][T23603] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2081.470905][T23605] XFS (loop4): SB sanity check failed [ 2081.494106][T23605] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2081.502623][T23603] XFS (loop5): Unmount and run xfs_repair 10:29:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) [ 2081.557143][T23603] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2081.565723][ T1220] XFS (loop3): SB sanity check failed [ 2081.572263][ T1220] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2081.585614][T23605] XFS (loop4): Unmount and run xfs_repair [ 2081.596695][T23603] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 05 00 10 00 XFSB............ 10:29:02 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r0}}, 0xc) [ 2081.613856][ T1220] XFS (loop3): Unmount and run xfs_repair [ 2081.629073][T23605] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2081.635346][ T1220] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2081.650226][T23603] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2081.671577][ T1220] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 0e 00 10 00 XFSB............ [ 2081.689083][T23603] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2081.689278][T23605] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 3f 10 00 XFSB.........?.. [ 2081.708745][ T1220] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2081.720172][T23603] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2081.746542][ T1220] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2081.750319][T23603] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2081.770805][T23605] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2081.772132][T23603] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2081.783644][ T1220] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2081.795476][T23605] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2081.805201][ T1220] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2081.820592][ T1220] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2081.829732][ T1220] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2081.838966][ T1220] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2081.848508][T23603] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2081.859166][T23623] XFS (loop3): SB validate failed with error -117. [ 2081.864707][T23605] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2081.877558][T23603] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2081.887198][T23603] XFS (loop5): SB validate failed with error -117. [ 2081.895217][T23605] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2081.904421][T23605] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2081.913549][T23605] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2081.937307][T23605] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2081.948492][T23605] XFS (loop4): SB validate failed with error -117. [ 2082.015699][T23623] XFS (loop3): SB sanity check failed [ 2082.023156][T23623] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2082.057868][T23623] XFS (loop3): Unmount and run xfs_repair 10:29:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0x6}}, 0x10) 10:29:03 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r1}}, 0xc) 10:29:03 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000600100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:03 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000040100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) [ 2082.120730][T23623] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2082.128152][T23623] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 0e 00 10 00 XFSB............ [ 2082.145163][T23623] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2082.154902][T23623] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2082.210347][T23623] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2082.235129][T23623] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2082.270279][T23623] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2082.290534][T23623] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2082.305854][T23623] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2082.338206][T23688] XFS (loop5): SB sanity check failed [ 2082.344823][T23623] XFS (loop3): SB validate failed with error -117. [ 2082.351789][T23688] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2082.368275][T23688] XFS (loop5): Unmount and run xfs_repair 10:29:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) 10:29:03 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r1}}, 0xc) 10:29:03 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000201000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:03 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000044100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2082.397001][T23688] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2082.405042][T23688] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 06 00 10 00 XFSB............ [ 2082.414785][T23688] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2082.421121][T23704] binder_alloc: binder_alloc_mmap_handler: 23695 20001000-20004000 already mapped failed -16 [ 2082.434578][T23702] binder: BINDER_SET_CONTEXT_MGR already set [ 2082.461869][T23688] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2082.476832][T23702] binder: 23695:23702 ioctl 40046207 0 returned -16 [ 2082.494791][T23704] binder_alloc: 23695: binder_alloc_buf, no vma [ 2082.502916][T10476] binder: release 23695:23702 transaction 26 out, still active 10:29:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) 10:29:03 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r1}}, 0xc) [ 2082.520196][T23688] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2082.533311][T23704] binder: 23695:23704 transaction failed 29189/-3, size 24-0 line 3035 [ 2082.546399][T23688] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2082.573897][T23688] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2082.585340][T23688] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2082.596348][T23688] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2082.611489][T10476] binder: undelivered TRANSACTION_COMPLETE [ 2082.617863][T10476] binder: send failed reply for transaction 26, target dead 10:29:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x200000000000f, 0x100000000000003, 0x2, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0xf, 0x80007, 0x9, &(0x7f0000000240)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getpid() sendmsg$kcm(r0, 0x0, 0x4044) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffff001, 0x0, 0xb5a4, 0x0, 0xe, 0x18000000000000, 0x0, 0x0, 0x7, 0x78d, 0x364, 0x4, 0x5, 0x2, 0x1, 0x6, 0xfffffffffffffff9, 0x0, 0x1ff, 0x401, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x2, 0x101, 0x5, 0x1ff, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x800, 0x5, 0x5, 0x32a9, 0x511, 0x100000001, 0xcbc, 0xffff, 0x3c20, 0x5, 0x10000, 0x78, 0x0, 0x0, 0x5a0, 0x401, 0x9, 0x200, 0x2, 0x7, 0x6, 0x0, 0x1134, 0x0, 0x7, 0x0, 0x5, 0x2, 0x0, 0x1, 0x1, @perf_config_ext={0x100000000, 0x1}, 0x8000, 0x3ff, 0x6, 0x7, 0x3, 0x4, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() [ 2082.658160][T23688] XFS (loop5): SB validate failed with error -117. [ 2082.693598][T10476] binder: undelivered TRANSACTION_ERROR: 29189 10:29:03 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r1}}, 0xc) 10:29:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) [ 2082.753094][T23718] XFS (loop3): SB sanity check failed [ 2082.758561][T23718] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2082.771179][T23711] XFS (loop4): SB sanity check failed [ 2082.776589][T23711] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2082.776599][T23711] XFS (loop4): Unmount and run xfs_repair [ 2082.776611][T23711] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2082.776626][T23711] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 44 10 00 XFSB.........D.. [ 2082.776638][T23711] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2082.776650][T23711] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2082.776667][T23711] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2082.801903][T23718] XFS (loop3): Unmount and run xfs_repair [ 2082.801917][T23718] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2082.801933][T23718] 00000000: 58 46 53 42 00 00 10 00 00 00 00 20 10 00 10 00 XFSB....... .... [ 2082.801948][T23718] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2082.801960][T23718] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2082.801972][T23718] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2082.801983][T23718] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2082.801994][T23718] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2082.802006][T23718] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2082.802018][T23718] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2082.802060][T23718] XFS (loop3): SB validate failed with error -117. [ 