ffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x62400) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r4, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r4, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffd, @mcast1}, 0x83) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1408.133219][T25348] 00000000: 58 46 53 42 10 03 00 0a 00 00 00 00 00 00 10 00 XFSB............ [ 1408.160230][T25348] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1408.173470][T25348] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1408.195973][T25348] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1408.222914][T25348] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1408.235586][T25348] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1408.322111][T25348] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1408.367696][T25348] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1408.388458][T25348] XFS (loop0): SB validate failed with error -117. [ 1408.471852][T25401] XFS (loop5): SB sanity check failed [ 1408.489003][T25401] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1408.537659][T25401] XFS (loop5): Unmount and run xfs_repair [ 1408.543457][T25401] XFS (loop5): First 128 bytes of corrupted metadata buffer: 07:49:12 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653421003000c000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1408.597549][T25401] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 09 00 10 00 XFSB............ [ 1408.625186][T25401] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1408.710400][T25401] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1408.776456][T25401] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1408.805114][T25401] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1408.814062][T25401] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 07:49:12 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1408.829757][T25392] Process accounting resumed [ 1408.834664][T25401] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1408.843959][T25401] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1408.854202][T25401] XFS (loop5): SB validate failed with error -117. [ 1409.047566][ T7886] XFS (loop5): SB sanity check failed [ 1409.053275][ T7886] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1409.115796][ T7886] XFS (loop5): Unmount and run xfs_repair [ 1409.121662][ T7886] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1409.139568][ T7886] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 09 00 10 00 XFSB............ [ 1409.166168][T25409] Process accounting resumed 07:49:12 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1409.189231][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1409.236128][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1409.265543][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1409.274430][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 07:49:12 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:12 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653421003000d000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1409.284106][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1409.293194][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1409.302370][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1409.303807][T25382] Process accounting resumed [ 1409.316029][T25401] XFS (loop5): SB validate failed with error -117. 07:49:12 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000000a00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:12 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, 0x0, 0x0) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1409.514938][T25411] Process accounting resumed [ 1409.740687][ T7886] XFS (loop0): SB sanity check failed [ 1409.746349][ T7886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1409.758367][ T7886] XFS (loop0): Unmount and run xfs_repair [ 1409.764375][ T7886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1409.772756][ T7886] 00000000: 58 46 53 42 10 03 00 0d 00 00 00 00 00 00 10 00 XFSB............ [ 1409.781883][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1409.791036][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1409.800076][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1409.809231][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1409.827749][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1409.842604][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1409.859227][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1409.877078][T25447] XFS (loop0): SB validate failed with error -117. 07:49:13 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1409.997714][T25445] Process accounting resumed [ 1410.130314][T25435] Process accounting resumed [ 1410.150469][T25453] XFS (loop5): SB sanity check failed [ 1410.155986][T25453] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1410.188296][T25453] XFS (loop5): Unmount and run xfs_repair 07:49:13 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:13 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653421003000e000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1410.194111][T25453] XFS (loop5): First 128 bytes of corrupted metadata buffer: 07:49:13 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r4, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r4, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) sendmmsg(r5, &(0x7f0000004780)=[{{&(0x7f0000001080)=@un=@file={0x1, './file0/file0\x00'}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000001100)="49a42ff2f2ced26b309ef6f16d87fbbdf1574b56f59b601d8371f4a4698ba42da4af420279d20b378356aac804fb13df1ee8f7fd77ca70b7a75609ad1b43bebd549fbb8d49ad3bbf955de9bc41c82f3b344fe8c2411d1440fa8860f8d00b0a06767049b5afa9f8fb695958c3a3fe143ce500be3f61ba9a4cafef967b60ab3a0679a8b704491980aa47a9db5e11f357fd0331c09f8c5ea56c1beec4a85c8e904178a58c089bbdbb9e4920ccbd494fcc393f14f86300531474cb64a69f48f6f4784493a3efdeb75cc0089296e54a5cac32b22e33705ffebf65bb58cc50f2bad0e0295cedf2e1b51ac64f469d006ddfb1077715c7a89bc91a5adee009f40d74489cf080018a02112adb871ec14bfb5fb759017ec124cd33f5241edb108cc809c5ab331e6e475c1b67a95f3513b1080645e05cf97ea017ba2753dcc812ae66d7e51fcd606b21f7cc9fa3d50f5f475733446b5b5d60244de61e965dd23cda0df7c7f89bc59491d1c7ec0c25ffea4da74beded497af6fbb5fc7c7007b8049f031c807abf2cf1be27d57c2a95ca47db3ea4d5382b5506f63362ed62c35fd547439ff4f3b359a1d114624233e6515d94adbf84fdb0fa5217bd927fa78bec455b19de4e2a404cc8dee72ef15611603c0eac2bdd8049f7ebc8402013af34e23e939b33c621a079e9c9761c0fec2a032b0bce039c2dfc0f399b6e7ec647efb654155bfd878677d45044a57f30417b65d5a22a4384c7789704ca4f8a721d2940aa0e4d82c235e21c91da4fb1253c2de92fbd4afd81f33b35f660da6303b8c144db62f14b65220224a3e9f1fdb1a5b11f5b4fca217d3da2dfa356ab39c00a8ad38b19cc5aa48e108a4f53f320524e3554c3a96209b5b950e61b892c31e5707d19a454d84b78929d8b7c70cec034ffc7b280089a17fb9e63b72a6988978c24819f78631efd6229d7e7e250a36e2182c0ad1c171073db29429c1ce3ee28a33cbb464a2d9fb8c6fa6df9b002c1b68ee901e4afe9592d1b342bff8b2a98817ba145a7dc9db9e732572900fb35e1c1cb5b5910405086f230ca53611876271b892bdaefab889a5e4415d38817d4582a1d0f67bc739d642836c79b70385197b9f4fca521051e991ebcc95b1c87e281ac4a7bafc026f46afab57463158df0d80f17e194f93a21771bddab4f2927d716f52a52ff5f454942a253dc37c9cc3fb30c589085ba1468c313bd6ebda469a567d51547294b1e867883b4a50cd1ae1c86e945702a46e18cb228b5e8d7be2e78a593da44a690caad5b1d2bd48b1b2b942af61410c8d961e7df8036c8ffcfd92136283b6233e1e6d0976368bd86370c3037c1047f55fc88290ed76b77eed72eedaadb34c83ca593f1788da60f7464f566ff3d2695a10683b305d9a8db611dbdb2ff15ac106c8d831a428f1f5eac2ff62e97cf248eba2e5783f07be6e423f5332dd86a4f6f7d378359471e5cf40f26a0d467d8d2a9fcad178d7cb3537713634e20808910065ce230b149779f05c046e4c802955b7f5dee53c128311c56ee4cdf040de8fb42e4c00508251449daba88c49655dc3d19095374a046c928cbb1880e71bfe34dd3f55b5d3eac48db3605c16eb930daf33f88d3596c093bb997c29eabfeceab2672595a032b89341bf01dcd1f09dba94c9c8982f3bbf8c03f2df82f051d92dc9bc53023292c085dbed9a8a325855bf632c535befab22a3bf27947d68bff51891039d419a5ea33c491bc5e0a615a1e8f4cb2e1e0fa6c3df020439af1d4c426333ced48210e1ecb01780b928b86464a8b392eafe4f0a118a4b8f7458f809a9cb952e43cd74567f6cba4298140d821557ba60ab6c76423120d19caeec028618af5c1d48dac9670bb97e77e779f8de7a2fb2b55ad387fe9997ccec906bb7cc689cef1b48f9e3ed9b458fb6fb807c3071f9613d53190489f6769291c62d25d1dc073eba5d67df0d9c97d90c43be9d9a52bb3e0f3f5fa79f75d681136528ca4f0657a55a3ffaec8c467beb01cad4f8e840de58cba6b937c7b4667e06a1945a435ff05fc4bfccecb355e4c9d77f7c46eb829ea6c2080458bec3fc6cb7c7e12498d5b703e5c1154447336dee0ff4af6f311e996f93b7fb5a55813e8ad687a8d8206eef9d4f242ac8e558a68c5ab5fc686ffba3b4404c7a908ee9e01ca77da6badbc6e85ee6d0f95b4870580623f2e51c0b75ba139a7e0c400543f62439300af2d83fd8a44e3b04ab9ddb0b81d8e2ee326279eb18b62da105f9c4a6372489b35528dfc4e0b97e23153c179b8da7bf8fdea1395ad5cabe3e7222e559a3d1f64eb349c716e05900db5ea90bec35d394203a6c4f5931ce852ee0a6d8c1cf4a4278a09592f3bb93cd526acc26efd6ed17d3654a686c0f9b3915270f0f583159e698c549b6c0928717b719ca18f8f419af3dedbfa113c1f059e716f12fe86174e0005362d9c77be627cdd8338351bfcd13eedcb79684eb0c7306ac14daef076a39df6f4c1bd0f09529582e02f8d2ed9ca369a965db03a965e7535688616ca96bdda64e318db55017427f0d5114b5ddb721a00f008b3a14b232b0a48dfc2f7f9aa16ba5111406cdb0dc086ae3319d11fa19d610a4c12493c26c4aab6f6cdd1fcb78003a74d5bdb9ed484e82e2a9dc26f05d3217b9c19367dbb7bd2d26b6632af200a789786cce8929883284f19faf9c3be5f3d0d8a171779bc5872d8fc9ed78e4bf96b6531bab667a994e95ec504749b6c43b572ab555a9167755510453f3dc6758df9fdde7577758951cf2c2449f1f3cda52c93743280df5a02c410030ab8aca46c50fb9c6dfde2f5828f4b388f8f4a5338daab61e17c6bb45cf5d4e1a146524e5ee2dd30f4bef1af76f92f280c5f0c23f32c7b02a749ca75e611fd26966d99f310dbcf9663ac86932c406bc6d3b3428e82491d0d03477681bab3dd15d717d95984638d4b79f1fe5c78707d7fbea2f744a109cb3ba839a75bc265dfc11cc639992e1f68f846e73c7fd25200415f937c5b7d060262889fdf657d8dd7cd2c683a497180deea2207a38d50305ad8ecc871de71ca30f328058f735c837d8f7c3d8dc46d8dc00a145cfb2906114f89b5bb66bc2f1f9303e2461941baf386a92977bc36a196426efa60f17398c81689fe19b8bf72770d928cd123587073fe81bf861058b9dac804e33810ec0fec54cfc768f2efa81315f12f8ae534e38dfcd755843372dd4234da9c9ab940da09b843de0f17cf85b38964f1ed718302e6ea24ab22fd76af47c8e80bcfbb45e683b28db6d8078dd1ecd6e1d382b224059c52694dea024293b877b985c1a9f35f3eeb1230d3e9174750ddf69a29b92ec73abe2c6f3446943b95cb884ab18c3cdda2956cf0f5917033c57d1933dd45b1b43bd9160bf65157c0601fddb88a140756539e222a07db55496189918b6e2bcf97990f1cd0e5738898c3db705f031250fa0bb796609bdf2a2677d9d3545182bfd4bd081d5ab173e6bfd76deede811a9d2ae81e246b987c90581d325ba5781b6d466b347dbbad39c3380afeda7a1e6aa681bf8df97b83447095c664e01c5cf4685ee7e9f3a755b4eb5a0d45cfa79733791e4253014bf0f077284fee89342e022f96ea4ef781a585a4c98292fedc6777c3532e0b33159eefa3a242bbfa68ea29bd0af786bc45627d74decd8843dfb57835b350d5e2f9983e3a1d3f1a5835f07506e8341f8d58822247fa2580d1b48bd82f28f662cb8b7c5739c0b79773d21526734ddbc92bd989e8a14b035be0c6b97072f22002acca4e84d3a0dd6e22252f0cceba3369753a04615fb9d7ad028389caa3401519cdbfc72a149164ff83aa075ed5b5d9cdd45d99340d498f7020bb91d05511d4fe68b0d60df0edc239f68ebee7972b01b64a8ca6e2ed113607556248056c9da04320452d8cab8d68fe26df0a92c72afe4e09360848b2fd56d1793d1785fa7aad709eaf0d12e30bee112815c1d8ed6da5eb7c780827920d6abee8e926a19af8ad734d103a64f81bd6151ed0ffbfe73751b0cbba26f7a87d6b479e3279d638aa5ec64e2537512688f3beb8cec5ea5cc2b0272a662d0b1b7d5119b7f2ef315010a078fe9d7052a7fb838972bf260eda15121b0eed89f20780899fa3428e5b0cf600698004e117ba8d21e42f6378de750e44895097cc90188c1796f3e3cf226c0ca6469a49231ba8af96ce472b3cb892ddfe418802055c66a95ded4a3537443c774a45bdc9ee0a68d3c7a8a3fd00438590eaeb0a5e012dcd510ca0f180a2c53debc924e15267fb2c4f9bc893c38e179d06adbc1406b9b5256f69d95e2af25a8cd3e295afa415326e29d72925cabfd759b782caca5022f4d2bb78dcefaa2f5f03d68bc95715f4997faf40c664610593e8052c2a2efb4afd9c021ab0903d3aa640a7c44a2b4eff968c6fe14c63fa26e2352093526da3d923ac33cec3664f013e089e16b1731b57a4336b6bda4ee5f41ec73a5e97f9a322151c298d8165d936ea6109214531addd2c954a3b83088d6c4b65037dbdaee38256f5881665c4e4dbae92c6e42683e8d507ae57a66fcce359d60aa02c339f1d6b6b15ce306783d3046be08940cacd055a3e1c1d41d0bf5f5bab921841761f47b28f556b2ea76e5d6d7335a59397b558e3d4ceaabf2ec5208d718071543f5ee5b4c7b403fd9d4b1c8e3257b21f7b7cdb31cd47896eed836589c81065a0b6f249d8237cfd9af8e4b79b14e82eb6ea7ba15d12e194f46f6bae91c78a048dd656fef7e2abb6b79629ac66723188494c705b87f58b050140909acf02d03ff6cd813496b194e2405a897b80205ce39032017bb5bd2f9a44f7d92828efacae8a93297c42eab29e2a54c474878f1674aeaca833081a31f23eac5265991e22b3b9ed0057a486aa0191dab58264a5f6c4cacce2e635a8dfe846ce3389ce377042ee0e8db0f4f185ff715d62bc14aae6ab182ad10f6f12679957a327a9e2df81f2a44fb856f761bfa5bde4134dba67a29281c17b015e6c1d76505d0be73ce3827a2fe32f82e9fb61e541b3129543f97d27b8ee8882015d774ad245c987d5201056f4a87e81379777a477b822bba9c5405bab5e80e05341f643a63df5e5fa20a5d319c0497ccf2a64ee34e6f00d74cfb354286e29bdf92331467e4a59b7c40378df455d532911ad65f5de5f6b83f45cd5b2d4a572976705db6c0c66254952dad8dfad5b8223708878a87734a109872bc53877e2a81e16c19af2648eb5ca086f95439edda7f230a41d4ba3cee98d0bd9c5e6fee53cffee31f58b4df5d5dc6499c58916376fbc0ae1dcadabad1e35c8d7d686f46129e455275df0d9c04357dadce4454212cef3248b3cf41bbd7d5d9444e8a338d5fc95838dabfb29c67280991f6b204f30a4fe5754f533dc1442e695cea966a1b2cb058a975307550e966c6b4d9aa95b570cf4ee162ba8b25518cef3b6a95021c1add8c054b5b87436177e663bde81d2cba53270a8ad25eb159b63592fc6386ace192c519dd5241dfa077d7ef44108938753de85ae272fe4c967e7e91cb6975ac13984f65837d3e262c5f44b05c27669c7ee4abae4037565f11dc05e3b088eca28fddf36511c6c17e2e233d01230530fcde0a000c17751898e3b1b3c39f7de8f0e382fe8bcaa1e8c3469b98fdc18bbb47f1ad3b1831335e6d77155fdc17c56bc17b32579397c20a485d54724748560191ede6bcf07c688449e34cae6f15093f1eb45d60d567e7aa06d22167bb6f7a290382da11b2d8e3dd5df48d62590e335ec3217daa6363c3b02109e111e061197752e63c0f60f97", 0x1000}, {&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000003100)="8ecbda90fb6ffe1167472b25b8591f1660814b48b5a5bbdf1620cb8884f2d6f2b0bf4c8aa1fcdec92aa7594342c5ec9afd1701a32b6c048e3b569e1bc7bdc37dec15391b563b6f5f32b10387d4f0fb1d4c7a867706a29efe2cf95b081fbcdb3ee408c943479099cb64817449e295a8495888c76248d980316ec54a2769945ff03d84e98a6051a81b9f07088c67f24d982111f9be0100f9130efbf4d4e849b8cbd13806d08eda801de879d548b075f9236891329e8c17c58b63", 0xb9}], 0x3, &(0x7f0000003200)=[{0x78, 0x117, 0x40, "12bbe2e7795cd939c6edcf4fe241513f68cf0c010147090000002aa94785ac8d782529d59dc683b50aa27edf3fde6092fbb1046c9b5b56ddae5321d437aa639ab0be89e37d39a6fc50a9461f60bb5a389aa177c86a99a2f1cbbcc23d7d4e04eedb89ed94694bdf00"}, {0xe0, 0x112, 0x0, "0fc552c7a60400a1c871a1c2fe8064b5053ffd346b618ffe53212058a3e6ab546f4da87c569f1b9aaa5f3d21eb37077e41ed929565c5353234c674e2dbe33998b8786be5a6194f824ae36e1b8e278931ad25c4baae3faf1fbe1ed1a6b69c53be199fdd3a9e600326cc34b4a991038a0d36d5a637e2d38b63a457392bd22e6bc219ee54d044a746b837e2a2927fe33a83516c88d656350e2a5686d7a6d305ed833e2d9e3e04a9c2e374ee6eb3029945d86f3c5f61c977ddf73ff711ed14c54b2c531aadeb3036592a6be0"}], 0x158}}, {{&(0x7f0000003380)=@sco={0x1f, {0x6, 0x40, 0xbf, 0x7f, 0x4}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003400)="2eb7f2cf979c7bff0f93d1087852a351bd76d4094adcaef755d310a00fd95109322fea02a7c928521adbb70e2f8f963b6c327cc8d72a78d97978ba472da0b8034e3836b53b6632e42ff7dee8c6cbcc8f8e742fefdd8b78083ace76e0519a5ba3d7ea3555a62065aa2bdf0c139e6bc97b002a0e71602246f2c1a1d4e9ce4491a580d99d8dfc81d4547185d0e793d7791c37d1", 0x92}], 0x1, &(0x7f0000003500)=[{0xfffffffffffffe61, 0x100, 0xffffff80, "76160c035e4b36f26f20be6ddbcdda7e71d51632e2edcaf46c27ff7cfd2f9e3718b7bdd749d6b86ccd6b7ddf3fcb39e2e65f56cd87a786e6372edc5ff1a6c5b1bb992b0a9da1e4d442f0ae18b3831794"}, {0x2ea, 0x0, 0x1, "d82cc1bbf8dc052d999a83e6b3a926c41d985f14f2078803fa41e301ab9c0bf7bca1274117412cdeabc9bbedd5b6660b511445ed64880d9955c89d5ffd7d7567cdb9721375122ecc721e49d895d4b054e9a569229df02a0272fda4af3234e5ba71b36035da6e439bd55b7c766172d341f016ec2249dcead71d17c128a9ab43c119de68fde661ba0dc481429e96a74d28591bed0efc1ff438375cbff63fa88c4e2881690f82fc06e06cd34dd016b20eb53f6cf562dd47a0f860ef717ada5e7ba1cee431967c192d9094340489a466472a409e5a38cefe3b3e84f18cf268bbf7dba1538677ae0d"}, {0x1010, 0x114, 0xb240, "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"}, {0x98, 0x0, 0x6, "0776963184a31b55171155b96d50741a926502bc184a4dc2b2a8c4a5b470eaff8236044fb3e40b51e4b06b9d9cd7a1c9d6c4d7ba7cc52812c086fb5c4e2b0750d015b1f7407422f82c1ca5366dfe58fa463de36b082fa1423c1bcd2b2c346c884d9e0ce8e86958f44294085e5932b837e585204408ef7ea489f520356243593dda7f"}, {0x48, 0x29, 0xc0000000, "c27c1474082b58d63af3a6b8c657bd95e8c974ae68dccbd8da4527b57a879e6f4a3e10cb456b6ae8af64cd3bc1baa80fecf05c398d"}], 0x1248}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffd, @mcast1}, 0x83) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0ff511374b4d457, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e26, 0x0, @mcast2}, 0x1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r11, &(0x7f0000000080), 0x1000) r12 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r12, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1410.433121][T25453] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 0a 00 10 00 XFSB............ 07:49:13 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:13 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1410.542935][T25490] Process accounting resumed [ 1410.548049][T25453] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1410.563996][T25471] Process accounting resumed [ 1410.573024][T25453] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1410.598086][ T7886] XFS (loop0): SB sanity check failed [ 1410.603708][ T7886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1410.625627][T25453] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1410.635118][T25453] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1410.643570][ T7886] XFS (loop0): Unmount and run xfs_repair [ 1410.657430][ T7886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1410.672695][ T7886] 00000000: 58 46 53 42 10 03 00 0e 00 00 00 00 00 00 10 00 XFSB............ [ 1410.711279][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1410.714366][T25453] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1410.747870][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1410.769239][T25481] Process accounting resumed [ 1410.783313][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ 07:49:14 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1410.811310][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1410.836763][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1410.862458][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1410.872198][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1410.881803][T25492] XFS (loop0): SB validate failed with error -117. [ 1410.918987][T25453] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1411.013814][T25453] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1411.058311][T25492] XFS (loop0): SB sanity check failed [ 1411.076880][T25492] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1411.095350][T25453] XFS (loop5): SB validate failed with error -117. [ 1411.148169][T25492] XFS (loop0): Unmount and run xfs_repair [ 1411.203206][T25492] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1411.266227][T25492] 00000000: 58 46 53 42 10 03 00 0e 00 00 00 00 00 00 10 00 XFSB............ [ 1411.320855][T25508] Process accounting resumed 07:49:14 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:14 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000000c00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1411.378996][T25492] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1411.418657][T25492] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1411.472027][T25492] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1411.480980][T25492] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1411.525118][T25492] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1411.562270][T25492] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1411.582316][T25516] Process accounting resumed [ 1411.586105][T25492] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 07:49:15 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r6) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1411.627681][T25492] XFS (loop0): SB validate failed with error -117. 07:49:15 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210032010000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1411.822685][T25538] XFS (loop5): SB sanity check failed [ 1411.829938][T25538] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 07:49:15 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000000a00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1411.890227][T25510] Process accounting resumed [ 1411.895025][T25538] XFS (loop5): Unmount and run xfs_repair [ 1411.901253][T25538] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1411.937321][T25538] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 0c 00 10 00 XFSB............ [ 1411.963013][T25509] Process accounting resumed [ 1411.967710][T25538] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 07:49:15 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1a2) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1412.039643][T25538] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1412.055471][T25557] XFS (loop1): SB sanity check failed [ 1412.067587][T25557] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1412.089382][T25538] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1412.118844][T25538] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1412.130195][T25557] XFS (loop1): Unmount and run xfs_repair [ 1412.160268][T25557] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1412.166594][T25561] XFS (loop0): SB sanity check failed [ 1412.173263][T25561] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1412.193370][T25538] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1412.202434][T25561] XFS (loop0): Unmount and run xfs_repair [ 1412.211762][T25561] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1412.281937][T25537] Process accounting resumed [ 1412.289846][T25557] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 0a 00 10 00 XFSB............ 07:49:15 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1412.324975][T25561] 00000000: 58 46 53 42 10 03 20 10 00 00 00 00 00 00 10 00 XFSB.. ......... [ 1412.336968][T25538] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1412.405861][T25557] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1412.416183][T25561] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1412.423701][T25538] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1412.440032][T25561] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1412.459911][T25538] XFS (loop5): SB validate failed with error -117. [ 1412.488824][T25557] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1412.514598][T25557] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1412.530038][T25561] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1412.580323][T25557] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1412.589626][T25561] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1412.637471][T25557] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1412.655468][T25561] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1412.675235][T25557] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1412.721858][T25561] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1412.737818][T25557] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1412.746887][T25561] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1412.791062][T25550] Process accounting resumed 07:49:16 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000000d00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:16 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r6) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1412.855087][T25561] XFS (loop0): SB validate failed with error -117. [ 1412.862728][T25557] XFS (loop1): SB validate failed with error -117. 07:49:16 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1413.061579][T25587] Process accounting resumed [ 1413.082828][T25571] Process accounting resumed 07:49:16 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1a2) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1413.215008][T25599] XFS (loop5): SB sanity check failed [ 1413.229130][T25599] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 07:49:16 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030012000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1413.316707][T25599] XFS (loop5): Unmount and run xfs_repair [ 1413.335242][T25599] XFS (loop5): First 128 bytes of corrupted metadata buffer: 07:49:16 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1413.384202][T25599] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 0d 00 10 00 XFSB............ [ 1413.395427][T25599] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1413.486295][T25599] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1413.550263][T25599] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1413.583017][T25599] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1413.628869][T25606] Process accounting resumed 07:49:17 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r6) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1413.650856][T25599] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1413.668089][T25623] XFS (loop0): SB sanity check failed [ 1413.685703][T25623] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1413.710961][T25599] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1413.720061][T25599] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1413.729264][T25599] XFS (loop5): SB validate failed with error -117. [ 1413.829624][T25599] XFS (loop5): SB sanity check failed [ 1413.835123][T25623] XFS (loop0): Unmount and run xfs_repair [ 1413.835138][T25623] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1413.835158][T25623] 00000000: 58 46 53 42 10 03 00 12 00 00 00 00 00 00 10 00 XFSB............ [ 1413.835174][T25623] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1413.835197][T25623] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1413.841246][T25599] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1413.903956][T25614] Process accounting resumed [ 1413.910057][T25599] XFS (loop5): Unmount and run xfs_repair [ 1413.911143][T25616] Process accounting resumed [ 1413.915841][T25599] XFS (loop5): First 128 bytes of corrupted metadata buffer: 07:49:17 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1a2) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1413.915861][T25599] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 0d 00 10 00 XFSB............ [ 1413.915919][T25599] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1413.915940][T25599] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1413.954652][T25599] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1413.973211][T25599] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1414.018338][T25599] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1414.050291][T25623] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1414.138399][T25599] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1414.209402][T25623] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1414.215116][T25599] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1414.304796][T25623] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1414.324841][T25599] XFS (loop5): SB validate failed with error -117. [ 1414.370521][T25623] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1414.399180][T25623] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1414.425231][T25646] Process accounting resumed [ 1414.427449][T25623] XFS (loop0): SB validate failed with error -117. 07:49:17 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:17 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:17 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000001000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1414.593275][T25621] Process accounting resumed 07:49:18 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r6) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:18 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r6) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1414.702122][T25651] Process accounting resumed 07:49:18 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030013000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1415.143347][ T7886] XFS (loop5): SB sanity check failed [ 1415.153767][ T7886] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1415.184990][ T7886] XFS (loop5): Unmount and run xfs_repair [ 1415.191070][ T7886] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1415.198695][ T7886] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 10 00 10 00 XFSB............ [ 1415.207790][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1415.217107][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1415.226223][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1415.235343][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1415.244320][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1415.253508][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1415.262602][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1415.271888][T25669] XFS (loop5): SB validate failed with error -117. [ 1415.282917][ T7886] XFS (loop0): SB sanity check failed [ 1415.293476][ T7886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1415.318630][T25660] Process accounting resumed [ 1415.323270][ T7886] XFS (loop0): Unmount and run xfs_repair 07:49:18 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1415.329323][ T7886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1415.337233][ T7886] 00000000: 58 46 53 42 10 03 00 13 00 00 00 00 00 00 10 00 XFSB............ [ 1415.357431][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1415.367568][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1415.377252][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1415.386419][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1415.395529][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1415.404379][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1415.413524][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1415.435094][T25682] XFS (loop0): SB validate failed with error -117. 07:49:18 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1415.498770][T25662] Process accounting resumed [ 1415.557464][T25669] XFS (loop5): SB sanity check failed [ 1415.562900][T25669] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1415.575545][T25669] XFS (loop5): Unmount and run xfs_repair [ 1415.581281][T25669] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1415.589089][T25669] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 10 00 10 00 XFSB............ [ 1415.598209][T25669] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1415.607455][T25669] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1415.617046][T25669] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1415.626160][T25669] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1415.635262][T25669] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1415.644118][T25669] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1415.653349][T25669] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1415.663299][T25669] XFS (loop5): SB validate failed with error -117. 07:49:19 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030014000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:19 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000002000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1415.937877][T25715] Process accounting resumed 07:49:19 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:19 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030012000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1416.020293][T25675] Process accounting resumed [ 1416.039039][ T7886] XFS (loop0): SB sanity check failed [ 1416.044514][ T7886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 07:49:19 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1416.073439][ T7886] XFS (loop0): Unmount and run xfs_repair [ 1416.085434][T25683] Process accounting resumed [ 1416.090117][ T7886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1416.105156][ T7886] 00000000: 58 46 53 42 10 03 00 14 00 00 00 00 00 00 10 00 XFSB............ [ 1416.136269][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1416.154966][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1416.178731][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1416.217233][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1416.251525][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1416.271702][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1416.296480][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1416.305675][T25718] XFS (loop0): SB validate failed with error -117. [ 1416.312431][ T7886] XFS (loop5): SB sanity check failed [ 1416.326905][ T7886] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1416.360792][ T7886] XFS (loop5): Unmount and run xfs_repair [ 1416.366914][ T7886] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1416.374342][ T7886] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 20 00 10 00 XFSB........ ... [ 1416.383695][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1416.392873][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1416.402059][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1416.411161][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1416.420269][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1416.429416][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1416.438540][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1416.441782][T25711] Process accounting resumed [ 1416.452090][T25730] XFS (loop5): SB validate failed with error -117. 07:49:19 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1416.544275][T25748] XFS (loop1): SB sanity check failed [ 1416.552471][T25748] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1416.565793][T25748] XFS (loop1): Unmount and run xfs_repair [ 1416.571725][T25748] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1416.580007][T25748] 00000000: 58 46 53 42 10 03 00 12 00 00 00 00 00 00 10 00 XFSB............ [ 1416.589706][T25718] XFS (loop0): SB sanity check failed [ 1416.595339][T25718] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1416.607722][T25748] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1416.616901][T25718] XFS (loop0): Unmount and run xfs_repair [ 1416.622764][T25748] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1416.644490][T25718] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1416.652683][T25748] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1416.731119][T25748] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1416.745389][T25718] 00000000: 58 46 53 42 10 03 00 14 00 00 00 00 00 00 10 00 XFSB............ [ 1416.842858][T25748] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1416.857203][T25718] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 07:49:20 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:20 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000012000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1416.921911][T25748] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1416.933212][T25718] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 07:49:20 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1417.002112][T25748] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1417.002475][T25732] Process accounting resumed [ 1417.012401][T25718] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1417.054320][T25775] Process accounting resumed [ 1417.085098][T25718] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1417.093968][T25718] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1417.157704][T25748] XFS (loop1): SB validate failed with error -117. [ 1417.190692][ T7886] XFS (loop5): SB sanity check failed [ 1417.196223][ T7886] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 07:49:20 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, 0x0) read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1417.215141][ T7886] XFS (loop5): Unmount and run xfs_repair [ 1417.226441][ T7886] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1417.241552][ T7886] 00000000: 58 46 53 42 00 00 10 00 00 00 00 01 20 00 10 00 XFSB........ ... [ 1417.260378][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1417.284948][T25718] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1417.289349][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1417.339378][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1417.376704][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1417.409538][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1417.425734][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1417.434844][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1417.444032][T25782] XFS (loop5): SB validate failed with error -117. [ 1417.444943][T25718] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1417.469227][T25718] XFS (loop0): SB validate failed with error -117. 07:49:20 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r4, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r4, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffd, @mcast1}, 0x83) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r10, &(0x7f0000000080), 0x1000) r11 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:20 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030015000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1417.549691][T25800] Process accounting resumed 07:49:20 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, 0x0) read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1417.680447][T25789] Process accounting resumed [ 1417.689822][T25782] XFS (loop5): SB sanity check failed [ 1417.701142][T25782] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 07:49:21 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1417.746473][T25782] XFS (loop5): Unmount and run xfs_repair [ 1417.759370][T25782] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1417.767909][T25782] 00000000: 58 46 53 42 00 00 10 00 00 00 00 01 20 00 10 00 XFSB........ ... [ 1417.778698][T25782] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1417.787735][T25782] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1417.796657][T25782] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1417.805619][T25782] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1417.814676][T25782] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1417.823620][T25782] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1417.832667][T25782] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1417.841697][T25782] XFS (loop5): SB validate failed with error -117. [ 1417.850083][ T7886] XFS (loop0): SB sanity check failed [ 1417.855612][ T7886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1417.867556][ T7886] XFS (loop0): Unmount and run xfs_repair [ 1417.873398][ T7886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1417.880873][ T7886] 00000000: 58 46 53 42 10 03 00 15 00 00 00 00 00 00 10 00 XFSB............ [ 1417.889833][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1417.905355][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1417.920821][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1417.929826][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 07:49:21 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000102000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1417.943233][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1417.952320][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1417.961393][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1417.970566][T25809] XFS (loop0): SB validate failed with error -117. [ 1418.047209][T25798] Process accounting resumed 07:49:21 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:21 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030016000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:21 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, 0x0) read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1418.321829][T25831] Process accounting resumed [ 1418.495186][T25842] XFS (loop5): SB sanity check failed [ 1418.500807][T25842] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1418.561235][T25842] XFS (loop5): Unmount and run xfs_repair [ 1418.619006][T25860] XFS (loop0): SB sanity check failed [ 1418.643510][T25842] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1418.651030][T25842] 00000000: 58 46 53 42 00 00 10 00 00 00 00 10 20 00 10 00 XFSB........ ... [ 1418.659997][T25842] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1418.665542][T25860] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1418.698407][T25842] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1418.737501][T25842] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1418.758882][T25834] Process accounting resumed [ 1418.770895][T25842] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1418.775158][T25860] XFS (loop0): Unmount and run xfs_repair 07:49:22 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1418.782139][T25842] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1418.794588][T25842] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1418.808442][T25842] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 07:49:22 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1418.860379][T25842] XFS (loop5): SB validate failed with error -117. [ 1418.866953][T25846] Process accounting resumed [ 1418.880601][T25860] XFS (loop0): First 128 bytes of corrupted metadata buffer: 07:49:22 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1418.928143][T25860] 00000000: 58 46 53 42 10 03 00 16 00 00 00 00 00 00 10 00 XFSB............ [ 1418.960428][T25855] Process accounting resumed [ 1419.018891][T25860] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 07:49:22 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, 0x0) read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:22 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000002300100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1419.069567][T25825] Process accounting resumed [ 1419.171857][T25860] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1419.266147][T25860] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1419.343620][T25860] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1419.378803][T25860] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1419.407790][T25876] Process accounting resumed [ 1419.420801][T25860] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1419.445144][T25860] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 07:49:22 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1419.454010][T25860] XFS (loop0): SB validate failed with error -117. [ 1419.459689][T25894] XFS (loop5): SB sanity check failed [ 1419.478498][T25894] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1419.518653][T25894] XFS (loop5): Unmount and run xfs_repair [ 1419.524489][T25894] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1419.623243][T25894] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 23 00 10 00 XFSB........#... [ 1419.722461][T25894] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1419.805148][T25894] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 07:49:23 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030020000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1419.884559][T25894] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1419.906392][T25894] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 07:49:23 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1419.934064][T25886] Process accounting resumed [ 1419.936283][T25894] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1420.058649][T25894] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1420.112748][T25894] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1420.122345][T25894] XFS (loop5): SB validate failed with error -117. [ 1420.150610][T25914] XFS (loop0): SB sanity check failed [ 1420.156218][T25914] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1420.169924][T25914] XFS (loop0): Unmount and run xfs_repair [ 1420.187247][T25914] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1420.216675][T25914] 00000000: 58 46 53 42 10 03 00 20 00 00 00 00 00 00 10 00 XFSB... ........ [ 1420.225922][T25914] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1420.236278][T25914] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1420.245659][T25914] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1420.254823][T25914] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1420.264139][T25914] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1420.273352][T25914] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1420.283714][T25914] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 07:49:23 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r0, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:23 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000002c00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:23 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1420.324403][T25908] Process accounting resumed [ 1420.329197][T25914] XFS (loop0): SB validate failed with error -117. [ 1420.339810][T25893] Process accounting resumed [ 1420.362866][T25880] Process accounting resumed 07:49:24 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210031020000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r0, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:24 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1420.773940][T25927] Process accounting resumed [ 1420.780745][ T7886] XFS (loop5): SB sanity check failed [ 1420.786245][ T7886] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1420.860824][ T7886] XFS (loop5): Unmount and run xfs_repair [ 1420.891958][ T7886] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1420.915417][ T7886] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 2c 00 10 00 XFSB........,... [ 1420.924295][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1420.960282][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1421.005152][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1421.065078][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1421.151327][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1421.184139][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1421.193327][ T6886] XFS (loop0): SB sanity check failed [ 1421.199289][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1421.207610][ T6886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1421.220554][T25951] XFS (loop5): SB validate failed with error -117. [ 1421.294704][ T6886] XFS (loop0): Unmount and run xfs_repair [ 1421.317748][ T6886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1421.345695][ T6886] 00000000: 58 46 53 42 10 03 10 20 00 00 00 00 00 00 10 00 XFSB... ........ [ 1421.378724][ T7886] XFS (loop5): SB sanity check failed [ 1421.384238][ T7886] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1421.390563][ T6886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1421.396159][ T7886] XFS (loop5): Unmount and run xfs_repair [ 1421.410828][ T7886] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1421.418309][ T7886] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 2c 00 10 00 XFSB........,... [ 1421.428301][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1421.437294][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1421.446262][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1421.455243][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1421.464344][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1421.473452][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1421.482536][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1421.509883][T25951] XFS (loop5): SB validate failed with error -117. [ 1421.550455][T25966] Process accounting resumed [ 1421.559748][ T6886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1421.576383][T25940] Process accounting resumed 07:49:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r0, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:25 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1421.600217][ T6886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1421.649245][ T6886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 07:49:25 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000002493000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1421.694829][ T6886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1421.790436][ T6886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1421.855492][ T6886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 07:49:25 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1421.907055][T25968] XFS (loop0): SB validate failed with error -117. [ 1421.942584][T25950] Process accounting resumed 07:49:25 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030023000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1421.996887][T26004] XFS (loop5): SB sanity check failed 07:49:25 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, 0x0, 0x0) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1422.051819][T26004] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1422.079645][T26004] XFS (loop5): Unmount and run xfs_repair [ 1422.086574][T25981] Process accounting resumed [ 1422.105344][T26004] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1422.138379][T26004] 00000000: 58 46 53 42 00 00 10 00 00 00 02 49 30 00 10 00 XFSB.......I0... 07:49:25 executing program 2: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r0, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1422.162677][T26003] Process accounting resumed [ 1422.306118][T26004] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1422.355533][T26004] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1422.435283][T26004] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1422.473056][T26004] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1422.488751][ T7886] XFS (loop0): SB sanity check failed [ 1422.494205][ T7886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1422.516304][T26004] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1422.529563][ T7886] XFS (loop0): Unmount and run xfs_repair [ 1422.539619][ T7886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1422.547537][T26004] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1422.548196][ T7886] 00000000: 58 46 53 42 10 03 00 23 00 00 00 00 00 00 10 00 XFSB...#........ [ 1422.565686][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1422.574866][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1422.583867][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1422.592915][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1422.601992][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1422.610981][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1422.620099][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1422.629329][T26034] XFS (loop0): SB validate failed with error -117. [ 1422.675486][T26004] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1422.713033][T26039] Process accounting resumed 07:49:26 executing program 2: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r0, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1422.753437][T26004] XFS (loop5): SB validate failed with error -117. 07:49:26 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1422.795174][T25999] Process accounting resumed 07:49:26 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030334000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:26 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, 0x0, 0x0) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1422.974908][T26033] Process accounting resumed 07:49:26 executing program 2: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r0, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:26 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000033400100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1423.207030][T26055] Process accounting resumed 07:49:26 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1423.259486][T26017] Process accounting resumed [ 1423.265990][T26064] XFS (loop0): SB sanity check failed [ 1423.271578][T26064] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1423.408151][T26064] XFS (loop0): Unmount and run xfs_repair [ 1423.414063][T26064] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1423.434552][T26064] 00000000: 58 46 53 42 10 03 03 34 00 00 00 00 00 00 10 00 XFSB...4........ [ 1423.457009][T26064] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1423.496225][T26064] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 07:49:26 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1423.522142][T26086] Process accounting resumed [ 1423.526948][T26064] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1423.537038][T26064] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1423.560024][T26064] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1423.587437][T26064] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1423.673172][T26064] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1423.705265][T26090] XFS (loop5): SB sanity check failed [ 1423.711014][T26090] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1423.730037][T26090] XFS (loop5): Unmount and run xfs_repair [ 1423.748999][T26090] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1423.757471][T26090] 00000000: 58 46 53 42 00 00 10 00 00 00 00 03 34 00 10 00 XFSB........4... [ 1423.765106][T26064] XFS (loop0): SB validate failed with error -117. [ 1423.766978][T26090] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1423.782381][T26090] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1423.791788][T26090] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1423.800988][T26090] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1423.810344][T26090] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1423.819661][T26090] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1423.828960][T26090] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1423.839119][T26090] XFS (loop5): SB validate failed with error -117. [ 1423.889612][T26071] Process accounting resumed 07:49:27 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, 0x0, 0x0) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:27 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1424.237995][T26106] Process accounting resumed 07:49:27 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653421003003f000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:27 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000003f00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:27 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r4, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r4, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffd, @mcast1}, 0x83) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:27 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1424.472911][T26111] Process accounting resumed [ 1424.488702][T26062] Process accounting resumed 07:49:27 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1424.547633][T26122] Process accounting resumed [ 1424.620581][ T7886] XFS (loop0): SB sanity check failed [ 1424.626195][ T7886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 07:49:28 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1424.675884][T26089] Process accounting resumed [ 1424.680967][ T7886] XFS (loop0): Unmount and run xfs_repair [ 1424.699276][ T7886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1424.712598][ T7886] 00000000: 58 46 53 42 10 03 00 3f 00 00 00 00 00 00 10 00 XFSB...?........ [ 1424.728292][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1424.743031][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1424.752525][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1424.761861][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1424.771113][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1424.814305][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1424.833878][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1424.844824][T26121] XFS (loop0): SB validate failed with error -117. [ 1424.855917][ T7886] XFS (loop5): SB sanity check failed [ 1424.882394][ T7886] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1424.894745][ T7886] XFS (loop5): Unmount and run xfs_repair [ 1424.900817][ T7886] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1424.908711][ T7886] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 3f 00 10 00 XFSB........?... [ 1424.918191][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1424.927961][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1424.937258][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1424.946699][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1424.955924][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1424.964993][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1424.974339][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1424.983653][T26124] XFS (loop5): SB validate failed with error -117. 07:49:28 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1425.056155][T26149] Process accounting resumed [ 1425.063715][ T7886] XFS (loop0): SB sanity check failed [ 1425.069911][ T7886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1425.099938][ T7886] XFS (loop0): Unmount and run xfs_repair [ 1425.109775][ T7886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1425.122157][ T6886] XFS (loop5): SB sanity check failed [ 1425.126114][ T7886] 00000000: 58 46 53 42 10 03 00 3f 00 00 00 00 00 00 10 00 XFSB...?........ [ 1425.127685][ T6886] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1425.137932][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1425.157459][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1425.167559][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1425.176460][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1425.185474][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1425.194390][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1425.203265][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1425.216306][T26121] XFS (loop0): SB validate failed with error -117. [ 1425.348625][ T6886] XFS (loop5): Unmount and run xfs_repair [ 1425.361939][ T6886] XFS (loop5): First 128 bytes of corrupted metadata buffer: 07:49:28 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030040000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1425.390064][ T6886] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 3f 00 10 00 XFSB........?... [ 1425.440728][ T6886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1425.477242][T26166] Process accounting resumed 07:49:28 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1425.484506][ T6886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 07:49:28 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1425.542250][ T6886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1425.581174][T26147] Process accounting resumed [ 1425.634896][ T6886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1425.660558][ T6886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1425.687459][ T6886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1425.696684][ T6886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1425.742938][T26124] XFS (loop5): SB validate failed with error -117. 07:49:29 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000004000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1425.900124][ T7886] XFS (loop0): SB sanity check failed [ 1425.923688][ T7886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 07:49:29 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1425.948227][T26178] Process accounting resumed [ 1425.954791][ T7886] XFS (loop0): Unmount and run xfs_repair [ 1425.980062][ T7886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1425.993588][ T7886] 00000000: 58 46 53 42 10 03 00 40 00 00 00 00 00 00 10 00 XFSB...@........ [ 1426.002671][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1426.011697][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1426.020953][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1426.037472][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1426.055321][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1426.073417][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1426.082548][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1426.091670][T26185] XFS (loop0): SB validate failed with error -117. 07:49:29 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1426.105618][T26158] Process accounting resumed [ 1426.366423][T26204] XFS (loop5): SB sanity check failed [ 1426.390671][T26204] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1426.509342][T26204] XFS (loop5): Unmount and run xfs_repair [ 1426.515219][T26204] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1426.522731][T26204] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 40 00 10 00 XFSB........@... [ 1426.529257][T26199] Process accounting resumed [ 1426.531715][T26204] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1426.546138][T26204] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 07:49:29 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030340000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:29 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1426.555009][T26204] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1426.595101][T26204] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1426.615125][T26204] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1426.664861][T26204] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1426.681973][T26210] Process accounting resumed [ 1426.683822][T26207] Process accounting resumed [ 1426.691160][T26204] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 07:49:30 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:30 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1426.714901][T26204] XFS (loop5): SB validate failed with error -117. [ 1426.780421][T26183] Process accounting resumed 07:49:30 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x178) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1426.887950][ T6886] XFS (loop0): SB sanity check failed [ 1426.893818][ T6886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1426.954236][ T6886] XFS (loop0): Unmount and run xfs_repair [ 1426.978820][ T6886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1427.010634][ T6886] 00000000: 58 46 53 42 10 03 03 40 00 00 00 00 00 00 10 00 XFSB...@........ [ 1427.030851][ T6886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1427.055762][ T6886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1427.079577][ T6886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1427.098563][ T6886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1427.117469][ T6886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1427.136452][ T6886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1427.159188][ T6886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 07:49:30 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000004800100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1427.183720][T26229] XFS (loop0): SB validate failed with error -117. 07:49:30 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:30 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1427.356564][T26229] XFS (loop0): SB sanity check failed [ 1427.359930][T26252] Process accounting resumed [ 1427.375522][T26229] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1427.384580][T26234] Process accounting resumed [ 1427.446233][T26229] XFS (loop0): Unmount and run xfs_repair [ 1427.466272][T26233] Process accounting resumed [ 1427.471059][T26229] XFS (loop0): First 128 bytes of corrupted metadata buffer: 07:49:30 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(0x0, 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1427.550862][T26229] 00000000: 58 46 53 42 10 03 03 40 00 00 00 00 00 00 10 00 XFSB...@........ [ 1427.621765][T26229] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1427.722355][T26229] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1427.742534][ T6886] XFS (loop5): SB sanity check failed [ 1427.748297][ T6886] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1427.789610][ T6886] XFS (loop5): Unmount and run xfs_repair [ 1427.795390][ T6886] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1427.802760][ T6886] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 48 00 10 00 XFSB........H... [ 1427.825646][ T6886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1427.834517][ T6886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1427.858453][T26229] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1427.894866][T26229] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1427.934611][T26229] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1427.964452][T26229] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1427.966067][ T6886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1427.982169][T26229] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1428.005144][T26229] XFS (loop0): SB validate failed with error -117. 