2082.803281][T23711] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2082.907123][T23711] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2082.939027][T23711] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2083.032378][T23711] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 10:29:04 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000700100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r1}}, 0xc) 10:29:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) 10:29:04 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000001400100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x200000000000f, 0x100000000000003, 0x2, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0xf, 0x80007, 0x9, &(0x7f0000000240)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getpid() sendmsg$kcm(r0, 0x0, 0x4044) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffff001, 0x0, 0xb5a4, 0x0, 0xe, 0x18000000000000, 0x0, 0x0, 0x7, 0x78d, 0x364, 0x4, 0x5, 0x2, 0x1, 0x6, 0xfffffffffffffff9, 0x0, 0x1ff, 0x401, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x2, 0x101, 0x5, 0x1ff, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x800, 0x5, 0x5, 0x32a9, 0x511, 0x100000001, 0xcbc, 0xffff, 0x3c20, 0x5, 0x10000, 0x78, 0x0, 0x0, 0x5a0, 0x401, 0x9, 0x200, 0x2, 0x7, 0x6, 0x0, 0x1134, 0x0, 0x7, 0x0, 0x5, 0x2, 0x0, 0x1, 0x1, @perf_config_ext={0x100000000, 0x1}, 0x8000, 0x3ff, 0x6, 0x7, 0x3, 0x4, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() [ 2083.078027][T23711] XFS (loop4): SB validate failed with error -117. 10:29:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) 10:29:04 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000048100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r1}}, 0xc) 10:29:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8}, 0x10) 10:29:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x200000000000f, 0x100000000000003, 0x2, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0xf, 0x80007, 0x9, &(0x7f0000000240)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getpid() sendmsg$kcm(r0, 0x0, 0x4044) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffff001, 0x0, 0xb5a4, 0x0, 0xe, 0x18000000000000, 0x0, 0x0, 0x7, 0x78d, 0x364, 0x4, 0x5, 0x2, 0x1, 0x6, 0xfffffffffffffff9, 0x0, 0x1ff, 0x401, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x2, 0x101, 0x5, 0x1ff, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x800, 0x5, 0x5, 0x32a9, 0x511, 0x100000001, 0xcbc, 0xffff, 0x3c20, 0x5, 0x10000, 0x78, 0x0, 0x0, 0x5a0, 0x401, 0x9, 0x200, 0x2, 0x7, 0x6, 0x0, 0x1134, 0x0, 0x7, 0x0, 0x5, 0x2, 0x0, 0x1, 0x1, @perf_config_ext={0x100000000, 0x1}, 0x8000, 0x3ff, 0x6, 0x7, 0x3, 0x4, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() [ 2083.348576][T23768] XFS (loop3): SB sanity check failed [ 2083.362241][T23768] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2083.404112][T23780] XFS (loop5): SB sanity check failed [ 2083.413232][T23768] XFS (loop3): Unmount and run xfs_repair [ 2083.419172][T23768] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2083.422943][T23780] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2083.436156][T23768] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 14 00 10 00 XFSB............ 10:29:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4}, 0xc) [ 2083.540838][T23780] XFS (loop5): Unmount and run xfs_repair [ 2083.550278][T23768] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:29:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net////\x00', 0x4000, 0x0) [ 2083.583550][T23780] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2083.607245][T23768] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2083.618342][T23804] XFS (loop4): SB sanity check failed [ 2083.628903][T23780] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 07 00 10 00 XFSB............ [ 2083.658439][T23768] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2083.663723][T23804] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2083.679442][T23780] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2083.690403][T23768] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2083.699717][T23780] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2083.703710][T23804] XFS (loop4): Unmount and run xfs_repair [ 2083.716431][T23768] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2083.739636][T23768] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2083.760308][T23780] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2083.761559][T23804] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2083.772913][T23768] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2083.803783][T23780] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2083.808495][T23804] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 48 10 00 XFSB.........H.. [ 2083.824714][T23768] XFS (loop3): SB validate failed with error -117. [ 2083.835344][T23780] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2083.841147][T23804] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2083.848914][T23780] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2083.859890][T23804] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2083.862633][T23780] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2083.871893][T23804] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2083.880454][T23780] XFS (loop5): SB validate failed with error -117. [ 2083.896813][T23804] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2083.915301][T23804] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2083.924637][T23804] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2083.933626][T23804] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2083.942879][T23804] XFS (loop4): SB validate failed with error -117. 10:29:05 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000800100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:05 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) timerfd_settime(r2, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)={0x2001}) 10:29:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4}, 0xc) 10:29:05 executing program 0: clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x8) 10:29:05 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000001800100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4}, 0xc) 10:29:05 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000000000004c100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:05 executing program 0: getuid() perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x207fff) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x2000000000000012, r0, 0x0) lseek(r0, 0x0, 0x0) 10:29:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4}, 0xc) 10:29:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) dup2(r0, r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 10:29:05 executing program 0: socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) socket$packet(0x11, 0x2, 0x300) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000080), 0x4) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) pselect6(0x40, &(0x7f00000000c0)={0x64}, 0x0, 0x0, &(0x7f0000000040)={0x0, r2+30000000}, &(0x7f0000000300)={0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @multicast2, @multicast1}, 0x0) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, &(0x7f0000000100)) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 2084.428658][T23855] XFS (loop5): SB sanity check failed [ 2084.428870][T23867] XFS (loop3): SB sanity check failed [ 2084.436580][T23855] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2084.447038][T23867] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2084.523384][T23855] XFS (loop5): Unmount and run xfs_repair [ 2084.529756][T23855] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2084.549750][T23881] XFS (loop4): SB sanity check failed 10:29:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4}, 0xc) [ 2084.563872][T23881] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2084.581036][T23867] XFS (loop3): Unmount and run xfs_repair [ 2084.609251][T23867] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2084.611149][T23855] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 08 00 10 00 XFSB............ [ 2084.643805][T23867] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 18 00 10 00 XFSB............ [ 2084.660891][T23867] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2084.669781][T23867] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2084.691109][T23881] XFS (loop4): Unmount and run xfs_repair [ 2084.701214][T23855] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2084.712035][T23881] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2084.730195][T23855] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2084.746792][T23881] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 4c 10 00 XFSB.........L.. [ 2084.759822][T23855] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2084.769574][T23881] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2084.779162][T23855] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2084.780329][T23867] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2084.805340][T23881] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2084.840112][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2084.846081][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2084.848505][T23867] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2084.854251][T23881] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2084.861361][T23855] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2084.877356][T23881] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2084.892679][T23867] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2084.895963][T23881] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2084.909877][T23855] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2084.919814][T23867] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2084.926107][T23881] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2084.928873][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2084.937693][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2084.943409][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2084.949137][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2084.954904][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2084.966330][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2084.971511][T23881] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2084.972197][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2084.986723][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2084.989767][T23881] XFS (loop4): SB validate failed with error -117. [ 2084.999123][T23855] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2085.008291][T23867] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2085.021346][T23867] XFS (loop3): SB validate failed with error -117. [ 2085.031086][T23855] XFS (loop5): SB validate failed with error -117. 10:29:06 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000900100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:06 executing program 2: semget$private(0x0, 0x3, 0x295) 10:29:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4}, 0xc) 10:29:06 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000350100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:06 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000001b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x0, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r1}}, 0xc) 10:29:06 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00\x00\x00\x00\x00\xdb\x88yt\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\ah1\x03\xcfHQo\xd9`c`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x89\xd6\xa5\xd8n\xeao\xc6j\xdcl\x927\x8dI', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000200)=""/138, 0x8a) 10:29:06 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev, 0xfc2a}, {0xa, 0x0, 0x3ff, @ipv4={[], [], @dev}}}}, 0x48) [ 2085.363558][T10476] XFS (loop5): SB sanity check failed [ 2085.369046][T10476] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2085.386094][T10476] XFS (loop5): Unmount and run xfs_repair [ 2085.408914][T10476] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2085.439640][T10476] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 09 00 10 00 XFSB............ [ 2085.463979][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2085.529234][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2085.539722][T23944] XFS (loop4): SB sanity check failed [ 2085.558331][T23944] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:29:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x0, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r1}}, 0xc) 10:29:06 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) close(r0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000000c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) [ 2085.590342][T23946] XFS (loop3): SB sanity check failed [ 2085.599858][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2085.604666][T23946] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2085.653188][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2085.678375][T23944] XFS (loop4): Unmount and run xfs_repair 10:29:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x17, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2085.712493][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2085.714158][T23946] XFS (loop3): Unmount and run xfs_repair [ 2085.738315][T23944] XFS (loop4): First 128 bytes of corrupted metadata buffer: 10:29:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x0, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r1}}, 0xc) [ 2085.764906][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2085.769589][T23946] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2085.786266][T23944] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 03 50 10 00 XFSB.........P.. [ 2085.805489][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2085.830086][T23946] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 1b 00 10 00 XFSB............ [ 2085.857583][T23937] XFS (loop5): SB validate failed with error -117. [ 2085.872443][T23944] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2085.890297][T23944] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2085.899245][T23946] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2085.908892][T23944] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2085.918906][T23946] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2085.929569][T23944] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2085.947514][T23946] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2085.959435][T23944] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2085.970092][T23946] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2085.986449][T23946] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2085.995512][T23944] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2085.995524][T23944] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2085.995562][T23944] XFS (loop4): SB validate failed with error -117. 10:29:07 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000a00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:07 executing program 2: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 10:29:07 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r1}}, 0xc) [ 2086.036264][T23946] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2086.048712][T23946] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2086.067933][T23946] XFS (loop3): SB validate failed with error -117. 10:29:07 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000060100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:07 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000002000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:07 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r1}}, 0xc) 10:29:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) r1 = socket(0xf, 0x3, 0x7f) recvfrom$inet6(r1, &(0x7f00000002c0)=""/229, 0xe5, 0x2, &(0x7f0000000040)={0xa, 0x4e24, 0x8001, @mcast1, 0x2}, 0x1c) shutdown(r1, 0x1) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000280)=@netrom={'nr', 0x0}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x2a80, 0x0, 0xffffffffffffffff, 0x0, [0xe]}, 0x2c) sendto$inet(r0, &(0x7f0000000200)="10", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x7fffffff}, 0x14) shutdown(r0, 0x1) 10:29:07 executing program 0: clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xb3, 0x13d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 10:29:07 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r1}}, 0xc) [ 2086.404717][ T1220] XFS (loop5): SB sanity check failed [ 2086.435855][ T1220] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2086.483116][ T1220] XFS (loop5): Unmount and run xfs_repair [ 2086.498674][ T1220] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2086.526251][ T1220] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 0a 00 10 00 XFSB............ [ 2086.526422][T10476] XFS (loop4): SB sanity check failed [ 2086.540014][ T1220] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2086.549803][ T1220] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2086.565199][ T1220] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2086.589498][ T1220] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2086.600834][T24051] XFS (loop3): SB sanity check failed [ 2086.614507][ T1220] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2086.617804][T24051] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:29:07 executing program 2: socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000084010, 0x0) [ 2086.626208][ T1220] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 10:29:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000040)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101}) [ 2086.662381][T10476] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2086.677687][ T1220] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2086.690191][T24051] XFS (loop3): Unmount and run xfs_repair [ 2086.703797][T24021] XFS (loop5): SB validate failed with error -117. [ 2086.723550][T10476] XFS (loop4): Unmount and run xfs_repair [ 2086.737869][T24051] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2086.750377][T10476] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2086.759284][T10476] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 60 10 00 XFSB.........`.. 10:29:07 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r1}}, 0xc) [ 2086.768999][T24051] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 20 00 10 00 XFSB........ ... [ 2086.778490][T10476] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2086.793639][T10476] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2086.802854][T24051] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2086.812121][T10476] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2086.821454][T10476] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2086.830697][T24051] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2086.839838][T10476] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2086.849108][T10476] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2086.858288][T24051] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2086.877245][T10476] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2086.886462][T24039] XFS (loop4): SB validate failed with error -117. [ 2086.901536][T24051] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2086.917440][T24051] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2086.940983][T24051] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 10:29:08 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000c00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000040), 0x3a3728, 0x0, 0x0, 0xffffffffffffffbf) 10:29:08 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8910, 0x0) [ 2087.058511][T24051] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 10:29:08 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000260100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2087.126081][T24051] XFS (loop3): SB validate failed with error -117. 10:29:08 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000102000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:08 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) 10:29:08 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x27) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0x5a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) [ 2087.392747][T24120] XFS (loop4): SB sanity check failed [ 2087.406889][T24120] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2087.440805][ T1220] XFS (loop5): SB sanity check failed [ 2087.448861][ T1220] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:29:08 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) [ 2087.495924][T24120] XFS (loop4): Unmount and run xfs_repair [ 2087.516111][ T1220] XFS (loop5): Unmount and run xfs_repair [ 2087.533237][T24120] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2087.547321][ T1220] XFS (loop5): First 128 bytes of corrupted metadata buffer: 10:29:08 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x43732e5398416f1a}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 2087.590111][T24120] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 02 60 10 00 XFSB.........`.. [ 2087.596624][ T1220] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 0c 00 10 00 XFSB............ [ 2087.611573][T24120] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2087.618885][T24153] XFS (loop3): SB sanity check failed [ 2087.626487][T24153] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2087.660775][T24120] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2087.671626][T24153] XFS (loop3): Unmount and run xfs_repair [ 2087.685701][T24153] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2087.689161][ T1220] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:29:08 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) [ 2087.707705][T24178] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. [ 2087.716062][T24153] 00000000: 58 46 53 42 00 00 10 00 00 00 00 10 20 00 10 00 XFSB........ ... [ 2087.727569][T24120] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2087.729334][ T1220] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2087.748196][T24153] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2087.760396][T24120] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2087.780808][T24120] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2087.787249][T24153] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2087.799872][ T1220] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2087.815662][T24120] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2087.823197][T24153] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2087.826600][T24178] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2087.847569][ T1220] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2087.857371][T24120] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 10:29:08 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4}, 0xc) [ 2087.859781][T24153] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2087.872567][ T1220] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2087.892723][T24120] XFS (loop4): SB validate failed with error -117. [ 2087.899717][T24178] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2087.906806][T24153] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2087.912348][ T1220] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2087.928354][T24153] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2087.938008][ T1220] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2087.955308][T24124] XFS (loop5): SB validate failed with error -117. 10:29:09 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4}, 0xc) [ 2087.963194][T24153] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2087.973838][T24153] XFS (loop3): SB validate failed with error -117. [ 2087.984970][T24179] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. [ 2088.021625][T24178] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. [ 2088.067879][T24192] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2088.130710][T24194] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 10:29:09 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000d00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:09 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4}, 0xc) 10:29:09 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000068100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:09 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000002300100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:09 executing program 1: r0 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 10:29:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) [ 2088.520738][ T1231] XFS (loop4): SB sanity check failed [ 2088.526196][ T1231] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2088.550585][T24214] XFS (loop5): SB sanity check failed [ 2088.565845][T24214] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2088.571925][ T1231] XFS (loop4): Unmount and run xfs_repair [ 2088.590192][T24214] XFS (loop5): Unmount and run xfs_repair [ 2088.596074][T24214] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2088.614844][T24239] XFS (loop3): SB sanity check failed [ 2088.624255][T24214] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 0d 00 10 00 XFSB............ [ 2088.624529][T24239] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2088.635526][ T1231] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2088.653547][T24214] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2088.660098][T24239] XFS (loop3): Unmount and run xfs_repair [ 2088.663039][T24214] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2088.668416][T24239] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2088.677423][ T1231] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 68 10 00 XFSB.........h.. [ 2088.693711][T24239] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 23 00 10 00 XFSB........#... [ 2088.693724][T24239] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2088.693734][T24239] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2088.693746][T24239] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2088.693769][T24239] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2088.693782][T24239] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2088.693799][T24239] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2088.703414][T24214] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2088.719079][T24239] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2088.721060][ T1231] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2088.736624][T24239] XFS (loop3): SB validate failed with error -117. [ 2088.739005][T24214] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2088.798648][ T1231] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2088.807806][ T1231] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2088.810109][T24214] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2088.816995][ T1231] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2088.834866][ T1231] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2088.838254][T24214] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2088.844039][ T1231] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2088.862369][ T1231] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2088.862396][T24214] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2088.880637][T24213] XFS (loop4): SB validate failed with error -117. [ 2088.887476][T24214] XFS (loop5): SB validate failed with error -117. [ 2089.093626][ T1231] XFS (loop5): SB sanity check failed [ 2089.099257][ T1231] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2089.111291][ T1231] XFS (loop5): Unmount and run xfs_repair [ 2089.117113][ T1231] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2089.124806][ T1231] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 0d 00 10 00 XFSB............ [ 2089.136680][ T1231] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2089.145742][ T1231] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2089.159327][ T1231] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2089.183661][ T1231] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2089.198114][ T1231] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2089.208402][ T1231] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2089.217638][ T1231] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2089.227885][T24214] XFS (loop5): SB validate failed with error -117. 10:29:11 executing program 2: clone(0x200, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(0xffffffffffffffff, r0) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 10:29:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept4(r0, 0x0, &(0x7f0000000500), 0x80800) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) r2 = accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000140)=0x80) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x4, 0xff, 0x9, 0x3ffc000000, 0x1, 0x81, 0x2, 0x20, 0x3, 0xa9, 0x45}, 0xb) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a00f8ff00000000019070") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='pids.max\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x4}, &(0x7f0000000300)=0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000340)=0x1950, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000280)) recvmsg$kcm(r1, 0x0, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) sendto$inet6(r4, &(0x7f0000000000)="cc", 0x1, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/188, 0xbc, 0x1}, 0x10000}], 0x2, 0x2000, 0x0) 10:29:11 executing program 0: add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) times(0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000500)='\x00', 0xffffffffffffffff, 0x0, 0x0) 10:29:11 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000032800100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:11 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000000000006c100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:11 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000001400100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) write$binfmt_misc(r1, 0x0, 0x0) 10:29:11 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x2000000000000012, r0, 0x0) [ 2090.633554][T17057] XFS (loop5): SB sanity check failed [ 2090.639210][T17057] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2090.675703][T17057] XFS (loop5): Unmount and run xfs_repair [ 2090.695163][T24294] XFS (loop3): SB sanity check failed [ 2090.697625][T17057] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2090.713125][T24294] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2090.715005][T17057] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 14 00 10 00 XFSB............ [ 2090.764429][T24294] XFS (loop3): Unmount and run xfs_repair 10:29:11 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000200)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="010c0900000097170000ce2f867fc21f21b900000000000000000000000000000000"], 0x0) [ 2090.779164][T24294] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2090.787550][T17057] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2090.813897][T24294] 00000000: 58 46 53 42 00 00 10 00 00 00 00 03 28 00 10 00 XFSB........(... 10:29:11 executing program 0: setresuid(0x0, 0xee01, 0x0) umount2(0x0, 0x0) 10:29:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r3, &(0x7f0000000700), 0x1000000000000016) [ 2090.817028][T17057] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2090.837590][T24294] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2090.851854][T24294] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2090.887828][T24294] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2090.914301][T24294] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2090.915258][T17057] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2090.946281][T17057] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2090.951275][T24294] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2090.958673][T17057] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2090.979679][T17057] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2090.988945][T24294] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2090.989101][T17057] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2091.015627][T24276] XFS (loop5): SB validate failed with error -117. [ 2091.025943][T24279] XFS (loop4): SB sanity check failed [ 2091.032269][T24294] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 10:29:12 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000ee000003ed94c700030006000000000002000004000000bb000000000000000003000500000000000200423b000000000012b478407f8604"], 0x80}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400000000000003, 0x0) [ 2091.036776][T24279] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2091.080515][ C0] net_ratelimit: 2 callbacks suppressed [ 2091.080558][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2091.092218][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2091.094768][T24279] XFS (loop4): Unmount and run xfs_repair [ 2091.099442][T24294] XFS (loop3): SB validate failed with error -117. [ 2091.127267][T24279] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2091.145699][T24279] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 6c 10 00 XFSB.........l.. [ 2091.176200][T24279] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 10:29:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x20000000000006}]}, 0x10) sendmmsg(r0, &(0x7f0000003040), 0x304, 0x0) [ 2091.192499][T24279] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2091.201697][T24279] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2091.210917][T24279] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2091.225619][T24279] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 10:29:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup3(r1, r2, 0x0) [ 2091.267261][T24279] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2091.317539][T24279] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 10:29:12 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000001b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2091.428927][T24279] XFS (loop4): SB validate failed with error -117. 10:29:12 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000003400100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:12 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000074100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x200000, &(0x7f0000000440)}, &(0x7f0000000240)="5f79203a1ec6", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2091.803557][ T1231] XFS (loop5): SB sanity check failed [ 2091.840738][ T1231] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:29:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x200000, &(0x7f0000000440)}, &(0x7f0000000240)="5f79203a1ec6", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2091.853341][ T1231] XFS (loop5): Unmount and run xfs_repair [ 2091.859307][ T1231] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2091.867992][ T1231] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 1b 00 10 00 XFSB............ [ 2091.879080][ T1231] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2091.888653][ T1231] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2091.890824][T24374] XFS (loop3): SB sanity check failed [ 2091.898287][ T1231] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2091.912530][ T1231] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2091.921631][ T1231] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2091.931058][ T1231] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2091.940121][ T1231] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2091.949383][T24364] XFS (loop5): SB validate failed with error -117. 