07:49:31 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x3678a3f18f0fcbfb) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000004180)={0x0, @xdp={0x2c, 0xa, 0x0}, @l2={0x1f, 0x3ff, {0x3, 0x81, 0x0, 0x40, 0x4b, 0x1}, 0x1}, @llc={0x1a, 0x81dc56ff1eb1b89e, 0x1f, 0x3, 0x8, 0x1, @local}, 0x28, 0x0, 0x0, 0x0, 0x3, 0x0, 0x36, 0x2, 0x2}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmmsg(r4, &(0x7f0000007b00)=[{{&(0x7f0000001080)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001100)="c8fe32c603e894806964770ca60175909e28bc1ed3e29dc1da7cd1da36f5e01239b6d2ba3e9b2ebb2583bc3c8e54f902cb0e7f881c5e6072b32763a53ff4ac2928dae53842a49f4f75e0202314d24652c0823769ef74625217180f4aa89b9a03b254715bddbe826b3d64ad3f80ad095e623cd5f6992e64e58b5a357a10f7e2c8a5b5bc4862b7f9852de392c4cdb16fac5110a045d13262d35a2e5f", 0x9b}], 0x1, &(0x7f0000001200)=[{0xf0, 0x103, 0xd8, "2aa59188ddb01d4b62883205b457fbb9726e01c707d151ab5b15ca388d3bf017e21636f16b9bc399ff6b6e608bd7c08b228a935b0afcd3160b98de570a0e83f1099c907769a1f15eedc371fc082e408fa854e5bd926ae63af9ab3202d905bb993bed564d7badff2a46c721a5ebfc73d8d28fd681b3fee850c98a9a19716ed48eac8937a8e832c09edbcdaeef9ecc284110fe10cbfb078dfb4908f7a673c0a4f215449eb7c425bd3306755088170285a5992aed104b81c1c421a6869f56aef708b3049621a4047239458f99a5812771ab24ea8310523241fd9839a0ff4a"}, {0xe8, 0x109, 0x0, "b05c8dd0603fd02903d077d01ed774786d09033ffc2b6bf50bbe85ee4a7ed1bf142d11386f4a489e4b7757a4a976bd54ee3a6d9d50858de5acb0d36b02a9c5fdf79f22b444ee7d92841aa0ebd0cb3e396ec387270f2d208254fa42c3c71c18be58563c943d95fdf40814c3277be1712e67c4c1804b8b1cfb3d632462a0d65ff38b6b9dc88d1fea015641dc75128006c0e415bf597c468e1122a5b542fb7f7bc8bd966b346fdcc06607de0759140209427ea701ffeeae575e512f9bc93fea364a71fb65969dc49c8b4ee69d70a3528d24eff90a5de40981"}], 0x1d8}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001400)="a1e9a97ee2f5882460302bc8e3e9fa7734deba45f4842bc861a7ab2ee7b33e7d131e41c185b4980171fe5cda36dee2eb5ac892bce89f3270b0b4b04927e44a167198f6b0d6f977a14f438404556721884d3025306f0bcfbbdb87ac4b8af704ae08d9", 0x62}, {&(0x7f0000001480)="d39b023510e81a27c1ca4eca4e7bba3f01d9aeca1b612549e8515a7d1d4fd9b394ba89e2874fe20e398ae065c357c8403d1b18d510db1fada54b052cffbc90eff6c735a286d66dab65ec6972280b4fa136d556c90f01e46c77cde1ae43a0c04f831fe554061933ac39114df75292d35574c33f7d5fb170a36e7fc2b5f368304218fd081ceee607a615595baad170431c2d6770a38036c73c3deaec5152b76ab71ab049e17c5a388c87c1df608a3972097d0ffa9234bfd7521a92e2a9f47d9613a274ca948ae8bb2cf77e3984a11a8bc97c5a0cc115f0711fd596a61117fb993238284972", 0xe4}, {&(0x7f0000001580)="7414f59697325c18565d98cd4f464b3709ec89c68dc06a6bc008b151e34d32d1350e0856e049d6926385d3e637aca1880765f26a06a2fed7470f62197ff31f319c1a0629cef68a58ddf2", 0x4a}, {&(0x7f0000001600)="d8920e68fd8308b224d785d979ad6660745c5276524fc2c280edf6fd8d474cc3873387401767952f701faa72567bc4d45b941c8558489920e7b2634776934c05d65a13756f002d65b6abe80feab2593d7268c534cbe96034e35a2df1c3648925182b4a2b08b62fbb9e5ddce1e5ba865aa5d678a3b14f6af21237cd291197f6d7f29effedce82415b2848d0de3decebbaf93c9ddfab2e94ecec72249713902222f3db1856f6376970cf1215f05f1a1ea84d64d70e8f79e9333507f4a38f1c31cbd8320b8aa076977f41b13f0ddf81f8fe7a0f2e210363bda447065eefecd113f88e7c1a84748b1b74220a5b46fc8644e49386d866", 0xf4}], 0x4, &(0x7f0000001740)=[{0x58, 0xc895b4773f1f49a8, 0x1, "15e73078c1c5a660525494e12979dce8758a86d139d8554791a83589ed0dbfe74a7b00579bbcabd2ca998f7c5daca25a480b6532e4ab2a5eac4c0445e03581dd04d7b2c6b66f"}, {0x90, 0x20b, 0x400, "d0165ff0744a24b8f80610fb86d7af18722858c7edfe13b63b84965c8943f07192fdad93d2875049f6ebfcf1254b39ff1b7a94edfc9d45a27d6a4b6c69e00b5f6ee487541cb43d951cad1108fa812daf52e13ae0132e4257cfbd9fdf14a014f97bca3ceb9fbf0f53d9fdad2510be934c7fd721b9b4babd1cd9132dbd526249b3"}, {0xb8, 0x29, 0x2377, "1203ae0fbc8eadd3d7a008485ad505a6adfd9062642d3291209fc3f248287ab25b0b7dc8ab1eddfcbeea22e32875b0e6d5ff501391a344155042f918d620dff5f552d1e1a0714f0f579d7fc728fe34aac03a756cd5e383726e0e658439ff671df70b0081bc40c89e588ae8f54d67632267d008038ac8435765d49164fcc66a0968ba4293964de772d76b05bc8e4382c7ee17ada298777160548e7a10e02b780e9b390ab3e45ff61a"}], 0x1a0}}, {{&(0x7f0000004200)=@can={0x1d, r8}, 0x80, &(0x7f0000005880)=[{&(0x7f0000004280)="ed19cc1ae513331506e545ab5991db6bcdce5aff153f319885c33a02e90c03522bb5482e959508818bf9a247924de5b8e95df297a58b7fa789cb4451a26dc36195f3d6613b139b71a576d5eb1263ae8b81a23cfda1e8d8b4a11243b4d36a64c4e5ad", 0x62}, {&(0x7f0000004300)="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", 0x1000}, {&(0x7f0000005300)="9802ee155f2e1f8c0289a80e7ece4c991947d39093b48519c0a30a8185d2f01838db5be1e659161f6c94cc29f74e35a519ccfd51278d03fbfeec40e815c9bf4a92ce1651506fa36a852941e246c60e48e8650c851696c7", 0x57}, {&(0x7f0000005380)="2c1ac45eabb127e40b087d6f59aa984a1714182341b2ae118efc53bcfab1d0e344cf8d4d7e6017df0c", 0x29}, {&(0x7f00000053c0)="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", 0xfb}, {&(0x7f00000054c0)="761f98ad58cbfa9c2ea741b9f054d8f8d07dcb56a9db0821ca088501493b977021373447d6f9a9715744d2e6459e8ac053146b2e8f06302fa421291a08670a8cf11892", 0x43}, {&(0x7f0000005540)="be48435f1572f97b359b1a2400b2738fdfe638b0959a6bfb71cb9c347ef859f211c65b6ff6e502bdfa6415c5f06abe821c8252e567f17c4631e159cf89b834ad0e048a629dca63c36eaed950f67e5d25176818c22702d97cc731bc96724f88b4be1d3bbacb89e988296895090527fd77416e16b55b6a46d2039db1e61bc3ff410c94b1420d362aa4d437235a45a5e3325dad01c86e857ec3005da338695b9bafe0f318361d7ede59b7dc2936e611c935c63ddbe308ad734f6beebb7de6a378356221f3c8a1b2fec334d1d0791a979a98b40f65edf2d38706a6286873e8517feabd4fe7d9516d6655c0ad07", 0xeb}, {&(0x7f0000005640)="7002136ed003f5f9ca50a70730acbe0479a61b4953e5d3d82b97635e48ebca63c8d9bb4b96c2c02c5205664a96fe3f0bc98403437b16f0feeb90e0b3ca1bdd1e20f578bd8c3fe5bf4aacb905360da3a4bd99201b7688b4c9af151dd6dd6445ee8d3fcf978398ac41a1bcda13b1bbe3a74bfa41810ff3b44360e9ef6290f6d5b8d5eb94b099eb565158445776cc575945791f470935cbca94b06c4dfe502c37ae60637fde9e53f111803b31c44ed989ba59049293", 0xb4}, {&(0x7f0000005700)="f75bc6b57ec3a595d2ad5123542ce2b53c5c97dec48e02494a0b1b3e58131dd39dda8484f4ae2998160d64e6d4c83617bbe4c78bd389d68b0413a4d1ae275269c7bf857bbf06c185ef23f434a7d44c70d694afcb717b580eb1f8280b065f459be983d3b20ece688f273da34bae45ec1798bbd5dada7ee199222ec276e9f3d77bb1812bfe37c76255e8e7d2a6cd4b01173939820101eaff63b318ca67cf015e252a5dd56d0c19a13b32aaedc9c43da0a2bd30baa10eee6f49dada4c88", 0xbc}, {&(0x7f00000057c0)="0ba6bdd657f538b26e57362ae17931a58d1f3fd2b48c960eee2eaae7b1f01f8fd1590e53a86d3cbdc218c896a299ef9cbc47dae24ea7cdd9e46c5c6e680a413b1d55d4eee90a154557e7e0706caa560943957323f8711535f41d876c6e5e0ef76c9fc4860073ce942a46c14c8a550e6e881a6fde2235dacaec985819f99816d56c4260b8ffaf2ecf7c6e377151d37695d8e88ac0e21ff86f1c", 0x99}], 0xa, &(0x7f0000005940)=[{0x108, 0x11, 0x3, "a8616ad8e6be66e6e968f20e38eec26d8bb40c085d9fc43e76e79e165cf0a7ab53997833bbe3d2dcd7e6ab03b8275466abb0b3d5d3a5228da79c6e7d8ffa3009ea70b3d3b62b3937d2f758ef7a05dd9eb8d8a5b4d9c5371caa1078ce549318e9f9b9d312b495971ed6b8c55eab2320eef378be38dc396e5d8f22a478b01f857fa8742d0f2423a53d2f044e1b05c758de7adf617fb2e8b21922a3666c5cf8b82b0c13c872ab2c05eba3ed7cbe11af029bc6f8eca2e221f27c9d0a4da47e63858867eaeeca081b1c074a6548c5e41cfdcccb28d9a4660956bf20d9023987bddc726112784cfbd8f897eb08e7ed7d917c4e89b889d5"}, {0x50, 0x118, 0x0, "3ea6c48e42ca71c358142f932e28e70e101af7f1ac75f325177904bd05cd93bce3709624cb196c44748d758ea382dee8c43181df9d8cd88c91f92e40ad6a88"}], 0x158}}, {{&(0x7f0000005ac0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-aesni\x00'}, 0x80, &(0x7f0000005c80)=[{&(0x7f0000005b40)="da1873032c5a6cab61f921acfcc131987c6ee0dcc32d13ab0648ffe25825737c08c2a933a32f6d97cb93dc01d42a7f8bf551694689aa5ae8504960a50a8207b95ea75bdefbb221707f0b2745da8bf2a69c552facf173d47280b6120c6d7badefb9c5609626fe06a79b55eda2be3440fd84ae93399468a43b4e344f23cdc49a23212b2a8c7733ef1c96561998b2ba0c3c971bbf57198d89398a8d40a13a09a2455cdd20dd1cd564aa4c467ed5bb63e239d3095dbbdc679c9293e0a06946df745b3d59c80057a7b153dbb9abca36e022670c9c33f3aee782deae22386ec17d7a25e78dd875abb5f1bd3b83bc243366dc8b63e2d0033ade", 0xf6}, {&(0x7f0000005c40)}], 0x2, &(0x7f0000005cc0)=[{0xf0, 0x0, 0x80000000, "ca445240dbb2542be8a567a34fb84f140dccd1086b62a81b006f7c18ca859b9e6012505c821d63ea64a7d805244bdac13043c697e4a7075671a155216ddd100699041e344b2c0fae56cc24ebd82cbb0ce133dedd7113c3c59df445aab1ce118d4a256bebd2a49757ff3293b5293fe800616e68a238565216b54a0c3f5db55798b30c6d2b5c3c212a46c5a4dbabfdb39790c4663dbc57f83b41e637c41f716c0419eb0df28aec22c5e9c24a7dd5d50170bd14b92a01c04f862650c76f6adf03638a8083828b385c11668afd4763dc2f193dca84b4e653e86ccd5562170facb4"}, {0x110, 0x0, 0x7, "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"}, {0xf0, 0x0, 0x8, "472901a8195d98791fc7e334973273994e898b1bdf64d1d2f105acb53249c0024bf31aa1125d9bcd031c927f28bcedd119d745a4259ad320f20a7c36353e81693e270342a8a8c33bb07be8c5c66b31b57f5060237e810dbb4a0a649585da7d5aefa2cec8847e2f3dbf563649a834027c8979b79a91c30b8e2e6e1f0a9559e5ead80b4b3e47beadb0b0959b8d7263da2a26a68ae074308547f2ae8983bf5807f75ad455e4d40d53e9bd40fe73fabe37ac0048fda4bd134c4df68c7ccc4ad94f6681967b548c759b89d61a44f749802d122517c91f058edb0e1eff82"}, {0x88, 0x103, 0x7fff, "1e41fae7122ea7ce5d0506018d6950a243e16cc2712feb898bd6941f8d672ed066c050cbed109dff29e93ab3edcadf475bc39d9cb83507ef8853788a4c6a658b219a60708bb895d44185ce7e53fd24c426cb4b806faf41fab755cebd988d92672883091928eb83460930dd9e1b7f44a7ae020f"}], 0x378}}, {{&(0x7f0000006040)=@pppol2tpv3={0x18, 0x1, {0x0, r11, {0x2, 0x4e22, @broadcast}, 0x1, 0x4, 0x0, 0x2}}, 0x80, &(0x7f00000071c0)=[{&(0x7f00000060c0)="e9fbf6d7cf04b0ae909701106630261a0cd3d5080421c420492587ebbd4bb8d445edae7314fec99275513dcb00677d44af75199e84c38aa1d99f4313e0e0c626f630f7ab0c0f3cebbe04b16c1722293bfa93572d9dd34d5abd626d5b9a1b35e4c94dfb30ad5bffa428fd95994470ad24b8fc38be72f08f10d5288e11c584e6fa634ea9596a3c6415c3608cdddc5e7f31cc1808f310b2162a4e8726e834d239f48f007e36574cdadd14e6be95bdd7978fb4c8fcf3a23153a9cc79896907a73b223499f1c4cdf2754f6eb1e9431bb29613e23c03a86d3b9a9cc3eb9fd90aaa3427421786c8a306621c180991fc598091cabe8338bfc2690f7322b270fc1dbda72c16dbaf575c100f77a1aeb1a5972038bcbbc285b7f093ec9a6f6b7518ef1d8247f7c34267ae16119a08ababd377ec360095dc9be3a90add89bcedb69db66d311f42ddadbacd992d464af4a10a76b0187a260d5301206c910314141c248ba3c071e9587890acff31c0c8930b79d508cd1fba5494a48ef0a3a99ddad24c7b1e2a8afcddd35fcd2833a4df607f919d00f495cadb50c884dba2ed79373ed2972c9c9837c9d9f1ed53d668e38037ff6adef80b07ef152e94d8d78059408764e5b05d88782ce836f5c3db2efe744b114d66bed525b8c88e8b3365cebd9c597be24e7a2e7229ed6c381e43a2de08d3e65f24a02d593cfded41f44195a6b647bf0a7b1207f676625408e22725fe7c642d7d7ee21a2d7ec05fa05fefb7cc0458fa5c084402d470839514999dd10f6269ee28fdee9f4f91a401732110fcc29bd9635e76c8cddbc1a0d86ec2cc195a2b333220c8b2345de05f28f31632c3ecb308cf6884a102751ce52206d01b229b15258255b2becc44bf617db171207be64f7fc8c48ddd130c69c8a9a2578218fadaa5d3b4f863daff157b572358c90c43237360726427ebc5c2865dd8c0c761f22aa456f5c168962b8ef776c53aae93ca51dcd11aa0c2c258021fc289947d007eefdacbd593d41584b0eb5a2685d4b1568c85119534612224cf1233cbef49292e497a36da628046467b1cfd1e4f49912904f107b89819302dd872553a1bd2557c644c0497a20bc6d0f36a04855b8cf49f87e56cd4b9a016b31f438d5216ae5e69b64774adf21b273ed719f0d0ae3661bdae3b74985d2430b7d5594707d53e2805549833e4ef418651148162427d35efcbcb2751efc7f4c80f0c38bc38038ed3729e59a0f0a1415cc4fad4d5b6f26b8a8e102e14a0d7fab58f87270f93c20c28269123f6b4fa8e73efa84c71b380e03f05b1775c40e518a6b8acd048f0519f1401e42dea108ade4df919c3a6c96ac4dc760e4f2ff9b63252efa41ea376f7fb7626d6cab2d9e8c07d17eca7aeb22c3d1ada513b55ea001dd0f25710b8835a29b412d61e23118ac92cfd7598970e6eddc3606d1c116276fab7101f6c0a51f4b72c1260045be6b1a3201f4207062e129c2b9603c931b4f42a83f3b8295fc8618a8a69eb9833d2928fc6ce7cadcec1b7e46cfbc2322ac227218e502c44520e1450146990959a98398a7e6cb5c39a3c486be4de4c13a2aff6f738fdb36889456aa3346b30f8a5d0d1e12247d06cd91b28bb5bd7ca98b5a835a315cd4790e96f53c47aecf8fe57128e76494633899b31a4bfcec400f4816d7dc769349080ba34809a3b6a39e39724f31a758617d4c45f22158cc70ab4966eb28c546ade3bc977e48d5ff29b90a4e2b88277125021d0159772e1c6a69e8e3fb7fbcde6df964a06354538f58024f04e4dda1ce66eaf33114d676dd78536908738758fee84d37057d6cfcfed04c312d2cb0d264507963145ff88827eef321ffca974fb233e05919aac121a1a70cf9ec48909ae33de1250e49c13e017effc2e6733b5b495e1af78be0be013b575f90c8c426e67096d2a62a158a67a195b984e33b169b857df0bfeb60e9ee7492b51aa44bbbdc72b67b7eee5d15e43bb519ccc5e70e895418a5dbeefca8624121f3f46a8c35ce2ede6376097a5b48129276c97b436be2e1ea07b91716fcdc5225c34d971af03187db5f3c2386a6f6507928bd25f19bc2a82bfd30dc7eef6872a20aaa537af0f514f3fb4f1bce36f1b6f20b0317bdc6e11ff395fb59321bf9972ea9c5389cd2aeb75335149cae7754be96ddc64d667f393c9b6b7a084b06168510570471a65866fa8b12a9dda1bb246dd3c34bdc8051dfcca64ab0d284076af5849a10c07bc268be8caecb7bed8c7ed6b56c6b99fe25afc06439796ab0e5025b635120eb83060b2292e78bee69bce4180d2865c8387f97f8676777c565885b8db1eb67fffd6d288fa5fe63910523935eb125c069e6e3eb07f55c77f4f6f5cc82e54856f5fee37b711ef591f76d33681e7444a016ec951ad0e31384675e8ba1e12bec205d03eb52ae4e23bb7dadc54ac1136fee3cf68e701cbe53f382ddb9edb96ff375ba4403b03faee98ef358349cd52c3d652dadac5dc98df282345805e5c146d78c2bff225b54588d4905953ef849a676c0ad150375e7cf6ee85ca6522df84cc050158f0dd7aab9e7a17c3993d2972069bdff9a7baf04de37ba281687ba5e26ee016764b7c2f4ceb35c0a49b213d55f6d8e1c303890d6b7e14f3ec0310bc6e8f4715077aff406ab677a8e3127b28abedc59a472ebf4e37fd9ed094b66abb4544e4592790ad3f861da8bc7bdeda03a80d3db32874d2f6c700f081e5236c54a6bab1218fa81d728f92a6ac1c635073b72b82eca315a2cd98c168172a57e7ebf7e050d644dc315b1a3993da9f1b62d479ab0cf5b73af60d0aefe0f1c578c49ed763e0439e8c2f136983d3250a8c1f592d33cc96cc8dd57d8e57ad88b9bba75bec91097f1636bcb3c3d040c0c9fa02878480042cf97d204455c0194600271812e0ce40ddb9d469b4146fb926f03aca2a72109f641a151a5f3a7fab4205b921674a1dabd28f08f8093001d53786f183eac6929f5cf2e45c7b69aca1c8e264359428f24a61afedefff40bdc8dfda614ef92a4bf41d7cfa0dc8f62156fc59447bcd2d1c34e000cd9d6800619a79ec47fd48f87a02ad5f448c78a3322ad1fdf28d324d4919456f4effbbc0b4b7ae59ac11d8aa6c735104e9a424b6262851bb6d8807a9ca3a3a1d03c8ccfb117f4fb2f89868be7e3cd35e3e5bb8d191b5ea3224d43ef2302a0ccc89c2f16cf028f144feaeafb1346a7fb2dd3daf683002239566544dadb2a22c850344e76de877245bef3d8f9f3693774968e3cbe4fb17b5a9841815454685d56bafa804269177f42255d32949dfb21045a1d6359a54a8e6028e16612aaa6b44a45619144ed26ee0c54e86732a207085ad54e491e858251bb8e44d97583e555e4e1899a2043d3dfb1bd2e8cffb94fc1bb2e64c6bf52f439344fd41d3c62f4c4d0d5975b86771381996966eeed4c9fb2e88babeea4c7b041ce167eddfb6d99078f8db73d964d9f2ce6c1f30e329252bdc48f95c6b3ad5a7a4b16a697f67f2817acb032a0eda2ecf0b64369534f46f648168dd51ffc99ae114051db4deaca2d764630c7de2d57a4e31c90d287c4b30e352809f7f8af15c710e14b05354696356f927cf50cc410edd1f86e5da0c792f9f464127d0dda8d5ffa17b43db3470f00dd7547ac3fe0478d6b6d00c5891c0523b3c0f62bcb3f406833d6ce7f4ab8d2922519d75b43fb86e79b27221e74495f74138d17ad3a86cfc5b279c6daa730433a086bc6a07a7622918ee15ba6bd2185d6a4fdc6f5cef631e833e2233e5c89e3c71b6f01b9a61daae5533cd0f27b4e36693666228b9af3713b33dd2b7feb80c7f9c8b3681c3eeeb22b28a0d6551b3725635835c5557dc8605a1d532a1b358d57486daca37f89c2803b58106006493ca5c0ffe75d8cc2030302a2950e004c2502950644f054551616414cd5c0365ad58af5037a8f0842114004b4c23574075c6647552a1805a403ea90acbbb2589fec1ddb45ae3cbf306f36a60988c0fed83d6b46abc490af4ccee2724b29a14ab99b2adc46c15b033958fb96308dba44a4bc2ea5e08c6d25328a31cf7c73c1b96a5e0f7a9d42eda241c6fbb920e18c76f95f73823c63b16614090e320b717dafc49aa97abe9efa035eca37adec2732dcfb1189d32d5fe85748280db12a694f65d2ea7504cb757c65035b5829558c1e471515e4faa38bc7b3d0782a5f3788c592a28d97c0549df1b13ac47103d6a6e5bfda9f1c8b5839bf6f75c1ac300bda71a70aeecd29039c016a2eecc6c96fa7e48d32ac216a91d57eb9133916949c0c0beced88b4c58d81e0ef091cd6580f53449e21c86e92749121cc9e8fa07ceb76b543a699af141be4cfdec9516e64dbc3524a5f0f043577f5e0edacd35c276c4ce2143e2f23a36d2999b09be66d03c2ad04ff2583c8a11277893930810deea2c160321957ba53ddfa7455c4585152b0c788f6fff0936f1d1a47fa7662b4cda18f4f2d3e9c5967e65ee0cf40a1690859cfaf30e6c3ab86fff64b39e3a647931afcecbbf900354da4237bb38688903187f8d88a2eb58caa1ea2d0b0609a42f35087aa92806489f877cb39023aa04ddcd90e536cd2f5c7903c2b3e7c376d560ff5225da2d15065c1791f3f8e55a7a9e0123f18ce30eeb5e8880555b777d9c219f640aa6fcb690567d0b45119ac84644a61c78be77da5827d78f5ae1fddcb47ff08e5b86fc5572bc6d849e6af94fee9cdd01591eac10dd21cb0bf5449a1598cb6754bc99b76f4dff41cd582a2e0afe5febc6a4d3e4940c429e85d8dfed6a227a9e982d35fc4b078dc1b918fcb5a7085b2b0e845679e7f9f0f8de6001869bee90e0e632018d31ddbd91d59d97869ad18be46628e276a99d2f53c76fe2d8e3323a4220b0a58dc119fe2485af97482ef3c8820c541817817a625ca0148be4db8481ca549a242e82e2019fd0c5512875c4363e4dcfea3e1f3e6c65c29315d1b38d2494e56ae28077c70763f262e9d367f0b3227280f58b46b339321617677b66358d4596194fba8b5f3816df47a5902d00327a60487bf85b053b8f3a8782181d6e3abd3376a2e751575e71b7aa6d8d44ecf1ea5fe95930ee1d2740097a96c61413ee5a841bcacd99e26d5b8b21983266812fc5e69c90c37a86f61c99b8e95dc0734720ab8573ac6fe0641bbc94c971bad0a370d3e2105283352ed6d4d6e1e5afafd7129662bfbf13d83baf44dc4c979c813c4d150ad7f27d74343defe37765bb5c4750b3876bc468e4d302ed6379a13eb36e65136fa3fdc94b2b269c1842a0580ddef5981075ad9226b84103e671d169f1b08d42e30a2437b8d4d3434f6cb854c29e4e3240a2d303b6bdd254ce871fe74313c08fd8784fbb2f3607c8a5002338e12162f03e3f858e9a8e7c6ad14fcf04694e0cd31ebc3a1255012243eb4daf345c353af40a718240fa8cb843caaa2c1dfa3bcaa36a43d243ca5a20259e6ee362a4ec430f39176e374b34b9330160f141b215114b11ffd9b8f86aeeb0e69916cf882093cf8c984654d1030262aa53b2a3051a64986afd4d0597b8f3759e91a52539c031cb59df65c43fa3b3743fcf31d34c8dd86cb40fcf9d35a446a48877612f68e99009aec2473f7db50295191282631a480ef4876b00d0ab8259dbcd50e3c4b8510792496cee04570de43e99cdeaa8b438ec79ee895da7831f96a1056d0dc0f9d196c043713b01f44aa970dad50689e0a7057714b74c713309844236a76a512186337134653a69b953bbb660ee2f1700642eb70856c100f0f72f90f6b52b548534a2a7f74c3e1d14f4d1e79514c373", 0x1000}, {&(0x7f00000070c0)="09de4890c0ad604f4b589b5eba418f203486ebba9a4b2e4c830f72d6d316c75ec305c45d22707d4bd09a7dc627cef8ab2b9bcb8a38f10e4a365677c616010281dc4b85f34c90603e89e4c37020ddc24eda3b514ea563096f9ee22cd5921624201a2489cd83eb80ac2d0b06e344c1a611f43682a8b20b912f683dbbdde25f2ed02d9a72", 0x83}, {&(0x7f0000007180)="994eba7f76d2f6ab3af4946733dbe135c63feda43e0ab4672924e9a39bef24332de1ba207e7d9a80c7ce4f39ae9d35e2326373ed9c", 0x35}], 0x3, &(0x7f0000007200)=[{0xf8, 0x88, 0x1ff, "409063d1305a8de2d91f304536f7e7bbd8e51ec08699a214322f8594dff0d4f900473cf6f5fc3e2cb6e8e8b832fb1502c71f1c04137786b11b83f7f2e73721544e688512b9cdc3acb24c467d80b41ed37882a2ce021ef9add5a6ead152f7f18432aab8f579b79d038a53f8b0ece71c2069813075dbcbc9e7d6dee0391352368305ac234b3cf78b4dcdc6eed948a3083411e06b5ca866b81e0d9419ff842e0e0dc68f7a7e5a34593293c118b7a5b3ae8dfc47965ad3f222f30f3ba01dfa411601538a6603f3fd5dc5e0c70ed137fcf80d311ad7110fd25e91b5387399283cde7e4963437498f47ec8"}, {0x38, 0x418c0ee7343406c4, 0x9, "5833835e084cd2da28d7ecea4fcc71788d519563df756c6538c8529f6aa3abacdf24e1f9e2aacb"}], 0x130}}, {{&(0x7f0000007340)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x80, &(0x7f0000007440)=[{&(0x7f00000073c0)="e26febc7895d6c074fd40083108719ee9bd3bbf7ed1c78419c5712f75ad7482d1730e27bf9237f5002c2ebc53dc9a4290173535fe73f5f3e8d0957dfb34aab1c2330c0f3c48a44efdf7dddd24cbd07641882c21626f3f2d40bfbe74a467817becf46d6d4de8e734f2893fca492cc21fb7ddceca4", 0x74}], 0x1, &(0x7f0000007480)=[{0x50, 0x267ac280a0b8f35b, 0x4, "1d8fb6329602754e2b5423168e05ff8dee7d482caf6830978ec86a8c6884cf49e2b92d576e0fc1e0bb7e51f89a5fea0eafe05a9b7c09c61f0a"}, {0xa0, 0x1, 0x5, "4bb07415ad276d961371394c690507bb57630a9015a7c8312ba049baeb07a0acaa06b4f347c972614ee6a0738b15d4c4df92f28bb602425304c795b0bd7eff276bb475343e08207e29c24332a89964bf409f6ac2c29d8c9f8460d43c6bf1e79d52aa7a293f5288bea97888a413bc9a2969b547ea7ec3ab5c892bc3a487858f6dd33f2e61035726ef40a11962"}], 0xf0}}, {{&(0x7f0000007580)=@ethernet={0x6, @local}, 0x80, &(0x7f0000007740)=[{&(0x7f0000007600)="dc9e34dd991de6d90c2d4f36b2cc8bd18b93f38820240cf4034667", 0x1b}, {&(0x7f0000007640)="9a24197689c24ac379323f3d8b702b9b8f1ff87a21c37188671f7d1f95b8ad8499f25acfe764cd5d8240029eb49c3aecb6c960101d", 0x35}, {&(0x7f0000007680)="069f1218f5f29be9ada00118081b44f95920aa17d3e599ce5ad59ceee6adc9ae44f06323a2a96e04f0e7635c3f7940a8d852a5209269322e351e9da680cbcfae7ee202ac0178e44a725eb9ff05404d475d07ced00aff6686c89dbc1378c6dd2eef525696be8f5aeaa681f5c691b1e53799697756ad1169fe1812b16aa04a6653038a72cdc9aaf6346b889c6a9ef66666dd07c70b221e604acc5145a6b38abc16004d5db804e70122", 0xa8}], 0x3, &(0x7f0000007780)=[{0x88, 0x103, 0x9, "902c0a565dee979622fa115e82311f24aa0efbf9a2026e0eecaca0750fb7ef0ca43ecc5e9c976dd57001aa01063c961d3fbad7b8b34fb96de64eb577479d5bf1e175b5e9b1751ce50d58bf328d3be9e8fa1551aa850f36e4fba51cf72e330ebd88bfbde42a7dedbce1c32442a527e898b77f3f0f37f3d50c"}, {0xa8, 0x81, 0x0, "f6e7f14abdc26d5840823cae5ad3bf97b9eee7883af9261d8ea4e3687fcadde4d249c7afe59be9c467ceeddb5edbe1ee5d50d61c0e5229de646703bd2c266e5bdfce5fcc986c3d9ba3f98cfe7543959e61cc9c7140f7115ab77dba973b0c441a0cfc287f72ba45f8cf937d0e6572641262010224b2b227ca75819bc024662ae4a755b99e8ea614e81e540d89052fb16a2b99"}, {0x88, 0x13, 0x5, "8247152aa8161556bcfa35b3b801c7f721401ff265ddd5e92f673fee432ffb78d116ac2f4a93912c623c1d00e34a38d0c550a9fa7e2b3e993fbb8a209bc7a022361802bf0420b210fb759a83e5bd59e2fea106af07a43d5781e2b358c3530f5f08b115997dfeca1bc266fc6afc7b6677ecc5cf"}, {0xd8, 0x117, 0xb3f9, "30a79ad60469787ee5ea52e3f3dff4096e7ea2d3752d35b68a4c3683e6bd961942870aac2c301755bf3b0ed90d41448f40c48cf530a378b33c074d6840ef76f45c647f327b857ea3d30b0269ccba184dc7a09e7d75eb3a01ce767ac802e1a17a200b3f2b1a0e0cacda6ee76a84c6407d6075011ef30447c31c9539a5efd1c3d72ea7751b68e1d43f10ece50c900ff31d1dc81d541302ce193cc7f4aaaf7bde2247e76b26ef66931e8ad6409303934722764eb5ae2deda195bf5de6ccf4908ac0ca5fdf352e96"}, {0xc8, 0x88, 0x40, "b1a5439318fff2139b0bc3afc11ffbe7327512b81e57dee0b16417ec09abdcadd74ed2e844c731ee3af10f972eae06a44dda2dfa3f652295c24ea3fbd3a734a71821993156175953b53d6daa6058ace7e202dd80f4d60179b1c30d3db086cb9b7a9985127d73e7c9ef3b31a224908761670d049840ccfefd596a51ec9abae804b67f7f1cb57bfc5956d99852a492891b2bc005e123c96c51886aec7a3a3a7fd7c261e477ec73766188a3a88fb8077a9c01"}], 0x358}}], 0x7, 0x8000) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) r12 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r12, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffd, @mcast1}, 0x83) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r14, 0x0, r13) r15 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r15, &(0x7f0000000080), 0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x6) r16 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r16, &(0x7f0000000080), 0x1000) r17 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r17, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r17, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:31 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1428.022353][T26257] Process accounting resumed [ 1428.038175][T26274] Process accounting resumed [ 1428.060619][ T6886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1428.084986][ T6886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1428.110385][ T6886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 07:49:31 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030048000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1428.128965][ T6886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1428.146772][T26268] XFS (loop5): SB validate failed with error -117. 07:49:31 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1428.262559][T26280] Process accounting resumed [ 1428.476130][T26276] Process accounting resumed 07:49:31 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:31 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r4, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r4, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffd, @mcast1, 0x2}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r10, &(0x7f0000000080), 0x1000) r11 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1428.500289][ T7886] XFS (loop0): SB sanity check failed [ 1428.503127][T26296] Process accounting resumed [ 1428.508101][ T7886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 07:49:31 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000004c00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1428.659235][ T7886] XFS (loop0): Unmount and run xfs_repair [ 1428.701501][ T7886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1428.751296][ T7886] 00000000: 58 46 53 42 10 03 00 48 00 00 00 00 00 00 10 00 XFSB...H........ [ 1428.811269][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1428.854168][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1428.902441][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1428.931812][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1428.944144][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 07:49:32 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1428.953642][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1428.967158][T26329] Process accounting resumed [ 1428.984996][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1429.031654][T26333] XFS (loop5): SB sanity check failed [ 1429.039164][T26333] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1429.051152][T26333] XFS (loop5): Unmount and run xfs_repair [ 1429.056433][T26301] XFS (loop0): SB validate failed with error -117. [ 1429.057544][T26333] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1429.071052][T26333] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 4c 00 10 00 XFSB........L... [ 1429.080318][T26333] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1429.089493][T26333] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1429.098688][T26333] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1429.115290][T26333] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 07:49:32 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x3678a3f18f0fcbfb) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000004180)={0x0, @xdp={0x2c, 0xa, 0x0}, @l2={0x1f, 0x3ff, {0x3, 0x81, 0x0, 0x40, 0x4b, 0x1}, 0x1}, @llc={0x1a, 0x81dc56ff1eb1b89e, 0x1f, 0x3, 0x8, 0x1, @local}, 0x28, 0x0, 0x0, 0x0, 0x3, 0x0, 0x36, 0x2, 0x2}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmmsg(r4, &(0x7f0000007b00)=[{{&(0x7f0000001080)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001100)="c8fe32c603e894806964770ca60175909e28bc1ed3e29dc1da7cd1da36f5e01239b6d2ba3e9b2ebb2583bc3c8e54f902cb0e7f881c5e6072b32763a53ff4ac2928dae53842a49f4f75e0202314d24652c0823769ef74625217180f4aa89b9a03b254715bddbe826b3d64ad3f80ad095e623cd5f6992e64e58b5a357a10f7e2c8a5b5bc4862b7f9852de392c4cdb16fac5110a045d13262d35a2e5f", 0x9b}], 0x1, &(0x7f0000001200)=[{0xf0, 0x103, 0xd8, "2aa59188ddb01d4b62883205b457fbb9726e01c707d151ab5b15ca388d3bf017e21636f16b9bc399ff6b6e608bd7c08b228a935b0afcd3160b98de570a0e83f1099c907769a1f15eedc371fc082e408fa854e5bd926ae63af9ab3202d905bb993bed564d7badff2a46c721a5ebfc73d8d28fd681b3fee850c98a9a19716ed48eac8937a8e832c09edbcdaeef9ecc284110fe10cbfb078dfb4908f7a673c0a4f215449eb7c425bd3306755088170285a5992aed104b81c1c421a6869f56aef708b3049621a4047239458f99a5812771ab24ea8310523241fd9839a0ff4a"}, {0xe8, 0x109, 0x0, "b05c8dd0603fd02903d077d01ed774786d09033ffc2b6bf50bbe85ee4a7ed1bf142d11386f4a489e4b7757a4a976bd54ee3a6d9d50858de5acb0d36b02a9c5fdf79f22b444ee7d92841aa0ebd0cb3e396ec387270f2d208254fa42c3c71c18be58563c943d95fdf40814c3277be1712e67c4c1804b8b1cfb3d632462a0d65ff38b6b9dc88d1fea015641dc75128006c0e415bf597c468e1122a5b542fb7f7bc8bd966b346fdcc06607de0759140209427ea701ffeeae575e512f9bc93fea364a71fb65969dc49c8b4ee69d70a3528d24eff90a5de40981"}], 0x1d8}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001400)="a1e9a97ee2f5882460302bc8e3e9fa7734deba45f4842bc861a7ab2ee7b33e7d131e41c185b4980171fe5cda36dee2eb5ac892bce89f3270b0b4b04927e44a167198f6b0d6f977a14f438404556721884d3025306f0bcfbbdb87ac4b8af704ae08d9", 0x62}, {&(0x7f0000001480)="d39b023510e81a27c1ca4eca4e7bba3f01d9aeca1b612549e8515a7d1d4fd9b394ba89e2874fe20e398ae065c357c8403d1b18d510db1fada54b052cffbc90eff6c735a286d66dab65ec6972280b4fa136d556c90f01e46c77cde1ae43a0c04f831fe554061933ac39114df75292d35574c33f7d5fb170a36e7fc2b5f368304218fd081ceee607a615595baad170431c2d6770a38036c73c3deaec5152b76ab71ab049e17c5a388c87c1df608a3972097d0ffa9234bfd7521a92e2a9f47d9613a274ca948ae8bb2cf77e3984a11a8bc97c5a0cc115f0711fd596a61117fb993238284972", 0xe4}, {&(0x7f0000001580)="7414f59697325c18565d98cd4f464b3709ec89c68dc06a6bc008b151e34d32d1350e0856e049d6926385d3e637aca1880765f26a06a2fed7470f62197ff31f319c1a0629cef68a58ddf2", 0x4a}, {&(0x7f0000001600)="d8920e68fd8308b224d785d979ad6660745c5276524fc2c280edf6fd8d474cc3873387401767952f701faa72567bc4d45b941c8558489920e7b2634776934c05d65a13756f002d65b6abe80feab2593d7268c534cbe96034e35a2df1c3648925182b4a2b08b62fbb9e5ddce1e5ba865aa5d678a3b14f6af21237cd291197f6d7f29effedce82415b2848d0de3decebbaf93c9ddfab2e94ecec72249713902222f3db1856f6376970cf1215f05f1a1ea84d64d70e8f79e9333507f4a38f1c31cbd8320b8aa076977f41b13f0ddf81f8fe7a0f2e210363bda447065eefecd113f88e7c1a84748b1b74220a5b46fc8644e49386d866", 0xf4}], 0x4, &(0x7f0000001740)=[{0x58, 0xc895b4773f1f49a8, 0x1, "15e73078c1c5a660525494e12979dce8758a86d139d8554791a83589ed0dbfe74a7b00579bbcabd2ca998f7c5daca25a480b6532e4ab2a5eac4c0445e03581dd04d7b2c6b66f"}, {0x90, 0x20b, 0x400, "d0165ff0744a24b8f80610fb86d7af18722858c7edfe13b63b84965c8943f07192fdad93d2875049f6ebfcf1254b39ff1b7a94edfc9d45a27d6a4b6c69e00b5f6ee487541cb43d951cad1108fa812daf52e13ae0132e4257cfbd9fdf14a014f97bca3ceb9fbf0f53d9fdad2510be934c7fd721b9b4babd1cd9132dbd526249b3"}, {0xb8, 0x29, 0x2377, "1203ae0fbc8eadd3d7a008485ad505a6adfd9062642d3291209fc3f248287ab25b0b7dc8ab1eddfcbeea22e32875b0e6d5ff501391a344155042f918d620dff5f552d1e1a0714f0f579d7fc728fe34aac03a756cd5e383726e0e658439ff671df70b0081bc40c89e588ae8f54d67632267d008038ac8435765d49164fcc66a0968ba4293964de772d76b05bc8e4382c7ee17ada298777160548e7a10e02b780e9b390ab3e45ff61a"}], 0x1a0}}, {{&(0x7f0000004200)=@can={0x1d, r8}, 0x80, &(0x7f0000005880)=[{&(0x7f0000004280)="ed19cc1ae513331506e545ab5991db6bcdce5aff153f319885c33a02e90c03522bb5482e959508818bf9a247924de5b8e95df297a58b7fa789cb4451a26dc36195f3d6613b139b71a576d5eb1263ae8b81a23cfda1e8d8b4a11243b4d36a64c4e5ad", 0x62}, {&(0x7f0000004300)="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", 0x1000}, {&(0x7f0000005300)="9802ee155f2e1f8c0289a80e7ece4c991947d39093b48519c0a30a8185d2f01838db5be1e659161f6c94cc29f74e35a519ccfd51278d03fbfeec40e815c9bf4a92ce1651506fa36a852941e246c60e48e8650c851696c7", 0x57}, {&(0x7f0000005380)="2c1ac45eabb127e40b087d6f59aa984a1714182341b2ae118efc53bcfab1d0e344cf8d4d7e6017df0c", 0x29}, {&(0x7f00000053c0)="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", 0xfb}, {&(0x7f00000054c0)="761f98ad58cbfa9c2ea741b9f054d8f8d07dcb56a9db0821ca088501493b977021373447d6f9a9715744d2e6459e8ac053146b2e8f06302fa421291a08670a8cf11892", 0x43}, {&(0x7f0000005540)="be48435f1572f97b359b1a2400b2738fdfe638b0959a6bfb71cb9c347ef859f211c65b6ff6e502bdfa6415c5f06abe821c8252e567f17c4631e159cf89b834ad0e048a629dca63c36eaed950f67e5d25176818c22702d97cc731bc96724f88b4be1d3bbacb89e988296895090527fd77416e16b55b6a46d2039db1e61bc3ff410c94b1420d362aa4d437235a45a5e3325dad01c86e857ec3005da338695b9bafe0f318361d7ede59b7dc2936e611c935c63ddbe308ad734f6beebb7de6a378356221f3c8a1b2fec334d1d0791a979a98b40f65edf2d38706a6286873e8517feabd4fe7d9516d6655c0ad07", 0xeb}, {&(0x7f0000005640)="7002136ed003f5f9ca50a70730acbe0479a61b4953e5d3d82b97635e48ebca63c8d9bb4b96c2c02c5205664a96fe3f0bc98403437b16f0feeb90e0b3ca1bdd1e20f578bd8c3fe5bf4aacb905360da3a4bd99201b7688b4c9af151dd6dd6445ee8d3fcf978398ac41a1bcda13b1bbe3a74bfa41810ff3b44360e9ef6290f6d5b8d5eb94b099eb565158445776cc575945791f470935cbca94b06c4dfe502c37ae60637fde9e53f111803b31c44ed989ba59049293", 0xb4}, {&(0x7f0000005700)="f75bc6b57ec3a595d2ad5123542ce2b53c5c97dec48e02494a0b1b3e58131dd39dda8484f4ae2998160d64e6d4c83617bbe4c78bd389d68b0413a4d1ae275269c7bf857bbf06c185ef23f434a7d44c70d694afcb717b580eb1f8280b065f459be983d3b20ece688f273da34bae45ec1798bbd5dada7ee199222ec276e9f3d77bb1812bfe37c76255e8e7d2a6cd4b01173939820101eaff63b318ca67cf015e252a5dd56d0c19a13b32aaedc9c43da0a2bd30baa10eee6f49dada4c88", 0xbc}, {&(0x7f00000057c0)="0ba6bdd657f538b26e57362ae17931a58d1f3fd2b48c960eee2eaae7b1f01f8fd1590e53a86d3cbdc218c896a299ef9cbc47dae24ea7cdd9e46c5c6e680a413b1d55d4eee90a154557e7e0706caa560943957323f8711535f41d876c6e5e0ef76c9fc4860073ce942a46c14c8a550e6e881a6fde2235dacaec985819f99816d56c4260b8ffaf2ecf7c6e377151d37695d8e88ac0e21ff86f1c", 0x99}], 0xa, &(0x7f0000005940)=[{0x108, 0x11, 0x3, "a8616ad8e6be66e6e968f20e38eec26d8bb40c085d9fc43e76e79e165cf0a7ab53997833bbe3d2dcd7e6ab03b8275466abb0b3d5d3a5228da79c6e7d8ffa3009ea70b3d3b62b3937d2f758ef7a05dd9eb8d8a5b4d9c5371caa1078ce549318e9f9b9d312b495971ed6b8c55eab2320eef378be38dc396e5d8f22a478b01f857fa8742d0f2423a53d2f044e1b05c758de7adf617fb2e8b21922a3666c5cf8b82b0c13c872ab2c05eba3ed7cbe11af029bc6f8eca2e221f27c9d0a4da47e63858867eaeeca081b1c074a6548c5e41cfdcccb28d9a4660956bf20d9023987bddc726112784cfbd8f897eb08e7ed7d917c4e89b889d5"}, {0x50, 0x118, 0x0, "3ea6c48e42ca71c358142f932e28e70e101af7f1ac75f325177904bd05cd93bce3709624cb196c44748d758ea382dee8c43181df9d8cd88c91f92e40ad6a88"}], 0x158}}, {{&(0x7f0000005ac0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-aesni\x00'}, 0x80, &(0x7f0000005c80)=[{&(0x7f0000005b40)="da1873032c5a6cab61f921acfcc131987c6ee0dcc32d13ab0648ffe25825737c08c2a933a32f6d97cb93dc01d42a7f8bf551694689aa5ae8504960a50a8207b95ea75bdefbb221707f0b2745da8bf2a69c552facf173d47280b6120c6d7badefb9c5609626fe06a79b55eda2be3440fd84ae93399468a43b4e344f23cdc49a23212b2a8c7733ef1c96561998b2ba0c3c971bbf57198d89398a8d40a13a09a2455cdd20dd1cd564aa4c467ed5bb63e239d3095dbbdc679c9293e0a06946df745b3d59c80057a7b153dbb9abca36e022670c9c33f3aee782deae22386ec17d7a25e78dd875abb5f1bd3b83bc243366dc8b63e2d0033ade", 0xf6}, {&(0x7f0000005c40)}], 0x2, &(0x7f0000005cc0)=[{0xf0, 0x0, 0x80000000, "ca445240dbb2542be8a567a34fb84f140dccd1086b62a81b006f7c18ca859b9e6012505c821d63ea64a7d805244bdac13043c697e4a7075671a155216ddd100699041e344b2c0fae56cc24ebd82cbb0ce133dedd7113c3c59df445aab1ce118d4a256bebd2a49757ff3293b5293fe800616e68a238565216b54a0c3f5db55798b30c6d2b5c3c212a46c5a4dbabfdb39790c4663dbc57f83b41e637c41f716c0419eb0df28aec22c5e9c24a7dd5d50170bd14b92a01c04f862650c76f6adf03638a8083828b385c11668afd4763dc2f193dca84b4e653e86ccd5562170facb4"}, {0x110, 0x0, 0x7, "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"}, {0xf0, 0x0, 0x8, "472901a8195d98791fc7e334973273994e898b1bdf64d1d2f105acb53249c0024bf31aa1125d9bcd031c927f28bcedd119d745a4259ad320f20a7c36353e81693e270342a8a8c33bb07be8c5c66b31b57f5060237e810dbb4a0a649585da7d5aefa2cec8847e2f3dbf563649a834027c8979b79a91c30b8e2e6e1f0a9559e5ead80b4b3e47beadb0b0959b8d7263da2a26a68ae074308547f2ae8983bf5807f75ad455e4d40d53e9bd40fe73fabe37ac0048fda4bd134c4df68c7ccc4ad94f6681967b548c759b89d61a44f749802d122517c91f058edb0e1eff82"}, {0x88, 0x103, 0x7fff, "1e41fae7122ea7ce5d0506018d6950a243e16cc2712feb898bd6941f8d672ed066c050cbed109dff29e93ab3edcadf475bc39d9cb83507ef8853788a4c6a658b219a60708bb895d44185ce7e53fd24c426cb4b806faf41fab755cebd988d92672883091928eb83460930dd9e1b7f44a7ae020f"}], 0x378}}, {{&(0x7f0000006040)=@pppol2tpv3={0x18, 0x1, {0x0, r11, {0x2, 0x4e22, @broadcast}, 0x1, 0x4, 0x0, 0x2}}, 0x80, &(0x7f00000071c0)=[{&(0x7f00000060c0)="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", 0x1000}, {&(0x7f00000070c0)="09de4890c0ad604f4b589b5eba418f203486ebba9a4b2e4c830f72d6d316c75ec305c45d22707d4bd09a7dc627cef8ab2b9bcb8a38f10e4a365677c616010281dc4b85f34c90603e89e4c37020ddc24eda3b514ea563096f9ee22cd5921624201a2489cd83eb80ac2d0b06e344c1a611f43682a8b20b912f683dbbdde25f2ed02d9a72", 0x83}, {&(0x7f0000007180)="994eba7f76d2f6ab3af4946733dbe135c63feda43e0ab4672924e9a39bef24332de1ba207e7d9a80c7ce4f39ae9d35e2326373ed9c", 0x35}], 0x3, &(0x7f0000007200)=[{0xf8, 0x88, 0x1ff, "409063d1305a8de2d91f304536f7e7bbd8e51ec08699a214322f8594dff0d4f900473cf6f5fc3e2cb6e8e8b832fb1502c71f1c04137786b11b83f7f2e73721544e688512b9cdc3acb24c467d80b41ed37882a2ce021ef9add5a6ead152f7f18432aab8f579b79d038a53f8b0ece71c2069813075dbcbc9e7d6dee0391352368305ac234b3cf78b4dcdc6eed948a3083411e06b5ca866b81e0d9419ff842e0e0dc68f7a7e5a34593293c118b7a5b3ae8dfc47965ad3f222f30f3ba01dfa411601538a6603f3fd5dc5e0c70ed137fcf80d311ad7110fd25e91b5387399283cde7e4963437498f47ec8"}, {0x38, 0x418c0ee7343406c4, 0x9, "5833835e084cd2da28d7ecea4fcc71788d519563df756c6538c8529f6aa3abacdf24e1f9e2aacb"}], 0x130}}, {{&(0x7f0000007340)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x80, &(0x7f0000007440)=[{&(0x7f00000073c0)="e26febc7895d6c074fd40083108719ee9bd3bbf7ed1c78419c5712f75ad7482d1730e27bf9237f5002c2ebc53dc9a4290173535fe73f5f3e8d0957dfb34aab1c2330c0f3c48a44efdf7dddd24cbd07641882c21626f3f2d40bfbe74a467817becf46d6d4de8e734f2893fca492cc21fb7ddceca4", 0x74}], 0x1, &(0x7f0000007480)=[{0x50, 0x267ac280a0b8f35b, 0x4, "1d8fb6329602754e2b5423168e05ff8dee7d482caf6830978ec86a8c6884cf49e2b92d576e0fc1e0bb7e51f89a5fea0eafe05a9b7c09c61f0a"}, {0xa0, 0x1, 0x5, "4bb07415ad276d961371394c690507bb57630a9015a7c8312ba049baeb07a0acaa06b4f347c972614ee6a0738b15d4c4df92f28bb602425304c795b0bd7eff276bb475343e08207e29c24332a89964bf409f6ac2c29d8c9f8460d43c6bf1e79d52aa7a293f5288bea97888a413bc9a2969b547ea7ec3ab5c892bc3a487858f6dd33f2e61035726ef40a11962"}], 0xf0}}, {{&(0x7f0000007580)=@ethernet={0x6, @local}, 0x80, &(0x7f0000007740)=[{&(0x7f0000007600)="dc9e34dd991de6d90c2d4f36b2cc8bd18b93f38820240cf4034667", 0x1b}, {&(0x7f0000007640)="9a24197689c24ac379323f3d8b702b9b8f1ff87a21c37188671f7d1f95b8ad8499f25acfe764cd5d8240029eb49c3aecb6c960101d", 0x35}, {&(0x7f0000007680)="069f1218f5f29be9ada00118081b44f95920aa17d3e599ce5ad59ceee6adc9ae44f06323a2a96e04f0e7635c3f7940a8d852a5209269322e351e9da680cbcfae7ee202ac0178e44a725eb9ff05404d475d07ced00aff6686c89dbc1378c6dd2eef525696be8f5aeaa681f5c691b1e53799697756ad1169fe1812b16aa04a6653038a72cdc9aaf6346b889c6a9ef66666dd07c70b221e604acc5145a6b38abc16004d5db804e70122", 0xa8}], 0x3, &(0x7f0000007780)=[{0x88, 0x103, 0x9, "902c0a565dee979622fa115e82311f24aa0efbf9a2026e0eecaca0750fb7ef0ca43ecc5e9c976dd57001aa01063c961d3fbad7b8b34fb96de64eb577479d5bf1e175b5e9b1751ce50d58bf328d3be9e8fa1551aa850f36e4fba51cf72e330ebd88bfbde42a7dedbce1c32442a527e898b77f3f0f37f3d50c"}, {0xa8, 0x81, 0x0, "f6e7f14abdc26d5840823cae5ad3bf97b9eee7883af9261d8ea4e3687fcadde4d249c7afe59be9c467ceeddb5edbe1ee5d50d61c0e5229de646703bd2c266e5bdfce5fcc986c3d9ba3f98cfe7543959e61cc9c7140f7115ab77dba973b0c441a0cfc287f72ba45f8cf937d0e6572641262010224b2b227ca75819bc024662ae4a755b99e8ea614e81e540d89052fb16a2b99"}, {0x88, 0x13, 0x5, "8247152aa8161556bcfa35b3b801c7f721401ff265ddd5e92f673fee432ffb78d116ac2f4a93912c623c1d00e34a38d0c550a9fa7e2b3e993fbb8a209bc7a022361802bf0420b210fb759a83e5bd59e2fea106af07a43d5781e2b358c3530f5f08b115997dfeca1bc266fc6afc7b6677ecc5cf"}, {0xd8, 0x117, 0xb3f9, "30a79ad60469787ee5ea52e3f3dff4096e7ea2d3752d35b68a4c3683e6bd961942870aac2c301755bf3b0ed90d41448f40c48cf530a378b33c074d6840ef76f45c647f327b857ea3d30b0269ccba184dc7a09e7d75eb3a01ce767ac802e1a17a200b3f2b1a0e0cacda6ee76a84c6407d6075011ef30447c31c9539a5efd1c3d72ea7751b68e1d43f10ece50c900ff31d1dc81d541302ce193cc7f4aaaf7bde2247e76b26ef66931e8ad6409303934722764eb5ae2deda195bf5de6ccf4908ac0ca5fdf352e96"}, {0xc8, 0x88, 0x40, "b1a5439318fff2139b0bc3afc11ffbe7327512b81e57dee0b16417ec09abdcadd74ed2e844c731ee3af10f972eae06a44dda2dfa3f652295c24ea3fbd3a734a71821993156175953b53d6daa6058ace7e202dd80f4d60179b1c30d3db086cb9b7a9985127d73e7c9ef3b31a224908761670d049840ccfefd596a51ec9abae804b67f7f1cb57bfc5956d99852a492891b2bc005e123c96c51886aec7a3a3a7fd7c261e477ec73766188a3a88fb8077a9c01"}], 0x358}}], 0x7, 0x8000) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) r12 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r12, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffd, @mcast1}, 0x83) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r14, 0x0, r13) r15 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r15, &(0x7f0000000080), 0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x6) r16 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r16, &(0x7f0000000080), 0x1000) r17 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r17, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r17, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1429.144551][T26333] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1429.156590][T26300] Process accounting resumed [ 1429.305142][T26333] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1429.311758][T26319] Process accounting resumed [ 1429.314242][T26333] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1429.327808][T26333] XFS (loop5): SB validate failed with error -117. 