10:29:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r3, &(0x7f0000000700), 0x1000000000000016) [ 2091.976427][T24374] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2092.010336][T24374] XFS (loop3): Unmount and run xfs_repair [ 2092.019853][T24374] XFS (loop3): First 128 bytes of corrupted metadata buffer: 10:29:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3662, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 2092.047033][T24374] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 34 00 10 00 XFSB........4... [ 2092.081450][T24374] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2092.100211][T24374] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2092.117265][T24392] XFS (loop4): SB sanity check failed [ 2092.122726][T24374] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2092.122739][T24374] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2092.122751][T24374] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2092.122787][T24374] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2092.122800][T24374] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2092.122832][T24374] XFS (loop3): SB validate failed with error -117. 10:29:13 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000002000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r3, &(0x7f0000000700), 0x1000000000000016) 10:29:13 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000003600100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2092.350116][T24392] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2092.379494][T24392] XFS (loop4): Unmount and run xfs_repair [ 2092.387333][T24392] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2092.399321][T24392] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 74 10 00 XFSB.........t.. [ 2092.421236][T24392] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2092.441050][T24392] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2092.456854][T24392] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2092.465991][T24392] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2092.485295][T24392] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2092.520565][T24392] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2092.563023][T24392] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2092.595324][T24392] XFS (loop4): SB validate failed with error -117. 10:29:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x12) ptrace$cont(0x18, r1, 0x0, 0x0) 10:29:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r3, &(0x7f0000000700), 0x1000000000000016) [ 2092.691409][ T1231] XFS (loop5): SB sanity check failed [ 2092.696992][ T1231] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:29:13 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000000000007a100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2092.790078][ T1231] XFS (loop5): Unmount and run xfs_repair [ 2092.818513][ T1231] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2092.822740][T24431] XFS (loop3): SB sanity check failed [ 2092.869733][ T1231] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 20 00 10 00 XFSB........ ... [ 2092.870259][T24431] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2092.901534][ T1231] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2092.952302][ T1231] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2092.974632][ T1231] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2093.001629][ T1231] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2093.013103][T24431] XFS (loop3): Unmount and run xfs_repair [ 2093.050690][T24431] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2093.050888][ T1231] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 10:29:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, 0x0) [ 2093.090988][T24431] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 36 00 10 00 XFSB........6... [ 2093.105888][T24431] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2093.126811][T24469] XFS (loop4): SB sanity check failed [ 2093.134272][T24431] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2093.144306][T24469] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2093.176465][T24431] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2093.204905][ T1231] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2093.207024][T24431] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2093.248577][T24431] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2093.256433][T24469] XFS (loop4): Unmount and run xfs_repair [ 2093.263530][ T1231] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2093.272891][T24469] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2093.280644][T24424] XFS (loop5): SB validate failed with error -117. [ 2093.288207][T24469] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 7a 10 00 XFSB.........z.. 10:29:14 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x3d58e726}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) [ 2093.293020][T24431] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2093.308486][T24469] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2093.318066][T24469] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2093.328930][T24431] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2093.352439][T24431] XFS (loop3): SB validate failed with error -117. [ 2093.361295][T24469] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 10:29:14 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000102000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2093.395674][T24469] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2093.441899][T24469] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 10:29:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r3, &(0x7f0000000700), 0x1000000000000016) 10:29:14 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000003800100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2093.490330][T24469] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 10:29:14 executing program 1: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') select(0x40, &(0x7f0000000100)={0x100}, 0x0, 0x0, 0x0) close(0xffffffffffffffff) [ 2093.548159][T24469] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2093.617420][T24469] XFS (loop4): SB validate failed with error -117. [ 2093.646033][T24499] XFS (loop5): SB sanity check failed [ 2093.652903][T24499] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2093.699692][T24499] XFS (loop5): Unmount and run xfs_repair [ 2093.718272][T24499] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2093.749519][T24499] 00000000: 58 46 53 42 00 00 10 00 00 00 00 10 20 00 10 00 XFSB........ ... [ 2093.786154][T24519] XFS (loop3): SB sanity check failed 10:29:14 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000000001077b100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:14 executing program 1: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005780), 0x4000000000000d2, 0x0) [ 2093.788046][T24499] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2093.792893][T24519] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2093.858897][T24519] XFS (loop3): Unmount and run xfs_repair [ 2093.859061][T24499] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2093.873381][T24519] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2093.889072][T24519] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 38 00 10 00 XFSB........8... [ 2093.910228][T24499] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2093.956075][T24499] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2093.969491][T24519] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2093.991268][T24519] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2094.006077][T24499] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2094.017992][T24519] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2094.034193][T24499] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2094.045935][T24519] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 10:29:15 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x40000000000002f, 0x0) [ 2094.059411][T24499] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2094.073388][T24519] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2094.098829][T24519] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2094.111512][T24499] XFS (loop5): SB validate failed with error -117. [ 2094.118492][T24541] XFS (loop4): SB sanity check failed [ 2094.125593][T24519] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2094.131087][T24541] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2094.167118][T24519] XFS (loop3): SB validate failed with error -117. [ 2094.208903][T24541] XFS (loop4): Unmount and run xfs_repair [ 2094.231923][T24541] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2094.249779][T24541] 00000000: 58 46 53 42 00 00 10 00 00 00 00 01 07 7b 10 00 XFSB.........{.. [ 2094.258885][T24541] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2094.268399][T24541] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2094.285350][T24541] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2094.344273][T24541] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2094.375178][T24541] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2094.384549][T24541] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2094.393803][T24541] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2094.403214][T24541] XFS (loop4): SB validate failed with error -117. 