07:49:32 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:32 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653421003004c000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:32 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1429.697924][T26370] XFS (loop0): SB sanity check failed [ 1429.703509][T26370] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1429.735210][T26370] XFS (loop0): Unmount and run xfs_repair [ 1429.766818][T26370] XFS (loop0): First 128 bytes of corrupted metadata buffer: 07:49:33 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000001435800100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1429.863214][T26370] 00000000: 58 46 53 42 10 03 00 4c 00 00 00 00 00 00 10 00 XFSB...L........ [ 1429.879695][T26370] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1429.890342][T26347] Process accounting resumed 07:49:33 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1429.939360][T26370] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1429.955456][T26370] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1430.023923][T26370] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1430.116603][T26370] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1430.138192][T26370] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1430.149892][T26389] XFS (loop5): SB sanity check failed [ 1430.155491][T26389] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1430.181860][T26355] Process accounting resumed [ 1430.191636][T26370] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1430.201567][T26389] XFS (loop5): Unmount and run xfs_repair 07:49:33 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x3678a3f18f0fcbfb) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000004180)={0x0, @xdp={0x2c, 0xa, 0x0}, @l2={0x1f, 0x3ff, {0x3, 0x81, 0x0, 0x40, 0x4b, 0x1}, 0x1}, @llc={0x1a, 0x81dc56ff1eb1b89e, 0x1f, 0x3, 0x8, 0x1, @local}, 0x28, 0x0, 0x0, 0x0, 0x3, 0x0, 0x36, 0x2, 0x2}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmmsg(r4, &(0x7f0000007b00)=[{{&(0x7f0000001080)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001100)="c8fe32c603e894806964770ca60175909e28bc1ed3e29dc1da7cd1da36f5e01239b6d2ba3e9b2ebb2583bc3c8e54f902cb0e7f881c5e6072b32763a53ff4ac2928dae53842a49f4f75e0202314d24652c0823769ef74625217180f4aa89b9a03b254715bddbe826b3d64ad3f80ad095e623cd5f6992e64e58b5a357a10f7e2c8a5b5bc4862b7f9852de392c4cdb16fac5110a045d13262d35a2e5f", 0x9b}], 0x1, &(0x7f0000001200)=[{0xf0, 0x103, 0xd8, "2aa59188ddb01d4b62883205b457fbb9726e01c707d151ab5b15ca388d3bf017e21636f16b9bc399ff6b6e608bd7c08b228a935b0afcd3160b98de570a0e83f1099c907769a1f15eedc371fc082e408fa854e5bd926ae63af9ab3202d905bb993bed564d7badff2a46c721a5ebfc73d8d28fd681b3fee850c98a9a19716ed48eac8937a8e832c09edbcdaeef9ecc284110fe10cbfb078dfb4908f7a673c0a4f215449eb7c425bd3306755088170285a5992aed104b81c1c421a6869f56aef708b3049621a4047239458f99a5812771ab24ea8310523241fd9839a0ff4a"}, {0xe8, 0x109, 0x0, "b05c8dd0603fd02903d077d01ed774786d09033ffc2b6bf50bbe85ee4a7ed1bf142d11386f4a489e4b7757a4a976bd54ee3a6d9d50858de5acb0d36b02a9c5fdf79f22b444ee7d92841aa0ebd0cb3e396ec387270f2d208254fa42c3c71c18be58563c943d95fdf40814c3277be1712e67c4c1804b8b1cfb3d632462a0d65ff38b6b9dc88d1fea015641dc75128006c0e415bf597c468e1122a5b542fb7f7bc8bd966b346fdcc06607de0759140209427ea701ffeeae575e512f9bc93fea364a71fb65969dc49c8b4ee69d70a3528d24eff90a5de40981"}], 0x1d8}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001400)="a1e9a97ee2f5882460302bc8e3e9fa7734deba45f4842bc861a7ab2ee7b33e7d131e41c185b4980171fe5cda36dee2eb5ac892bce89f3270b0b4b04927e44a167198f6b0d6f977a14f438404556721884d3025306f0bcfbbdb87ac4b8af704ae08d9", 0x62}, {&(0x7f0000001480)="d39b023510e81a27c1ca4eca4e7bba3f01d9aeca1b612549e8515a7d1d4fd9b394ba89e2874fe20e398ae065c357c8403d1b18d510db1fada54b052cffbc90eff6c735a286d66dab65ec6972280b4fa136d556c90f01e46c77cde1ae43a0c04f831fe554061933ac39114df75292d35574c33f7d5fb170a36e7fc2b5f368304218fd081ceee607a615595baad170431c2d6770a38036c73c3deaec5152b76ab71ab049e17c5a388c87c1df608a3972097d0ffa9234bfd7521a92e2a9f47d9613a274ca948ae8bb2cf77e3984a11a8bc97c5a0cc115f0711fd596a61117fb993238284972", 0xe4}, {&(0x7f0000001580)="7414f59697325c18565d98cd4f464b3709ec89c68dc06a6bc008b151e34d32d1350e0856e049d6926385d3e637aca1880765f26a06a2fed7470f62197ff31f319c1a0629cef68a58ddf2", 0x4a}, {&(0x7f0000001600)="d8920e68fd8308b224d785d979ad6660745c5276524fc2c280edf6fd8d474cc3873387401767952f701faa72567bc4d45b941c8558489920e7b2634776934c05d65a13756f002d65b6abe80feab2593d7268c534cbe96034e35a2df1c3648925182b4a2b08b62fbb9e5ddce1e5ba865aa5d678a3b14f6af21237cd291197f6d7f29effedce82415b2848d0de3decebbaf93c9ddfab2e94ecec72249713902222f3db1856f6376970cf1215f05f1a1ea84d64d70e8f79e9333507f4a38f1c31cbd8320b8aa076977f41b13f0ddf81f8fe7a0f2e210363bda447065eefecd113f88e7c1a84748b1b74220a5b46fc8644e49386d866", 0xf4}], 0x4, &(0x7f0000001740)=[{0x58, 0xc895b4773f1f49a8, 0x1, "15e73078c1c5a660525494e12979dce8758a86d139d8554791a83589ed0dbfe74a7b00579bbcabd2ca998f7c5daca25a480b6532e4ab2a5eac4c0445e03581dd04d7b2c6b66f"}, {0x90, 0x20b, 0x400, "d0165ff0744a24b8f80610fb86d7af18722858c7edfe13b63b84965c8943f07192fdad93d2875049f6ebfcf1254b39ff1b7a94edfc9d45a27d6a4b6c69e00b5f6ee487541cb43d951cad1108fa812daf52e13ae0132e4257cfbd9fdf14a014f97bca3ceb9fbf0f53d9fdad2510be934c7fd721b9b4babd1cd9132dbd526249b3"}, {0xb8, 0x29, 0x2377, "1203ae0fbc8eadd3d7a008485ad505a6adfd9062642d3291209fc3f248287ab25b0b7dc8ab1eddfcbeea22e32875b0e6d5ff501391a344155042f918d620dff5f552d1e1a0714f0f579d7fc728fe34aac03a756cd5e383726e0e658439ff671df70b0081bc40c89e588ae8f54d67632267d008038ac8435765d49164fcc66a0968ba4293964de772d76b05bc8e4382c7ee17ada298777160548e7a10e02b780e9b390ab3e45ff61a"}], 0x1a0}}, {{&(0x7f0000004200)=@can={0x1d, r8}, 0x80, &(0x7f0000005880)=[{&(0x7f0000004280)="ed19cc1ae513331506e545ab5991db6bcdce5aff153f319885c33a02e90c03522bb5482e959508818bf9a247924de5b8e95df297a58b7fa789cb4451a26dc36195f3d6613b139b71a576d5eb1263ae8b81a23cfda1e8d8b4a11243b4d36a64c4e5ad", 0x62}, {&(0x7f0000004300)="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", 0x1000}, {&(0x7f0000005300)="9802ee155f2e1f8c0289a80e7ece4c991947d39093b48519c0a30a8185d2f01838db5be1e659161f6c94cc29f74e35a519ccfd51278d03fbfeec40e815c9bf4a92ce1651506fa36a852941e246c60e48e8650c851696c7", 0x57}, {&(0x7f0000005380)="2c1ac45eabb127e40b087d6f59aa984a1714182341b2ae118efc53bcfab1d0e344cf8d4d7e6017df0c", 0x29}, {&(0x7f00000053c0)="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", 0xfb}, {&(0x7f00000054c0)="761f98ad58cbfa9c2ea741b9f054d8f8d07dcb56a9db0821ca088501493b977021373447d6f9a9715744d2e6459e8ac053146b2e8f06302fa421291a08670a8cf11892", 0x43}, {&(0x7f0000005540)="be48435f1572f97b359b1a2400b2738fdfe638b0959a6bfb71cb9c347ef859f211c65b6ff6e502bdfa6415c5f06abe821c8252e567f17c4631e159cf89b834ad0e048a629dca63c36eaed950f67e5d25176818c22702d97cc731bc96724f88b4be1d3bbacb89e988296895090527fd77416e16b55b6a46d2039db1e61bc3ff410c94b1420d362aa4d437235a45a5e3325dad01c86e857ec3005da338695b9bafe0f318361d7ede59b7dc2936e611c935c63ddbe308ad734f6beebb7de6a378356221f3c8a1b2fec334d1d0791a979a98b40f65edf2d38706a6286873e8517feabd4fe7d9516d6655c0ad07", 0xeb}, {&(0x7f0000005640)="7002136ed003f5f9ca50a70730acbe0479a61b4953e5d3d82b97635e48ebca63c8d9bb4b96c2c02c5205664a96fe3f0bc98403437b16f0feeb90e0b3ca1bdd1e20f578bd8c3fe5bf4aacb905360da3a4bd99201b7688b4c9af151dd6dd6445ee8d3fcf978398ac41a1bcda13b1bbe3a74bfa41810ff3b44360e9ef6290f6d5b8d5eb94b099eb565158445776cc575945791f470935cbca94b06c4dfe502c37ae60637fde9e53f111803b31c44ed989ba59049293", 0xb4}, {&(0x7f0000005700)="f75bc6b57ec3a595d2ad5123542ce2b53c5c97dec48e02494a0b1b3e58131dd39dda8484f4ae2998160d64e6d4c83617bbe4c78bd389d68b0413a4d1ae275269c7bf857bbf06c185ef23f434a7d44c70d694afcb717b580eb1f8280b065f459be983d3b20ece688f273da34bae45ec1798bbd5dada7ee199222ec276e9f3d77bb1812bfe37c76255e8e7d2a6cd4b01173939820101eaff63b318ca67cf015e252a5dd56d0c19a13b32aaedc9c43da0a2bd30baa10eee6f49dada4c88", 0xbc}, {&(0x7f00000057c0)="0ba6bdd657f538b26e57362ae17931a58d1f3fd2b48c960eee2eaae7b1f01f8fd1590e53a86d3cbdc218c896a299ef9cbc47dae24ea7cdd9e46c5c6e680a413b1d55d4eee90a154557e7e0706caa560943957323f8711535f41d876c6e5e0ef76c9fc4860073ce942a46c14c8a550e6e881a6fde2235dacaec985819f99816d56c4260b8ffaf2ecf7c6e377151d37695d8e88ac0e21ff86f1c", 0x99}], 0xa, &(0x7f0000005940)=[{0x108, 0x11, 0x3, "a8616ad8e6be66e6e968f20e38eec26d8bb40c085d9fc43e76e79e165cf0a7ab53997833bbe3d2dcd7e6ab03b8275466abb0b3d5d3a5228da79c6e7d8ffa3009ea70b3d3b62b3937d2f758ef7a05dd9eb8d8a5b4d9c5371caa1078ce549318e9f9b9d312b495971ed6b8c55eab2320eef378be38dc396e5d8f22a478b01f857fa8742d0f2423a53d2f044e1b05c758de7adf617fb2e8b21922a3666c5cf8b82b0c13c872ab2c05eba3ed7cbe11af029bc6f8eca2e221f27c9d0a4da47e63858867eaeeca081b1c074a6548c5e41cfdcccb28d9a4660956bf20d9023987bddc726112784cfbd8f897eb08e7ed7d917c4e89b889d5"}, {0x50, 0x118, 0x0, "3ea6c48e42ca71c358142f932e28e70e101af7f1ac75f325177904bd05cd93bce3709624cb196c44748d758ea382dee8c43181df9d8cd88c91f92e40ad6a88"}], 0x158}}, {{&(0x7f0000005ac0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-aesni\x00'}, 0x80, &(0x7f0000005c80)=[{&(0x7f0000005b40)="da1873032c5a6cab61f921acfcc131987c6ee0dcc32d13ab0648ffe25825737c08c2a933a32f6d97cb93dc01d42a7f8bf551694689aa5ae8504960a50a8207b95ea75bdefbb221707f0b2745da8bf2a69c552facf173d47280b6120c6d7badefb9c5609626fe06a79b55eda2be3440fd84ae93399468a43b4e344f23cdc49a23212b2a8c7733ef1c96561998b2ba0c3c971bbf57198d89398a8d40a13a09a2455cdd20dd1cd564aa4c467ed5bb63e239d3095dbbdc679c9293e0a06946df745b3d59c80057a7b153dbb9abca36e022670c9c33f3aee782deae22386ec17d7a25e78dd875abb5f1bd3b83bc243366dc8b63e2d0033ade", 0xf6}, {&(0x7f0000005c40)}], 0x2, &(0x7f0000005cc0)=[{0xf0, 0x0, 0x80000000, "ca445240dbb2542be8a567a34fb84f140dccd1086b62a81b006f7c18ca859b9e6012505c821d63ea64a7d805244bdac13043c697e4a7075671a155216ddd100699041e344b2c0fae56cc24ebd82cbb0ce133dedd7113c3c59df445aab1ce118d4a256bebd2a49757ff3293b5293fe800616e68a238565216b54a0c3f5db55798b30c6d2b5c3c212a46c5a4dbabfdb39790c4663dbc57f83b41e637c41f716c0419eb0df28aec22c5e9c24a7dd5d50170bd14b92a01c04f862650c76f6adf03638a8083828b385c11668afd4763dc2f193dca84b4e653e86ccd5562170facb4"}, {0x110, 0x0, 0x7, "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"}, {0xf0, 0x0, 0x8, "472901a8195d98791fc7e334973273994e898b1bdf64d1d2f105acb53249c0024bf31aa1125d9bcd031c927f28bcedd119d745a4259ad320f20a7c36353e81693e270342a8a8c33bb07be8c5c66b31b57f5060237e810dbb4a0a649585da7d5aefa2cec8847e2f3dbf563649a834027c8979b79a91c30b8e2e6e1f0a9559e5ead80b4b3e47beadb0b0959b8d7263da2a26a68ae074308547f2ae8983bf5807f75ad455e4d40d53e9bd40fe73fabe37ac0048fda4bd134c4df68c7ccc4ad94f6681967b548c759b89d61a44f749802d122517c91f058edb0e1eff82"}, {0x88, 0x103, 0x7fff, "1e41fae7122ea7ce5d0506018d6950a243e16cc2712feb898bd6941f8d672ed066c050cbed109dff29e93ab3edcadf475bc39d9cb83507ef8853788a4c6a658b219a60708bb895d44185ce7e53fd24c426cb4b806faf41fab755cebd988d92672883091928eb83460930dd9e1b7f44a7ae020f"}], 0x378}}, {{&(0x7f0000006040)=@pppol2tpv3={0x18, 0x1, {0x0, r11, {0x2, 0x4e22, @broadcast}, 0x1, 0x4, 0x0, 0x2}}, 0x80, &(0x7f00000071c0)=[{&(0x7f00000060c0)="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", 0x1000}, {&(0x7f00000070c0)="09de4890c0ad604f4b589b5eba418f203486ebba9a4b2e4c830f72d6d316c75ec305c45d22707d4bd09a7dc627cef8ab2b9bcb8a38f10e4a365677c616010281dc4b85f34c90603e89e4c37020ddc24eda3b514ea563096f9ee22cd5921624201a2489cd83eb80ac2d0b06e344c1a611f43682a8b20b912f683dbbdde25f2ed02d9a72", 0x83}, {&(0x7f0000007180)="994eba7f76d2f6ab3af4946733dbe135c63feda43e0ab4672924e9a39bef24332de1ba207e7d9a80c7ce4f39ae9d35e2326373ed9c", 0x35}], 0x3, &(0x7f0000007200)=[{0xf8, 0x88, 0x1ff, "409063d1305a8de2d91f304536f7e7bbd8e51ec08699a214322f8594dff0d4f900473cf6f5fc3e2cb6e8e8b832fb1502c71f1c04137786b11b83f7f2e73721544e688512b9cdc3acb24c467d80b41ed37882a2ce021ef9add5a6ead152f7f18432aab8f579b79d038a53f8b0ece71c2069813075dbcbc9e7d6dee0391352368305ac234b3cf78b4dcdc6eed948a3083411e06b5ca866b81e0d9419ff842e0e0dc68f7a7e5a34593293c118b7a5b3ae8dfc47965ad3f222f30f3ba01dfa411601538a6603f3fd5dc5e0c70ed137fcf80d311ad7110fd25e91b5387399283cde7e4963437498f47ec8"}, {0x38, 0x418c0ee7343406c4, 0x9, "5833835e084cd2da28d7ecea4fcc71788d519563df756c6538c8529f6aa3abacdf24e1f9e2aacb"}], 0x130}}, {{&(0x7f0000007340)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x80, &(0x7f0000007440)=[{&(0x7f00000073c0)="e26febc7895d6c074fd40083108719ee9bd3bbf7ed1c78419c5712f75ad7482d1730e27bf9237f5002c2ebc53dc9a4290173535fe73f5f3e8d0957dfb34aab1c2330c0f3c48a44efdf7dddd24cbd07641882c21626f3f2d40bfbe74a467817becf46d6d4de8e734f2893fca492cc21fb7ddceca4", 0x74}], 0x1, &(0x7f0000007480)=[{0x50, 0x267ac280a0b8f35b, 0x4, "1d8fb6329602754e2b5423168e05ff8dee7d482caf6830978ec86a8c6884cf49e2b92d576e0fc1e0bb7e51f89a5fea0eafe05a9b7c09c61f0a"}, {0xa0, 0x1, 0x5, "4bb07415ad276d961371394c690507bb57630a9015a7c8312ba049baeb07a0acaa06b4f347c972614ee6a0738b15d4c4df92f28bb602425304c795b0bd7eff276bb475343e08207e29c24332a89964bf409f6ac2c29d8c9f8460d43c6bf1e79d52aa7a293f5288bea97888a413bc9a2969b547ea7ec3ab5c892bc3a487858f6dd33f2e61035726ef40a11962"}], 0xf0}}, {{&(0x7f0000007580)=@ethernet={0x6, @local}, 0x80, &(0x7f0000007740)=[{&(0x7f0000007600)="dc9e34dd991de6d90c2d4f36b2cc8bd18b93f38820240cf4034667", 0x1b}, {&(0x7f0000007640)="9a24197689c24ac379323f3d8b702b9b8f1ff87a21c37188671f7d1f95b8ad8499f25acfe764cd5d8240029eb49c3aecb6c960101d", 0x35}, {&(0x7f0000007680)="069f1218f5f29be9ada00118081b44f95920aa17d3e599ce5ad59ceee6adc9ae44f06323a2a96e04f0e7635c3f7940a8d852a5209269322e351e9da680cbcfae7ee202ac0178e44a725eb9ff05404d475d07ced00aff6686c89dbc1378c6dd2eef525696be8f5aeaa681f5c691b1e53799697756ad1169fe1812b16aa04a6653038a72cdc9aaf6346b889c6a9ef66666dd07c70b221e604acc5145a6b38abc16004d5db804e70122", 0xa8}], 0x3, &(0x7f0000007780)=[{0x88, 0x103, 0x9, "902c0a565dee979622fa115e82311f24aa0efbf9a2026e0eecaca0750fb7ef0ca43ecc5e9c976dd57001aa01063c961d3fbad7b8b34fb96de64eb577479d5bf1e175b5e9b1751ce50d58bf328d3be9e8fa1551aa850f36e4fba51cf72e330ebd88bfbde42a7dedbce1c32442a527e898b77f3f0f37f3d50c"}, {0xa8, 0x81, 0x0, "f6e7f14abdc26d5840823cae5ad3bf97b9eee7883af9261d8ea4e3687fcadde4d249c7afe59be9c467ceeddb5edbe1ee5d50d61c0e5229de646703bd2c266e5bdfce5fcc986c3d9ba3f98cfe7543959e61cc9c7140f7115ab77dba973b0c441a0cfc287f72ba45f8cf937d0e6572641262010224b2b227ca75819bc024662ae4a755b99e8ea614e81e540d89052fb16a2b99"}, {0x88, 0x13, 0x5, "8247152aa8161556bcfa35b3b801c7f721401ff265ddd5e92f673fee432ffb78d116ac2f4a93912c623c1d00e34a38d0c550a9fa7e2b3e993fbb8a209bc7a022361802bf0420b210fb759a83e5bd59e2fea106af07a43d5781e2b358c3530f5f08b115997dfeca1bc266fc6afc7b6677ecc5cf"}, {0xd8, 0x117, 0xb3f9, "30a79ad60469787ee5ea52e3f3dff4096e7ea2d3752d35b68a4c3683e6bd961942870aac2c301755bf3b0ed90d41448f40c48cf530a378b33c074d6840ef76f45c647f327b857ea3d30b0269ccba184dc7a09e7d75eb3a01ce767ac802e1a17a200b3f2b1a0e0cacda6ee76a84c6407d6075011ef30447c31c9539a5efd1c3d72ea7751b68e1d43f10ece50c900ff31d1dc81d541302ce193cc7f4aaaf7bde2247e76b26ef66931e8ad6409303934722764eb5ae2deda195bf5de6ccf4908ac0ca5fdf352e96"}, {0xc8, 0x88, 0x40, "b1a5439318fff2139b0bc3afc11ffbe7327512b81e57dee0b16417ec09abdcadd74ed2e844c731ee3af10f972eae06a44dda2dfa3f652295c24ea3fbd3a734a71821993156175953b53d6daa6058ace7e202dd80f4d60179b1c30d3db086cb9b7a9985127d73e7c9ef3b31a224908761670d049840ccfefd596a51ec9abae804b67f7f1cb57bfc5956d99852a492891b2bc005e123c96c51886aec7a3a3a7fd7c261e477ec73766188a3a88fb8077a9c01"}], 0x358}}], 0x7, 0x8000) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) r12 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r12, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffd, @mcast1}, 0x83) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r14, 0x0, r13) r15 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r15, &(0x7f0000000080), 0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x6) r16 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r16, &(0x7f0000000080), 0x1000) r17 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r17, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r17, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1430.214128][T26370] XFS (loop0): SB validate failed with error -117. [ 1430.220747][T26389] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1430.229906][T26389] 00000000: 58 46 53 42 00 00 10 00 00 00 01 43 58 00 10 00 XFSB.......CX... [ 1430.243954][T26389] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1430.252993][T26389] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 07:49:33 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1430.273644][T26389] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1430.282873][T26389] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1430.291147][T26369] Process accounting resumed [ 1430.365801][T26389] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1430.427301][T26389] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1430.509648][T26389] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 07:49:33 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030060000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1430.573844][T26389] XFS (loop5): SB validate failed with error -117. [ 1430.719080][ T17] XFS (loop5): SB sanity check failed [ 1430.724712][ T17] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1430.755624][ T17] XFS (loop5): Unmount and run xfs_repair [ 1430.771996][ T17] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1430.785126][ T17] 00000000: 58 46 53 42 00 00 10 00 00 00 01 43 58 00 10 00 XFSB.......CX... [ 1430.794527][ T17] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1430.803948][ T17] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1430.813288][ T17] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1430.822409][ T17] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1430.831865][ T17] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1430.841027][ T17] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1430.852968][ T17] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1430.862262][T26389] XFS (loop5): SB validate failed with error -117. 07:49:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1430.907701][T26385] Process accounting resumed 07:49:34 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030068000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1430.961245][T26410] Process accounting resumed 07:49:34 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1431.039389][T26412] Process accounting resumed 07:49:34 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000001435900100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1431.199484][T26441] XFS (loop0): SB sanity check failed [ 1431.215191][T26441] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1431.384518][T26441] XFS (loop0): Unmount and run xfs_repair [ 1431.407092][ T7886] XFS (loop5): SB sanity check failed [ 1431.412677][ T7886] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1431.444268][ T7886] XFS (loop5): Unmount and run xfs_repair [ 1431.454315][ T7886] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1431.469647][ T7886] 00000000: 58 46 53 42 00 00 10 00 00 00 01 43 59 00 10 00 XFSB.......CY... [ 1431.485195][T26441] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1431.489229][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1431.522604][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1431.547969][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1431.563657][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1431.595189][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1431.607596][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1431.613227][T26441] 00000000: 58 46 53 42 10 03 00 68 00 00 00 00 00 00 10 00 XFSB...h........ [ 1431.630197][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1431.644685][T26464] XFS (loop5): SB validate failed with error -117. [ 1431.656507][T26441] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1431.678135][T26441] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1431.699578][T26441] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1431.711737][T26441] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1431.721101][T26441] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1431.795729][T26441] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1431.830903][T26413] Process accounting resumed 07:49:35 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:35 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000001435a00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1431.853635][T26441] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 07:49:35 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1431.925796][T26462] Process accounting resumed [ 1431.928709][T26441] XFS (loop0): SB validate failed with error -117. 07:49:35 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1431.966277][T26469] Process accounting resumed 07:49:35 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653421003006c000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:35 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) r5 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffd, @mcast1}, 0x83) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0xffffffb3) acct(&(0x7f0000000180)='./file0\x00') [ 1432.196763][T26444] Process accounting resumed [ 1432.279185][ T7886] XFS (loop5): SB sanity check failed [ 1432.284625][ T7886] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1432.299522][ T7886] XFS (loop5): Unmount and run xfs_repair [ 1432.305369][ T7886] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1432.319350][ T7886] 00000000: 58 46 53 42 00 00 10 00 00 00 01 43 5a 00 10 00 XFSB.......CZ... [ 1432.332218][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1432.344340][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1432.353275][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1432.365250][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1432.374969][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1432.387427][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1432.397663][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1432.422649][T26494] XFS (loop5): SB validate failed with error -117. [ 1432.620710][ T7886] XFS (loop0): SB sanity check failed [ 1432.626384][ T7886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1432.638341][ T7886] XFS (loop0): Unmount and run xfs_repair [ 1432.644115][ T7886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1432.651569][ T7886] 00000000: 58 46 53 42 10 03 00 6c 00 00 00 00 00 00 10 00 XFSB...l........ [ 1432.660582][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1432.669643][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1432.678792][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1432.687929][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1432.696997][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1432.706002][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1432.714986][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1432.733307][T26519] XFS (loop0): SB validate failed with error -117. 07:49:36 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1432.880359][T26500] Process accounting resumed 07:49:36 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653421003026c000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:36 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000001435b00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1433.253757][T26511] Process accounting resumed 07:49:36 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1433.345817][ T7886] XFS (loop0): SB sanity check failed [ 1433.351287][ T7886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1433.375319][ T7886] XFS (loop0): Unmount and run xfs_repair [ 1433.384649][T26498] Process accounting resumed 07:49:36 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) acct(&(0x7f0000000180)='./file0\x00') [ 1433.389353][ T7886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1433.397132][ T7886] 00000000: 58 46 53 42 10 03 02 6c 00 00 00 00 00 00 10 00 XFSB...l........ [ 1433.416603][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1433.433515][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1433.452484][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1433.461709][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1433.470823][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1433.479964][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1433.489198][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 07:49:36 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1433.505169][T26543] XFS (loop0): SB validate failed with error -117. [ 1433.507882][T26541] Process accounting resumed [ 1433.527273][T26552] XFS (loop5): SB sanity check failed [ 1433.544808][T26552] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1433.595141][T26552] XFS (loop5): Unmount and run xfs_repair [ 1433.600950][T26552] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1433.644374][T26526] Process accounting resumed [ 1433.685550][T26552] 00000000: 58 46 53 42 00 00 10 00 00 00 01 43 5b 00 10 00 XFSB.......C[... 07:49:37 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) r5 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffd, @mcast1}, 0x83) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0xffffffb3) acct(&(0x7f0000000180)='./file0\x00') [ 1433.810975][T26552] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1433.869995][T26552] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 07:49:37 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030074000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1434.003486][T26552] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1434.056322][T26552] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1434.142929][T26552] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1434.254201][T26567] Process accounting resumed [ 1434.261008][T26589] XFS (loop0): SB sanity check failed [ 1434.266561][T26589] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1434.274450][T26552] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1434.290511][T26589] XFS (loop0): Unmount and run xfs_repair 07:49:37 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x160) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1434.315532][T26589] XFS (loop0): First 128 bytes of corrupted metadata buffer: 07:49:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r0, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1434.416182][T26582] Process accounting resumed [ 1434.425120][T26589] 00000000: 58 46 53 42 10 03 00 74 00 00 00 00 00 00 10 00 XFSB...t........ [ 1434.448450][T26552] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1434.508150][T26589] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1434.533822][T26576] Process accounting resumed [ 1434.549591][T26552] XFS (loop5): SB validate failed with error -117. 07:49:38 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1434.574024][T26589] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1434.658194][T26589] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1434.817206][T26589] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 07:49:38 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000001435c00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1434.895090][T26589] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1434.905578][T26589] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1434.914550][T26589] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1434.923720][T26589] XFS (loop0): SB validate failed with error -117. 07:49:38 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, 0x0) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:38 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) r5 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffd, @mcast1}, 0x83) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0xffffffb3) acct(&(0x7f0000000180)='./file0\x00') [ 1435.056050][T26586] Process accounting resumed 07:49:38 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653421003007a000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1435.336338][T26633] XFS (loop0): SB sanity check failed [ 1435.341971][T26633] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1435.368959][T26633] XFS (loop0): Unmount and run xfs_repair [ 1435.378681][T26633] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1435.393136][T26633] 00000000: 58 46 53 42 10 03 00 7a 00 00 00 00 00 00 10 00 XFSB...z........ [ 1435.403850][T26633] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1435.413063][T26633] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1435.421345][T26608] Process accounting resumed [ 1435.422360][T26633] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1435.435853][T26633] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1435.445091][T26633] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1435.454276][ T7886] XFS (loop5): SB sanity check failed [ 1435.459999][ T7886] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1435.472089][ T7886] XFS (loop5): Unmount and run xfs_repair [ 1435.478049][T26633] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 07:49:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r0, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1435.487264][ T7886] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1435.494746][ T7886] 00000000: 58 46 53 42 00 00 10 00 00 00 01 43 5c 00 10 00 XFSB.......C\... [ 1435.515279][T26633] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1435.524323][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1435.534483][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1435.549123][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1435.555650][T26633] XFS (loop0): SB validate failed with error -117. [ 1435.562626][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1435.585466][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1435.610959][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1435.620133][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1435.629212][T26641] XFS (loop5): SB validate failed with error -117. [ 1435.761048][T26627] Process accounting resumed 07:49:39 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, 0x0) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:39 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653421003007e000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1435.945684][T26619] Process accounting resumed 07:49:39 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:39 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000001435d00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1436.273501][T26659] Process accounting resumed 07:49:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r0, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1436.371321][ T7886] XFS (loop0): SB sanity check failed [ 1436.376867][ T7886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1436.419236][ T7886] XFS (loop0): Unmount and run xfs_repair [ 1436.424989][ T7886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1436.470861][ T7886] 00000000: 58 46 53 42 10 03 00 7e 00 00 00 00 00 00 10 00 XFSB...~........ [ 1436.479879][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1436.488829][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1436.497864][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1436.506876][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1436.515924][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1436.524904][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1436.533915][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1436.543031][T26672] XFS (loop0): SB validate failed with error -117. [ 1436.560106][ T7886] XFS (loop5): SB sanity check failed [ 1436.576334][T26628] Process accounting resumed [ 1436.579627][ T7886] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1436.615095][ T7886] XFS (loop5): Unmount and run xfs_repair 07:49:40 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, 0x0) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1436.620852][ T7886] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1436.675087][ T7886] 00000000: 58 46 53 42 00 00 10 00 00 00 01 43 5d 00 10 00 XFSB.......C]... [ 1436.684157][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1436.705088][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1436.725072][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1436.733942][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1436.755096][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1436.785074][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1436.795125][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1436.804015][T26682] XFS (loop5): SB validate failed with error -117. 07:49:40 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030380000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1436.980028][T26682] XFS (loop5): SB sanity check failed [ 1436.987774][T26682] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1437.036996][T26682] XFS (loop5): Unmount and run xfs_repair [ 1437.060432][T26682] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1437.088007][T26682] 00000000: 58 46 53 42 00 00 10 00 00 00 01 43 5d 00 10 00 XFSB.......C]... [ 1437.137539][T26682] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1437.184204][T26701] Process accounting resumed 07:49:40 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1437.233736][T26681] Process accounting resumed [ 1437.244361][T26725] XFS (loop0): SB sanity check failed [ 1437.250047][T26725] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1437.262336][T26682] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 07:49:40 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, 0x0) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1437.289333][T26725] XFS (loop0): Unmount and run xfs_repair [ 1437.312558][T26725] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1437.325139][T26725] 00000000: 58 46 53 42 10 03 03 80 00 00 00 00 00 00 10 00 XFSB............ [ 1437.429525][T26682] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1437.434811][T26725] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1437.442908][T26682] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1437.454364][T26670] Process accounting resumed [ 1437.490532][T26682] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1437.500856][T26725] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1437.522478][T26725] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ 07:49:40 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, 0x0) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1437.553154][T26682] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1437.595168][T26725] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1437.625199][T26682] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1437.656287][T26725] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1437.682412][T26682] XFS (loop5): SB validate failed with error -117. [ 1437.702686][T26725] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1437.785168][T26725] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1437.810473][T26725] XFS (loop0): SB validate failed with error -117. 07:49:41 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000001435e00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1438.030087][T26725] XFS (loop0): SB sanity check failed [ 1438.035663][T26725] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1438.047677][T26725] XFS (loop0): Unmount and run xfs_repair [ 1438.053541][T26725] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1438.061128][T26725] 00000000: 58 46 53 42 10 03 03 80 00 00 00 00 00 00 10 00 XFSB............ [ 1438.070157][T26725] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1438.079098][T26725] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1438.089223][T26725] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1438.098243][T26725] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1438.107241][T26725] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1438.116322][T26725] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1438.125422][T26725] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1438.134373][T26725] XFS (loop0): SB validate failed with error -117. 07:49:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r0, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1438.177642][T26713] Process accounting resumed [ 1438.186762][T26753] Process accounting resumed 07:49:41 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1438.293055][T26765] XFS (loop5): SB sanity check failed [ 1438.315201][T26765] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 07:49:41 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342100300b3000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1438.423739][T26765] XFS (loop5): Unmount and run xfs_repair [ 1438.429846][T26765] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1438.437516][T26765] 00000000: 58 46 53 42 00 00 10 00 00 00 01 43 5e 00 10 00 XFSB.......C^... [ 1438.446703][T26765] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1438.484139][T26765] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1438.503155][T26765] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1438.519747][T26765] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 07:49:41 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, 0x0) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1438.540847][T26741] Process accounting resumed [ 1438.558592][T26765] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1438.609805][T26765] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1438.619131][T26765] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1438.628345][T26765] XFS (loop5): SB validate failed with error -117. 07:49:42 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1438.654257][T26748] Process accounting resumed 07:49:42 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342100301b6000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:42 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000001435f00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:42 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x13d) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1439.143669][T26774] Process accounting resumed 07:49:42 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, 0x0) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1439.190146][T26789] Process accounting resumed [ 1439.270161][ T7886] XFS (loop0): SB sanity check failed [ 1439.277818][ T7886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1439.327798][ T7886] XFS (loop0): Unmount and run xfs_repair [ 1439.351994][ T7886] XFS (loop0): First 128 bytes of corrupted metadata buffer: 07:49:42 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000006000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1439.369639][ T7886] 00000000: 58 46 53 42 10 03 01 b6 00 00 00 00 00 00 10 00 XFSB............ [ 1439.378954][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1439.388146][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1439.405540][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1439.421823][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1439.437393][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1439.455943][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1439.471511][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1439.486906][T26802] XFS (loop0): SB validate failed with error -117. 07:49:42 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1439.526333][T26782] Process accounting resumed [ 1439.572295][T26823] XFS (loop5): SB sanity check failed [ 1439.582534][T26823] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1439.594880][T26823] XFS (loop5): Unmount and run xfs_repair [ 1439.606470][T26823] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1439.627047][T26823] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 60 00 10 00 XFSB........`... [ 1439.676012][T26823] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1439.815188][T26823] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 07:49:43 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342100300c4000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1439.875121][T26823] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1439.899338][T26794] Process accounting resumed [ 1439.914030][T26823] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 07:49:43 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1439.978636][T26823] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1440.015130][T26823] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 07:49:43 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1440.032934][T26848] Process accounting resumed [ 1440.045118][T26823] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1440.045233][T26820] Process accounting resumed 07:49:43 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(0x0, 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, 0x0) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1440.243663][T26852] XFS (loop0): SB sanity check failed [ 1440.249231][T26852] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1440.261478][T26852] XFS (loop0): Unmount and run xfs_repair [ 1440.269744][T26823] XFS (loop5): SB validate failed with error -117. [ 1440.272294][T26852] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1440.287741][T26852] 00000000: 58 46 53 42 10 03 00 c4 00 00 00 00 00 00 10 00 XFSB............ [ 1440.330689][T26852] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1440.425151][T26852] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1440.435512][T26852] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1440.502045][T26852] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1440.575101][T26852] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 07:49:44 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000001436000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1440.635957][T26852] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1440.728317][T26852] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 07:49:44 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1440.788931][T26862] Process accounting resumed 07:49:44 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x12b) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1440.816421][T26852] XFS (loop0): SB validate failed with error -117. [ 1440.847304][T26866] Process accounting resumed [ 1441.032546][T26852] XFS (loop0): SB sanity check failed [ 1441.048636][T26852] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1441.096163][T26852] XFS (loop0): Unmount and run xfs_repair [ 1441.121415][T26852] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1441.138149][T26852] 00000000: 58 46 53 42 10 03 00 c4 00 00 00 00 00 00 10 00 XFSB............ [ 1441.165190][T26852] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1441.212668][T26860] Process accounting resumed 07:49:44 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(0x0, 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1441.269956][T26852] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1441.278303][T26888] XFS (loop5): SB sanity check failed [ 1441.285904][T26888] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1441.305177][T26888] XFS (loop5): Unmount and run xfs_repair [ 1441.322251][T26852] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1441.325577][T26888] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1441.331297][T26852] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1441.352965][T26852] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1441.365302][T26852] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1441.379521][T26852] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1441.389059][T26852] XFS (loop0): SB validate failed with error -117. 07:49:44 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, 0x0) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:44 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342100302e8000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1441.435879][T26883] Process accounting resumed [ 1441.444330][T26888] 00000000: 58 46 53 42 00 00 10 00 00 00 01 43 60 00 10 00 XFSB.......C`... [ 1441.608199][T26888] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1441.668784][T26888] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1441.678426][T26888] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1441.687368][T26888] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1441.696227][T26894] Process accounting resumed [ 1441.696577][T26888] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 07:49:45 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(0x0, 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1441.712160][T26888] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1441.721679][T26888] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1441.731073][T26923] XFS (loop0): SB sanity check failed [ 1441.736706][T26888] XFS (loop5): SB validate failed with error -117. [ 1441.743296][T26923] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1441.755716][T26923] XFS (loop0): Unmount and run xfs_repair [ 1441.764121][T26923] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1441.771664][T26923] 00000000: 58 46 53 42 10 03 02 e8 00 00 00 00 00 00 10 00 XFSB............ [ 1441.780671][T26923] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1441.789830][T26923] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1441.798872][T26923] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ 07:49:45 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000001436100100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1441.814910][T26923] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1441.825174][T26923] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1441.843381][T26897] Process accounting resumed 07:49:45 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1441.918494][T26923] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1441.960454][T26923] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1441.972214][T26923] XFS (loop0): SB validate failed with error -117. 07:49:45 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342100303ec000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:45 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000001436200100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:45 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, 0x0, 0x0) acct(&(0x7f0000000180)='./file0\x00') 07:49:45 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, 0x0) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1442.403590][T26919] Process accounting resumed [ 1442.422810][T26940] Process accounting resumed 07:49:45 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(0x0, 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1442.455664][T26935] Process accounting resumed [ 1442.577124][T26959] XFS (loop0): SB sanity check failed [ 1442.582724][T26959] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1442.624501][T26959] XFS (loop0): Unmount and run xfs_repair [ 1442.639371][T26959] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1442.665088][T26959] 00000000: 58 46 53 42 10 03 03 ec 00 00 00 00 00 00 10 00 XFSB............ [ 1442.743996][T26959] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 07:49:46 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(0x0, 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1442.838517][T26967] Process accounting resumed [ 1442.843536][T26959] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1442.853751][T26961] XFS (loop5): SB sanity check failed [ 1442.874821][T26959] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1442.895329][T26961] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1442.932765][T26959] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1442.948566][T26959] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1443.015488][T26959] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1443.041037][T26961] XFS (loop5): Unmount and run xfs_repair [ 1443.047061][T26961] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1443.054559][T26961] 00000000: 58 46 53 42 00 00 10 00 00 00 01 43 62 00 10 00 XFSB.......Cb... [ 1443.063856][T26961] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1443.072876][T26961] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1443.081974][T26961] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1443.091150][T26961] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1443.100200][T26961] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1443.109622][T26961] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1443.120124][T26961] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1443.120278][T26959] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1443.129122][T26961] XFS (loop5): SB validate failed with error -117. 07:49:46 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:46 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000001436300100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1443.177200][T26941] Process accounting resumed [ 1443.303858][T26959] XFS (loop0): SB validate failed with error -117. [ 1443.452766][T26982] Process accounting resumed 07:49:46 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, 0x0, 0x0) acct(&(0x7f0000000180)='./file0\x00') [ 1443.636477][T27004] XFS (loop5): SB sanity check failed [ 1443.642316][T27004] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1443.682415][T27004] XFS (loop5): Unmount and run xfs_repair [ 1443.713570][T27004] XFS (loop5): First 128 bytes of corrupted metadata buffer: 07:49:47 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653421003c0ed000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1443.742108][T27004] 00000000: 58 46 53 42 00 00 10 00 00 00 01 43 63 00 10 00 XFSB.......Cc... [ 1443.778585][T27004] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1443.791704][T27004] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1443.847206][T27004] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1443.952059][T27004] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1443.962782][T26993] Process accounting resumed [ 1443.984438][T26992] Process accounting resumed [ 1443.989567][T27004] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 07:49:47 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:47 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1443.989647][ T6886] XFS (loop0): SB sanity check failed [ 1444.005866][ T6886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1444.017876][ T6886] XFS (loop0): Unmount and run xfs_repair [ 1444.023631][ T6886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1444.031098][ T6886] 00000000: 58 46 53 42 10 03 c0 ed 00 00 00 00 00 00 10 00 XFSB............ [ 1444.040027][ T6886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1444.049086][ T6886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1444.058010][ T6886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1444.067119][ T6886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1444.076269][ T6886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1444.085309][ T6886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1444.094302][ T6886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1444.103941][T27004] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1444.104683][T27026] XFS (loop0): SB validate failed with error -117. [ 1444.112874][T27004] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1444.128431][T27004] XFS (loop5): SB validate failed with error -117. 07:49:47 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1444.326750][T27007] Process accounting resumed [ 1444.440621][T27028] Process accounting resumed 07:49:47 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, 0x0, 0x0) acct(&(0x7f0000000180)='./file0\x00') 07:49:47 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342100303ee000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:48 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000001436400100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:48 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1444.968017][T27046] Process accounting resumed [ 1445.090166][ T6886] XFS (loop5): SB sanity check failed [ 1445.098752][ T6886] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1445.110725][ T6886] XFS (loop5): Unmount and run xfs_repair [ 1445.120131][ T6886] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1445.127672][ T6886] 00000000: 58 46 53 42 00 00 10 00 00 00 01 43 64 00 10 00 XFSB.......Cd... [ 1445.139910][ T6886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1445.148946][ T6886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1445.158010][ T6886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1445.167026][ T6886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1445.176059][ T6886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1445.185090][ T6886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1445.194135][ T6886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1445.209836][T27062] XFS (loop5): SB validate failed with error -117. [ 1445.249904][ T6886] XFS (loop0): SB sanity check failed [ 1445.255613][ T6886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1445.268539][ T6886] XFS (loop0): Unmount and run xfs_repair [ 1445.274917][ T6886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1445.282668][ T6886] 00000000: 58 46 53 42 10 03 03 ee 00 00 00 00 00 00 10 00 XFSB............ [ 1445.291894][ T6886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1445.300917][ T6886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1445.310462][ T6886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1445.319654][ T6886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1445.328811][ T6886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1445.338273][ T6886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1445.347475][ T6886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1445.360445][T27064] XFS (loop0): SB validate failed with error -117. [ 1445.441599][ T6886] XFS (loop5): SB sanity check failed [ 1445.447276][ T6886] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1445.461861][T27050] Process accounting resumed 07:49:48 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1445.497066][ T6886] XFS (loop5): Unmount and run xfs_repair [ 1445.504438][ T6886] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1445.512177][ T6886] 00000000: 58 46 53 42 00 00 10 00 00 00 01 43 64 00 10 00 XFSB.......Cd... [ 1445.521283][ T6886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1445.530403][ T6886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 07:49:48 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342100300ff000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:48 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1445.539477][ T6886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1445.548565][ T6886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1445.557608][ T6886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1445.566650][ T6886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1445.575669][ T6886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1445.584743][T27062] XFS (loop5): SB validate failed with error -117. [ 1445.590870][T27051] Process accounting resumed [ 1445.653950][T27060] Process accounting resumed 07:49:49 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(0x0) 07:49:49 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000001436500100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:49 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030fff000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1445.913257][T27098] Process accounting resumed 07:49:49 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1446.208860][ T6886] XFS (loop0): SB sanity check failed [ 1446.214508][ T6886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1446.259822][ T6886] XFS (loop0): Unmount and run xfs_repair [ 1446.270094][ T6886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1446.286992][ T6886] 00000000: 58 46 53 42 10 03 0f ff 00 00 00 00 00 00 10 00 XFSB............ [ 1446.301986][ T6886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1446.323309][ T6886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1446.335731][ T6886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1446.364413][ T6886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1446.380401][ T6886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1446.434496][ T6886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1446.473158][T27110] Process accounting resumed [ 1446.484146][ T6886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 07:49:49 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, 0x0, 0x0) acct(&(0x7f0000000180)='./file0\x00') [ 1446.536723][T27120] XFS (loop0): SB validate failed with error -117. [ 1446.543946][ T6886] XFS (loop5): SB sanity check failed [ 1446.549568][ T6886] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1446.567960][ T6886] XFS (loop5): Unmount and run xfs_repair [ 1446.573806][ T6886] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1446.581447][ T6886] 00000000: 58 46 53 42 00 00 10 00 00 00 01 43 65 00 10 00 XFSB.......Ce... [ 1446.590513][ T6886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1446.599576][ T6886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1446.608565][ T6886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1446.617574][ T6886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1446.627109][ T6886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1446.636323][ T6886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1446.645664][ T6886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1446.654675][T27127] XFS (loop5): SB validate failed with error -117. 07:49:50 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(0x0) 07:49:50 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(0x0, 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:50 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000040000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1446.906934][T27125] Process accounting resumed 07:49:50 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1446.969222][T27108] Process accounting resumed 07:49:50 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000001436600100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:50 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653421003ff07040000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1447.601400][ T6886] XFS (loop5): SB sanity check failed [ 1447.607239][ T6886] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 07:49:51 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(0x0) [ 1447.668896][ T6886] XFS (loop5): Unmount and run xfs_repair [ 1447.701127][ T6886] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1447.729336][ T6886] 00000000: 58 46 53 42 00 00 10 00 00 00 01 43 66 00 10 00 XFSB.......Cf... [ 1447.761985][ T6886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1447.794578][ T6886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1447.807325][ T6886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1447.824859][ T6886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1447.845077][ T6886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1447.853966][ T6886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1447.870185][T27181] Process accounting resumed [ 1447.884532][ T6886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 07:49:51 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(0x0, 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1447.896071][T27184] XFS (loop5): SB validate failed with error -117. [ 1447.908430][T27196] XFS (loop0): SB sanity check failed [ 1447.947455][T27196] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 07:49:51 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1447.994023][T27148] Process accounting resumed [ 1448.045491][T27196] XFS (loop0): Unmount and run xfs_repair [ 1448.141042][T27196] XFS (loop0): First 128 bytes of corrupted metadata buffer: 07:49:51 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000001436700100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1448.250270][T27196] 00000000: 58 46 53 42 10 03 ff 07 04 00 00 00 00 00 10 00 XFSB............ [ 1448.389192][T27196] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1448.439656][T27196] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 07:49:51 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) [ 1448.484404][T27164] Process accounting resumed [ 1448.489405][T27196] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1448.513299][T27196] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1448.532115][T27208] Process accounting resumed 07:49:51 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(0x0) 07:49:51 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(0x0, 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1448.572991][T27233] XFS (loop5): SB sanity check failed [ 1448.576469][T27196] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1448.579004][T27233] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1448.607996][T27233] XFS (loop5): Unmount and run xfs_repair [ 1448.614776][T27233] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1448.717762][T27196] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1448.793262][T27233] 00000000: 58 46 53 42 00 00 10 00 00 00 01 43 67 00 10 00 XFSB.......Cg... 07:49:52 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) [ 1448.856714][T27196] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1448.865224][T27233] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1448.895138][T27233] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1448.917280][T27233] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1448.939492][T27196] XFS (loop0): SB validate failed with error -117. [ 1448.965200][T27233] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1449.000570][T27233] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1449.033549][T27233] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1449.093445][T27233] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 07:49:52 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342100300000e0000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1449.134375][T27233] XFS (loop5): SB validate failed with error -117. [ 1449.288080][T27233] XFS (loop5): SB sanity check failed [ 1449.297191][T27233] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1449.319336][T27233] XFS (loop5): Unmount and run xfs_repair [ 1449.328877][T27233] XFS (loop5): First 128 bytes of corrupted metadata buffer: 07:49:52 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) 07:49:52 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0xf9) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1449.348494][T27233] 00000000: 58 46 53 42 00 00 10 00 00 00 01 43 67 00 10 00 XFSB.......Cg... [ 1449.363591][T27221] Process accounting resumed [ 1449.368470][T27233] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1449.381353][T27233] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1449.506544][ T6886] XFS (loop0): SB sanity check failed [ 1449.512060][ T6886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1449.518410][T27233] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1449.576292][ T6886] XFS (loop0): Unmount and run xfs_repair [ 1449.615299][ T6886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1449.622722][ T6886] 00000000: 58 46 53 42 10 03 00 00 0e 00 00 00 00 00 10 00 XFSB............ [ 1449.655146][ T6886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1449.658819][T27257] Process accounting resumed [ 1449.665533][ T6886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1449.677864][ T6886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1449.687097][ T6886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1449.696224][ T6886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1449.705532][ T6886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1449.710868][T27233] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1449.714450][ T6886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1449.732507][T27278] XFS (loop0): SB validate failed with error -117. 07:49:53 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(0x0) 07:49:53 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1449.868866][T27233] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 07:49:53 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000200000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1449.988948][T27233] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1450.073845][T27233] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1450.155368][T27233] XFS (loop5): SB validate failed with error -117. 07:49:53 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0xf9) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1450.261607][T27291] Process accounting resumed [ 1450.267849][ T6886] XFS (loop0): SB sanity check failed [ 1450.279002][ T6886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1450.303161][ T6886] XFS (loop0): Unmount and run xfs_repair [ 1450.326355][ T6886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1450.343030][ T6886] 00000000: 58 46 53 42 10 03 00 00 20 00 00 00 00 00 10 00 XFSB.... ....... [ 1450.375152][ T6886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1450.410098][ T6886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 07:49:53 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000006800100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:53 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) acct(&(0x7f0000000180)='./file0\x00') [ 1450.442535][ T6886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1450.477495][ T6886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1450.506979][ T6886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1450.522604][ T6886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1450.538137][ T6886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1450.552646][T27311] XFS (loop0): SB validate failed with error -117. 07:49:53 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1450.582562][T27309] Process accounting resumed 07:49:54 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1450.706529][T27330] XFS (loop5): SB sanity check failed [ 1450.715054][T27330] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1450.727822][T27330] XFS (loop5): Unmount and run xfs_repair [ 1450.733631][T27330] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1450.735197][T27324] Process accounting resumed [ 1450.741410][T27330] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 68 00 10 00 XFSB........h... [ 1450.755228][T27330] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1450.764457][T27330] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1450.774537][T27330] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1450.784042][T27330] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1450.793490][T27330] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 07:49:54 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0xf9) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1450.802969][T27330] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1450.814062][T27330] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1450.823376][T27330] XFS (loop5): SB validate failed with error -117. 