10:29:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={0x0, 0x0, &(0x7f00005a6ff0)={&(0x7f0000000280)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 10:29:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r2 = dup2(r0, r1) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, 0x0) 10:29:16 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000002100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000700), 0x1000000000000016) 10:29:16 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000003f00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:16 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000000001077c100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x20000000000006}]}, 0x10) sendmmsg(r0, &(0x7f0000003040), 0x304, 0x0) 10:29:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}, 0x10) [ 2095.949669][T24585] XFS (loop5): SB sanity check failed [ 2095.956591][T24585] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2095.957146][T24596] XFS (loop4): SB sanity check failed [ 2096.038845][T24585] XFS (loop5): Unmount and run xfs_repair [ 2096.044868][T24596] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2096.087622][T24585] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2096.114022][T24596] XFS (loop4): Unmount and run xfs_repair [ 2096.119481][T24585] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 21 00 10 00 XFSB........!... [ 2096.129453][ T1231] XFS (loop3): SB sanity check failed 10:29:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700), 0x1000000000000016) 10:29:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x15, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) [ 2096.140076][ T1231] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2096.140690][T24596] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2096.166047][T24585] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2096.175371][ T1231] XFS (loop3): Unmount and run xfs_repair [ 2096.189840][ T1231] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2096.197889][T24585] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2096.224406][T24596] 00000000: 58 46 53 42 00 00 10 00 00 00 00 01 07 7c 10 00 XFSB.........|.. [ 2096.230061][ T1231] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 3f 00 10 00 XFSB........?... [ 2096.250517][T24585] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2096.273943][T24596] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2096.275612][T24585] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2096.299991][ T1231] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2096.308857][T24596] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2096.310373][ T1231] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 10:29:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x15, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) [ 2096.347860][T24585] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2096.359025][T24596] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2096.367333][ T1231] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2096.386500][T24585] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2096.395732][ T1231] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2096.403265][T24596] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2096.405591][T24585] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2096.422738][T24596] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2096.443090][ T1231] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2096.452392][T24585] XFS (loop5): SB validate failed with error -117. [ 2096.454314][T24596] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2096.468780][ T1231] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2096.478111][ T1231] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2096.487520][T24599] XFS (loop3): SB validate failed with error -117. 10:29:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r3, &(0x7f0000000700), 0x1000000000000016) 10:29:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x15, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) [ 2096.503188][T24596] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2096.537888][T24596] XFS (loop4): SB validate failed with error -117. 10:29:17 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) close(r0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) 10:29:17 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000002200100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:17 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000004000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:17 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x400200007fe, &(0x7f00000002c0)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRES16], 0xffffffe6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x8034}, 0x100) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 10:29:17 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="584653420000100000000001077d100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x15, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) 10:29:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r3, &(0x7f0000000700), 0x1000000000000016) [ 2097.001810][T24669] XFS (loop5): SB sanity check failed [ 2097.017385][T24677] XFS (loop4): SB sanity check failed [ 2097.030191][T24677] XFS (loop4): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:29:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x15, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) [ 2097.043254][T24669] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff [ 2097.088314][T24677] XFS (loop4): Unmount and run xfs_repair [ 2097.103967][T24669] XFS (loop5): Unmount and run xfs_repair [ 2097.128928][T24677] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 2097.140155][T24669] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 2097.175904][T24669] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 22 00 10 00 XFSB........"... [ 2097.194015][T24677] 00000000: 58 46 53 42 00 00 10 00 00 00 00 01 07 7d 10 00 XFSB.........}.. [ 2097.204773][T24693] XFS (loop3): SB sanity check failed [ 2097.211064][T24693] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x4b1/0x600, xfs_sb block 0xffffffffffffffff 10:29:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x15, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) [ 2097.219978][T24677] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2097.230198][T24669] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2097.258678][T24669] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2097.280251][T24693] XFS (loop3): Unmount and run xfs_repair [ 2097.286119][T24693] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 2097.300405][T24677] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2097.304874][T24669] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ 10:29:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x15, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) [ 2097.336065][T24677] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2097.342505][T24693] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 40 00 10 00 XFSB........@... [ 2097.351212][T24677] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 10:29:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r3, &(0x7f0000000700), 0x1000000000000016) [ 2097.379207][T24677] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2097.383964][T24693] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 2097.413142][T24677] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2097.443896][T24693] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 2097.447813][T24677] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2097.453323][T24669] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2097.484855][T24677] XFS (loop4): SB validate failed with error -117. 10:29:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x15, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) [ 2097.499240][T24693] 00000030: 00 00 00 00 00 00 00 40 00 00 10 00 00 00 00 80 .......@........ [ 2097.516662][T24693] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 2097.528969][T24693] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2097.549376][T24693] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2097.559839][T24669] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 2097.574788][T24693] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2097.585327][T24693] XFS (loop3): SB validate failed with error -117. [ 2097.611011][T24669] 00000060: 00 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 2097.629697][T24669] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 2097.642857][T24669] XFS (loop5): SB validate failed with error -117. 