07:49:54 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342100300007e0000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:54 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000001436800100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:54 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210038096980000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1451.555826][T27364] XFS (loop5): SB sanity check failed [ 1451.562421][T27364] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1451.596211][T27353] Process accounting resumed 07:49:55 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1451.660055][T27328] Process accounting resumed 07:49:55 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) acct(&(0x7f0000000180)='./file0\x00') [ 1451.681149][T27364] XFS (loop5): Unmount and run xfs_repair [ 1451.687947][T27364] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1451.695504][T27364] 00000000: 58 46 53 42 00 00 10 00 00 00 01 43 68 00 10 00 XFSB.......Ch... [ 1451.704356][T27364] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1451.713313][T27364] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1451.722605][T27364] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1451.731774][T27364] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1451.741006][T27364] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1451.749921][T27364] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1451.759028][T27364] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1451.768146][T27364] XFS (loop5): SB validate failed with error -117. 07:49:55 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1451.780581][ T7886] XFS (loop0): SB sanity check failed [ 1451.782687][T27349] Process accounting resumed [ 1451.790725][ T7886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1451.808278][ T7886] XFS (loop0): Unmount and run xfs_repair [ 1451.814072][ T7886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1451.821611][ T7886] 00000000: 58 46 53 42 10 03 80 96 98 00 00 00 00 00 10 00 XFSB............ [ 1451.830650][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1451.839767][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1451.848701][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1451.857575][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1451.866440][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1451.875313][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1451.884162][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1451.893197][T27380] XFS (loop0): SB validate failed with error -117. [ 1452.019979][T27364] XFS (loop5): SB sanity check failed [ 1452.028779][T27364] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1452.085140][T27364] XFS (loop5): Unmount and run xfs_repair [ 1452.094118][T27364] XFS (loop5): First 128 bytes of corrupted metadata buffer: 07:49:55 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000000100000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:55 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0xdf) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1452.169683][T27364] 00000000: 58 46 53 42 00 00 10 00 00 00 01 43 68 00 10 00 XFSB.......Ch... [ 1452.204494][T27357] Process accounting resumed [ 1452.308376][T27364] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1452.403836][T27364] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1452.496607][T27364] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1452.642515][T27364] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1452.757638][ T7886] XFS (loop0): SB sanity check failed [ 1452.763374][ T7886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1452.775482][ T7886] XFS (loop0): Unmount and run xfs_repair [ 1452.781401][ T7886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1452.784590][T27364] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1452.788980][ T7886] 00000000: 58 46 53 42 10 03 00 00 00 01 00 00 00 00 10 00 XFSB............ [ 1452.806938][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1452.816141][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1452.825961][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1452.835133][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1452.844203][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1452.853346][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1452.862494][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1452.871877][T27419] XFS (loop0): SB validate failed with error -117. 07:49:56 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) acct(&(0x7f0000000180)='./file0\x00') [ 1452.911208][T27417] Process accounting resumed [ 1452.926663][T27364] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1452.990949][T27364] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1453.017256][T27364] XFS (loop5): SB validate failed with error -117. 07:49:56 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000001436900100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1453.110913][T27419] XFS (loop0): SB sanity check failed [ 1453.116528][T27419] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1453.146073][T27419] XFS (loop0): Unmount and run xfs_repair [ 1453.191005][T27419] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1453.198987][T27419] 00000000: 58 46 53 42 10 03 00 00 00 01 00 00 00 00 10 00 XFSB............ [ 1453.214461][T27419] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1453.224856][T27407] Process accounting resumed 07:49:56 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:56 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000001080)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x5) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f0000001140)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x9cc2ffcc0bdc2c8a) socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r4, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r4, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x0, 0x80) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffd, @mcast1}, 0x83) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r10, &(0x7f0000000080), 0x1000) r11 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)=0x200004) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1453.260934][T27395] Process accounting resumed [ 1453.402606][T27419] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1453.436882][T27419] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ 07:49:56 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000001436a00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1453.560670][T27412] Process accounting resumed [ 1453.565579][T27419] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1453.574502][T27419] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 07:49:57 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0xdf) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:57 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1453.728555][T27443] Process accounting resumed [ 1453.735134][T27419] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1453.753263][T27419] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1453.793097][T27419] XFS (loop0): SB validate failed with error -117. 07:49:57 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000000200000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1453.952852][T27453] Process accounting resumed 07:49:57 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1454.069798][ T7886] XFS (loop5): SB sanity check failed [ 1454.075303][ T7886] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1454.109864][ T7886] XFS (loop5): Unmount and run xfs_repair [ 1454.133860][ T7886] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1454.158218][ T7886] 00000000: 58 46 53 42 00 00 10 00 00 00 01 43 6a 00 10 00 XFSB.......Cj... [ 1454.195235][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1454.216655][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1454.247527][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1454.267099][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1454.293230][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1454.315343][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1454.324465][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1454.350005][T27473] XFS (loop5): SB validate failed with error -117. 07:49:57 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1454.511899][T27492] Process accounting resumed 07:49:58 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000001436900100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1454.609096][T27465] Process accounting resumed 07:49:58 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, 0x0) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:58 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000006c00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1454.919493][T27509] Process accounting resumed 07:49:58 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000000300000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:58 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1455.119296][T27513] XFS (loop3): SB sanity check failed [ 1455.124889][T27513] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1455.134715][T27475] Process accounting resumed [ 1455.145494][T27513] XFS (loop3): Unmount and run xfs_repair [ 1455.182688][T27513] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1455.224422][T27458] Process accounting resumed 07:49:58 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1455.278674][T27513] 00000000: 58 46 53 42 00 00 10 00 00 00 01 43 69 00 10 00 XFSB.......Ci... [ 1455.385366][T27513] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1455.402068][T27513] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1455.437768][T27513] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1455.528465][T27513] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1455.559382][T27513] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1455.568410][T27513] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 07:49:59 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000036e00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1455.577368][T27513] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1455.587274][T27513] XFS (loop3): SB validate failed with error -117. [ 1455.602910][T27533] Process accounting resumed 07:49:59 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000000400000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:49:59 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:49:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r0, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1456.010201][T27551] XFS (loop5): SB sanity check failed [ 1456.016001][T27551] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1456.039352][T27551] XFS (loop5): Unmount and run xfs_repair [ 1456.053394][T27551] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1456.075205][T27551] 00000000: 58 46 53 42 00 00 10 00 00 00 00 03 6e 00 10 00 XFSB........n... 07:49:59 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, 0x0) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1456.122051][T27551] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1456.148812][T27522] Process accounting resumed [ 1456.312823][T27551] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1456.415881][T27551] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ 07:49:59 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000000500000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1456.478285][T27551] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1456.508087][T27576] Process accounting resumed 07:49:59 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, 0x0) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1456.549728][T27551] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1456.639407][T27551] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1456.744426][T27551] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1456.804713][T27551] XFS (loop5): SB validate failed with error -117. [ 1456.900900][T27584] Process accounting resumed [ 1456.906293][ T7886] XFS (loop0): SB sanity check failed [ 1456.911894][ T7886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 07:50:00 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1456.949533][ T7886] XFS (loop0): Unmount and run xfs_repair [ 1456.965828][ T7886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1456.983011][ T7886] 00000000: 58 46 53 42 10 03 00 00 00 05 00 00 00 00 10 00 XFSB............ 07:50:00 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000007400100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1456.992125][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1457.001437][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1457.010537][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1457.019785][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1457.028968][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1457.038239][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1457.048678][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1457.057814][T27591] XFS (loop0): SB validate failed with error -117. 07:50:00 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/nf_conntrack\x00') read$FUSE(r2, &(0x7f0000000080), 0x1000) [ 1457.153824][T27543] Process accounting resumed [ 1457.224798][T27606] XFS (loop5): SB sanity check failed [ 1457.239451][T27606] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1457.264825][T27596] Process accounting resumed 07:50:00 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000000600000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1457.280565][T27606] XFS (loop5): Unmount and run xfs_repair [ 1457.307425][T27606] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1457.345243][T27606] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 74 00 10 00 XFSB........t... [ 1457.385471][T27606] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 07:50:00 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r0, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1457.429575][T27606] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1457.465674][T27577] Process accounting resumed [ 1457.519190][T27606] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1457.619177][T27624] XFS (loop0): SB sanity check failed [ 1457.630734][T27624] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1457.645443][T27624] XFS (loop0): Unmount and run xfs_repair [ 1457.694543][T27624] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1457.720460][T27606] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1457.803755][T27624] 00000000: 58 46 53 42 10 03 00 00 00 06 00 00 00 00 10 00 XFSB............ [ 1457.825573][T27606] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1457.843576][T27606] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1457.865128][T27606] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1457.874065][T27606] XFS (loop5): SB validate failed with error -117. [ 1457.880962][T27624] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 07:50:01 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/nf_conntrack\x00') read$FUSE(r2, &(0x7f0000000080), 0x1000) [ 1457.915162][T27624] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1457.961834][T27624] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1457.985381][T27624] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1458.058978][T27624] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 07:50:01 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1458.120158][T27624] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1458.150162][T27617] Process accounting resumed 07:50:01 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000007a00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1458.269447][T27624] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1458.310857][T27624] XFS (loop0): SB validate failed with error -117. 07:50:01 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r4, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r4, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffd, @mcast1}, 0x83) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r10, &(0x7f0000000080), 0x1000) r11 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1458.390500][T27639] Process accounting resumed [ 1458.450242][T27637] Process accounting resumed 07:50:01 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/nf_conntrack\x00') read$FUSE(r2, &(0x7f0000000080), 0x1000) 07:50:02 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000000700000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1458.630534][T27654] Process accounting resumed 07:50:02 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1458.733448][ T7886] XFS (loop5): SB sanity check failed [ 1458.739019][ T7886] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1458.758360][ T7886] XFS (loop5): Unmount and run xfs_repair [ 1458.767390][ T7886] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1458.779402][ T7886] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 7a 00 10 00 XFSB........z... [ 1458.795781][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1458.804925][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1458.813814][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1458.823067][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1458.831977][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1458.841223][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1458.850204][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1458.859126][T27666] XFS (loop5): SB validate failed with error -117. [ 1458.883153][T27681] XFS (loop0): SB sanity check failed [ 1458.888906][T27681] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1458.900852][T27681] XFS (loop0): Unmount and run xfs_repair [ 1458.906749][T27681] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1458.914179][T27681] 00000000: 58 46 53 42 10 03 00 00 00 07 00 00 00 00 10 00 XFSB............ [ 1458.923223][T27681] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1458.932157][T27681] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1458.941078][T27681] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1458.950013][T27681] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1458.958975][T27681] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1458.967908][T27681] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1458.978310][T27681] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1458.987251][T27681] XFS (loop0): SB validate failed with error -117. 07:50:02 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000018000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:50:02 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000000800000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1459.449907][ T7886] XFS (loop5): SB sanity check failed [ 1459.455596][ T7886] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1459.473984][ T7886] XFS (loop5): Unmount and run xfs_repair [ 1459.483134][ T7886] XFS (loop5): First 128 bytes of corrupted metadata buffer: 07:50:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r0, &(0x7f0000000080), 0x1000) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x200440, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r1) fcntl$setstatus(r2, 0x4, 0xc0400) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r5 = creat(&(0x7f0000000640)='./file0\x00', 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r5, 0x3, 0x0, 0x80000003) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r6, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r6, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r7 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f00000001c0)) r8 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffd, @mcast1}, 0x83) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r12, &(0x7f0000000080), 0x1000) r13 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r13, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r3, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1459.492477][ T7886] 00000000: 58 46 53 42 00 00 10 00 00 00 00 01 80 00 10 00 XFSB............ [ 1459.501436][ T7886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1459.510552][ T7886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1459.519643][ T7886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1459.528697][ T7886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1459.539163][T27716] XFS (loop0): SB sanity check failed [ 1459.544849][ T7886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1459.554699][T27716] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1459.566645][ T7886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1459.575685][T27716] XFS (loop0): Unmount and run xfs_repair [ 1459.581624][ T7886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1459.590708][T27716] XFS (loop0): First 128 bytes of corrupted metadata buffer: 07:50:03 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r4, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r4, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffd, @mcast1}, 0x83) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r10, &(0x7f0000000080), 0x1000) r11 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1459.591720][T27661] Process accounting resumed [ 1459.598441][T27716] 00000000: 58 46 53 42 10 03 00 00 00 08 00 00 00 00 10 00 XFSB............ [ 1459.612282][T27710] XFS (loop5): SB validate failed with error -117. [ 1459.612587][T27716] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1459.627747][T27716] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1459.636679][T27716] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ 07:50:03 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1459.662287][T27716] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1459.782510][T27716] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1459.798405][T27716] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1459.833086][T27716] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1459.893298][T27716] XFS (loop0): SB validate failed with error -117. 07:50:03 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000038000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:50:03 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1460.091344][T27698] Process accounting resumed [ 1460.384892][ T9039] XFS (loop5): SB sanity check failed [ 1460.391474][ T9039] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 07:50:03 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000020800000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1460.437930][ T9039] XFS (loop5): Unmount and run xfs_repair [ 1460.465084][ T9039] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1460.472496][ T9039] 00000000: 58 46 53 42 00 00 10 00 00 00 00 03 80 00 10 00 XFSB............ [ 1460.485116][ T9039] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1460.494059][ T9039] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1460.526333][T27742] Process accounting resumed 07:50:03 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(0x0, 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1460.551881][ T9039] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1460.564068][ T9039] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1460.586391][ T9039] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1460.600947][ T9039] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1460.623173][ T9039] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1460.640662][T27759] XFS (loop5): SB validate failed with error -117. 07:50:04 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1460.697128][T27775] XFS (loop0): SB sanity check failed [ 1460.704920][T27775] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1460.728404][T27775] XFS (loop0): Unmount and run xfs_repair [ 1460.741342][T27762] Process accounting resumed [ 1460.790152][T27775] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1460.853992][ T9039] XFS (loop5): SB sanity check failed [ 1460.859595][ T9039] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1460.872321][ T9039] XFS (loop5): Unmount and run xfs_repair [ 1460.878176][ T9039] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1460.889618][ T9039] 00000000: 58 46 53 42 00 00 10 00 00 00 00 03 80 00 10 00 XFSB............ [ 1460.904211][ T9039] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1460.916665][T27775] 00000000: 58 46 53 42 10 03 00 00 02 08 00 00 00 00 10 00 XFSB............ [ 1460.918797][ T9039] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1460.941068][ T9039] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1460.950207][ T9039] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1460.959138][ T9039] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1460.968105][ T9039] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1460.977196][ T9039] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1460.988082][T27759] XFS (loop5): SB validate failed with error -117. [ 1461.001590][T27735] Process accounting resumed [ 1461.035740][T27775] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 07:50:04 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r4, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r4, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffd, @mcast1}, 0x83) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r10, &(0x7f0000000080), 0x1000) r11 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1461.130752][T27775] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 07:50:04 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000098968000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1461.269523][T27775] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1461.375103][T27775] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 07:50:04 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(0x0, 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1461.435898][T27775] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1461.451646][T27798] Process accounting resumed 07:50:04 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1461.484486][T27775] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1461.517793][T27775] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1461.561377][T27806] XFS (loop5): SB sanity check failed [ 1461.567095][T27806] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1461.585280][T27806] XFS (loop5): Unmount and run xfs_repair [ 1461.665380][T27775] XFS (loop0): SB validate failed with error -117. [ 1461.672154][T27806] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1461.744025][T27806] 00000000: 58 46 53 42 00 00 10 00 00 00 98 96 80 00 10 00 XFSB............ [ 1461.833147][T27806] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1461.949437][T27806] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1461.977613][T27806] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ 07:50:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r0, &(0x7f0000000080), 0x1000) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x200440, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r1) fcntl$setstatus(r2, 0x4, 0xc0400) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r5 = creat(&(0x7f0000000640)='./file0\x00', 0x10) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r5, 0x3, 0x0, 0x80000003) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)) write$cgroup_type(r6, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r6, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r7 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f00000001c0)) r8 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffd, @mcast1}, 0x83) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r12, &(0x7f0000000080), 0x1000) r13 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r13, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r3, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1462.005216][T27806] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1462.006251][T27736] Process accounting resumed 07:50:05 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(0x0, 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:05 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000000900000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1462.068794][T27806] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1462.075624][T27817] Process accounting resumed [ 1462.144606][T27806] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1462.259342][T27806] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1462.277610][T27806] XFS (loop5): SB validate failed with error -117. [ 1462.511351][T27837] XFS (loop0): SB sanity check failed [ 1462.517090][T27837] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1462.540810][T27837] XFS (loop0): Unmount and run xfs_repair [ 1462.554740][T27837] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1462.565943][T27837] 00000000: 58 46 53 42 10 03 00 00 00 09 00 00 00 00 10 00 XFSB............ [ 1462.575072][T27837] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1462.584214][T27837] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1462.594501][T27837] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ 07:50:06 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000008500100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1462.603795][T27837] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1462.612911][T27837] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1462.622061][T27837] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1462.631208][T27837] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1462.640358][T27837] XFS (loop0): SB validate failed with error -117. [ 1462.826817][ T9039] XFS (loop5): SB sanity check failed [ 1462.832512][ T9039] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1462.861572][ T9039] XFS (loop5): Unmount and run xfs_repair [ 1462.876027][ T9039] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1462.880894][T27805] Process accounting resumed [ 1462.890043][ T9039] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 85 00 10 00 XFSB............ [ 1462.914910][ T9039] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 07:50:06 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1462.931954][ T9039] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1462.940978][ T9039] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1462.950027][ T9039] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1462.960536][ T9039] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1462.969596][ T9039] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 07:50:06 executing program 3 (fault-call:24 fault-nth:0): r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1462.979544][ T9039] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1462.989525][T27852] XFS (loop5): SB validate failed with error -117. 07:50:06 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000000a00000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:50:06 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1463.088464][T27825] Process accounting resumed [ 1463.207885][T27852] XFS (loop5): SB sanity check failed [ 1463.216181][T27852] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1463.231845][T27852] XFS (loop5): Unmount and run xfs_repair [ 1463.238851][T27852] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1463.246419][T27852] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 85 00 10 00 XFSB............ [ 1463.255465][T27852] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1463.264379][T27852] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1463.273344][T27852] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1463.282298][T27852] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1463.291401][T27852] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1463.300446][T27852] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1463.309455][T27852] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1463.318708][T27852] XFS (loop5): SB validate failed with error -117. [ 1463.350274][T27870] FAULT_INJECTION: forcing a failure. [ 1463.350274][T27870] name failslab, interval 1, probability 0, space 0, times 0 [ 1463.418502][T27870] CPU: 0 PID: 27870 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 1463.427215][T27870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1463.437266][T27870] Call Trace: [ 1463.440562][T27870] dump_stack+0x11d/0x181 [ 1463.444934][T27870] should_fail.cold+0xa/0x1a [ 1463.449596][T27870] __should_failslab+0xee/0x130 [ 1463.454561][T27870] should_failslab+0x9/0x14 [ 1463.459081][T27870] kmem_cache_alloc_node_trace+0x3b/0x670 [ 1463.464817][T27870] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1463.471069][T27870] __kmalloc_node+0x38/0x50 [ 1463.475586][T27870] kvmalloc_node+0x71/0x100 [ 1463.480102][T27870] seq_read+0x5f6/0x9d0 [ 1463.484334][T27870] ? security_file_permission+0x88/0x280 [ 1463.490007][T27870] __vfs_read+0x67/0xc0 [ 1463.494170][T27870] ? seq_hlist_start_head_rcu+0x60/0x60 [ 1463.500161][T27870] vfs_read+0x143/0x2c0 [ 1463.504386][T27870] ksys_read+0xd5/0x1b0 [ 1463.508556][T27870] __x64_sys_read+0x4c/0x60 [ 1463.513117][T27870] do_syscall_64+0xcc/0x3a0 [ 1463.517734][T27870] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1463.523627][T27870] RIP: 0033:0x45af49 [ 1463.527548][T27870] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1463.547151][T27870] RSP: 002b:00007f7aed809c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1463.555585][T27870] RAX: ffffffffffffffda RBX: 00007f7aed809c90 RCX: 000000000045af49 07:50:06 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100000ffffff8c00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1463.563555][T27870] RDX: 0000000000001000 RSI: 0000000020000080 RDI: 000000000000000e [ 1463.571614][T27870] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1463.579622][T27870] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7aed80a6d4 [ 1463.587701][T27870] R13: 00000000004c9671 R14: 00000000004e2230 R15: 000000000000000f 07:50:07 executing program 1 (fault-call:24 fault-nth:0): r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x0) fallocate(r1, 0x3, 0x0, 0x80000003) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r3 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1463.621138][T27830] Process accounting resumed [ 1463.628517][T27884] XFS (loop0): SB sanity check failed [ 1463.634120][T27884] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1463.646612][T27884] XFS (loop0): Unmount and run xfs_repair [ 1463.663004][T27884] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1463.670603][T27884] 00000000: 58 46 53 42 10 03 00 00 00 0a 00 00 00 00 10 00 XFSB............ [ 1463.679831][T27884] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1463.688903][T27884] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1463.698127][T27884] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1463.725137][T27884] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1463.754517][T27884] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1463.805624][T27884] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1463.856561][T27884] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1463.895285][T27884] XFS (loop0): SB validate failed with error -117. 07:50:07 executing program 3 (fault-call:24 fault-nth:1): r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:07 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1463.903114][T27892] Process accounting resumed [ 1463.918265][T27904] FAULT_INJECTION: forcing a failure. [ 1463.918265][T27904] name failslab, interval 1, probability 0, space 0, times 0 [ 1463.937627][T27870] Process accounting resumed [ 1463.983340][T27890] Process accounting resumed [ 1463.988599][T27904] CPU: 0 PID: 27904 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 1463.997278][T27904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1464.007334][T27904] Call Trace: [ 1464.010639][T27904] dump_stack+0x11d/0x181 [ 1464.014981][T27904] should_fail.cold+0xa/0x1a [ 1464.019596][T27904] __should_failslab+0xee/0x130 [ 1464.024456][T27904] should_failslab+0x9/0x14 [ 1464.028970][T27904] kmem_cache_alloc+0x29/0x5d0 [ 1464.033740][T27904] ? cap_capable+0x134/0x160 [ 1464.038348][T27904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1464.044660][T27904] getname_flags+0x91/0x380 [ 1464.049173][T27904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1464.055417][T27904] getname+0x23/0x40 [ 1464.059322][T27904] __x64_sys_acct+0x63/0x110 [ 1464.063933][T27904] do_syscall_64+0xcc/0x3a0 [ 1464.068534][T27904] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1464.074539][T27904] RIP: 0033:0x45af49 [ 1464.078438][T27904] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1464.098043][T27904] RSP: 002b:00007f8044e8ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 1464.106536][T27904] RAX: ffffffffffffffda RBX: 00007f8044e8ec90 RCX: 000000000045af49 [ 1464.114591][T27904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1464.122573][T27904] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 07:50:07 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1464.130550][T27904] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8044e8f6d4 [ 1464.138517][T27904] R13: 00000000004c1212 R14: 00000000004d5ea0 R15: 000000000000000c [ 1464.192069][T27902] XFS (loop5): SB sanity check failed 07:50:07 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000000c00000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1464.244824][T27902] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1464.464251][T27902] XFS (loop5): Unmount and run xfs_repair [ 1464.497973][T27930] XFS (loop0): SB sanity check failed [ 1464.504793][T27930] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1464.525219][T27902] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1464.529022][T27930] XFS (loop0): Unmount and run xfs_repair [ 1464.548343][T27930] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1464.557583][T27926] Process accounting resumed 07:50:07 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1464.562406][T27930] 00000000: 58 46 53 42 10 03 00 00 00 0c 00 00 00 00 10 00 XFSB............ [ 1464.571831][T27930] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1464.582750][T27930] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1464.591945][T27930] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1464.600004][T27902] 00000000: 58 46 53 42 00 00 10 00 00 ff ff ff 8c 00 10 00 XFSB............ 07:50:08 executing program 1 (fault-call:24 fault-nth:1): r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x0) fallocate(r1, 0x3, 0x0, 0x80000003) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r3 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1464.612840][T27930] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1464.625708][T27930] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1464.649208][T27930] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1464.665153][T27930] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1464.675169][T27930] XFS (loop0): SB validate failed with error -117. [ 1464.703461][T27902] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1464.736562][T27902] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1464.852250][T27902] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1464.861391][T27902] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1464.870497][T27902] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1464.879503][T27902] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1464.888427][T27902] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1464.897454][T27902] XFS (loop5): SB validate failed with error -117. [ 1464.936831][T27950] FAULT_INJECTION: forcing a failure. [ 1464.936831][T27950] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.953903][T27930] XFS (loop0): SB sanity check failed [ 1464.966775][T27950] CPU: 0 PID: 27950 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 1464.975462][T27950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1464.985536][T27950] Call Trace: [ 1464.988833][T27950] dump_stack+0x11d/0x181 [ 1464.993167][T27950] should_fail.cold+0xa/0x1a [ 1464.994594][T27925] Process accounting resumed [ 1464.997764][T27950] __should_failslab+0xee/0x130 [ 1464.997787][T27950] should_failslab+0x9/0x14 [ 1464.997847][T27950] kmem_cache_alloc_trace+0x2a/0x5d0 [ 1465.003388][T27936] Process accounting resumed [ 1465.007221][T27950] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1465.007238][T27950] ? strncpy_from_user+0x219/0x2b0 [ 1465.007315][T27950] acct_on+0x65/0x440 [ 1465.007348][T27950] __x64_sys_acct+0x97/0x110 [ 1465.033454][T27930] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1465.037042][T27950] do_syscall_64+0xcc/0x3a0 [ 1465.037115][T27950] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1465.063819][T27950] RIP: 0033:0x45af49 [ 1465.067776][T27950] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 07:50:08 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1465.075894][T27930] XFS (loop0): Unmount and run xfs_repair [ 1465.087374][T27950] RSP: 002b:00007f8044eafc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 1465.087467][T27950] RAX: ffffffffffffffda RBX: 00007f8044eafc90 RCX: 000000000045af49 [ 1465.087488][T27950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1465.117563][T27950] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1465.125589][T27950] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8044eb06d4 07:50:08 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:08 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100000000000b300100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1465.133692][T27950] R13: 00000000004c1212 R14: 00000000004d5ea0 R15: 000000000000000c [ 1465.155179][T27930] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1465.194873][T27930] 00000000: 58 46 53 42 10 03 00 00 00 0c 00 00 00 00 10 00 XFSB............ [ 1465.225912][T27930] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1465.281397][T27930] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1465.342413][T27930] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1465.403328][T27930] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 07:50:08 executing program 1 (fault-call:24 fault-nth:2): r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x0) fallocate(r1, 0x3, 0x0, 0x80000003) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r3 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1465.524432][T27930] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1465.537736][T27967] XFS (loop5): SB sanity check failed [ 1465.553515][T27959] Process accounting resumed [ 1465.565249][T27930] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1465.578608][T27930] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1465.597639][T27930] XFS (loop0): SB validate failed with error -117. [ 1465.605047][T27967] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 07:50:09 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) read$FUSE(0xffffffffffffffff, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1465.637545][T27967] XFS (loop5): Unmount and run xfs_repair [ 1465.643734][T27967] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1465.710542][T27967] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 b3 00 10 00 XFSB............ 07:50:09 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000000d00000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1465.775144][T27967] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1465.832102][T27967] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1465.840427][T27984] FAULT_INJECTION: forcing a failure. [ 1465.840427][T27984] name failslab, interval 1, probability 0, space 0, times 0 [ 1465.880501][T27984] CPU: 1 PID: 27984 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 1465.889209][T27984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1465.899263][T27984] Call Trace: [ 1465.902562][T27984] dump_stack+0x11d/0x181 [ 1465.906907][T27984] should_fail.cold+0xa/0x1a [ 1465.908390][T27967] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1465.911500][T27984] __should_failslab+0xee/0x130 [ 1465.911529][T27984] should_failslab+0x9/0x14 [ 1465.929705][T27984] kmem_cache_alloc+0x29/0x5d0 [ 1465.934485][T27984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1465.940728][T27984] ? group_sched_in+0x142/0x2c0 [ 1465.945603][T27984] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1465.951533][T27984] __alloc_file+0x4d/0x210 [ 1465.955956][T27984] ? flexible_sched_in+0xa7/0x540 [ 1465.960984][T27984] alloc_empty_file+0x8f/0x180 [ 1465.965819][T27984] path_openat+0x74/0x3580 [ 1465.970309][T27984] ? pinned_sched_in+0x560/0x560 [ 1465.975282][T27984] ? __rcu_read_unlock+0x66/0x3d0 [ 1465.980323][T27984] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1465.986297][T27984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1465.992557][T27984] ? aa_file_perm+0x3a1/0xc20 [ 1465.995936][T27967] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1465.997259][T27984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1465.997286][T27984] ? _parse_integer+0x137/0x150 [ 1466.016299][T27979] Process accounting resumed [ 1466.017226][T27984] ? irq_work_interrupt+0xa/0x20 [ 1466.017315][T27984] do_filp_open+0x11e/0x1b0 07:50:09 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1466.031304][T27984] ? __read_once_size+0x38/0xe0 [ 1466.036184][T27984] ? __rcu_read_unlock+0x66/0x3d0 [ 1466.041227][T27984] ? __read_once_size+0x41/0xe0 [ 1466.046091][T27984] ? memcg_kmem_put_cache+0x7c/0xc0 [ 1466.051299][T27984] file_open_name+0x27d/0x360 [ 1466.056060][T27984] acct_on+0x85/0x440 [ 1466.060113][T27984] __x64_sys_acct+0x97/0x110 [ 1466.064717][T27984] do_syscall_64+0xcc/0x3a0 [ 1466.069278][T27984] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1466.075167][T27984] RIP: 0033:0x45af49 [ 1466.079069][T27984] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1466.081721][T27967] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1466.098672][T27984] RSP: 002b:00007f8044ed0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 1466.098692][T27984] RAX: ffffffffffffffda RBX: 00007f8044ed0c90 RCX: 000000000045af49 [ 1466.098703][T27984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 1466.098723][T27984] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1466.139903][T27984] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8044ed16d4 [ 1466.147878][T27984] R13: 00000000004c1212 R14: 00000000004d5ea0 R15: 000000000000000c [ 1466.289598][T27967] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1466.434835][T27967] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 07:50:09 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000001000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:50:09 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x0) fallocate(r1, 0x3, 0x0, 0x80000003) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r3 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1466.520484][T27967] XFS (loop5): SB validate failed with error -117. [ 1466.653448][T27990] Process accounting resumed 07:50:10 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) read$FUSE(0xffffffffffffffff, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:10 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1466.787226][T28003] Process accounting resumed 07:50:10 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100000000003c000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1467.015696][T28025] XFS (loop5): SB sanity check failed [ 1467.021509][T28025] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1467.021516][ T6886] XFS (loop0): SB sanity check failed [ 1467.021556][ T6886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1467.101246][T28025] XFS (loop5): Unmount and run xfs_repair [ 1467.135077][ T6886] XFS (loop0): Unmount and run xfs_repair [ 1467.140826][ T6886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1467.155960][ T6886] 00000000: 58 46 53 42 10 03 00 00 00 10 00 00 00 00 10 00 XFSB............ [ 1467.164828][ T6886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1467.169931][T28025] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1467.185092][ T6886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1467.193952][ T6886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1467.211222][T28012] Process accounting resumed [ 1467.215941][ T6886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1467.220921][T27964] Process accounting resumed [ 1467.225131][T28025] 00000000: 58 46 53 42 00 00 10 00 00 00 00 03 c0 00 10 00 XFSB............ [ 1467.238994][ T6886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 07:50:10 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x10) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:10 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x0) fallocate(r1, 0x3, 0x0, 0x80000003) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r3 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000001080)=0x4) read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1467.256765][ T6886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1467.266411][T28025] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1467.293843][ T6886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1467.328744][T28025] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1467.358386][T28019] XFS (loop0): SB validate failed with error -117. [ 1467.385712][T28025] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1467.468653][T28025] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 07:50:10 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) read$FUSE(0xffffffffffffffff, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1467.512072][T28026] Process accounting resumed [ 1467.516824][T28025] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1467.557787][T28025] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1467.638680][T28025] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 07:50:11 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1467.696731][T28039] Process accounting resumed [ 1467.701812][T28025] XFS (loop5): SB validate failed with error -117. 07:50:11 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000001200000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:50:11 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010000000031ac000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1468.188989][T28082] XFS (loop0): SB sanity check failed [ 1468.223606][T28063] Process accounting resumed 07:50:11 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x16) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1468.228489][T28082] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1468.257186][T28082] XFS (loop0): Unmount and run xfs_repair [ 1468.263556][T28095] XFS (loop5): SB sanity check failed [ 1468.269107][T28095] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 07:50:11 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1468.285121][T28082] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1468.293375][T28071] Process accounting resumed [ 1468.298441][T28095] XFS (loop5): Unmount and run xfs_repair [ 1468.304559][T28095] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1468.312061][T28082] 00000000: 58 46 53 42 10 03 00 00 00 12 00 00 00 00 10 00 XFSB............ [ 1468.325713][T28095] 00000000: 58 46 53 42 00 00 10 00 00 00 03 1a c0 00 10 00 XFSB............ [ 1468.343933][T28095] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1468.360199][T28056] Process accounting resumed [ 1468.365211][T28095] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1468.401239][T28082] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1468.415148][T28095] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ 07:50:11 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x80, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x42040, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000001080), 0x8}, 0x20000, 0x0, 0x4, 0x0, 0x0, 0x25c, 0x800}, 0x0, 0x4, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x0) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000002000000030000002004000000000000d0020000000000000000000000000000880300008803000088030000880300008803000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000a002d0020000000000000000000000000000000000000000300262706600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300053455400000000000000000000000000000000000000000000000000000200000000000000000000000000000000ac1e00017f00000100000000000000006873723000000000000000000000000069703667726574617030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000b8000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00000000"], 0x6f1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000010c0)={0x0, 0x400, 0x10}, &(0x7f0000001100)=0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000001140)={r12, 0x80000000}, 0x8) acct(&(0x7f0000000180)='./file0\x00') [ 1468.544107][T28082] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1468.581790][T28095] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1468.615100][T28082] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1468.665216][T28095] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1468.695239][T28082] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1468.713911][T28095] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1468.722321][T28082] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1468.745712][T28095] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 07:50:12 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, 0x0, 0x0) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1468.769060][T28095] XFS (loop5): SB validate failed with error -117. [ 1468.791089][T28082] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1468.825177][T28082] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 07:50:12 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x2a) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:12 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1468.868740][T28082] XFS (loop0): SB validate failed with error -117. [ 1468.884599][T28111] Process accounting resumed [ 1468.998411][T28122] xt_bpf: check failed: parse error 07:50:12 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x0) fallocate(r1, 0x3, 0x0, 0x80000003) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x100082, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0xa0) write$cgroup_type(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r3 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1469.096380][T28122] Process accounting resumed 07:50:12 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:12 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534200001000000000edc000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1469.189593][T28135] Process accounting resumed 07:50:12 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000001300000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1469.621254][ T6886] XFS (loop5): SB sanity check failed [ 1469.627074][ T6886] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1469.639203][ T6886] XFS (loop5): Unmount and run xfs_repair [ 1469.644933][ T6886] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1469.653801][ T6886] 00000000: 58 46 53 42 00 00 10 00 00 00 00 ed c0 00 10 00 XFSB............ [ 1469.662942][ T6886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1469.671988][ T6886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1469.681151][ T6886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1469.690247][ T6886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1469.699639][ T6886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1469.708726][ T6886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1469.717748][ T6886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1469.727176][T28160] XFS (loop5): SB validate failed with error -117. 07:50:13 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100000000000c400100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1469.822530][ T6886] XFS (loop0): SB sanity check failed [ 1469.828228][ T6886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1469.886419][ T6886] XFS (loop0): Unmount and run xfs_repair [ 1469.907222][ T6886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1469.935227][ T6886] 00000000: 58 46 53 42 10 03 00 00 00 13 00 00 00 00 10 00 XFSB............ [ 1469.944090][ T6886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1469.956126][ T6886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1469.965098][ T6886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1469.975176][ T6886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1469.984024][ T6886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1469.996601][ T6886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1470.007192][ T6886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1470.016394][T28165] XFS (loop0): SB validate failed with error -117. 07:50:13 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, 0x0, 0x0) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1470.092069][T28143] Process accounting resumed 07:50:13 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r6) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1470.151443][T28154] Process accounting resumed [ 1470.151674][T28163] Process accounting resumed [ 1470.165439][ T9039] XFS (loop0): SB sanity check failed [ 1470.170957][ T9039] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1470.186201][ T9039] XFS (loop0): Unmount and run xfs_repair [ 1470.192014][ T9039] XFS (loop0): First 128 bytes of corrupted metadata buffer: 07:50:13 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x35) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:13 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x1f, @empty, 0x8}, 0x1c) fallocate(r1, 0x3, 0x0, 0x80000003) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r3 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1470.195511][T28156] Process accounting resumed [ 1470.201979][ T9039] 00000000: 58 46 53 42 10 03 00 00 00 13 00 00 00 00 10 00 XFSB............ [ 1470.214358][ T9039] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1470.229488][ T9039] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1470.242227][ T9039] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1470.273132][ T9039] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1470.290375][ T9039] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1470.307689][ T9039] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1470.340737][ T9039] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1470.365013][T28165] XFS (loop0): SB validate failed with error -117. [ 1470.372255][ T9039] XFS (loop5): SB sanity check failed [ 1470.390067][ T9039] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1470.441616][ T9039] XFS (loop5): Unmount and run xfs_repair [ 1470.463329][ T9039] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1470.490662][ T9039] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 c4 00 10 00 XFSB............ [ 1470.524867][ T9039] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1470.535494][ T9039] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1470.551069][ T9039] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1470.565383][ T9039] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1470.580045][ T9039] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1470.598890][ T9039] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1470.617934][ T9039] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ 07:50:14 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000001400000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1470.644075][T28189] XFS (loop5): SB validate failed with error -117. [ 1470.829893][T28211] Process accounting resumed 07:50:14 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r6) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:14 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100000ffffffe400100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:50:14 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f00000010c0)='/dev/snd/seq\x00', 0x0, 0xa0281) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x0) fallocate(r1, 0x3, 0x0, 0x80000003) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r3 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000000040)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1471.217112][T28208] Process accounting resumed [ 1471.357999][ T9039] XFS (loop5): SB sanity check failed [ 1471.363529][ T9039] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1471.378777][ T9039] XFS (loop5): Unmount and run xfs_repair [ 1471.384686][ T9039] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1471.392282][ T9039] 00000000: 58 46 53 42 00 00 10 00 00 ff ff ff e4 00 10 00 XFSB............ 07:50:14 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000001500000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1471.401358][ T9039] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1471.410411][ T9039] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1471.419380][ T9039] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1471.428554][ T9039] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1471.437723][ T9039] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1471.472899][ T9039] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1471.474951][T28213] Process accounting resumed [ 1471.489553][ T9039] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1471.508452][T28242] XFS (loop5): SB validate failed with error -117. 07:50:14 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x46) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1471.558092][T28225] Process accounting resumed 07:50:15 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, 0x0, 0x0) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:15 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100000000001e600100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1471.951366][ T9039] XFS (loop0): SB sanity check failed [ 1471.957048][ T9039] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1471.968990][ T9039] XFS (loop0): Unmount and run xfs_repair [ 1471.974844][ T9039] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1471.982451][ T9039] 00000000: 58 46 53 42 10 03 00 00 00 15 00 00 00 00 10 00 XFSB............ [ 1472.006556][ T9039] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1472.018043][ T9039] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1472.027139][ T9039] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1472.036148][ T9039] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1472.045147][ T9039] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1472.054246][ T9039] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1472.063228][ T9039] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1472.072896][T28272] XFS (loop0): SB validate failed with error -117. [ 1472.149306][T28238] Process accounting resumed 07:50:15 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r6) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:15 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x5a) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1472.228180][T28278] Process accounting resumed 07:50:15 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000001600000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:50:15 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1472.458381][T28307] Process accounting resumed [ 1472.545668][T28293] XFS (loop5): SB sanity check failed [ 1472.551164][T28293] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1472.645142][T28293] XFS (loop5): Unmount and run xfs_repair [ 1472.699468][T28293] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1472.750941][T28293] 00000000: 58 46 53 42 00 00 10 00 00 00 00 01 e6 00 10 00 XFSB............ [ 1472.765715][T28293] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1472.777516][T28293] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1472.786853][T28293] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1472.796193][T28293] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1472.805527][T28293] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1472.814480][T28293] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1472.823962][T28293] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1472.833390][T28293] XFS (loop5): SB validate failed with error -117. [ 1472.840757][T28318] XFS (loop0): SB sanity check failed [ 1472.846255][T28318] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1472.859736][T28318] XFS (loop0): Unmount and run xfs_repair [ 1472.866256][T28318] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1472.874225][T28318] 00000000: 58 46 53 42 10 03 00 00 00 16 00 00 00 00 10 00 XFSB............ [ 1472.883678][T28318] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1472.892855][T28318] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1472.902620][T28318] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1472.912069][T28318] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1472.926089][T28318] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1472.941333][T28318] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1472.950975][T28318] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1472.960550][T28318] XFS (loop0): SB validate failed with error -117. 07:50:16 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000002000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:50:16 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x0) fallocate(r1, 0x3, 0x0, 0x80000003) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r3 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1473.003522][T28293] XFS (loop5): SB sanity check failed [ 1473.009256][T28293] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1473.025513][T28293] XFS (loop5): Unmount and run xfs_repair [ 1473.031433][T28293] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1473.100522][T28293] 00000000: 58 46 53 42 00 00 10 00 00 00 00 01 e6 00 10 00 XFSB............ [ 1473.109832][T28293] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1473.122365][T28293] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1473.131539][T28293] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1473.144258][T28293] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1473.158543][T28293] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1473.171380][T28293] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1473.180517][T28293] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1473.197598][T28293] XFS (loop5): SB validate failed with error -117. [ 1473.207961][T28343] XFS (loop0): SB sanity check failed [ 1473.226782][T28343] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1473.245160][T28343] XFS (loop0): Unmount and run xfs_repair [ 1473.258255][T28343] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1473.265981][T28343] 00000000: 58 46 53 42 10 03 00 00 00 20 00 00 00 00 10 00 XFSB..... ...... [ 1473.274890][T28343] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1473.287342][T28343] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1473.297626][T28343] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ 07:50:16 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100000000009e600100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1473.316917][T28343] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1473.326087][T28343] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1473.334969][T28343] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1473.361820][T28343] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1473.403249][T28343] XFS (loop0): SB validate failed with error -117. [ 1473.529066][T28312] Process accounting resumed 07:50:16 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x5b) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:17 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1473.779893][T28323] Process accounting resumed 07:50:17 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000102000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:50:17 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1473.827113][ T9039] XFS (loop5): SB sanity check failed [ 1473.832560][ T9039] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1473.852090][T28311] Process accounting resumed [ 1473.902935][ T9039] XFS (loop5): Unmount and run xfs_repair [ 1473.934805][ T9039] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1474.083750][ T9039] 00000000: 58 46 53 42 00 00 10 00 00 00 00 09 e6 00 10 00 XFSB............ [ 1474.146603][ T9039] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1474.213074][ T9039] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1474.277708][ T6886] XFS (loop0): SB sanity check failed [ 1474.283320][ T6886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1474.284662][ T9039] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1474.315151][ T6886] XFS (loop0): Unmount and run xfs_repair 07:50:17 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1474.321113][ T6886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1474.334954][T28380] Process accounting resumed [ 1474.339623][ T6886] 00000000: 58 46 53 42 10 03 00 00 10 20 00 00 00 00 10 00 XFSB..... ...... [ 1474.348528][ T6886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1474.357656][ T6886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1474.366567][ T6886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1474.375714][ T6886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1474.380337][ T9039] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1474.384563][ T6886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1474.384580][ T6886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1474.384601][ T6886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1474.431113][T28387] XFS (loop0): SB validate failed with error -117. [ 1474.465433][ T9039] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1474.490489][ T9039] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1474.502813][ T9039] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1474.512036][T28363] XFS (loop5): SB validate failed with error -117. [ 1474.521042][T28388] Process accounting resumed [ 1474.619206][T28407] Process accounting resumed [ 1474.641807][T28400] Process accounting resumed 07:50:18 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1474.767831][T28388] Process accounting resumed 07:50:18 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0x228, @tick=0x4, 0x9, {0x3f}, 0x80, 0x3, 0x7}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r4 = creat(&(0x7f0000000640)='./file0\x00', 0x0) fallocate(r4, 0x3, 0x0, 0x80000003) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r7) r9 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r9, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:18 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000002300000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:50:18 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100000000009e700100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:50:18 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x6b) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:18 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1475.326013][T28414] Process accounting resumed [ 1475.405138][T28427] XFS (loop0): SB sanity check failed [ 1475.429468][T28427] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 07:50:18 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x0, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1475.469409][T28403] Process accounting resumed [ 1475.504569][ T6886] XFS (loop5): SB sanity check failed [ 1475.525502][ T6886] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1475.550597][T28427] XFS (loop0): Unmount and run xfs_repair [ 1475.584645][ T6886] XFS (loop5): Unmount and run xfs_repair [ 1475.615000][ T6886] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1475.617588][T28427] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1475.631315][ T6886] 00000000: 58 46 53 42 00 00 10 00 00 00 00 09 e7 00 10 00 XFSB............ [ 1475.655487][T28427] 00000000: 58 46 53 42 10 03 00 00 00 23 00 00 00 00 10 00 XFSB.....#...... [ 1475.691333][T28427] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1475.706019][ T6886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1475.763501][T28427] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1475.779474][ T6886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1475.830072][T28427] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1475.853382][ T6886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ 07:50:19 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x71) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1475.885196][T28427] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1475.918882][T28430] Process accounting resumed [ 1475.956382][ T6886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1475.989521][T28427] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 07:50:19 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x0, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1476.032772][ T6886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1476.111195][ T6886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1476.125710][T28427] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1476.195889][T28427] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1476.226304][ T6886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1476.239463][T28429] XFS (loop5): SB validate failed with error -117. [ 1476.248640][T28427] XFS (loop0): SB validate failed with error -117. [ 1476.383297][T28449] Process accounting resumed 07:50:19 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100000000000f000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:50:19 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:19 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000033400000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1476.492329][T28424] Process accounting resumed 07:50:19 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x0, 0x805e27, 0x200}) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x0) fallocate(r1, 0x3, 0x0, 0x80000003) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r3) r5 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r5, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x7) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) fcntl$notify(r6, 0x402, 0x69) r7 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0xc080661a, &(0x7f0000001080)={{0x7, 0x0, @reserved="0aa80949473b873f54f9b20248affb0815fa419b9fcc5f34d12963bc9e4cc1fc"}}) acct(&(0x7f0000000180)='./file0\x00') getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000001100), &(0x7f0000001140)=0x30) [ 1476.771946][ T6886] XFS (loop5): SB sanity check failed [ 1476.778679][ T6886] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1476.810786][ T6886] XFS (loop5): Unmount and run xfs_repair [ 1476.838290][ T6886] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1476.873641][ T6886] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 f0 00 10 00 XFSB............ [ 1476.910816][ T6886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1476.911195][T28465] Process accounting resumed [ 1476.936710][ T6886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1476.965158][ T6886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1476.980651][ T6886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1476.991986][ T6886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1477.001189][ T6886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ 07:50:20 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x85) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1477.010372][ T6886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1477.019834][T28479] XFS (loop5): SB validate failed with error -117. [ 1477.082056][T28500] binder: 28496:28500 ioctl c080661a 20001080 returned -22 07:50:20 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000003f00000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:50:20 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100000fffffff600100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1477.606899][ T6886] XFS (loop0): SB sanity check failed [ 1477.612434][ T6886] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1477.696236][ T6886] XFS (loop0): Unmount and run xfs_repair [ 1477.704240][ T6886] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1477.712052][ T6886] 00000000: 58 46 53 42 10 03 00 00 00 3f 00 00 00 00 10 00 XFSB.....?...... [ 1477.721152][ T6886] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 07:50:21 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x0, 0x0, 0x80000003) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:21 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010000000031af800100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1477.738534][ T6886] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1477.753199][ T6886] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1477.770660][ T6886] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 07:50:21 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:21 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x8c) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1477.820989][ T6886] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1477.831895][T28527] Process accounting resumed [ 1477.850880][T28481] Process accounting resumed [ 1477.854107][T28498] binder: 28496:28498 ioctl c080661a 20001080 returned -22 [ 1477.909349][T28500] Process accounting resumed [ 1477.917323][ T6886] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1477.976153][ T6886] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1478.014326][T28519] XFS (loop0): SB validate failed with error -117. [ 1478.097430][T28500] Process accounting resumed 07:50:21 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x0) fallocate(r1, 0x3, 0x0, 0x80000003) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = gettid() tkill(r6, 0x1000000000016) syz_open_procfs(r6, &(0x7f0000001080)='net/sockstat6\x00') r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r7, 0xc0305302, &(0x7f0000000040)={0x400, 0x1, 0x10001, 0xce, 0x0, 0x1000}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r8 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r10, 0x0, r9) r11 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r11, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1478.121454][T28545] XFS (loop5): SB sanity check failed [ 1478.130439][T28545] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff 07:50:21 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1478.172924][T28545] XFS (loop5): Unmount and run xfs_repair [ 1478.183992][T28545] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1478.199620][T28545] 00000000: 58 46 53 42 00 00 10 00 00 00 03 1a f8 00 10 00 XFSB............ [ 1478.213127][T28545] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1478.222797][T28545] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1478.247211][T28545] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1478.261192][T28545] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1478.270380][T28545] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1478.279420][T28545] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1478.308651][T28545] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1478.340286][T28545] XFS (loop5): SB validate failed with error -117. 07:50:21 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000004000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:50:22 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x94) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:22 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100000fffffdf900100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:50:22 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1478.704442][T28547] Process accounting resumed [ 1478.708273][T28564] Process accounting resumed [ 1479.025957][ T17] XFS (loop0): SB sanity check failed [ 1479.031407][ T17] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1479.062069][ T17] XFS (loop0): Unmount and run xfs_repair [ 1479.078673][ T17] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1479.112086][ T17] 00000000: 58 46 53 42 10 03 00 00 00 40 00 00 00 00 10 00 XFSB.....@...... [ 1479.145453][ T17] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1479.145796][T28614] XFS (loop5): SB sanity check failed [ 1479.154368][ T17] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1479.154423][ T17] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1479.154445][ T17] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1479.192093][ T17] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1479.201036][ T17] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1479.209950][ T17] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1479.218976][T28595] XFS (loop0): SB validate failed with error -117. [ 1479.225216][T28614] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1479.245008][T28579] Process accounting resumed 07:50:22 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:22 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1479.267549][T28614] XFS (loop5): Unmount and run xfs_repair [ 1479.279199][T28614] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1479.303399][T28611] Process accounting resumed [ 1479.305208][T28614] 00000000: 58 46 53 42 00 00 10 00 00 ff ff fd f9 00 10 00 XFSB............ [ 1479.375151][T28614] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1479.404610][T28614] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1479.455290][T28614] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1479.467817][T28614] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1479.544558][T28614] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1479.616363][T28614] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1479.656661][T28607] Process accounting resumed 07:50:23 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000034000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:50:23 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x9d) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1479.677237][T28614] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1479.686289][T28614] XFS (loop5): SB validate failed with error -117. 07:50:23 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1479.728658][T28641] Process accounting resumed 07:50:23 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1479.798910][T28627] Process accounting resumed [ 1480.092356][ T17] XFS (loop0): SB sanity check failed [ 1480.097897][ T17] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1480.124488][ T17] XFS (loop0): Unmount and run xfs_repair [ 1480.130414][ T17] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1480.138238][ T17] 00000000: 58 46 53 42 10 03 00 00 03 40 00 00 00 00 10 00 XFSB.....@...... [ 1480.147173][ T17] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1480.156146][ T17] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1480.165178][ T17] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1480.174099][ T17] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1480.183047][ T17] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1480.192019][ T17] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1480.200990][ T17] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1480.210055][T28656] XFS (loop0): SB validate failed with error -117. [ 1480.266143][T28657] Process accounting resumed [ 1480.341431][T28652] Process accounting resumed [ 1480.378650][T28656] XFS (loop0): SB sanity check failed [ 1480.385751][T28656] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1480.405606][T28656] XFS (loop0): Unmount and run xfs_repair [ 1480.424996][T28656] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1480.441732][T28656] 00000000: 58 46 53 42 10 03 00 00 03 40 00 00 00 00 10 00 XFSB.....@...... [ 1480.468113][T28656] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1480.479270][T28656] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1480.495117][T28656] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1480.502318][T28677] Process accounting resumed [ 1480.515106][T28656] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1480.523971][T28656] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1480.569209][T28656] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1480.590223][T28656] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1480.602676][T28656] XFS (loop0): SB validate failed with error -117. 07:50:24 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x0) fallocate(r1, 0x3, 0x0, 0x80000003) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r3 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000001140)={&(0x7f0000001080), 0xc, &(0x7f0000001100)={&(0x7f00000010c0)=ANY=[@ANYBLOB="400000000806000129bd7000fedb9f250d0000080900020073797a300000000009000200737900000900020073797a3100000000"], 0x40}, 0x1, 0x0, 0x0, 0xf3249e95136495df}, 0x10) 07:50:24 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100000000000ff00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:50:24 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0xa2) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:24 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:24 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(0x0, 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:24 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000004800000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1481.501730][T28722] XFS (loop5): SB sanity check failed [ 1481.534999][T28722] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1481.578922][T28722] XFS (loop5): Unmount and run xfs_repair [ 1481.594805][T28722] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1481.616126][T28722] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 ff 00 10 00 XFSB............ [ 1481.625418][T28722] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1481.634399][T28722] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1481.643516][T28722] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1481.652878][T28722] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1481.662503][T28722] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1481.665183][T28731] Process accounting resumed [ 1481.671678][T28722] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1481.685943][T28722] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1481.694892][T28722] XFS (loop5): SB validate failed with error -117. [ 1481.716293][ T17] XFS (loop0): SB sanity check failed [ 1481.721895][ T17] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1481.738611][ T17] XFS (loop0): Unmount and run xfs_repair [ 1481.748288][ T17] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1481.755802][ T17] 00000000: 58 46 53 42 10 03 00 00 00 48 00 00 00 00 10 00 XFSB.....H...... [ 1481.764850][ T17] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1481.777954][ T17] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1481.799387][ T17] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1481.815872][ T17] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ 07:50:25 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1481.824970][ T17] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1481.834228][ T17] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1481.857239][ T17] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1481.875194][T28738] XFS (loop0): SB validate failed with error -117. 07:50:25 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100000000407ff00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:50:25 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(0x0, 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1482.090019][T28738] XFS (loop0): SB sanity check failed [ 1482.097659][T28738] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1482.134544][T28738] XFS (loop0): Unmount and run xfs_repair [ 1482.139201][T28758] Process accounting resumed [ 1482.156808][T28738] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1482.174767][T28738] 00000000: 58 46 53 42 10 03 00 00 00 48 00 00 00 00 10 00 XFSB.....H...... [ 1482.185476][T28768] XFS (loop5): SB sanity check failed [ 1482.187824][T28738] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1482.191078][T28768] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1482.223055][T28768] XFS (loop5): Unmount and run xfs_repair 07:50:25 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0xb6) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1482.241834][T28768] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1482.248281][T28738] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1482.258286][T28768] 00000000: 58 46 53 42 00 00 10 00 00 00 04 07 ff 00 10 00 XFSB............ [ 1482.289552][T28768] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1482.341800][T28738] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1482.436738][T28768] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. 07:50:25 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x0) fallocate(r1, 0x3, 0x0, 0x80000003) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = syz_open_dev$mouse(&(0x7f0000001180)='/dev/input/mouse#\x00', 0x3, 0x102) linkat(r3, &(0x7f00000011c0)='./file0/file0\x00', r0, &(0x7f0000001200)='./file0\x00', 0x1a00) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001240)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r5, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50091}, 0x4000111) r6 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r7) r10 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r10, &(0x7f0000000080), 0x1000) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000001080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r9, &(0x7f0000001140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0002020000000200000000000000000000001541000000140018000200006574683a7465616d30000000"], 0x30}, 0x1, 0x0, 0x0, 0x200ca000}, 0x14) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1482.479667][T28738] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1482.508863][T28740] Process accounting resumed [ 1482.525328][T28768] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1482.534230][T28768] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1482.565589][T28738] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1482.642664][T28738] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1482.683682][T28768] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1482.715226][T28738] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1482.724169][T28738] XFS (loop0): SB validate failed with error -117. 07:50:26 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1482.736563][T28789] Process accounting resumed [ 1482.765283][T28768] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1482.772387][T28782] Process accounting resumed [ 1482.774151][T28768] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1482.774170][T28768] XFS (loop5): SB validate failed with error -117. 07:50:26 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) r4 = creat(0x0, 0x0) write$cgroup_type(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:26 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0xb7) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1482.887638][T28786] Process accounting resumed 07:50:26 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000004c00000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:50:26 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="58465342000010000000000fff00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:50:26 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x400400) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x0) fallocate(r1, 0x3, 0x0, 0x80000003) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r3 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r4) r7 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') timer_create(0x1, &(0x7f0000001200)={0x0, 0x3e, 0x0, @thr={&(0x7f00000010c0)="feda6932c82026050b04a3440748150177d85b92050d9bc7328f66a7317aab9f9249068ae820882fefda43695ed90ffed96f9ead25400daff41f36c6a74b3304154d725c4b345184838aabd542529ee894e065fc5681503095ee425aa020c1a64f62c7d5a69f384a30b4194c4d378ee25726398fea439b586aedff85ecb15da985013edcc7f35e4a2b1e6c142ed49371f4e9772b5afbfb5f8001be59cd56e9517a", &(0x7f0000001180)="765040c226b8005da8eda2ac76a145484339677381c8d559a4fc9f3f4a74a57f5f3fda7a7a728e3d8ba18a01cd827438155c503142fa5256bdfe25ab31fd6b6803088ec50d8daf3fbc06b17c49bd81c90eb5775b3cb9a5aaf52473112993d0bb3acee95a3638e2355bcf478a9b0f"}}, &(0x7f0000001240)) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001280)='/dev/vsock\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000012c0)=0x412268665809717c, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000001080)=0x4) read$FUSE(r7, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') 07:50:26 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1483.427188][T28802] Process accounting resumed [ 1483.473995][ T17] XFS (loop0): SB sanity check failed [ 1483.479608][ T17] XFS (loop0): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1483.526036][ T17] XFS (loop0): Unmount and run xfs_repair [ 1483.542928][ T17] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1483.576714][ T17] 00000000: 58 46 53 42 10 03 00 00 00 4c 00 00 00 00 10 00 XFSB.....L...... [ 1483.611253][ T17] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1483.646549][ T17] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1483.670387][ T17] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1483.672860][T28811] Process accounting resumed 07:50:27 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0xc7) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1483.695538][ T17] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1483.729960][ T17] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1483.776667][ T17] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1483.818220][ T17] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1483.822865][T28819] Process accounting resumed [ 1483.844259][T28830] XFS (loop0): SB validate failed with error -117. [ 1483.853558][ T17] XFS (loop5): SB sanity check failed 07:50:27 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r3 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r3, 0x3, 0x0, 0x80000003) creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet6(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r6, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(r1, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1483.859006][ T17] XFS (loop5): Metadata corruption detected at xfs_sb_read_verify+0x28a/0x2f0, xfs_sb block 0xffffffffffffffff [ 1483.927782][ T17] XFS (loop5): Unmount and run xfs_repair [ 1483.933574][ T17] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1483.969182][ T17] 00000000: 58 46 53 42 00 00 10 00 00 00 00 0f ff 00 10 00 XFSB............ [ 1483.995262][ T17] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1484.004173][ T17] 00000020: 98 4f 0b 50 42 b6 4b 06 bc 86 cb a3 e6 cc 3f 80 .O.PB.K.......?. [ 1484.045273][ T17] 00000030: 00 00 00 00 01 00 00 40 00 00 00 00 00 00 00 80 .......@........ [ 1484.054173][ T17] 00000040: 00 00 00 00 00 00 00 81 00 00 00 00 00 00 00 82 ................ [ 1484.081954][T28853] Process accounting resumed 07:50:27 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={0x10000000000000b}) r1 = creat(&(0x7f0000000640)='./file0\x00', 0x0) fallocate(r1, 0x3, 0x0, 0x80000003) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r3 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x101, 0x0, 0x1, 0x3f, r10}, &(0x7f0000001080)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f00000010c0)={r11, 0x6f, 0x8, 0x1000}, &(0x7f0000001100)=0x10) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r12, 0x0, r4) r13 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r13, &(0x7f0000000080), 0x1000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1484.115181][ T17] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 1484.124079][ T17] 00000060: 04 00 06 c0 b4 a4 02 00 01 00 00 10 00 00 00 00 ................ [ 1484.149007][ T17] 00000070: 00 00 00 00 00 00 00 00 0c 09 08 04 0c 00 00 00 ................ [ 1484.158085][T28829] XFS (loop5): SB validate failed with error -117. 07:50:27 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) memfd_create(&(0x7f0000000840)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x19O\x15\x17X\xd9i\\\xcf\x8bZ\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x01-\b\x15\x8a\xc7\xdc\"9\x99\xf1\xc7\x92\xaf\xff>\xd1\xf3E\x8e}v]\xe5$\xc9\xf0R\xb6J\x964(u\x7f)\xa4\xdf\x00\xacY\x8e \xbe\x1d\xa0\xeb\xc6 -\x1a\x06\xf5\xa1\xe0\\\x1b\xd1\xea\xcb\x91\x18\xff\x93o\xc3YN\x81\x8e\x16J1\xcb\'\x1d\xa2\x86\xfa2\xce\xdb\xca\xf1E\xe3\r\xa3U\x88m\xc3\x8b\x05x\xd5V\xa6\xd3\x84\xffV&}\xdas\x1cJ\x99\xb1\xcd%\xeb\xe6,\x1f\xf2\xaf\x8f\xd3\x7f\x02d', 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20a81) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000640)='./file0\x00', 0x10) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r2, 0x3, 0x0, 0x80000003) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) getpid() timer_create(0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r5 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r6) r8 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r8, &(0x7f0000000080), 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000004c0)) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000280)={0x7}, 0x269) acct(&(0x7f0000000180)='./file0\x00') [ 1484.207661][T28850] Process accounting resumed 07:50:27 executing program 0: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="5846534210030000006000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:50:27 executing program 5: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x138, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100000fffffdff00100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000100004000000000000000800000000000000081000000000000008200000001000010000000000100000000040006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1484.551456][T28856] ================================================================== [ 1484.560302][T28856] BUG: KCSAN: data-race in ext4_writepages / ext4_writepages [ 1484.567659][T28856] [ 1484.570001][T28856] read to 0xffff8881252106d0 of 8 bytes by task 28858 on cpu 0: [ 1484.577652][T28856] ext4_writepages+0x14d0/0x2500 [ 1484.582593][T28856] do_writepages+0x6b/0x170 [ 1484.587102][T28856] __filemap_fdatawrite_range+0x1c5/0x230 [ 1484.592820][T28856] filemap_flush+0x2d/0x40 [ 1484.597240][T28856] ext4_alloc_da_blocks+0x78/0x180 [ 1484.602366][T28856] ext4_release_file+0x10d/0x210 [ 1484.607310][T28856] __fput+0x1e1/0x520 [ 1484.611297][T28856] ____fput+0x1f/0x30 [ 1484.615282][T28856] task_work_run+0xf6/0x130 [ 1484.619794][T28856] exit_to_usermode_loop+0x2b4/0x2c0 [ 1484.625086][T28856] do_syscall_64+0x384/0x3a0 [ 1484.629681][T28856] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1484.635567][T28856] [ 1484.637904][T28856] write to 0xffff8881252106d0 of 8 bytes by task 28856 on cpu 1: [ 1484.645644][T28856] ext4_writepages+0x158c/0x2500 [ 1484.650586][T28856] do_writepages+0x6b/0x170 [ 1484.655703][T28856] __filemap_fdatawrite_range+0x1c5/0x230 [ 1484.661426][T28856] filemap_flush+0x2d/0x40 [ 1484.665848][T28856] ext4_alloc_da_blocks+0x78/0x180 [ 1484.671066][T28856] ext4_release_file+0x10d/0x210 [ 1484.676002][T28856] __fput+0x1e1/0x520 [ 1484.679993][T28856] ____fput+0x1f/0x30 [ 1484.683978][T28856] task_work_run+0xf6/0x130 [ 1484.688487][T28856] exit_to_usermode_loop+0x2b4/0x2c0 [ 1484.693916][T28856] do_syscall_64+0x384/0x3a0 [ 1484.698609][T28856] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1484.704491][T28856] [ 1484.706818][T28856] Reported by Kernel Concurrency Sanitizer on: [ 1484.712984][T28856] CPU: 1 PID: 28856 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 1484.721669][T28856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1484.731722][T28856] ================================================================== [ 1484.739780][T28856] Kernel panic - not syncing: panic_on_warn set ... [ 1484.746377][T28856] CPU: 1 PID: 28856 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 1484.755042][T28856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1484.765096][T28856] Call Trace: [ 1484.768397][T28856] dump_stack+0x11d/0x181 [ 1484.772740][T28856] panic+0x210/0x640 [ 1484.776649][T28856] ? vprintk_func+0x8d/0x140 [ 1484.782387][T28856] kcsan_report.cold+0xc/0xd [ 1484.786993][T28856] kcsan_setup_watchpoint+0x3fe/0x460 [ 1484.792373][T28856] __tsan_unaligned_write8+0xc7/0x110 [ 1484.797750][T28856] ext4_writepages+0x158c/0x2500 [ 1484.802703][T28856] ? __read_once_size+0x50/0xe0 [ 1484.807560][T28856] ? 0xffffffff81000000 [ 1484.811731][T28856] ? snd_seq_deliver_single_event.constprop.0+0x149/0x4d0 [ 1484.818967][T28856] ? ext4_mark_inode_dirty+0x420/0x420 [ 1484.824434][T28856] do_writepages+0x6b/0x170 [ 1484.828944][T28856] ? do_writepages+0x6b/0x170 [ 1484.833624][T28856] ? wbc_attach_and_unlock_inode+0xdd/0x3b0 [ 1484.839546][T28856] __filemap_fdatawrite_range+0x1c5/0x230 [ 1484.845734][T28856] filemap_flush+0x2d/0x40 [ 1484.850164][T28856] ext4_alloc_da_blocks+0x78/0x180 [ 1484.855292][T28856] ext4_release_file+0x10d/0x210 [ 1484.860244][T28856] __fput+0x1e1/0x520 [ 1484.864234][T28856] ? ext4_write_checks+0x1b0/0x1b0 [ 1484.869348][T28856] ____fput+0x1f/0x30 [ 1484.873332][T28856] task_work_run+0xf6/0x130 [ 1484.878053][T28856] exit_to_usermode_loop+0x2b4/0x2c0 [ 1484.883351][T28856] do_syscall_64+0x384/0x3a0 [ 1484.887955][T28856] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1484.893846][T28856] RIP: 0033:0x414ae1 [ 1484.897754][T28856] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1484.917390][T28856] RSP: 002b:00007ffc3a97d940 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1484.925800][T28856] RAX: 0000000000000000 RBX: 0000000000000009 RCX: 0000000000414ae1 [ 1484.933833][T28856] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 0000000000000008 [ 1484.942161][T28856] RBP: 0000000000000000 R08: 0000000000762308 R09: ffffffffffffffff [ 1484.950168][T28856] R10: 00007ffc3a97da10 R11: 0000000000000293 R12: 000000000075c118 [ 1484.958141][T28856] R13: 0000000000000001 R14: 0000000000762310 R15: 000000000075c124 [ 1484.967462][T28856] Kernel Offset: disabled [ 1484.972333][T28856] Rebooting in 86400 seconds..