10:29:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x15, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) 10:29:18 executing program 5: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000002300100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) 10:29:18 executing program 3: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000004800100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000001000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) [ 2097.829389][T24673] kasan: CONFIG_KASAN_INLINE enabled [ 2097.865369][T24673] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 2097.874979][T24673] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 2097.882028][T24673] CPU: 1 PID: 24673 Comm: syz-executor1 Not tainted 5.0.0-rc1-next-20190108 #7 [ 2097.891026][T24673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2097.901081][T24673] RIP: 0010:try_charge+0x12a8/0x1d00 [ 2097.906350][T24673] Code: c0 e8 dc bf fe ff 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 c6 04 02 00 49 8d bc 24 40 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 20 0a 00 00 4c 89 f2 4d 8b a4 24 40 05 00 00 48 [ 2097.925927][T24673] RSP: 0018:ffff888098e06f78 EFLAGS: 00010202 [ 2097.931964][T24673] RAX: dffffc0000000000 RBX: ffff88805a3cc300 RCX: 1ffff110131c0ddd [ 2097.939923][T24673] RDX: 00000000000000a8 RSI: 0000000000000000 RDI: 0000000000000540 [ 2097.947888][T24673] RBP: ffff888098e07180 R08: 1ffff11015ce5b8f R09: ffffed1015ce5b90 [ 2097.955853][T24673] R10: ffffed1015ce5b8f R11: ffff8880ae72dc7b R12: 0000000000000000 [ 2097.963826][T24673] R13: ffff888098e07158 R14: ffff888098e07118 R15: 0000000000000000 [ 2097.971777][T24673] FS: 0000000000f7a940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 2097.980683][T24673] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2097.987249][T24673] CR2: 0000000000bef9b8 CR3: 0000000092ee6000 CR4: 00000000001406e0 [ 2097.995198][T24673] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2098.003142][T24673] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2098.011084][T24673] Call Trace: [ 2098.014359][T24673] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2098.019879][T24673] ? __kmalloc_node_track_caller+0x3d/0x70 [ 2098.025663][T24673] ? mark_held_locks+0xb1/0x100 [ 2098.030488][T24673] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 2098.036094][T24673] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 2098.041710][T24673] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2098.046980][T24673] ? trace_hardirqs_on+0xbd/0x310 [ 2098.051995][T24673] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2098.058211][T24673] ? sk_forced_mem_schedule+0x146/0x170 [ 2098.063730][T24673] ? trace_hardirqs_off_caller+0x300/0x300 [ 2098.069511][T24673] ? __this_cpu_preempt_check+0x1d/0x30 [ 2098.075041][T24673] mem_cgroup_charge_skmem+0x12f/0x280 [ 2098.080498][T24673] ? mem_cgroup_sk_free+0x90/0x90 [ 2098.085529][T24673] ? mark_held_locks+0xb1/0x100 [ 2098.090373][T24673] sk_forced_mem_schedule+0x146/0x170 [ 2098.095715][T24673] tcp_send_fin+0x3b8/0xf30 [ 2098.100207][T24673] ? lock_sock_nested+0x40/0x120 [ 2098.105130][T24673] ? sk_forced_mem_schedule+0x170/0x170 [ 2098.110655][T24673] ? check_preemption_disabled+0x48/0x290 [ 2098.116347][T24673] ? lock_sock_nested+0x9a/0x120 [ 2098.121268][T24673] ? __local_bh_enable_ip+0x15a/0x270 [ 2098.126628][T24673] tcp_close+0xed1/0x1200 [ 2098.130931][T24673] ? tcp_check_oom+0x530/0x530 [ 2098.135699][T24673] ? down_write+0x8a/0x130 [ 2098.140102][T24673] ? __sock_release+0x89/0x250 [ 2098.144852][T24673] ? ip_mc_drop_socket+0x20c/0x270 [ 2098.149947][T24673] ? fcntl_setlk+0xfe0/0xfe0 [ 2098.154528][T24673] inet_release+0x105/0x1f0 [ 2098.159025][T24673] __sock_release+0xd3/0x250 [ 2098.163593][T24673] sock_close+0x1b/0x30 [ 2098.167723][T24673] __fput+0x3c5/0xb10 [ 2098.171680][T24673] ? __sock_release+0x250/0x250 [ 2098.176501][T24673] ? file_free_rcu+0xe0/0xe0 [ 2098.181081][T24673] ? ___might_sleep+0x1e7/0x310 [ 2098.185915][T24673] ? trace_hardirqs_off_caller+0x300/0x300 [ 2098.191695][T24673] ? arch_local_save_flags+0x50/0x50 [ 2098.196971][T24673] ____fput+0x16/0x20 [ 2098.200940][T24673] task_work_run+0x1f4/0x2b0 [ 2098.205512][T24673] ? task_work_cancel+0x2c0/0x2c0 [ 2098.210515][T24673] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2098.216788][T24673] ? switch_task_namespaces+0x9d/0xd0 [ 2098.222139][T24673] do_exit+0xad9/0x2af0 [ 2098.226269][T24673] ? mm_update_next_owner+0x970/0x970 [ 2098.231614][T24673] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 2098.237393][T24673] ? try_to_wake_up+0xf9/0x1480 [ 2098.242214][T24673] ? __lock_is_held+0xb6/0x140 [ 2098.246954][T24673] ? mark_held_locks+0x100/0x100 [ 2098.251868][T24673] ? futex_wake+0x62c/0x7b0 [ 2098.256344][T24673] ? fixup_owner+0x250/0x250 [ 2098.260924][T24673] ? kasan_check_read+0x11/0x20 [ 2098.265764][T24673] ? do_raw_spin_unlock+0xa0/0x330 [ 2098.270854][T24673] ? add_lock_to_list.isra.0+0x450/0x450 [ 2098.276459][T24673] ? memset+0x32/0x40 [ 2098.280427][T24673] ? __dequeue_signal+0xeb/0x730 [ 2098.285349][T24673] ? get_signal+0x963/0x19b0 [ 2098.289912][T24673] ? find_held_lock+0x35/0x120 [ 2098.294660][T24673] ? get_signal+0x963/0x19b0 [ 2098.299320][T24673] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2098.305535][T24673] ? _raw_spin_unlock_irq+0x28/0x90 [ 2098.310723][T24673] ? _raw_spin_unlock_irq+0x28/0x90 [ 2098.315895][T24673] do_group_exit+0x177/0x430 [ 2098.320481][T24673] ? trace_hardirqs_off_caller+0x300/0x300 [ 2098.326270][T24673] ? __ia32_sys_exit+0x50/0x50 [ 2098.331010][T24673] get_signal+0x8b4/0x19b0 [ 2098.335406][T24673] ? ptrace_notify+0x130/0x130 [ 2098.340150][T24673] ? find_held_lock+0x35/0x120 [ 2098.344901][T24673] ? __x64_sys_futex+0x524/0x670 [ 2098.349811][T24673] ? lock_acquire+0x1db/0x570 [ 2098.354458][T24673] ? ktime_get+0x182/0x410 [ 2098.358854][T24673] do_signal+0x91/0x1ea0 [ 2098.363083][T24673] ? kvm_clock_read+0x18/0x30 [ 2098.367733][T24673] ? setup_sigcontext+0x7d0/0x7d0 [ 2098.372733][T24673] ? exit_to_usermode_loop+0x98/0x3b0 [ 2098.378081][T24673] ? exit_to_usermode_loop+0x98/0x3b0 [ 2098.383440][T24673] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2098.388701][T24673] ? trace_hardirqs_off_caller+0x300/0x300 [ 2098.394481][T24673] exit_to_usermode_loop+0x2f7/0x3b0 [ 2098.399741][T24673] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2098.405789][T24673] ? syscall_trace_enter+0x12a0/0x12a0 [ 2098.411223][T24673] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2098.416672][T24673] do_syscall_64+0x696/0x800 [ 2098.421301][T24673] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2098.426917][T24673] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2098.432610][T24673] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2098.438132][T24673] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2098.444000][T24673] RIP: 0033:0x457ec9 [ 2098.447869][T24673] Code: 28 c3 e8 aa 20 00 00 eb a8 cc cc cc cc cc cc cc cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 76 2e 48 83 ec 18 48 89 6c 24 10 48 <8d> 6c 24 10 48 8b 42 08 48 8b 4a 10 48 89 04 24 48 89 4c 24 08 e8 [ 2098.467444][T24673] RSP: 002b:00007fff95c9d2a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2098.475830][T24673] RAX: 0000000000000001 RBX: 0000000000000003 RCX: 0000000000457ec9 [ 2098.483784][T24673] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 000000000073bf08 [ 2098.491728][T24673] RBP: 000000000073bf00 R08: 00000000007403f0 R09: 0000000000000000 [ 2098.499673][T24673] R10: 00007fff95c9d360 R11: 0000000000000246 R12: 0000000000000003 [ 2098.507639][T24673] R13: 00000000000009d2 R14: 000000000073bf0c R15: 000000000073bf0c [ 2098.515603][T24673] Modules linked in: [ 2098.520265][T24673] ---[ end trace bb8f93290453d17d ]--- [ 2098.525744][T24673] RIP: 0010:try_charge+0x12a8/0x1d00 [ 2098.531808][T24673] Code: c0 e8 dc bf fe ff 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 c6 04 02 00 49 8d bc 24 40 05 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 20 0a 00 00 4c 89 f2 4d 8b a4 24 40 05 00 00 48 [ 2098.551433][T24673] RSP: 0018:ffff888098e06f78 EFLAGS: 00010202 [ 2098.557496][T24673] RAX: dffffc0000000000 RBX: ffff88805a3cc300 RCX: 1ffff110131c0ddd [ 2098.565480][T24673] RDX: 00000000000000a8 RSI: 0000000000000000 RDI: 0000000000000540 [ 2098.573465][T24673] RBP: ffff888098e07180 R08: 1ffff11015ce5b8f R09: ffffed1015ce5b90 [ 2098.581454][T24673] R10: ffffed1015ce5b8f R11: ffff8880ae72dc7b R12: 0000000000000000 [ 2098.589490][T24673] R13: ffff888098e07158 R14: ffff888098e07118 R15: 0000000000000000 [ 2098.597492][T24673] FS: 0000000000f7a940(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 2098.606586][T24673] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2098.613203][T24673] CR2: 0000000000bef9b8 CR3: 0000000092ee6000 CR4: 00000000001406e0 [ 2098.621229][T24673] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2098.629189][T24673] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2098.637167][T24673] Kernel panic - not syncing: Fatal exception [ 2098.644208][T24673] Kernel Offset: disabled [ 2098.648533][T24673] Rebooting in 86400 seconds..